Merge branch 'main' into copilot/add-plugin-theme-language-update-check

Author: swissspidy

.github/workflows/copilot-setup-steps.yml

@@ -17,17 +17,17 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
 
       - name: Check existence of composer.json file
         id: check_composer_file
-        uses: andstor/file-existence-action@v3
+        uses: andstor/file-existence-action@076e0072799f4942c8bc574a82233e1e4d13e9d6 # v3
         with:
           files: "composer.json"
 
       - name: Set up PHP environment
         if: steps.check_composer_file.outputs.files_exists == 'true'
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@44454db4f0199b8b9685a5d763dc37cbf79108e1 # v2
         with:
           php-version: 'latest'
           ini-values: zend.assertions=1, error_reporting=-1, display_errors=On
@@ -38,7 +38,7 @@ jobs:
 
       - name: Install Composer dependencies & cache dependencies
         if: steps.check_composer_file.outputs.files_exists == 'true'
-        uses: ramsey/composer-install@v3
+        uses: ramsey/composer-install@3cf229dc2919194e9e36783941438d17239e8520 # v3
         env:
           COMPOSER_ROOT_VERSION: dev-${{ github.event.repository.default_branch }}
         with:

.github/workflows/issue-triage.yml

@@ -13,6 +13,13 @@ name: Issue and PR Triage
         required: false
         type: string
 
+permissions:
+  issues: write
+  pull-requests: write
+  actions: write
+  contents: read
+  models: read
+
 jobs:
   issue-triage:
     uses: wp-cli/.github/.github/workflows/reusable-issue-triage.yml@main

.github/workflows/regenerate-readme.yml

@@ -10,6 +10,10 @@ on:
       - "features/**"
       - "README.md"
 
+permissions:
+  contents: write
+  pull-requests: write
+
 jobs:
   regenerate-readme:
     uses: wp-cli/.github/.github/workflows/reusable-regenerate-readme.yml@main

.github/workflows/welcome-new-contributors.yml

@@ -7,6 +7,9 @@ on:
       - main
       - master
 
+permissions:
+  pull-requests: write
+
 jobs:
   welcome:
     uses: wp-cli/.github/.github/workflows/reusable-welcome-new-contributors.yml@main

README.md

@@ -239,13 +239,13 @@ These fields are optionally available:
 Installs one or more plugins.
 
 ~~~
-wp plugin install <plugin|zip|url>... [--version=<version>] [--force] [--ignore-requirements] [--activate] [--activate-network] [--insecure]
+wp plugin install <plugin|zip|url>... [--version=<version>] [--force] [--ignore-requirements] [--activate] [--activate-network] [--insecure] [--with-dependencies]
 ~~~
 
 **OPTIONS**
 
 	<plugin|zip|url>...
-		One or more plugins to install. Accepts a plugin slug, the path to a local zip file, or a URL to a remote zip file.
+		One or more plugins to install. Accepts a plugin slug, the path to a local zip file, a URL to a remote zip file, or a URL to a WordPress.org plugin directory.
 
 	[--version=<version>]
 		If set, get that particular version from wordpress.org, instead of the
@@ -268,6 +268,9 @@ wp plugin install <plugin|zip|url>... [--version=<version>] [--force] [--ignore-
 	[--insecure]
 		Retry downloads without certificate validation if TLS handshake fails. Note: This makes the request vulnerable to a MITM attack.
 
+	[--with-dependencies]
+		If set, the command will also install all required dependencies of the plugin as specified in the 'Requires Plugins' header.
+
 **EXAMPLES**
 
     # Install the latest version from wordpress.org and activate
@@ -325,6 +328,64 @@ wp plugin install <plugin|zip|url>... [--version=<version>] [--force] [--ignore-
     Plugin updated successfully
     Success: Installed 1 of 1 plugins.
 
+    # Install a plugin with all its dependencies
+    $ wp plugin install my-plugin --with-dependencies
+    Installing Required Plugin 1 (1.2.3)
+    Plugin installed successfully.
+    Installing Required Plugin 2 (2.0.0)
+    Plugin installed successfully.
+    Installing My Plugin (3.5.0)
+    Plugin installed successfully.
+    Success: Installed 3 of 3 plugins.
+
+    # Install from a WordPress.org plugin directory URL
+    $ wp plugin install https://wordpress.org/plugins/akismet/
+    Detected WordPress.org plugins directory URL, using slug: akismet
+    Installing Akismet Anti-spam: Spam Protection (3.1.11)
+    Downloading install package from https://downloads.wordpress.org/plugin/akismet.3.1.11.zip...
+    Unpacking the package...
+    Installing the plugin...
+    Plugin installed successfully.
+    Success: Installed 1 of 1 plugins.
+
+
+
+### wp plugin install-dependencies
+
+Installs all dependencies of an installed plugin.
+
+~~~
+wp plugin install-dependencies <plugin> [--activate] [--activate-network] [--force]
+~~~
+
+This command is useful when you have a plugin installed that depends on other plugins,
+and you want to install those dependencies without activating the main plugin.
+
+**OPTIONS**
+
+	<plugin>
+		The installed plugin to get dependencies for.
+
+	[--activate]
+		If set, dependencies will be activated immediately after install.
+
+	[--activate-network]
+		If set, dependencies will be network activated immediately after install.
+
+	[--force]
+		If set, the command will overwrite any installed version of the plugin, without prompting
+		for confirmation.
+
+**EXAMPLES**
+
+    # Install all dependencies of an installed plugin
+    $ wp plugin install-dependencies my-plugin
+    Installing Required Plugin 1 (1.2.3)
+    Plugin installed successfully.
+    Installing Required Plugin 2 (2.0.0)
+    Plugin installed successfully.
+    Success: Installed 2 of 2 plugins.
+
 
 
 ### wp plugin is-active
@@ -1036,7 +1097,7 @@ wp theme install <theme|zip|url>... [--version=<version>] [--force] [--ignore-re
 **OPTIONS**
 
 	<theme|zip|url>...
-		One or more themes to install. Accepts a theme slug, the path to a local zip file, or a URL to a remote zip file.
+		One or more themes to install. Accepts a theme slug, the path to a local zip file, a URL to a remote zip file, or a URL to a WordPress.org theme directory.
 
 	[--version=<version>]
 		If set, get that particular version from wordpress.org, instead of the
@@ -1075,6 +1136,16 @@ wp theme install <theme|zip|url>... [--version=<version>] [--force] [--ignore-re
     # Install from a remote zip file
     $ wp theme install http://s3.amazonaws.com/bucketname/my-theme.zip?AWSAccessKeyId=123&Expires=456&Signature=abcdef
 
+    # Install from a WordPress.org theme directory URL
+    $ wp theme install https://wordpress.org/themes/twentysixteen/
+    Detected WordPress.org themes directory URL, using slug: twentysixteen
+    Installing Twenty Sixteen (1.2)
+    Downloading install package from http://downloads.wordpress.org/theme/twentysixteen.1.2.zip...
+    Unpacking the package...
+    Installing the theme...
+    Theme installed successfully.
+    Success: Installed 1 of 1 themes.
+
 
 
 ### wp theme is-active

composer.json

@@ -49,6 +49,7 @@
             "plugin delete",
             "plugin get",
             "plugin install",
+            "plugin install-dependencies",
             "plugin is-active",
             "plugin is-installed",
             "plugin list",

features/plugin-activate.feature

@@ -154,3 +154,26 @@ Feature: Activate WordPress plugins
       Success:
       """
     And the return code should be 0
+
+  Scenario: Activating a plugin that generates unexpected output shows the output in debug mode
+    Given a wp-content/plugins/output-plugin.php file:
+      """
+      <?php
+      /**
+       * Plugin Name: Output Plugin
+       * Description: This plugin generates unexpected output during activation
+       * Author: WP-CLI tests
+       */
+      echo "Unexpected output from plugin activation";
+      """
+
+    When I try `wp plugin activate output-plugin --debug`
+    Then STDERR should contain:
+      """
+      Warning: Failed to activate plugin. The plugin generated unexpected output.
+      """
+    And STDERR should contain:
+      """
+      Debug (plugin): Unexpected output: Unexpected output from plugin activation
+      """
+    And the return code should be 1