ci: use reusable workflows from plugin-skeleton-d

[justlevine]

What

Consumes the workflows from plugin-skeleton-d

Why

Avoid maintaining multiple copies and prepare for the adoption of wp-shared-workflows.

Related Issue(s):

How

AI Disclosure

Testing Instructions

Screenshots

Additional Info

Checklist

• I have read the Contribution Guidelines.
• I have read the Development Guidelines.
• I have added necessary tests to cover my changes.
• I have updated the project documentation as needed.
• My code has detailed inline documentation.
• My code is tested to the best of my abilities.
• My code passes all lints, tests, and checks.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 87.83%. Comparing base (fc2a32d) to head (9b26976).

Additional details and impacted files

@@             Coverage Diff              @@
##               main     #326      +/-   ##
============================================
- Coverage     89.42%   87.83%   -1.60%     
  Complexity      667      667              
============================================
  Files            23       33      +10     
  Lines          2298     2951     +653     
  Branches          0      180     +180     
============================================
+ Hits           2055     2592     +537     
- Misses          243      297      +54     
- Partials          0       62      +62     

Flag	Coverage Δ
jest	82.23% <ø> (?)
unit	89.42% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.
see 10 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[Copilot]

Copilot review overview

🟡 Changes recommended

Actionlint is always skipped, and Playground publishing lacks permission to read build artifacts.

Review effort: Balanced
Findings: 2 · 1

Open (3)

• Expose actionlint filter as a detect job output · New
• Restore actions read permission for artifact downloads · New
• Include actionlint in the workflow summary · New

What changed in this PR

Centralizes CI implementation in SHA-pinned plugin-skeleton-d reusable workflows.

Changes:

• Replaces local reusable workflows with shared upstream workflows.
• Adds secure Playground publishing and PR artifact cleanup flows.
• Updates workflow documentation.

File	Description
docs/​DEVELOPMENT.md	Updates the Playground workflow link.
.github/​workflows/​wp-playground-pr-preview.yml	Adds post-CI preview publishing.
.github/​workflows/​reusable-wp-playground-pr-preview.yml	Removes the local preview workflow.
.github/​workflows/​reusable-phpunit.yml	Removes the local PHPUnit workflow.
.github/​workflows/​reusable-phpstan.yml	Removes the local PHPStan workflow.
.github/​workflows/​reusable-phpcs.yml	Removes the local PHPCS workflow.
.github/​workflows/​reusable-lint-css-js.yml	Removes the local frontend lint workflow.
.github/​workflows/​reusable-jest.yml	Removes the local Jest workflow.
.github/​workflows/​reusable-e2e.yml	Removes the local E2E workflow.
.github/​workflows/​reusable-build.yml	Removes the local build workflow.
.github/​workflows/​release.yml	Uses the shared build workflow for releases.
.github/​workflows/​README.md	Documents the centralized CI architecture.
.github/​workflows/​pr-cleanup.yml	Adds closed-PR artifact cleanup.
.github/​workflows/​ci.yml	Migrates CI jobs and adds actionlint.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

Copilot review overview

🔵 Needs a closer look

Privileged preview and cleanup workflows only become fully testable after merging into the default branch.

Review effort: Balanced
Findings: 1

Open (1)

• Restore actions read permission for artifact downloads

Resolved since last review (2)

• Expose actionlint filter as a detect job output
• Include actionlint in the workflow summary

[Copilot]

Copilot review overview

🟡 Changes recommended

Cleanup can cancel runs and delete artifacts belonging to another PR that uses the same head branch.

Review effort: Balanced
Findings: 1

Open (1)

• Correct inaccurate workflow dependency claim · New

Resolved since last review (1)

• Restore actions read permission for artifact downloads

Previously missed (1)

In code that hasn't changed since last review

Filter cleanup runs by PR number

.github/​workflows/​pr-cleanup.yml:20

The shared cleanup workflow selects runs only by head-ref and head-repo-id, not by pr-number. Because this repository accepts PRs to both main and release/**, the same head branch can back two open PRs; closing either one will cancel active runs and delete Actions artifacts for both. The upstream workflow should filter each run to the closing PR number before this cleanup is enabled.

[Copilot]

Copilot review overview

🟢 Approval recommended

The pinned workflow interfaces, caller inputs, permissions, and accompanying documentation are consistent.

Review effort: Balanced
Findings: None

Resolved since last review (1)

• Correct inaccurate workflow dependency claim

[Copilot]

Copilot review overview

🔵 Needs a closer look

The privileged preview and cleanup workflows only become testable from the default branch after merging.

Review effort: Balanced
Findings: None