Skip to content

Tooling checks and dependency maintenance

Choose a tag to compare

@bradpotts bradpotts released this 05 Sep 11:06
· 21 commits to main since this release

Contract change type: semantic change

Fixed

  • Updated the locked fast-uri dependency to remove known security findings.
  • Required patched qs versions in the WordPress development environment
    dependency tree without downgrading the surrounding tooling.
  • Extended release version validation to the README, both lockfile version
    fields, the theme header, and the WordPress stable tag, with regression
    checks for missing and mismatched metadata.

Added

  • Added strict TypeScript checking for scripts and root configuration files
    to the build and full validation gate.
  • Added a weekly, manually runnable dependency report for npm updates, audit
    counts, and workflow action releases. The workflow uses read-only
    permissions and creates no branches or pull requests.

Removed

  • Removed the obsolete development-container dependency update configuration.