…alid block names.

Includes adding missing `@covers` tags.

Follow-up to [43742], [51491].

Props sagardeshmukh.
See #64225.

git-svn-id: https://develop.svn.wordpress.org/trunk@62245 602fd350-edb4-49c9-b593-d223f7449a82

Follow-up to [36181], [62244].

Props sagardeshmukh.
See #64225.

git-svn-id: https://develop.svn.wordpress.org/trunk@62246 602fd350-edb4-49c9-b593-d223f7449a82

This ensures that not only the return values match the expected results, but also that their type is the same.

Going forward, stricter type checking by using `assertSame()` should generally be preferred to `assertEquals()` where appropriate, to make the tests more reliable.

Follow-up to [60733], [61066].

Props sagardeshmukh.
See #64324.

git-svn-id: https://develop.svn.wordpress.org/trunk@62247 602fd350-edb4-49c9-b593-d223f7449a82

This ensures that not only the return values match the expected results, but also that their type is the same.

Going forward, stricter type checking by using `assertSame()` should generally be preferred to `assertEquals()` where appropriate, to make the tests more reliable.

Follow-up to [61700].

Props sagardeshmukh.
See #64324.

git-svn-id: https://develop.svn.wordpress.org/trunk@62248 602fd350-edb4-49c9-b593-d223f7449a82

…res.

When serializing test output into XML, invalid UTF-8 bytes lead to a failure to load those test results when they are read. This patch adds code to remap those invalid bytes in an ASCII-readable form, whereas the invalid bytes are separated by parentheses and encoded in their hex form.

This ensures that a proper XML file is generated from the testing results.

Developed in: WordPress#11620
Discussed in: https://core.trac.wordpress.org/ticket/31992
Reported in: WordPress/phpunit-test-runner#310

Follow-up to: [62225].

Props agulbra, amykamala, codexdemon, dmsnell, mywp459, rolle.
See #31992.


git-svn-id: https://develop.svn.wordpress.org/trunk@62249 602fd350-edb4-49c9-b593-d223f7449a82

This change introduces Zizmor, which is a tool for linting GitHub Actions workflow files for security weaknesses. This compliments the existing Actionlint scanning.

For more information about Actionlint and Zizmor, see the GitHub Actions Workflow Standards page in the developer handbook: https://developer.wordpress.org/coding-standards/wordpress-coding-standards/github-actions/

Some issues in workflow files that are reported by Zizmor will be addressed in follow-up commits.

Props johnbillion, desrosj.

See #64227


git-svn-id: https://develop.svn.wordpress.org/trunk@62250 602fd350-edb4-49c9-b593-d223f7449a82

…s as reported by Zizmor.

This removes unnecessarily broad inheritance of secrets, replaces some GitHub Actions expressions with environment variables, removes git credential persistence, and adds documentation to the readme.

See #64227


git-svn-id: https://develop.svn.wordpress.org/trunk@62251 602fd350-edb4-49c9-b593-d223f7449a82

See #64227


git-svn-id: https://develop.svn.wordpress.org/trunk@62252 602fd350-edb4-49c9-b593-d223f7449a82

…s for values that resolve to "true" or "false" strings.

See #64227


git-svn-id: https://develop.svn.wordpress.org/trunk@62253 602fd350-edb4-49c9-b593-d223f7449a82

…hat trail pinned actions.

None of these actions use `v`-prefixed tag names.

See #64227


git-svn-id: https://develop.svn.wordpress.org/trunk@62254 602fd350-edb4-49c9-b593-d223f7449a82

…_Builder`.

This checks that the return value of the `wp_ai_client_default_request_timeout` filter is a non-negative number before passing it to `RequestOptions`. If the filtered value is invalid, it is discarded in favor of the original default of `30.0` and a `_doing_it_wrong()` notice is issued. Without this check, a fatal error would ensue from the exception thrown in `\WordPress\AiClient\Providers\Http\DTO\RequestOptions::validateTimeout()`.

The following static analysis issues are addressed:

* Use `float` instead of `int` for the `wp_ai_client_default_request_timeout` filter parameter.
* Add missing PHP imports for `Message` and `MessagePart` in the PHPDoc for `wp_ai_client_prompt()`.
* Add PHP return type hints for `wp_ai_client_prompt()` and `WP_AI_Client_Cache::getMultiple()`.
* Use native property type hints in `WP_AI_Client_HTTP_Client`.

Developed in WordPress#11596

Props westonruter, justlevine, flixos90, khushdoms, darshitrajyaguru97, adrmf25, jarodortegaaraya, tusharaddweb, gaurangsondagar.
Fixes #65094.


git-svn-id: https://develop.svn.wordpress.org/trunk@62255 602fd350-edb4-49c9-b593-d223f7449a82

Props timse201, sanketparmar, trickster301, audrasjb, jadavsanjay, SergeyBiryukov.
Fixes #64982.

git-svn-id: https://develop.svn.wordpress.org/trunk@62256 602fd350-edb4-49c9-b593-d223f7449a82

…ss capability

Adds capability-gated CSS stripping so that when a user without `edit_css` saves a post, any `style.css` block attributes are removed from block comments using `WP_Block_Parser::next_token()`.

Props aaronrobertshaw, audrasjb, dmsnell, glendaviesnz, jonsurrell, ozgursar, ramonopoly, shailu25, westonruter.

Follow-up to [64544].

Fixes #64771.



git-svn-id: https://develop.svn.wordpress.org/trunk@62257 602fd350-edb4-49c9-b593-d223f7449a82

… files are minified.

Relocates the copying of vendor JavaScript files back to the `grunt copy:vendor-js` subtask to ensure the files are in place prior to the `grunt uglify` step running to minify the files.

Props desrosj.
Fixes #65007.
See #64393.


git-svn-id: https://develop.svn.wordpress.org/trunk@62258 602fd350-edb4-49c9-b593-d223f7449a82

…2ace6