3.3.6

.github/dependabot.yml

@@ -0,0 +1,16 @@
+version: 2
+updates:
+  - package-ecosystem: composer
+    directory: /
+    schedule:
+      interval: weekly
+    target-branch: develop
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: weekly
+    target-branch: develop
+    groups:
+      wordpress:
+        patterns:
+          - "@wordpress/*"

.github/workflows/deploy-to-wp-org.yml

@@ -113,6 +113,15 @@ jobs:
           SVN_USERNAME: ${{ secrets.SVN_USERNAME }}
           SVN_PASSWORD: ${{ secrets.SVN_PASSWORD }}
 
+      # Makes the zip downloadable from the run's Artifacts panel regardless of trigger, so
+      # manual/dry-run dispatches can be inspected without publishing a release.
+      - name: Upload build artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: ${{ env.PLUGIN_VERSION }}.zip
+          path: ${{ steps.deploy.outputs.zip-path }}
+          retention-days: 7
+
       - name: Upload release asset
         if: github.event_name == 'release'
         uses: softprops/action-gh-release@v2

.wp-env/mu-plugins/analytics-capture.php

@@ -0,0 +1,94 @@
+<?php
+/**
+ * Analytics egress capture — local/e2e dev helper mu-plugin.
+ *
+ * Intercepts outgoing requests to any Cloudinary analytics-api.cloudinary.com
+ * endpoint — the custom-events collector AND the older deactivation-reason
+ * collector, both on the same host — and appends each payload as a JSONL
+ * entry to a log file, so e2e tests and manual QA can assert on emitted
+ * events. The request is fully preempted with a synthetic response: earlier
+ * versions of this mu-plugin only logged the payload and let the request
+ * proceed, which meant every local/CI test run was quietly leaking synthetic
+ * events (and deactivation "feedback") into the real production collector.
+ *
+ * @package Cloudinary
+ */
+
+defined( 'ABSPATH' ) || exit;
+
+/**
+ * Returns the path to the capture log file.
+ *
+ * @return string
+ */
+function cld_analytics_capture_log_path() {
+	$upload = wp_upload_dir();
+
+	return $upload['basedir'] . '/analytics-capture.log';
+}
+
+add_filter( 'pre_http_request', 'cld_analytics_capture_intercept', 10, 3 );
+
+/**
+ * Logs outgoing analytics/deactivation-reason requests and preempts them
+ * with a synthetic success response, so nothing actually reaches the real
+ * collector during local dev or CI runs.
+ *
+ * @param false|array|WP_Error $preempt     Whether to preempt the request.
+ * @param array                $parsed_args Parsed request arguments.
+ * @param string               $url         The request URL.
+ *
+ * @return false|array|WP_Error
+ */
+function cld_analytics_capture_intercept( $preempt, $parsed_args, $url ) {
+	if ( false === strpos( $url, 'analytics-api.cloudinary.com' ) ) {
+		return $preempt;
+	}
+
+	$body    = isset( $parsed_args['body'] ) ? $parsed_args['body'] : '';
+	$decoded = json_decode( $body, true );
+
+	file_put_contents( // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_file_put_contents, WordPressVIPMinimum.Functions.RestrictedFunctions.file_ops_file_put_contents
+		cld_analytics_capture_log_path(),
+		wp_json_encode( null !== $decoded ? $decoded : $body ) . "\n",
+		FILE_APPEND | LOCK_EX
+	);
+
+	return array(
+		'headers'  => array(),
+		'body'     => '',
+		'response' => array(
+			'code'    => 200,
+			'message' => 'OK',
+		),
+		'cookies'  => array(),
+		'filename' => null,
+	);
+}
+
+/**
+ * Prints the captured analytics events, one JSON object per line.
+ *
+ * ## OPTIONS
+ *
+ * [--clear]
+ * : Empty the log after printing it.
+ *
+ * @param array $args       Positional arguments.
+ * @param array $assoc_args Associative arguments.
+ */
+function cld_analytics_capture_wpcli_command( $args, $assoc_args ) {
+	$log_file = cld_analytics_capture_log_path();
+
+	if ( file_exists( $log_file ) ) {
+		WP_CLI::line( file_get_contents( $log_file ) ); // phpcs:ignore WordPress.WP.AlternativeFunctions.file_get_contents_file_get_contents, WordPressVIPMinimum.Performance.FetchingRemoteData.FileGetContentsUnknown
+	}
+
+	if ( isset( $assoc_args['clear'] ) ) {
+		file_put_contents( $log_file, '' ); // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_file_put_contents, WordPressVIPMinimum.Functions.RestrictedFunctions.file_ops_file_put_contents
+	}
+}
+
+if ( defined( 'WP_CLI' ) && WP_CLI ) {
+	WP_CLI::add_command( 'cloudinary analytics-events', 'cld_analytics_capture_wpcli_command' );
+}

js/block-editor.asset.php

@@ -1 +1 @@
-<?php return array('dependencies' => array('wp-api-fetch', 'wp-components', 'wp-data', 'wp-element', 'wp-i18n'), 'version' => '558667256f0d3fc475cd');
+<?php return array('dependencies' => array('wp-api-fetch', 'wp-block-editor', 'wp-components', 'wp-data', 'wp-element', 'wp-hooks', 'wp-i18n'), 'version' => '58afb0a9ee7fa6faecd7');

js/deactivate.asset.php

@@ -1 +1 @@
-<?php return array('dependencies' => array(), 'version' => '41ae783fa52f94bc2630');
+<?php return array('dependencies' => array('wp-api-fetch'), 'version' => '9c563a4d047b892cd84e');