Main to Develop sync after plugin release v1.5.0

[KMchaudhary]

• Issue: https://github.com/rtCamp/godam-core/issues/653

[Copilot]

Pull request overview

This pull request syncs the main branch with the develop branch following the v1.5.0 plugin release. The changes include version updates, contributor list updates, GitHub Actions workflow improvements, and the addition of a Dependabot configuration.

Changes:

• Updated plugin version from 1.4.9 to 1.5.0 in README.md
• Added new contributors (opurockey, whiteshadow01, ahmarzaidi) to the contributors list
• Upgraded GitHub Actions dependencies (checkout, setup-node, upload-artifact, action-gh-release)
• Added permissions declarations to workflow files for better security
• Introduced Dependabot configuration for automated dependency updates

Reviewed changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
README.md	Updated stable tag to 1.5.0 and expanded contributors list with three new contributors
.github/workflows/release_on_tag.yml	Upgraded action versions and added explicit permissions for contents
.github/workflows/plugin_check_on_pull_request.yml	Upgraded actions/checkout and actions/setup-node to v6
.github/workflows/phpcs_on_pull_request.yml	Upgraded actions/checkout to v6 and added permissions declarations
.github/workflows/deploy_on_push.yml	Upgraded actions/checkout to v6 and added read permissions
.github/dependabot.yml	Added comprehensive Dependabot configuration for multiple package ecosystems

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

The dependabot configuration includes package ecosystems (pip, bundler, gomod) that don't appear to exist in this repository. Based on the project structure, only npm, composer, github-actions, and potentially docker ecosystems are relevant. Including non-existent package ecosystems may cause unnecessary dependabot errors or confusion. Consider removing the pip, bundler, and gomod entries unless there are plans to add these dependencies.

Suggested change

	- package-ecosystem: "pip"
	directory: "/"
	schedule:
	interval: "daily"
	- package-ecosystem: "bundler"
	directory: "/"
	schedule:
	interval: "daily"
	- package-ecosystem: "gomod"
	directory: "/"
	schedule:
	interval: "daily"

[Copilot]

The dependabot configuration includes the terraform package ecosystem which doesn't appear to exist in this repository. Based on the project structure, this repository is a WordPress plugin using PHP (composer), JavaScript (npm), and GitHub Actions. Consider removing the terraform entry unless there are plans to add Terraform configurations.

Suggested change

	- package-ecosystem: "terraform"
	directory: "/"
	schedule:
	interval: "daily"

[Copilot]

The dependabot configuration includes the docker package ecosystem which doesn't appear to exist in this repository. No Dockerfile or docker-compose files were found in the project. Consider removing the docker entry unless there are plans to add Docker configurations.

Suggested change

	- package-ecosystem: "docker"
	directory: "/"
	schedule:
	interval: "monthly"

[mi5t4n]

LGTM - Just a sync

[github-actions]

🔍 WordPress Plugin Check Report

⚠️ Status: Passed with warnings

📊 Report

🎯 Total Issues	❌ Errors	⚠️ Warnings
17	0	17

---

⚠️ Warnings (17)

📁 composer.json (1 warning)

📍 Line	🔖 Check	💬 Message
0	missing_composer_json_file	The "/vendor" directory using composer exists, but "composer.json" file is missing.

📁 readme.txt (2 warnings)

📍 Line	🔖 Check	💬 Message
0	mismatched_plugin_name	Plugin name "GoDAM - Organize WordPress Media Library & File Manager with Unlimited Folders for Images, Videos & more" is different from the name declared in plugin header "GoDAM".
0	trademarked_term	The plugin name includes a restricted term. Your chosen plugin name - "GoDAM - Organize WordPress Media Library & File Manager with Unlimited Folders for Images, Videos & more" - contains the restricted term "wordpress" which cannot be used at all in your plugin name.

📁 inc/classes/media-library/class-media-folder-utils.php (1 warning)

📍 Line	🔖 Check	💬 Message
91	PluginCheck.Security.DirectDB.UnescapedDBParameter	Unescaped parameter $where_clause used in $wpdb->get_var($wpdb->prepare(\n\t\t\t\t"\n\t\t\tSELECT COUNT(DISTINCT p.ID)\n\t\t\tFROM {$wpdb->posts} p\n\t\t\tINNER JOIN {$wpdb->term_relationships} tr ON p.ID = tr.object_id\n\t\t\tINNER JOIN {$wpdb->term_taxonomy} tt ON tr.term_taxonomy_id = tt.term_taxonomy_id\n\t\t\tWHERE {$where_clause}\n\t\t",\n\t\t\t\t$query_params\n\t\t\t))\n$where_clause assigned unsafely at line 82:\n $where_clause .= ' AND p.post_mime_type LIKE %s'\n$query_params[] used without escaping.\n$mime_type used without escaping.

📁 assets/build/css/main.css (1 warning)

📍 Line	🔖 Check	💬 Message
0	EnqueuedStylesScope	This style is being loaded in all contexts.

📁 assets/src/libs/analytics.min.js (6 warnings)

📍 Line	🔖 Check	💬 Message
0	EnqueuedScriptsScope	This script is being loaded in all frontend contexts.
0	NonBlockingScripts.NoStrategy	This script on http://localhost:8880 (with handle analytics-library) is loaded in the footer. Consider a defer or async script loading strategy instead.
0	NonBlockingScripts.NoStrategy	This script on http://localhost:8880/?p=4 (with handle analytics-library) is loaded in the footer. Consider a defer or async script loading strategy instead.
0	NonBlockingScripts.NoStrategy	This script on http://localhost:8880/?page_id=5 (with handle analytics-library) is loaded in the footer. Consider a defer or async script loading strategy instead.
0	NonBlockingScripts.NoStrategy	This script on http://localhost:8880/?attachment_id=6 (with handle analytics-library) is loaded in the footer. Consider a defer or async script loading strategy instead.
0	NonBlockingScripts.NoStrategy	This script on http://localhost:8880/?godam-video=demo-godam-video-post (with handle analytics-library) is loaded in the footer. Consider a defer or async script loading strategy instead.

📁 assets/build/js/main.min.js (6 warnings)

📍 Line	🔖 Check	💬 Message
0	EnqueuedScriptsScope	This script is being loaded in all frontend contexts.
0	NonBlockingScripts.NoStrategy	This script on http://localhost:8880 (with handle rtgodam-script) is loaded in the footer. Consider a defer or async script loading strategy instead.
0	NonBlockingScripts.NoStrategy	This script on http://localhost:8880/?p=4 (with handle rtgodam-script) is loaded in the footer. Consider a defer or async script loading strategy instead.
0	NonBlockingScripts.NoStrategy	This script on http://localhost:8880/?page_id=5 (with handle rtgodam-script) is loaded in the footer. Consider a defer or async script loading strategy instead.
0	NonBlockingScripts.NoStrategy	This script on http://localhost:8880/?attachment_id=6 (with handle rtgodam-script) is loaded in the footer. Consider a defer or async script loading strategy instead.
0	NonBlockingScripts.NoStrategy	This script on http://localhost:8880/?godam-video=demo-godam-video-post (with handle rtgodam-script) is loaded in the footer. Consider a defer or async script loading strategy instead.

---

🤖 Generated by WordPress Plugin Check Action • Learn more about Plugin Check