v4.0 release

[jkcox]

• Merge pull request v3.2 anchor menu #271
• azure dev ops sync file
• dependabot updates
• Merge pull request Ramon wchm api v2 #291
• Merge pull request v4.0 update #304

[Copilot]

Pull request overview

This PR packages the “v4.0 release” set of changes for UnityBlocks, including block markup/runtime updates (notably Anchor Menu + WCHM), dependency/version bumps, and workflow/submodule sync updates.

Changes:

• Update Anchor Menu block to output UDS Bootstrap markup and drop the block’s custom frontend script in favor of the theme-provided view script.
• Update WCHM block to use new v2 API endpoints and expanded contact group rendering.
• Bump versions/deps and adjust tooling (webpack alias + stats, Azure DevOps sync workflow, submodule URL).

Reviewed changes

Copilot reviewed 29 out of 31 changed files in this pull request and generated 6 comments.

Show a summary per file

File	Description
webpack.config.js	Adds a webpack alias for @asu-unity-stack and enables detailed error stats.
unityblocks.php	Bumps plugin header version to 4.0.0.
src/wchm/save.js	Changes serialized data-baseapipath selection logic (now includes localhost).
src/wchm/edit.js	Updates editor-side API base selection (now includes localhost).
src/wchm/components/autoComplete.js	Switches WCHM fetching to /v2/* endpoints and adds pre/post/ATF contact sections.
src/wchm/block.json	Bumps block apiVersion + block version and updates viewScript handle.
src/hero/frontend.js	Switches Hero import to @asu-unity-stack alias path.
src/hero/edit.js	Switches Hero import to @asu-unity-stack alias path.
src/anchor-menu/save.js	Replaces prior data-driven div with UDS Anchor Menu HTML structure.
src/anchor-menu/inspector.js	Adds a “First Element ID” inspector control.
src/anchor-menu/frontend.js	Removes the block’s custom frontend behavior script.
src/anchor-menu/edit.js	Updates AnchorMenu import to @asu-unity-stack alias path.
src/anchor-menu/block.json	Bumps block apiVersion + version; removes file:./frontend.js from viewScript.
package.json	Updates package version and bumps tooling/dependencies + React overrides.
build/wchm/style-index-rtl.css	Adds generated RTL stylesheet for WCHM.
build/wchm/index.js	Updates generated editor bundle for WCHM v2 changes.
build/wchm/index.asset.php	Updates generated asset dependencies/version for WCHM editor bundle.
build/wchm/frontend.js	Updates generated frontend bundle for WCHM v2 changes.
build/wchm/frontend.asset.php	Updates generated asset dependencies/version for WCHM frontend bundle.
build/wchm/block.json	Updates generated block.json for WCHM.
build/blocks-manifest.php	Updates generated manifest for block versions/scripts + adds news-grid attribute enum.
build/anchor-menu/index.asset.php	Updates generated asset metadata for Anchor Menu editor bundle.
build/anchor-menu/frontend.js	Removes generated frontend bundle (no longer referenced).
build/anchor-menu/frontend.asset.php	Removes generated frontend asset metadata (no longer referenced).
build/anchor-menu/block.json	Updates generated block.json for Anchor Menu.
README.md	Simplifies ASU News development instructions.
.gitmodules	Points resources/asu-unity-stack submodule URL to github.com/ASU/asu-unity-stack.
.github/workflows/azure-devops-sync.yml	Adjusts concurrency behavior, ADO project/type/state mapping, and bypass rules.

Comments suppressed due to low confidence (1)

src/wchm/components/autoComplete.js:23

• The APIM subscription key is hardcoded into the client-side bundle and sent from the browser. This exposes the key publicly and allows anyone to reuse it outside the intended context. Move the call server-side (WP REST proxy) or inject the key from a secured backend mechanism that can be rotated/limited, and avoid committing the key in source control.

            method: "GET",
            headers: {
              "Content-Type": "application/json",
              "Ocp-Apim-Subscription-Key": "8dd787c43de54148bf5e10686b6b6e20",
            },

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

This control updates firstElementId, but the block’s save markup no longer serializes firstElementId (or focusFirstFocusableElement) anywhere. As a result, this setting won’t affect the front-end output/behavior. Either remove these settings/attributes or include them in the saved markup in whatever form the front-end script expects (e.g., data attributes).