From d68f67f462c8c0172b81e72787d5c293de96ee58 Mon Sep 17 00:00:00 2001
From: Abhi <19635345+ph33nx@users.noreply.github.com>
Date: Mon, 15 Jun 2026 15:11:43 +0530
Subject: [PATCH 1/2] fix(tooling): generate:check no longer leaves the spec
 snapshot dirty

---
 package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package.json b/package.json
index 3106add..bdac1f7 100644
--- a/package.json
+++ b/package.json
@@ -43,7 +43,7 @@
 		"lint:css": "wp-scripts lint-style \"blocks/**/*.{css,scss}\" \"assets/css/**/*.{css,scss}\"",
 		"wp-env": "wp-env",
 		"generate": "node bin/generate.mjs",
-		"generate:check": "node bin/generate.mjs && git diff --exit-code src/Generated blocks/generated",
+		"generate:check": "node bin/generate.mjs && git checkout -- specs/openapi.json && git diff --exit-code src/Generated blocks/generated",
 		"fetch:ui": "node bin/fetch-ui-bundle.mjs",
 		"check:distignore": "node bin/check-distignore.mjs",
 		"check:component-map": "node bin/check-component-map.mjs",

From dea224fc5fe856e5a5d4830f6f2784a680126c37 Mon Sep 17 00:00:00 2001
From: Abhi <19635345+ph33nx@users.noreply.github.com>
Date: Mon, 15 Jun 2026 15:22:41 +0530
Subject: [PATCH 2/2] docs(ci): correct wp-env pin rationale (parity, not a
 proven 11.8.0 regression)

---
 .github/dependabot.yml | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index a6983aa..d347117 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -8,9 +8,10 @@ updates:
     groups:
       dev-dependencies:
         dependency-type: development
-    # @wordpress/env is CI-critical and has broken across minors (11.8.0
-    # regressed `wp-env run` in CI). Only auto-track patches; minor and major
-    # bumps must be vetted by a human against a green gate.
+    # @wordpress/env is CI-critical: pin it exact (package.json) for local/CI
+    # parity and only auto-track patches, so a minor or major bump is vetted by
+    # a human against a green gate rather than rolled in silently with the
+    # dev-dependencies group.
     ignore:
       - dependency-name: '@wordpress/env'
         update-types: