Skip to content

Release version 2.0.20 - #1080

Merged
schlessera merged 14 commits into
stablefrom
release/2.0.20
Aug 31, 2026
Merged

Release version 2.0.20#1080
schlessera merged 14 commits into
stablefrom
release/2.0.20

Conversation

@jrfnl

@jrfnl jrfnl commented Aug 31, 2026

Copy link
Copy Markdown
Member

Detailed Description

The only thing new here is the changelog commit, everything else is cherrypicked from previously approved PRs.

Closes #1068

Release checklist

  • Check if any dependencies need updating.
  • ** Create a release/vx.x.x branch.
  • ** Cherrypick any relevant commits from develop to the release branch, including commits related to CI updates.
  • Update the version constant in src/Requests.php - PR Release version 2.0.20 #1080.
  • Add changelog for the release - PR Release version 2.0.20 #1080
    ** In case of a short-lived release branch, add the changelog as the last commit to the release branch and pull the release branch.
  • Merge the changelog/release PR.
  • Make sure all CI builds are green.
  • Tag the release against stable and push the tag.
  • Review the automatically created PR with the GH Pages docs update.
  • Create a release from the tag (careful, GH defaults to develop!) & copy & paste the changelog to it.
    Make sure to copy the links to the issues and the links to the GH usernames from the bottom of the changelog!
  • Merge the GH Pages PR.
    Note: it is important to do this after the release as otherwise the information about the latest release
    in the site will not be updated correctly from the GitHub API.
  • Verify that the website regenerated correctly and is in working order.
  • Close the milestone.
  • Open a new milestone for the next release.
  • If any open PRs/issues which were milestoned for the release did not make it into the release, update their milestone.
  • ** Cherrypick the changelog commit from stable into the develop branch.
  • Tweet about the release.
  • Post about it in the WP #core Slack channel.
  • Open a Trac ticket for WordPress Core to update their copy.
  • Submit for "Month in WordPress": https://make.wordpress.org/community/month-in-wordpress-submissions/

jrfnl and others added 14 commits August 31, 2026 11:00
Composer:
* No need for requiring the Composer PHPCS plugin anymore as it now comes automatically with WPCS and removing the requirement allows WPCS to manage the supported versions, preventing conflicts (and will update us to the 1.0.0 version).
* As the minimum supported version of PHPCS for WPCS is now above 3.7.1, we don't need the explicit require for PHPCS anymore either.

PHPCS ruleset:
* Various tweaks to the sniff and property names as per the changes in WPCS 3.0.0.

Refs:
* https://github.com/WordPress/WordPress-Coding-Standards/releases/tag/3.0.0
* https://github.com/WordPress/WordPress-Coding-Standards/wiki/Upgrade-Guide-to-WordPressCS-3.0.0-for-ruleset-maintainers
... for a parameter using a reserved keyword for its name, which is discouraged.

This method is deprecated, so changing this is irrelevant.
... and make the build up of the `$request` explicit.

This removes a warning about a (not) "unused parameter".
... as WordPressCS will not throw deprecations anymore.
Each of these dependencies has a minimum PHP version which aligns with the minimum PHP version of this package, so these can safely be "bumped" to enforce using the latest versions of these dependencies (which is what would be used in CI anyway).
Setup-PHP will normally "gracefully" show a warning and not fail the build when an extension or tool failed to install.

In most cases, this is not particularly useful as that means that either there will be a failure later on in the build due to the extension or tool missing, or the build will not be representative of what is supposed to be tested.

This commit changes this behaviour to fail select builds at the `setup-php` step, which also makes debugging these type of build failures much more straight-forward.

Ref: https://github.com/shivammathur/setup-php?tab=readme-ov-file#fail-fast-optional
* Tighten up the GitHub Actions workflow permissions.

* Add inline docs to the permissions directives.
The test requests an HTTPS host and expects a 200, which only demonstrates
anything if that host serves a different certificate when no SNI is sent. It
no longer does, so a transport which quietly stopped sending SNI would still
pass. The host has meanwhile also started answering 403 to every client,
including a plain `curl`, so the test fails for reasons entirely unrelated to
the library.

Pointing it at another host would get the suite green again, but it would
also leave a test standing which looks like it covers something it does not.
Skipping it says what is actually the case, and keeps the intent visible for
whoever picks it up.

Refs #1077, which has the measurements and the options for getting real
coverage back.
Bumps the action-runners group with 1 update in the / directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.319.0 to 1.321.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@003a5c4...95ef2b0)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.321.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: action-runners
...

Signed-off-by: dependabot[bot] <support@github.com>
* Includes updating the version number constant.
@schlessera
schlessera merged commit c379f92 into stable Aug 31, 2026
36 checks passed
@schlessera
schlessera deleted the release/2.0.20 branch August 31, 2026 09:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants