Release/2.0.0 - Upgrade to Next 16

.changeset/config.json

@@ -7,18 +7,20 @@
   "access": "restricted",
   "baseBranch": "trunk",
   "updateInternalDependencies": "patch",
-  "privatePackages": { "version": true, "tag": false },
+  "privatePackages": {
+    "version": true,
+    "tag": false
+  },
   "ignore": [
     "@10up/wp-nextjs",
-    "@10up/wp-nextjs-app", 
+    "@10up/wp-nextjs-app",
     "@10up/wp-nextjs-epio",
     "@10up/wp-polylang-nextjs-app",
     "@10up/wp-multisite-nextjs-app",
     "@10up/wp-multisite-nextjs",
     "@10up/wp-multisite-i18n-nextjs",
     "@headstartwp/vite-react-test",
     "@10up/wp-nextjs-universal-blocks",
-    "@headstartwp/component-library",
-    "tenup-theme"
+    "@headstartwp/component-library"
   ]
-}
+}

.changeset/core-primitive-param-types.md

@@ -0,0 +1,15 @@
+---
+'@headstartwp/core': minor
+---
+
+Fix boxed object types in `PostParams`.
+
+`SinglePostFetchStrategy`'s `id` and `revision` params were typed as `Number`
+and `Boolean` (the boxed object types) rather than `number` and `boolean`.
+Passing primitives already worked, so this is a type-level fix for nearly all
+consumers — but anyone who explicitly annotated a variable as `Number` will need
+to switch to `number`.
+
+Note that `params.id` of `0` is now correctly falsy in the strategy's internal
+truthiness guards; `0` was never a valid post ID, so this should not change
+runtime behavior in practice.

.changeset/deprecate-linaria-support.md

@@ -0,0 +1,7 @@
+---
+'@headstartwp/next': minor
+---
+
+Deprecate the built-in linaria/wyw-in-js webpack integration in `withHeadstartWPConfig`.
+
+The loader still runs when `@linaria/webpack-loader` or `@wyw-in-js/webpack-loader` is installed, but it now logs a deprecation warning and will be removed in the next major version. HeadstartWP no longer prescribes a styling solution — the example projects use plain CSS, and any styling approach (CSS Modules, Tailwind, CSS-in-JS) works. If you want to keep using linaria, configure the loader yourself via `nextConfig.webpack`.

.changeset/nextjs-16-turbopack.md

@@ -0,0 +1,33 @@
+---
+'@headstartwp/next': major
+'@10up/next-redis-cache-provider': major
+'@headstartwp/block-primitives': major
+---
+
+Upgrade to Next.js 16 and drop webpack in favour of Turbopack.
+
+`@headstartwp/next` now requires Next.js >= 16 and React >= 18.2 (Next.js 16's own floor), and
+`@headstartwp/block-primitives` requires React >= 18.2. React 18 remains supported, so the Pages
+Router continues to work.
+
+The 1.x line stays available for projects that can't move yet: `@headstartwp/next@1.x` supports
+Next.js 15 and receives bug and security fixes, published under the `v1` npm dist-tag.
+
+**Breaking changes**
+
+- The webpack `ModifySourcePlugin` has been removed. The headstartwp config is now injected
+  through a Turbopack loader rule (`turbopack.rules`) emitted by `withHeadstartWPConfig`,
+  because Next.js 16 builds with Turbopack by default and fails when a webpack config is
+  present. Building with `--webpack` is no longer supported.
+- The built-in linaria / wyw-in-js integration has been removed along with the webpack config.
+- `withHeadstartWPConfig` always emits `images.remotePatterns`; the Next.js < 14
+  `images.domains` fallback is gone.
+- The `middleware` convention is deprecated in Next.js 16 — rename `middleware.ts` to
+  `proxy.ts` and rename the exported `middleware` function to `proxy`. Note that `proxy` always
+  runs on the Node.js runtime.
+- The `eslint` option was removed from the Next.js config; `next build` no longer lints.
+
+**Fixes**
+
+- The injected config bootstrap is now inserted after the directive prologue, so a
+  `'use client'` / `'use server'` directive at the top of a layout or route is preserved.

.changeset/wordpress-7-1-1-and-php-82.md

@@ -0,0 +1,14 @@
+---
+'@headstartwp/headstartwp': minor
+---
+
+Raise the PHP floor to 8.2 and pin the test environment to WordPress 7.1.1.
+
+`composer.json` now requires `php >=8.2` (was `>=8`), and the plugin header
+declares `Requires PHP: 8.2` so WordPress blocks activation on older PHP rather
+than fataling. PHPUnit runs against PHP 8.2 and 8.4.
+
+`.wp-env.json` pins `core` to `WordPress/WordPress#7.1.1`. It previously
+tracked whatever the latest WordPress release happened to be, which meant core
+changes could break CI on unrelated PRs. **After pulling this branch, run
+`wp-env destroy` once** so your local container picks up the pinned version.

.changeset/wordpress-7-baseline.md

@@ -0,0 +1,16 @@
+---
+'@headstartwp/block-primitives': major
+---
+
+Target the WordPress 7 package generation.
+
+`@wordpress/*` peer dependencies move to the WP 7 line (`block-editor@^15.13.2`,
+`data@^10.40.1`, `components@^32.2.1`, `blob@^4.40.1`). Consumers on the WP 6.5
+generation will need to upgrade alongside this release.
+
+The `@types/wordpress__block-editor` and `@types/wordpress__block-library`
+dependencies are removed — the WP 7 packages ship their own types, and the
+DefinitelyTyped packages pulled a conflicting older `@wordpress/components` into
+the tree. `DropdownProps` is now derived from the public `Dropdown` component
+rather than a deep `build-types/` import, which `@wordpress/components@32` no
+longer exposes through its `exports` map.

.github/workflows/build-test.yml

@@ -5,20 +5,21 @@ permissions:
 
 on: [pull_request]
 
+concurrency:
+  group: build-test-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   build-test:
+    name: build-test (${{ matrix.os }})
     runs-on: ${{ matrix.os }}
     strategy:
-      # This ensures only one combination runs at a time to avoid rate limiting
-      max-parallel: 1
+      # One leg failing should not cancel the other - we want both results.
+      fail-fast: false
       matrix:
+        # Node 24 only: workspace packages declare engines.node >=24.0.0
+        # and the repo runs with engineStrict, so older majors cannot install.
         os: [ubuntu-latest, windows-latest]
-        node-version: [18, 20, 22]
-        exclude:
-          - os: windows-latest
-            node-version: 18
-          - os: windows-latest
-            node-version: 20   
 
     steps:
       - name: Configure Git line endings
@@ -28,25 +29,24 @@ jobs:
           git config --global core.eol lf
 
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
-      - name: Setup Node ${{ matrix.node-version }}
-        uses: actions/setup-node@v3
+      - name: Setup Node
+        uses: actions/setup-node@v4
         with:
-          node-version: ${{ matrix.node-version }}
+          node-version: 24
+          cache: npm
+
+      - name: Ensure npm satisfies devEngines (>=11.6.0)
+        run: npm i -g npm@11
 
-      - name: Setup npm cache
-        uses: actions/cache@v4
-        with:
-          path: ~/.npm
-          key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
-          restore-keys: |
-            ${{ runner.os }}-node-
       - name: Install dependencies
-        run: npm install
+        run: npm ci
+
       - name: Build Projects (Windows)
         if: matrix.os == 'windows-latest'
         run: npm run build:wpnextjs:app && npm run build:wpnextjs
+
       - name: Build Projects
         if: matrix.os != 'windows-latest'
-        run: npm run build
+        run: npm run build

.github/workflows/deploy-docs.yml

@@ -16,7 +16,7 @@ jobs:
       - uses: actions/checkout@v3
       - uses: actions/setup-node@v3
         with:
-          node-version: 20
+          node-version: 24
           cache: npm
       - name: Install dependencies
         run: npm install

.github/workflows/lint.yml

@@ -0,0 +1,34 @@
+name: lint
+
+permissions:
+  contents: read
+
+on: [pull_request]
+
+concurrency:
+  group: lint-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  lint:
+    name: lint
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 24
+          cache: npm
+
+      - name: Ensure npm satisfies devEngines (>=11.6.0)
+        run: npm i -g npm@11
+
+      - name: Install dependencies
+        run: npm ci && npm run build:packages
+
+      - name: Run oxlint (vp lint)
+        run: npm run lint