From 3aee64cea252bf36e1d1ad7b5d3690119217a6fc Mon Sep 17 00:00:00 2001
From: Adelin Niculae <43118261+adelinn@users.noreply.github.com>
Date: Fri, 9 Jan 2026 12:42:07 +0200
Subject: [PATCH 01/23] [no ci] test
---
.github/workflows/php-sast.yml | 57 +++++++++++++++++++++-------------
1 file changed, 36 insertions(+), 21 deletions(-)
diff --git a/.github/workflows/php-sast.yml b/.github/workflows/php-sast.yml
index b3935e8..c14565c 100644
--- a/.github/workflows/php-sast.yml
+++ b/.github/workflows/php-sast.yml
@@ -24,30 +24,44 @@ jobs:
# - name: Validate composer.json and composer.lock
# run: composer validate --strict
- # This config file gets auto-loaded by PHPStan
+ # This config file gets auto-loaded by Psalm
# !!!! The old bcc-signon plugin and the bcc-wp-proxy plugin are excluded from analysis!
- - name: Set PHPStan config
+ - name: Set Psalm config
run: |
- cat <<'EOF' > phpstan.neon
- parameters:
- level: 1 # form 0 to 11 where 0 is the loosest and 11 the strictest
- errorFormat: github
- paths:
- - plugins
- scanFiles:
- - custom-defs.stub
+ cat <<'EOF' > psalm.xml
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
EOF
- - name: Create custom stubs for plugin functions. If this grows too big it can be commited as a separate file
+ - name: Create stubs for dependency functions (e.g. other plugin funcions). If this grows too big it can be commited as a separate file
run: |
cat <<'EOF' > custom-defs.stub
Date: Fri, 9 Jan 2026 13:02:49 +0200
Subject: [PATCH 02/23] try the gh action
---
.github/workflows/php-sast.yml | 13 +++++--------
1 file changed, 5 insertions(+), 8 deletions(-)
diff --git a/.github/workflows/php-sast.yml b/.github/workflows/php-sast.yml
index c14565c..119c8d1 100644
--- a/.github/workflows/php-sast.yml
+++ b/.github/workflows/php-sast.yml
@@ -21,9 +21,6 @@ jobs:
steps:
- uses: actions/checkout@v6
- # - name: Validate composer.json and composer.lock
- # run: composer validate --strict
-
# This config file gets auto-loaded by Psalm
# !!!! The old bcc-signon plugin and the bcc-wp-proxy plugin are excluded from analysis!
- name: Set Psalm config
@@ -83,12 +80,12 @@ jobs:
function get_culture() {};
EOF
- - name: Install Psalm and Wordpress stubs
+ - name: Install Wordpress plugin for Psalm
run: |
- composer require --dev vimeo/psalm
- composer require --dev humanmade/psalm-plugin-wordpress
- ./vendor/bin/psalm-plugin enable humanmade/psalm-plugin-wordpress
+ composer require humanmade/psalm-plugin-wordpress
- name: Run Psalm
- run: ./vendor/bin/psalm --no-cache
+ uses: docker://ghcr.io/psalm/psalm-github-actions
+ with:
+ security_analysis: true
From 05c92e9d90fa424e9cb77ab7fce7b3908863743d Mon Sep 17 00:00:00 2001
From: Adelin Niculae <43118261+adelinn@users.noreply.github.com>
Date: Fri, 9 Jan 2026 13:13:24 +0200
Subject: [PATCH 03/23] test
---
.github/workflows/php-sast.yml | 8 +-------
1 file changed, 1 insertion(+), 7 deletions(-)
diff --git a/.github/workflows/php-sast.yml b/.github/workflows/php-sast.yml
index 119c8d1..b12c6e6 100644
--- a/.github/workflows/php-sast.yml
+++ b/.github/workflows/php-sast.yml
@@ -50,12 +50,6 @@ jobs:
-
EOF
- name: Create stubs for dependency functions (e.g. other plugin funcions). If this grows too big it can be commited as a separate file
@@ -82,7 +76,7 @@ jobs:
- name: Install Wordpress plugin for Psalm
run: |
- composer require humanmade/psalm-plugin-wordpress
+ composer require -dev humanmade/psalm-plugin-wordpress
- name: Run Psalm
uses: docker://ghcr.io/psalm/psalm-github-actions
From 3b71dac358ac07b0a6d93a75af8a91690e6bfc32 Mon Sep 17 00:00:00 2001
From: Adelin Niculae <43118261+adelinn@users.noreply.github.com>
Date: Fri, 9 Jan 2026 13:15:32 +0200
Subject: [PATCH 04/23] test2
---
.github/workflows/php-sast.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/php-sast.yml b/.github/workflows/php-sast.yml
index b12c6e6..6357201 100644
--- a/.github/workflows/php-sast.yml
+++ b/.github/workflows/php-sast.yml
@@ -76,7 +76,7 @@ jobs:
- name: Install Wordpress plugin for Psalm
run: |
- composer require -dev humanmade/psalm-plugin-wordpress
+ composer require humanmade/psalm-plugin-wordpress
- name: Run Psalm
uses: docker://ghcr.io/psalm/psalm-github-actions
From 2b3e4db06345a8f820dfc72b6c4fc307ba3a08fd Mon Sep 17 00:00:00 2001
From: Adelin Niculae <43118261+adelinn@users.noreply.github.com>
Date: Fri, 9 Jan 2026 13:27:37 +0200
Subject: [PATCH 05/23] test 3
---
.github/workflows/php-sast.yml | 8 ++++++--
1 file changed, 6 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/php-sast.yml b/.github/workflows/php-sast.yml
index 6357201..1796d97 100644
--- a/.github/workflows/php-sast.yml
+++ b/.github/workflows/php-sast.yml
@@ -74,9 +74,13 @@ jobs:
function get_culture() {};
EOF
- - name: Install Wordpress plugin for Psalm
+ - name: Install Psalm and Wordpress stubs
run: |
- composer require humanmade/psalm-plugin-wordpress
+ composer require --dev vimeo/psalm
+ composer require --dev humanmade/psalm-plugin-wordpress
+ ./vendor/bin/psalm-plugin enable humanmade/psalm-plugin-wordpress
+ cat psalm.xml
+ ls
- name: Run Psalm
uses: docker://ghcr.io/psalm/psalm-github-actions
From a0eac7bbc330ce5650a15337c5af08d36d771bf1 Mon Sep 17 00:00:00 2001
From: Adelin Niculae <43118261+adelinn@users.noreply.github.com>
Date: Fri, 9 Jan 2026 16:45:48 +0200
Subject: [PATCH 06/23] test 4
---
.github/workflows/php-sast.yml | 1 -
1 file changed, 1 deletion(-)
diff --git a/.github/workflows/php-sast.yml b/.github/workflows/php-sast.yml
index 1796d97..711db2e 100644
--- a/.github/workflows/php-sast.yml
+++ b/.github/workflows/php-sast.yml
@@ -78,7 +78,6 @@ jobs:
run: |
composer require --dev vimeo/psalm
composer require --dev humanmade/psalm-plugin-wordpress
- ./vendor/bin/psalm-plugin enable humanmade/psalm-plugin-wordpress
cat psalm.xml
ls
From 445e54c35049de6850a3e9032df35fba2f3a85b2 Mon Sep 17 00:00:00 2001
From: Adelin Niculae <43118261+adelinn@users.noreply.github.com>
Date: Fri, 9 Jan 2026 16:58:12 +0200
Subject: [PATCH 07/23] test 5
---
.github/workflows/php-sast.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/php-sast.yml b/.github/workflows/php-sast.yml
index 711db2e..e7fa6d7 100644
--- a/.github/workflows/php-sast.yml
+++ b/.github/workflows/php-sast.yml
@@ -82,7 +82,7 @@ jobs:
ls
- name: Run Psalm
- uses: docker://ghcr.io/psalm/psalm-github-actions
+ uses: psalm/psalm-github-actions@2.3.2
with:
security_analysis: true
From d3a600882ae436ee9eabfac8311b60eeead3068b Mon Sep 17 00:00:00 2001
From: Adelin Niculae <43118261+adelinn@users.noreply.github.com>
Date: Fri, 9 Jan 2026 17:10:26 +0200
Subject: [PATCH 08/23] test 1
---
.github/workflows/php-sast.yml | 9 ++++-----
1 file changed, 4 insertions(+), 5 deletions(-)
diff --git a/.github/workflows/php-sast.yml b/.github/workflows/php-sast.yml
index e7fa6d7..dd983df 100644
--- a/.github/workflows/php-sast.yml
+++ b/.github/workflows/php-sast.yml
@@ -31,8 +31,8 @@ jobs:
@@ -76,13 +76,12 @@ jobs:
- name: Install Psalm and Wordpress stubs
run: |
- composer require --dev vimeo/psalm
+ #composer require --dev vimeo/psalm
composer require --dev humanmade/psalm-plugin-wordpress
- cat psalm.xml
- ls
- name: Run Psalm
uses: psalm/psalm-github-actions@2.3.2
with:
security_analysis: true
+ composer_require_dev: true
From 4d31928c387c74d83ddb307276e976dd8c902995 Mon Sep 17 00:00:00 2001
From: Adelin Niculae <43118261+adelinn@users.noreply.github.com>
Date: Fri, 9 Jan 2026 17:19:57 +0200
Subject: [PATCH 09/23] test 2
---
.github/workflows/php-sast.yml | 3 ---
1 file changed, 3 deletions(-)
diff --git a/.github/workflows/php-sast.yml b/.github/workflows/php-sast.yml
index dd983df..38b6103 100644
--- a/.github/workflows/php-sast.yml
+++ b/.github/workflows/php-sast.yml
@@ -31,8 +31,6 @@ jobs:
@@ -76,7 +74,6 @@ jobs:
- name: Install Psalm and Wordpress stubs
run: |
- #composer require --dev vimeo/psalm
composer require --dev humanmade/psalm-plugin-wordpress
- name: Run Psalm
From 36fc550e4d841502b4791e4e585bf8fc503708a7 Mon Sep 17 00:00:00 2001
From: Adelin Niculae <43118261+adelinn@users.noreply.github.com>
Date: Fri, 9 Jan 2026 17:57:10 +0200
Subject: [PATCH 10/23] test 3
---
.github/workflows/php-sast.yml | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/.github/workflows/php-sast.yml b/.github/workflows/php-sast.yml
index 38b6103..3eed959 100644
--- a/.github/workflows/php-sast.yml
+++ b/.github/workflows/php-sast.yml
@@ -77,8 +77,9 @@ jobs:
composer require --dev humanmade/psalm-plugin-wordpress
- name: Run Psalm
- uses: psalm/psalm-github-actions@2.3.2
+ uses: adelinn/psalm-github-actions@patch-1
with:
security_analysis: true
composer_require_dev: true
+ psalm_version: "6.14.2"
From 5771e5a2c52cb4991a1b3f0b070a2176aa424923 Mon Sep 17 00:00:00 2001
From: Adelin Niculae <43118261+adelinn@users.noreply.github.com>
Date: Fri, 16 Jan 2026 12:48:32 +0200
Subject: [PATCH 11/23] test 2.1
---
.github/workflows/php-sast.yml | 5 ++---
1 file changed, 2 insertions(+), 3 deletions(-)
diff --git a/.github/workflows/php-sast.yml b/.github/workflows/php-sast.yml
index 3eed959..d24be30 100644
--- a/.github/workflows/php-sast.yml
+++ b/.github/workflows/php-sast.yml
@@ -39,9 +39,9 @@ jobs:
-
+
@@ -81,5 +81,4 @@ jobs:
with:
security_analysis: true
composer_require_dev: true
- psalm_version: "6.14.2"
From eee7bb750a3592084c54e97e5f6a66b148d9b39b Mon Sep 17 00:00:00 2001
From: Adelin Niculae <43118261+adelinn@users.noreply.github.com>
Date: Fri, 16 Jan 2026 13:07:43 +0200
Subject: [PATCH 12/23] test 2.2
---
.github/workflows/php-sast.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/php-sast.yml b/.github/workflows/php-sast.yml
index d24be30..2759a3f 100644
--- a/.github/workflows/php-sast.yml
+++ b/.github/workflows/php-sast.yml
@@ -44,7 +44,7 @@ jobs:
-->
-
+
From 20419cf366c07d164bd45f543e67fd68ddd534cc Mon Sep 17 00:00:00 2001
From: Adelin Niculae <43118261+adelinn@users.noreply.github.com>
Date: Fri, 16 Jan 2026 19:02:04 +0200
Subject: [PATCH 13/23] test 2.3
---
.github/workflows/php-sast.yml | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/.github/workflows/php-sast.yml b/.github/workflows/php-sast.yml
index 2759a3f..b59116f 100644
--- a/.github/workflows/php-sast.yml
+++ b/.github/workflows/php-sast.yml
@@ -39,12 +39,12 @@ jobs:
-
+
-
+
@@ -74,7 +74,7 @@ jobs:
- name: Install Psalm and Wordpress stubs
run: |
- composer require --dev humanmade/psalm-plugin-wordpress
+ composer require --dev humanmade/psalm-plugin-wordpress ~6.8.0
- name: Run Psalm
uses: adelinn/psalm-github-actions@patch-1
From 6ed91f03cdefa4b6f0e5aaa3bec9cc1e61e99d88 Mon Sep 17 00:00:00 2001
From: Adelin Niculae <43118261+adelinn@users.noreply.github.com>
Date: Fri, 16 Jan 2026 19:31:43 +0200
Subject: [PATCH 14/23] test 2.4
---
.github/workflows/php-sast.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/php-sast.yml b/.github/workflows/php-sast.yml
index b59116f..67a4ab9 100644
--- a/.github/workflows/php-sast.yml
+++ b/.github/workflows/php-sast.yml
@@ -77,7 +77,7 @@ jobs:
composer require --dev humanmade/psalm-plugin-wordpress ~6.8.0
- name: Run Psalm
- uses: adelinn/psalm-github-actions@patch-1
+ uses: psalm/psalm-github-actions@26f175f4d1d9006ea675bb78831ae94126017b07
with:
security_analysis: true
composer_require_dev: true
From 147e848c3864869537a57d1932f7b42fd53e4e28 Mon Sep 17 00:00:00 2001
From: Adelin Niculae <43118261+adelinn@users.noreply.github.com>
Date: Fri, 16 Jan 2026 19:36:06 +0200
Subject: [PATCH 15/23] test 2.5
---
.github/workflows/php-sast.yml | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/.github/workflows/php-sast.yml b/.github/workflows/php-sast.yml
index 67a4ab9..c1283ae 100644
--- a/.github/workflows/php-sast.yml
+++ b/.github/workflows/php-sast.yml
@@ -74,7 +74,8 @@ jobs:
- name: Install Psalm and Wordpress stubs
run: |
- composer require --dev humanmade/psalm-plugin-wordpress ~6.8.0
+ composer require --dev php-stubs/wordpress-stubs ~6.8.0
+ composer require --dev humanmade/psalm-plugin-wordpress
- name: Run Psalm
uses: psalm/psalm-github-actions@26f175f4d1d9006ea675bb78831ae94126017b07
From d6e66dcbce23ba71e6e719f7630cd0c373350b5a Mon Sep 17 00:00:00 2001
From: Adelin Niculae <43118261+adelinn@users.noreply.github.com>
Date: Fri, 16 Jan 2026 19:42:25 +0200
Subject: [PATCH 16/23] upload sarif to security
---
.github/workflows/php-sast.yml | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/.github/workflows/php-sast.yml b/.github/workflows/php-sast.yml
index c1283ae..ae2057d 100644
--- a/.github/workflows/php-sast.yml
+++ b/.github/workflows/php-sast.yml
@@ -82,4 +82,9 @@ jobs:
with:
security_analysis: true
composer_require_dev: true
+ report_file: results.sarif
+ - name: Upload Security Analysis results to GitHub
+ uses: github/codeql-action/upload-sarif@v4
+ with:
+ sarif_file: results.sarif
From bdab542051615c4ed85a47d2bf40ff61532829c0 Mon Sep 17 00:00:00 2001
From: Adelin Niculae <43118261+adelinn@users.noreply.github.com>
Date: Fri, 16 Jan 2026 19:44:52 +0200
Subject: [PATCH 17/23] fix permission for GitHub security
---
.github/workflows/php-sast.yml | 1 +
1 file changed, 1 insertion(+)
diff --git a/.github/workflows/php-sast.yml b/.github/workflows/php-sast.yml
index ae2057d..758a32f 100644
--- a/.github/workflows/php-sast.yml
+++ b/.github/workflows/php-sast.yml
@@ -13,6 +13,7 @@ on:
permissions:
contents: read
+ security-events: write # Required to upload SARIF files
jobs:
scan:
From 2c4c2089cef7626bf96cb691b431ca463270e967 Mon Sep 17 00:00:00 2001
From: Adelin Niculae <43118261+adelinn@users.noreply.github.com>
Date: Fri, 16 Jan 2026 20:11:25 +0200
Subject: [PATCH 18/23] add phpstan as linter to all pipelines
---
...status-same-as-original-plugin-release.yml | 43 +++++++++++++++++-
.../workflows/bcc-login-plugin-release.yml | 45 ++++++++++++++++++-
...e-translations-notifier-plugin-release.yml | 43 +++++++++++++++++-
.../dependencies.stub | 3 ++
plugins/bcc-login/dependencies.stub | 7 +++
.../dependencies.stub | 12 +++++
6 files changed, 147 insertions(+), 6 deletions(-)
create mode 100644 plugins/bcc-keep-translated-posts-status-same-as-original/dependencies.stub
create mode 100644 plugins/bcc-login/dependencies.stub
create mode 100644 plugins/bcc-post-update-translations-notifier/dependencies.stub
diff --git a/.github/workflows/bcc-keep-translated-posts-status-same-as-original-plugin-release.yml b/.github/workflows/bcc-keep-translated-posts-status-same-as-original-plugin-release.yml
index a46c21c..5c1b4b8 100644
--- a/.github/workflows/bcc-keep-translated-posts-status-same-as-original-plugin-release.yml
+++ b/.github/workflows/bcc-keep-translated-posts-status-same-as-original-plugin-release.yml
@@ -25,15 +25,54 @@ on:
# A workflow run is made up of one or more jobs that can run sequentially or in parallel
jobs:
- # This workflow contains a single job called "build"
+ lint:
+ name: Lint PHP - validate code
+ runs-on: ubuntu-latest
+ permissions:
+ contents: read
+
+ defaults:
+ run:
+ shell: bash
+ working-directory: ./plugins/bcc-keep-translated-posts-status-same-as-original
+
+ steps:
+ - uses: actions/checkout@v6
+
+ # This config file gets auto-loaded by PHPStan
+ - name: Set PHPStan config
+ run: |
+ cat <<'EOF' > phpstan.neon
+ parameters:
+ level: 1 # form 0 to 11 where 0 is the loosest and 11 the strictest
+ errorFormat: github
+ paths:
+ - .
+ scanFiles:
+ - dependencies.stub
+ ignoreErrors:
+ - '#Path in require\(\) "build/.+\.asset\.php" is not a file or it does not exist\.#'
+ includes:
+ - vendor/szepeviktor/phpstan-wordpress/extension.neon
+ EOF
+
+ - name: Install PHPStan and Wordpress-stub
+ run: |
+ composer require --dev phpstan/phpstan
+ composer require --dev szepeviktor/phpstan-wordpress
+
+ - name: Run PHPStan
+ run: vendor/bin/phpstan analyse --no-progress
+
build:
+ needs: lint
# The type of runner that the job will run on
runs-on: ubuntu-latest
# Steps represent a sequence of tasks that will be executed as part of the job
steps:
# Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
- - uses: actions/checkout@v2
+ - uses: actions/checkout@v6
- name: Get Package Version
id: version
diff --git a/.github/workflows/bcc-login-plugin-release.yml b/.github/workflows/bcc-login-plugin-release.yml
index 82e4862..66b1669 100644
--- a/.github/workflows/bcc-login-plugin-release.yml
+++ b/.github/workflows/bcc-login-plugin-release.yml
@@ -25,15 +25,56 @@ on:
# A workflow run is made up of one or more jobs that can run sequentially or in parallel
jobs:
- # This workflow contains a single job called "build"
+ lint:
+ name: Lint PHP - validate code
+ runs-on: ubuntu-latest
+ permissions:
+ contents: read
+
+ defaults:
+ run:
+ shell: bash
+ working-directory: ./plugins/bcc-login
+
+ steps:
+ - uses: actions/checkout@v6
+
+ # This config file gets auto-loaded by PHPStan
+ - name: Set PHPStan config
+ run: |
+ cat <<'EOF' > phpstan.neon
+ parameters:
+ level: 1 # form 0 to 11 where 0 is the loosest and 11 the strictest
+ errorFormat: github
+ paths:
+ - .
+ scanFiles:
+ - dependencies.stub
+ bootstrapFiles:
+ - bcc-login.php
+ ignoreErrors:
+ - '#Path in require\(\) "build/.+\.asset\.php" is not a file or it does not exist\.#'
+ includes:
+ - vendor/szepeviktor/phpstan-wordpress/extension.neon
+ EOF
+
+ - name: Install PHPStan and Wordpress-stub
+ run: |
+ composer require --dev phpstan/phpstan
+ composer require --dev szepeviktor/phpstan-wordpress
+
+ - name: Run PHPStan
+ run: vendor/bin/phpstan analyse --no-progress
+
build:
+ needs: lint
# The type of runner that the job will run on
runs-on: ubuntu-latest
# Steps represent a sequence of tasks that will be executed as part of the job
steps:
# Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
- - uses: actions/checkout@v2
+ - uses: actions/checkout@v6
- name: Get Package Version
id: version
diff --git a/.github/workflows/bcc-post-update-translations-notifier-plugin-release.yml b/.github/workflows/bcc-post-update-translations-notifier-plugin-release.yml
index 2c7af9a..1ff250f 100644
--- a/.github/workflows/bcc-post-update-translations-notifier-plugin-release.yml
+++ b/.github/workflows/bcc-post-update-translations-notifier-plugin-release.yml
@@ -25,15 +25,54 @@ on:
# A workflow run is made up of one or more jobs that can run sequentially or in parallel
jobs:
- # This workflow contains a single job called "build"
+ lint:
+ name: Lint PHP - validate code
+ runs-on: ubuntu-latest
+ permissions:
+ contents: read
+
+ defaults:
+ run:
+ shell: bash
+ working-directory: ./plugins/bcc-post-update-translations-notifier
+
+ steps:
+ - uses: actions/checkout@v6
+
+ # This config file gets auto-loaded by PHPStan
+ - name: Set PHPStan config
+ run: |
+ cat <<'EOF' > phpstan.neon
+ parameters:
+ level: 1 # form 0 to 11 where 0 is the loosest and 11 the strictest
+ errorFormat: github
+ paths:
+ - .
+ scanFiles:
+ - dependencies.stub
+ ignoreErrors:
+ - '#Path in require\(\) "build/.+\.asset\.php" is not a file or it does not exist\.#'
+ includes:
+ - vendor/szepeviktor/phpstan-wordpress/extension.neon
+ EOF
+
+ - name: Install PHPStan and Wordpress-stub
+ run: |
+ composer require --dev phpstan/phpstan
+ composer require --dev szepeviktor/phpstan-wordpress
+
+ - name: Run PHPStan
+ run: vendor/bin/phpstan analyse --no-progress
+
build:
+ needs: lint
# The type of runner that the job will run on
runs-on: ubuntu-latest
# Steps represent a sequence of tasks that will be executed as part of the job
steps:
# Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
- - uses: actions/checkout@v2
+ - uses: actions/checkout@v6
- name: Get Package Version
id: version
diff --git a/plugins/bcc-keep-translated-posts-status-same-as-original/dependencies.stub b/plugins/bcc-keep-translated-posts-status-same-as-original/dependencies.stub
new file mode 100644
index 0000000..78b78e4
--- /dev/null
+++ b/plugins/bcc-keep-translated-posts-status-same-as-original/dependencies.stub
@@ -0,0 +1,3 @@
+
Date: Fri, 16 Jan 2026 20:24:50 +0200
Subject: [PATCH 19/23] add exit if used outside wordpress for bcc-login
---
plugins/bcc-login/bcc-login.php | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/plugins/bcc-login/bcc-login.php b/plugins/bcc-login/bcc-login.php
index f87f9f2..16b0e43 100644
--- a/plugins/bcc-login/bcc-login.php
+++ b/plugins/bcc-login/bcc-login.php
@@ -8,6 +8,10 @@
* License: GPL2
*/
+if ( ! defined( 'ABSPATH' ) ) {
+ exit; // Exit if accessed directly.
+}
+
define( 'BCC_LOGIN_PATH', plugin_dir_path( __FILE__ ) );
define( 'BCC_LOGIN_URL', plugin_dir_url( __FILE__ ) );
From 786cbe44f3e329808a8affcd6d35cfbc7682ce9b Mon Sep 17 00:00:00 2001
From: Adelin Niculae <43118261+adelinn@users.noreply.github.com>
Date: Fri, 16 Jan 2026 20:31:44 +0200
Subject: [PATCH 20/23] exclude vendor
---
...-translated-posts-status-same-as-original-plugin-release.yml | 2 ++
.github/workflows/bcc-login-plugin-release.yml | 2 ++
.../bcc-post-update-translations-notifier-plugin-release.yml | 2 ++
3 files changed, 6 insertions(+)
diff --git a/.github/workflows/bcc-keep-translated-posts-status-same-as-original-plugin-release.yml b/.github/workflows/bcc-keep-translated-posts-status-same-as-original-plugin-release.yml
index 5c1b4b8..6c56258 100644
--- a/.github/workflows/bcc-keep-translated-posts-status-same-as-original-plugin-release.yml
+++ b/.github/workflows/bcc-keep-translated-posts-status-same-as-original-plugin-release.yml
@@ -48,6 +48,8 @@ jobs:
errorFormat: github
paths:
- .
+ excludePaths:
+ - vendor
scanFiles:
- dependencies.stub
ignoreErrors:
diff --git a/.github/workflows/bcc-login-plugin-release.yml b/.github/workflows/bcc-login-plugin-release.yml
index 66b1669..1b0dda7 100644
--- a/.github/workflows/bcc-login-plugin-release.yml
+++ b/.github/workflows/bcc-login-plugin-release.yml
@@ -48,6 +48,8 @@ jobs:
errorFormat: github
paths:
- .
+ excludePaths:
+ - vendor
scanFiles:
- dependencies.stub
bootstrapFiles:
diff --git a/.github/workflows/bcc-post-update-translations-notifier-plugin-release.yml b/.github/workflows/bcc-post-update-translations-notifier-plugin-release.yml
index 1ff250f..56555de 100644
--- a/.github/workflows/bcc-post-update-translations-notifier-plugin-release.yml
+++ b/.github/workflows/bcc-post-update-translations-notifier-plugin-release.yml
@@ -48,6 +48,8 @@ jobs:
errorFormat: github
paths:
- .
+ excludePaths:
+ - vendor
scanFiles:
- dependencies.stub
ignoreErrors:
From 1702f0c980a935062c2f3c340c7c237c714b0973 Mon Sep 17 00:00:00 2001
From: Adelin Niculae <43118261+adelinn@users.noreply.github.com>
Date: Fri, 16 Jan 2026 20:34:37 +0200
Subject: [PATCH 21/23] skip ignore errors config when not needed
---
...anslated-posts-status-same-as-original-plugin-release.yml | 5 +++--
.../bcc-post-update-translations-notifier-plugin-release.yml | 5 +++--
2 files changed, 6 insertions(+), 4 deletions(-)
diff --git a/.github/workflows/bcc-keep-translated-posts-status-same-as-original-plugin-release.yml b/.github/workflows/bcc-keep-translated-posts-status-same-as-original-plugin-release.yml
index 6c56258..63d0ad2 100644
--- a/.github/workflows/bcc-keep-translated-posts-status-same-as-original-plugin-release.yml
+++ b/.github/workflows/bcc-keep-translated-posts-status-same-as-original-plugin-release.yml
@@ -52,8 +52,9 @@ jobs:
- vendor
scanFiles:
- dependencies.stub
- ignoreErrors:
- - '#Path in require\(\) "build/.+\.asset\.php" is not a file or it does not exist\.#'
+ # One can ignore errors like this
+ # ignoreErrors:
+ # - '#Path in require\(\) "build/.+\.asset\.php" is not a file or it does not exist\.#'
includes:
- vendor/szepeviktor/phpstan-wordpress/extension.neon
EOF
diff --git a/.github/workflows/bcc-post-update-translations-notifier-plugin-release.yml b/.github/workflows/bcc-post-update-translations-notifier-plugin-release.yml
index 56555de..89d6798 100644
--- a/.github/workflows/bcc-post-update-translations-notifier-plugin-release.yml
+++ b/.github/workflows/bcc-post-update-translations-notifier-plugin-release.yml
@@ -52,8 +52,9 @@ jobs:
- vendor
scanFiles:
- dependencies.stub
- ignoreErrors:
- - '#Path in require\(\) "build/.+\.asset\.php" is not a file or it does not exist\.#'
+ # One can ignore errors like this
+ # ignoreErrors:
+ # - '#Path in require\(\) "build/.+\.asset\.php" is not a file or it does not exist\.#'
includes:
- vendor/szepeviktor/phpstan-wordpress/extension.neon
EOF
From fbc71550be1d48abe99fe894df30ef7a4f791fc2 Mon Sep 17 00:00:00 2001
From: Adelin Niculae <43118261+adelinn@users.noreply.github.com>
Date: Fri, 16 Jan 2026 20:42:36 +0200
Subject: [PATCH 22/23] fix mistake in stub file
---
plugins/bcc-login/dependencies.stub | 1 -
1 file changed, 1 deletion(-)
diff --git a/plugins/bcc-login/dependencies.stub b/plugins/bcc-login/dependencies.stub
index 6361e8e..10b8b3a 100644
--- a/plugins/bcc-login/dependencies.stub
+++ b/plugins/bcc-login/dependencies.stub
@@ -4,4 +4,3 @@
* @return string
*/
function get_culture() {};
-EOF
\ No newline at end of file
From 353c8c5081c675518418335a3e83d127028563ed Mon Sep 17 00:00:00 2001
From: bcc-bot <>
Date: Fri, 16 Jan 2026 18:44:44 +0000
Subject: [PATCH 23/23] Released bcc-login plugin v1.1.433
---
plugins/bcc-login/bcc-login.php | 4 ++--
plugins/bcc-login/package.json | 4 ++--
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/plugins/bcc-login/bcc-login.php b/plugins/bcc-login/bcc-login.php
index 16b0e43..6a6ad14 100644
--- a/plugins/bcc-login/bcc-login.php
+++ b/plugins/bcc-login/bcc-login.php
@@ -3,7 +3,7 @@
/**
* Plugin Name: BCC Login
* Description: Integration to BCC's Login System.
- * Version: 1.1.418
+ * Version: 1.1.433
* Author: BCC IT
* License: GPL2
*/
@@ -34,7 +34,7 @@ class BCC_Login {
* The plugin instance.
*/
private static $instance = null;
- private $plugin_version = "1.1.418";
+ private $plugin_version = "1.1.433";
private $plugin;
private $plugin_slug;
private $plugin_name = "BCC Login";
diff --git a/plugins/bcc-login/package.json b/plugins/bcc-login/package.json
index fd0e5c7..b64c4a5 100644
--- a/plugins/bcc-login/package.json
+++ b/plugins/bcc-login/package.json
@@ -1,14 +1,14 @@
{
"private": true,
"name": "bcc-login",
- "version": "1.1.418",
+ "version": "1.1.433",
"slug": "bcc-login",
"author": "BCC Code",
"author_profile": "https://github.com/bcc-code",
"requires": "3.0",
"tested": "5.8",
"requires_php": "5.3",
- "last_updated": "2026-01-06 13:03:11",
+ "last_updated": "2026-01-16 18:44:44",
"sections": {
"description": "BCC Login",
"installation": "Add OIDC_CLIENT_ID and OIDC_CLIENT_SECRET as environment variables or constants in wp-config.php, and active plugin",