Merge branch 'catch3' into default3

.codeclimate.yml

@@ -0,0 +1,21 @@
+---
+engines:
+  duplication:
+    enabled: true
+    config:
+      languages:
+      - javascript
+      - php
+  fixme:
+    enabled: true
+  phpcodesniffer:
+    enabled: true
+    config:
+      standard: "phpcs.xml"
+ratings:
+  paths:
+  - "**.js"
+  - "**.php"
+exclude_paths:
+  - web/app/themes/mitlib-child/navwalker.php
+  - web/app/themes/mitlib-parent/navwalker.php

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,42 @@
+## Developer
+
+### Stylesheets
+
+- [ ] Any theme or plugin whose stylesheets have changed has had its version
+      string incremented.
+
+### Secrets
+
+- [ ] All new secrets have been added to Pantheon tiers
+- [ ] Relevant secrets have been updated in Github Actions
+- [ ] All new secrets documented in README
+
+### Documentation
+
+- [ ] Project documentation has been updated
+- [ ] No documentation changes are needed
+
+### Accessibility
+
+- [ ] ANDI or Wave has been run in accordance to
+      [our guide](https://mitlibraries.github.io/guides/basics/a11y.html) and
+      all issues introduced by these changes have been resolved or opened as new
+      issues (link to those issues in the Pull Request details above)
+
+### Stakeholder approval
+
+- [ ] Stakeholder approval has been confirmed
+- [ ] Stakeholder approval is not needed
+
+### Dependencies
+
+YES | NO dependencies are updated
+
+
+## Code Reviewer
+
+- [ ] The commit message is clear and follows our guidelines
+      (not just this pull request message)
+- [ ] The changes have been verified
+- [ ] The documentation has been updated or is unnecessary
+- [ ] New dependencies are appropriate or there were no changes

.github/workflows/ci.yml

@@ -6,8 +6,9 @@ jobs:
   build:
     runs-on: ubuntu-latest
     strategy:
+      fail-fast: false
       matrix:
-        php-version: ['7.4', '8.0', '8.1']
+        php-version: ['8.0', '8.1', '8.2']
 
     steps:
     - uses: actions/checkout@v2
@@ -27,11 +28,17 @@ jobs:
         key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
         restore-keys: ${{ runner.os }}-composer-
 
+    - name: Check PHP syntax
+      run: composer syntax
+
     - name: Check Composer lock file is up to date
       run: composer validate --no-check-all
 
     - name: Install Composer dependencies
       run: composer install --no-progress --prefer-dist --optimize-autoloader
+      env:
+        ACF_PRO_KEY: ${{ secrets.ACF_PRO_KEY }}
+        COMPOSER_AUTH: ${{ secrets.COMPOSER_AUTH }}
 
     - name: Run tests
-      run: composer test
+      run: composer security

.github/workflows/deploy.yml

@@ -0,0 +1,37 @@
+name: Deploy
+
+on:
+  push:
+    branches:
+      - master
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+        with:
+          fetch-depth: 0
+
+      - name: Configure git environment
+        run: |
+          git config user.name "MIT Libraries"
+          git config user.email engx-lib@mit.edu
+
+      - name: Install SSH key
+        uses: shimataro/ssh-key-action@v2
+        with:
+          key: ${{ secrets.DEPLOY_SSH_PRIVATE_KEY }}
+          known_hosts: ${{ secrets.DEPLOY_SSH_KNOWN_HOSTS }}
+
+      - name: Add Pantheon remote
+        run: |
+          git remote add pantheon ${{ secrets.PANTHEON_REPOSITORY }}
+
+      - name: Fetch from Pantheon
+        run: |
+          git fetch pantheon
+
+      - name: Git push
+        run: |
+          git push pantheon master

.gitignore

@@ -13,6 +13,13 @@ web/app/uploads/*
 !web/app/uploads/.gitkeep
 web/app/cache/*
 
+# Ordinarily this path would not exist - and it does not when I inspect any
+# multidev on Pantheon. However, after pulling content locally using "lando
+# pull", this path gets populated with a lot of uploaded files. So we are
+# ignoring it here to prevent accidentally committing over 1,000 images.
+# Again.
+web/wp-content
+
 # WordPress is installed in web/wp so that it can be fully managed by Composer.
 # This ensures that the WordPress directory is clean and doesn't contain any
 # files other than those that come with the WordPress package.
@@ -63,6 +70,8 @@ wp-cli.local.yml
 # mu-plugins is version controlled. Exceptions to this rule are made to specific
 # files managed by Composer.
 web/app/mu-plugins/*/
+!web/app/mu-plugins/mitlib-post
+!web/app/mu-plugins/mitlib-secrets-widget
 
 # Plugins
 # Ignore the plugins directory by default. WordPress plugins should be managed
@@ -72,6 +81,25 @@ web/app/mu-plugins/*/
 # !web/app/plugins/my-plugin
 web/app/plugins/*
 !web/app/plugins/.gitkeep
+!web/app/plugins/mitlib-analytics
+!web/app/plugins/mitlib-cf7-elements
+!web/app/plugins/mitlib-home-page-news
+!web/app/plugins/mitlib-multisearch-widget
+!web/app/plugins/mitlib-pending-posts
+!web/app/plugins/mitlib-plugin-canary
+!web/app/plugins/mitlib-post-bibliotechs
+!web/app/plugins/mitlib-post-events
+!web/app/plugins/mitlib-post-exhibits
+!web/app/plugins/mitlib-post-experts
+!web/app/plugins/mitlib-post-interviewees
+!web/app/plugins/mitlib-post-interviews
+!web/app/plugins/mitlib-post-locations
+!web/app/plugins/mitlib-post-site-akdc
+!web/app/plugins/mitlib-post-site-news
+!web/app/plugins/mitlib-post-site-parent
+!web/app/plugins/mitlib-post-spotlights
+!web/app/plugins/mitlib-pull-events
+!web/app/plugins/mitlib-pull-hours
 
 # Themes
 # We don't ignore all themes by default as these are most commonly where a
@@ -154,3 +182,8 @@ Thumbs.db
 # SASS #
 ##########
 .sass-cache
+
+# MISC #
+##########
+.vscode
+auth.json

.lando.yml

@@ -0,0 +1,13 @@
+name: mitlib-wp-network
+recipe: pantheon
+config:
+  framework: wordpress_network
+  site: mitlib-wp-network
+  id: a43fbf9e-5069-4993-8c78-3561fb284d97
+tooling:
+  push: disabled
+  pull:
+    description: Pull should not ask about code
+    options:
+      code:
+        default: none