Move the wordpress-configs pins to its current trunk

.github/workflows/audit.yml

@@ -16,6 +16,6 @@ jobs:
   audit:
     name: Audit
     # npm gate audits production deps only — the dev-tooling graph (wp-scripts/playwright trees) is advisory via dependabot alerts.
-    uses: ahegyes/wordpress-configs/.github/workflows/reusable-supply-chain-audit.yml@3cbd985255e76f8026644ccdee5be0b2b2da312b
+    uses: ahegyes/wordpress-configs/.github/workflows/reusable-supply-chain-audit.yml@f420c38db593b332d58a481eb0f008f8d36d0cc4
     with:
       npm-audit-flags: '--omit=dev --audit-level=high'

.github/workflows/codeql.yml

@@ -20,4 +20,4 @@ jobs:
       actions: read
       contents: read
       security-events: write
-    uses: ahegyes/wordpress-configs/.github/workflows/reusable-codeql.yml@3cbd985255e76f8026644ccdee5be0b2b2da312b
+    uses: ahegyes/wordpress-configs/.github/workflows/reusable-codeql.yml@f420c38db593b332d58a481eb0f008f8d36d0cc4

.github/workflows/quality.yml

@@ -11,20 +11,20 @@ permissions:
 jobs:
   lint-php:
     name: PHP Lint
-    uses: ahegyes/wordpress-configs/.github/workflows/reusable-php-lint.yml@3cbd985255e76f8026644ccdee5be0b2b2da312b
+    uses: ahegyes/wordpress-configs/.github/workflows/reusable-php-lint.yml@f420c38db593b332d58a481eb0f008f8d36d0cc4
     with:
       php-version: '8.5'
       scripts: '["lint:php:phpcs", "lint:php:phpcs:tests", "lint:php:phpstan"]'
 
   lint-scripts-styles:
     name: Scripts and styles lint
-    uses: ahegyes/wordpress-configs/.github/workflows/reusable-scripts-styles-lint.yml@3cbd985255e76f8026644ccdee5be0b2b2da312b
+    uses: ahegyes/wordpress-configs/.github/workflows/reusable-scripts-styles-lint.yml@f420c38db593b332d58a481eb0f008f8d36d0cc4
     with:
       scripts: '["lint:scripts", "lint:styles", "lint:types"]'
 
   block-json:
     name: block.json schema
-    uses: ahegyes/wordpress-configs/.github/workflows/reusable-block-json-check.yml@3cbd985255e76f8026644ccdee5be0b2b2da312b
+    uses: ahegyes/wordpress-configs/.github/workflows/reusable-block-json-check.yml@f420c38db593b332d58a481eb0f008f8d36d0cc4
 
   slug:
     name: Plugin slug
@@ -50,7 +50,7 @@ jobs:
   php-syntax:
     name: PHP syntax
     needs: slug
-    uses: ahegyes/wordpress-configs/.github/workflows/reusable-php-syntax-check.yml@3cbd985255e76f8026644ccdee5be0b2b2da312b
+    uses: ahegyes/wordpress-configs/.github/workflows/reusable-php-syntax-check.yml@f420c38db593b332d58a481eb0f008f8d36d0cc4
     with:
       php-versions: '["7.4"]'
       paths: ${{ format('["{0}.php", "uninstall.php", "includes"]', needs.slug.outputs.slug) }}

.github/workflows/release.yml

@@ -42,7 +42,7 @@ jobs:
     permissions:
       actions: read
       contents: write
-    uses: ahegyes/wordpress-configs/.github/workflows/reusable-release.yml@3cbd985255e76f8026644ccdee5be0b2b2da312b
+    uses: ahegyes/wordpress-configs/.github/workflows/reusable-release.yml@f420c38db593b332d58a481eb0f008f8d36d0cc4
     with:
       project-path: '.'
       plugin-slug: ${{ needs.slug.outputs.slug }}

.github/workflows/tests-nightly.yml

@@ -12,7 +12,7 @@ permissions:
 jobs:
   integration:
     name: Integration
-    uses: ahegyes/wordpress-configs/.github/workflows/reusable-phpunit.yml@3cbd985255e76f8026644ccdee5be0b2b2da312b
+    uses: ahegyes/wordpress-configs/.github/workflows/reusable-phpunit.yml@f420c38db593b332d58a481eb0f008f8d36d0cc4
     with:
       php-version: '8.5'
       wp-env-core: 'https://wordpress.org/nightly-builds/wordpress-latest.zip'
@@ -21,7 +21,7 @@ jobs:
 
   e2e:
     name: E2E
-    uses: ahegyes/wordpress-configs/.github/workflows/reusable-playwright-e2e.yml@3cbd985255e76f8026644ccdee5be0b2b2da312b
+    uses: ahegyes/wordpress-configs/.github/workflows/reusable-playwright-e2e.yml@f420c38db593b332d58a481eb0f008f8d36d0cc4
     with:
       artifact-slug: nightly
       php-version: '8.5'

.github/workflows/tests.yml

@@ -12,7 +12,7 @@ permissions:
 jobs:
   unit:
     name: Unit
-    uses: ahegyes/wordpress-configs/.github/workflows/reusable-phpunit.yml@3cbd985255e76f8026644ccdee5be0b2b2da312b
+    uses: ahegyes/wordpress-configs/.github/workflows/reusable-phpunit.yml@f420c38db593b332d58a481eb0f008f8d36d0cc4
     with:
       php-version: '8.5'
       composer-script: 'test:unit'
@@ -52,7 +52,7 @@ jobs:
       fail-fast: false
       matrix:
         wp: ${{ fromJSON(needs.wordpress.outputs.versions) }}
-    uses: ahegyes/wordpress-configs/.github/workflows/reusable-phpunit.yml@3cbd985255e76f8026644ccdee5be0b2b2da312b
+    uses: ahegyes/wordpress-configs/.github/workflows/reusable-phpunit.yml@f420c38db593b332d58a481eb0f008f8d36d0cc4
     with:
       php-version: '8.5'
       wp-version: ${{ matrix.wp }}
@@ -66,7 +66,7 @@ jobs:
       fail-fast: false
       matrix:
         wp: ${{ fromJSON(needs.wordpress.outputs.versions) }}
-    uses: ahegyes/wordpress-configs/.github/workflows/reusable-playwright-e2e.yml@3cbd985255e76f8026644ccdee5be0b2b2da312b
+    uses: ahegyes/wordpress-configs/.github/workflows/reusable-playwright-e2e.yml@f420c38db593b332d58a481eb0f008f8d36d0cc4
     with:
       artifact-slug: wp-${{ matrix.wp }}
       php-version: '8.5'

.github/workflows/workflow-checks.yml

@@ -24,4 +24,4 @@ jobs:
       contents: read
       security-events: write
       actions: read
-    uses: ahegyes/wordpress-configs/.github/workflows/reusable-workflow-checks.yml@3cbd985255e76f8026644ccdee5be0b2b2da312b
+    uses: ahegyes/wordpress-configs/.github/workflows/reusable-workflow-checks.yml@f420c38db593b332d58a481eb0f008f8d36d0cc4

docs/recipes.md

@@ -894,7 +894,7 @@ TODO: what the plugin does, for the directory's listing.
 ```
 
 5. In `.github/workflows/release.yml`, pass `wp-org: true` to the reusable release. A tag then also deploys the zip and the `.wordpress-org/` assets to the directory's SVN from the `wp-org-release` environment: create it, store `SVN_USERNAME` and `SVN_PASSWORD` there and only there, and protect it with required reviewers.
-6. A plugin whose earlier releases shipped another main file, such as a 1.x `bootstrap.php`, also passes that name as `archive-entry-file`, from a wordpress-configs version that has the input. The source keeps `dws-plugin-template.php`, and `uninstall.php` finds the main file by its header. The rename suits only wordpress.org distribution, because the GitHub updater reads the next release's floors from the main file at the release tag, under its installed name:
+6. A plugin whose earlier releases shipped another main file, such as a 1.x `bootstrap.php`, also passes that name as `archive-entry-file`. The source keeps `dws-plugin-template.php`, and `uninstall.php` finds the main file by its header. The rename suits only wordpress.org distribution, because the GitHub updater reads the next release's floors from the main file at the release tag, under its installed name:
 
 ```yaml
       # 1.x shipped bootstrap.php, and WordPress identifies an active plugin by its folder and file, so an update without that file would deactivate it on every site.

package.json

@@ -13,7 +13,7 @@
         "npm": ">=11"
     },
     "devDependencies": {
-        "@ahegyes/wordpress-configs": "git+https://github.com/ahegyes/wordpress-configs.git#3cbd985255e76f8026644ccdee5be0b2b2da312b",
+        "@ahegyes/wordpress-configs": "git+https://github.com/ahegyes/wordpress-configs.git#f420c38db593b332d58a481eb0f008f8d36d0cc4",
         "@axe-core/playwright": "^4.14.0",
         "@playwright/test": "^1.64.1",
         "@types/node": "^26.6.5",