[justlevine]

What

Bumps the minimum WordPress version to 6.9, and downgrades the NPM deps accordingly.

Dependabot autoupdate rules have been updated to ignore non-bundled @wordpress/* packages so they don't slip in in the future.

Why

We were already using 6.9 functionality (and it had the closest relation to our current production packages). It's also a prerequesite for the latest version of woocommerce/action-scheduler which we will be adopting in a future PR.

Related Issue(s):

How

AI Disclosure

Claude Code to find the dependency versions, and to write the dependabot.yml update (manually verified by me)

Testing Instructions

Screenshots

Additional Info

Checklist

• I have read the Contribution Guidelines.
• I have read the Development Guidelines.
• I have added necessary tests to cover my changes.
• I have updated the project documentation as needed.
• My code has detailed inline documentation.
• My code is tested to the best of my abilities.
• My code passes all lints, tests, and checks.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 87.04%. Comparing base (ef75b11) to head (7fa59a8).

Additional details and impacted files

@@                   Coverage Diff                    @@
##             fix/search-records     #361      +/-   ##
========================================================
- Coverage                 88.09%   87.04%   -1.05%     
  Complexity                  684      684              
========================================================
  Files                        26       36      +10     
  Lines                      2176     2749     +573     
  Branches                      0      170     +170     
========================================================
+ Hits                       1917     2393     +476     
- Misses                      259      297      +38     
- Partials                      0       59      +59     

Flag	Coverage Δ
unit	88.09% <ø> (ø)
vitest	83.07% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.
see 10 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[Copilot]

🔵 Needs a closer look

The Dependabot configuration needs correction, and the dependency changes require compatibility validation on WordPress 6.9.

1 open issue

• Invalid Dependabot update-types configuration in allow entries · New

What changed in this PR

Raises OneSearch’s minimum WordPress version to 6.9 and aligns its externalized JavaScript dependencies with that baseline.

Changes:

• Updates WordPress requirements and compatibility checks.
• Adjusts dependency versions, lockfiles, and API-fetch mock typing.
• Adds Dependabot update restrictions.

File	Description
tests/​js/​__mocks__/​@wordpress/​api-fetch.ts	Adapts mock typing to the downgraded package.
readme.txt	Declares WordPress 6.9 minimum.
README.md	Updates documented requirements.
package.json	Adjusts dependencies and script permissions.
package-lock.json	Records JavaScript dependency changes.
onesearch.php	Updates the plugin’s minimum WordPress version.
composer.lock	Refreshes PHP dependencies.
.phpcs.xml.dist	Targets WordPress 6.9 compatibility.
.github/​dependabot.yml	Adds dependency update restrictions.

_{Review effort: Balanced}