Build/Test Tools: Batch timeout-annotation checks via GraphQL (alternative to #639)

.github/dependabot.yml

@@ -0,0 +1,331 @@
+# Configure Dependabot scanning.
+version: 2
+
+updates:
+  # Check for updates to GitHub Actions.
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    open-pull-requests-limit: 50
+    cooldown:
+      default-days: 7
+    groups:
+      github-actions:
+        applies-to: version-updates
+        update-types:
+          - minor
+          - patch
+
+  # Check for updates to Composer packages.
+  - package-ecosystem: "composer"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    open-pull-requests-limit: 50
+    cooldown:
+      default-days: 7
+    ignore:
+      # These dependencies do not currently need to be managed with Dependabot.
+      - dependency-name: "squizlabs/php_codesniffer"
+      - dependency-name: "wp-coding-standards/wpcs"
+      - dependency-name: "phpcompatibility/php-compatibility"
+      - dependency-name: "yoast/phpunit-polyfills"
+    groups:
+      composer-packages:
+        applies-to: version-updates
+        update-types:
+          - minor
+          - patch
+        patterns:
+          - "composer/ca-bundle"
+
+  # Monitor some npm dependencies for updates in groups.
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    open-pull-requests-limit: 50
+    cooldown:
+      default-days: 7
+    ignore:
+      - dependency-name: "@wordpress/*"
+    groups:
+      ##
+      # Groups for updating devDependencies.
+      ##
+
+      # Dependencies related to Playwright testing (E2E, performance).
+      tests-playwright:
+        applies-to: version-updates
+        update-types:
+          - minor
+          - patch
+        patterns:
+          - "*playwright*"
+      # Dependencies related to JavaScript testing with QUnit.
+      tests-qunit:
+        applies-to: version-updates
+        update-types:
+          - minor
+          - patch
+        patterns:
+          - "*qunit*"
+          - "sinon*"
+      # Dependencies related to CSS and SASS building and manilupating.
+      dev-css-sass:
+        applies-to: version-updates
+        update-types:
+          - minor
+          - patch
+        patterns:
+          - "autoprefixer"
+          # postcss and css related dependencies.
+          - "*css*"
+          - "*sass"
+      # Dependencies related to the Webpack build process.
+      dev-webpack:
+        applies-to: version-updates
+        update-types:
+          - minor
+          - patch
+        patterns:
+          - "*webpack*"
+          - "react-refresh"
+          - "source-map-loader"
+      # Dependencies related to the local Docker development environment.
+      dev-docker:
+        applies-to: version-updates
+        update-types:
+          - minor
+          - patch
+        patterns:
+          - "dotenv*"
+          - "wait-on"
+      # Dependencies that do not fall into a specific grouping.
+      dev-miscellaneous:
+        applies-to: version-updates
+        update-types:
+          - minor
+          - patch
+        patterns:
+          - "chalk"
+          - "check-node-version"
+          - "ink-docstrap"
+          - "install-changed"
+          - "matchdep"
+          - "uuid"
+      # Dependencies related to JavaScript minification.
+      dev-uglify:
+        applies-to: version-updates
+        update-types:
+          - minor
+          - patch
+        patterns:
+          - "*uglify*"
+      # All GruntJS related dependencies that do not relate to another group.
+      dev-grunt:
+        applies-to: version-updates
+        update-types:
+          - minor
+          - patch
+        patterns:
+          - "*grunt*"
+
+      ##
+      # Groups for updating production dependencies.
+      ##
+
+      # Dependencies related to jQuery and its ecosystem.
+      external-jquery:
+        applies-to: version-updates
+        update-types:
+          - minor
+          - patch
+        patterns:
+          - "jquery*"
+      # Dependencies related to React and its ecosystem.
+      external-react:
+        applies-to: version-updates
+        update-types:
+          - minor
+          - patch
+        patterns:
+          - "react*"
+          - "!react-refresh"
+      # Dependencies used for bundling polyfill libraries into WordPress.
+      external-polyfills:
+        applies-to: version-updates
+        update-types:
+          - minor
+          - patch
+        patterns:
+          - "core-js-url-browser"
+          - "element-closest"
+          - "formdata-polyfill"
+          - "imagesloaded"
+          - "objectFitPolyfill"
+          - "polyfill-library"
+          - "regenerator-runtime"
+          - "whatwg-fetch"
+          - "wicg-inert"
+      # Dependencies related to the Masonry library.
+      external-masonry:
+        applies-to: version-updates
+        update-types:
+          - minor
+          - patch
+        patterns:
+          - "masonry-layout"
+      # Dependencies that do not fall into a specific grouping.
+      external-miscellaneous:
+        applies-to: version-updates
+        update-types:
+          - minor
+          - patch
+        patterns:
+          - "backbone"
+          - "clipboard"
+          - "hoverintent"
+          - "json2php"
+          - "lodash"
+          - "moment"
+          - "underscore"
+
+  # Monitor npm dependencies within default themes.
+  - package-ecosystem: "npm"
+    directory: "/src/wp-content/themes/twentytwentyfive"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 50
+    cooldown:
+      default-days: 7
+    groups:
+      twentytwentyfive-css:
+        applies-to: version-updates
+        update-types:
+          - minor
+          - patch
+        patterns:
+          - "**browserslist*"
+          - "*css*"
+
+  - package-ecosystem: "npm"
+    directory: "/src/wp-content/themes/twentytwentytwo"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 50
+    cooldown:
+      default-days: 7
+    groups:
+      twentytwentytwo-css:
+        applies-to: version-updates
+        update-types:
+          - minor
+          - patch
+        patterns:
+          - "**browserslist*"
+          - "*css*"
+
+  - package-ecosystem: "npm"
+    directory: "/src/wp-content/themes/twentytwentyone"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 50
+    cooldown:
+      default-days: 7
+    groups:
+      twentytwentyone-sass-css:
+        applies-to: version-updates
+        update-types:
+          - minor
+          - patch
+        patterns:
+          - "**browserslist*"
+          - "autoprefixer"
+          - "*css*"
+          - "*sass*"
+          - "!*stylelint*"
+      twentytwentyone-eslint:
+        applies-to: version-updates
+        update-types:
+          - minor
+          - patch
+        patterns:
+          - "**eslint*"
+      twentytwentyone-stylelint:
+        applies-to: version-updates
+        update-types:
+          - minor
+          - patch
+        patterns:
+          - "**stylelint*"
+      twentytwentyone-miscellaneous:
+        applies-to: version-updates
+        update-types:
+          - minor
+          - patch
+        patterns:
+          - "chokidar-cli"
+          - "minimist"
+          - "npm-run-all"
+
+  - package-ecosystem: "npm"
+    directory: "/src/wp-content/themes/twentytwenty"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 50
+    cooldown:
+      default-days: 7
+    groups:
+      twentytwenty-css:
+        applies-to: version-updates
+        update-types:
+          - minor
+          - patch
+        patterns:
+          - "**browserslist*"
+          - "autoprefixer"
+          - "*css*"
+      twentytwenty-stylelint:
+        applies-to: version-updates
+        update-types:
+          - minor
+          - patch
+        patterns:
+          - "*stylelint*"
+      twentytwenty-miscellaneous:
+        applies-to: version-updates
+        update-types:
+          - minor
+          - patch
+        patterns:
+          - "concurrently"
+          - "@wordpress/scripts"
+
+  - package-ecosystem: "npm"
+    directory: "/src/wp-content/themes/twentynineteen"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 50
+    cooldown:
+      default-days: 7
+    groups:
+      twentynineteen-css-sass:
+        applies-to: version-updates
+        update-types:
+          - minor
+          - patch
+        patterns:
+          - "**browserslist*"
+          - "autoprefixer"
+          - "*css*"
+          - "*sass*"
+      twentynineteen-miscellaneous:
+        applies-to: version-updates
+        update-types:
+          - minor
+          - patch
+        patterns:
+          - "chokidar-cli"
+          - "npm-run-all"

.github/template-gutenberg-sync-pr-body.md

@@ -0,0 +1,24 @@
+This updates the pinned Gutenberg repository commit hash for `__BRANCH__` from `__OLD_SHA__` to `__NEW_SHA__`.
+
+<details>
+<summary>Changes</summary>
+
+__COMMIT_LIST__
+
+__SOURCE_LINE__
+
+</details>
+
+<details>
+<summary>Changelog</summary>
+
+__CHANGELOG__
+
+</details>
+
+**Note:** This pull request was created by the `gutenberg-sync.yml` workflow.
+
+Trac ticket: Core-
+
+---
+**This Pull Request is for code review only. Please keep all other discussion in the Trac ticket. Do not merge this Pull Request. See [GitHub Pull Requests for Code Review](https://make.wordpress.org/core/handbook/contribute/git/github-pull-requests-for-code-review/) in the Core Handbook for more details.**