Skip to content

Run Dependabot on Composer Packages#1075

Open
n7studios wants to merge 3 commits intomainfrom
dependabot-update-composer-dependencies
Open

Run Dependabot on Composer Packages#1075
n7studios wants to merge 3 commits intomainfrom
dependabot-update-composer-dependencies

Conversation

@n7studios
Copy link
Copy Markdown
Contributor

Summary

Configures Dependabot to create PR's and run tests when any packages (currently only Kit's WordPress Libraries) in composer.json require section have a newer version available, ensuring they remain up to date.

Dependabot PR's relating to GitHub Action packages will still skip tests, which is intentional.

Currently, manual PR's would need to be submitted to update Kit's WordPress Libraries.

Testing

Existing tests pass.

Checklist

This ensures the Kit WordPress Libraries version number is specific and updated - for example, 2.1.5 is the current and 2.1.6 is published. Dependabot will then submit a PR to update composer.json to 2.1.6.
@n7studios n7studios self-assigned this Apr 20, 2026
@github-actions
Copy link
Copy Markdown

WordPress Playground

🚀 Your PR has been built and is ready for testing in WordPress Playground!

Click here to test your changes in WordPress Playground

@n7studios n7studios requested review from a team, ciccio-kit and noelherrick and removed request for a team April 20, 2026 10:06
@n7studios n7studios marked this pull request as ready for review April 20, 2026 10:06
Copy link
Copy Markdown
Contributor

@noelherrick noelherrick left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Perhaps we might consider holding packages/PRs for a week. We've had multiple cases in the JS world where a package maintainer was compromised and because we only apply week-old changes, we were not affected.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants