[dependabot]

Bumps lightspeedwp/.github/.github/actions/collect-metrics from 8183af8 to 13c3898.

Changelog

Sourced from lightspeedwp/.github/.github/actions/collect-metrics's changelog.

---

title: 'Changelog' description: 'All notable changes to this project, formatted per Keep a Changelog 1.1.0 and Semantic Versioning' file_type: 'documentation' created_date: '2025-09-20' last_updated: '2026-10-14' consolidation_phase: 'Phase 1 (merged sections)' owners:

• LightSpeed Team tags:
• changelog
• release
• documentation status: active stability: stable domain: governance language: en

---

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

Added

• Site to Figma Components Skill — Rebuilds a live site's components, patterns and templates in Figma after the reviewer approves an inventory. (#3992)

• Site to Design Tokens Skill — For rebuilds: proposes design tokens from a live site, then creates the Figma variables and a theme.json export once approved. (#3990)

• Figma to Block Theme Skill — One skill turns Figma variables into theme.json presets, Figma frames into block patterns, and fills theme.json gaps. (#3989)

• WordPress Schema Audit Agent — Checks the structured data a WordPress site publishes against schema.org and Google's rules, then writes a client report and a spreadsheet of fixes. ([PR #3962](lightspeedwp/.github#3962))

• Studio Migration Import Choices — The agent asks about the table prefix, local accounts, tables to skip and the Studio site URL. Wordfence tables are skipped by default. ([PR #3961](lightspeedwp/.github#3961))

• WordPress Studio Migration Agent — Moves sites between Studio and staging or live: fixes exports Studio rejects, checks exports and replaces the site URL safely. ([PR #3959](lightspeedwp/.github#3959))

• Label Inventory Evidence — Adds the redacted label inventory for every organisation repository, with private repositories reduced to counts. (#3832)

• Drift Check Inventory — The weekly label drift check now also writes the redacted label inventory, with private repositories reduced to counts. (#3832)

• Label Import Requests — Every imported label now names the request that approves it, and the request is open as an issue. (#3834)

• Label Mapping — Adds the label mapping and a draft change request for approval. Nothing is applied yet. ([PR #3831](lightspeedwp/.github#3831))

• Label Consolidation Tool — Plans label renames and creations across repositories, with deletions gated by approval per repository. Dry run by default; private evidence stays private. ([PR #3823](lightspeedwp/.github#3823))

• Locked Files Guard — Pull requests that change locked labels, issue types, templates or routing files now fail a check until a linked change request is approved by @​ashleyshaw. (#3734)

• Governance Audit Phase 0-2 Infrastructure — Added audit rule loader, violation tracker and report generator scripts with governance rules, plus Spec 006 design docs. (#3367)

• Governance audit report ids are unique and self-consistent — Fixed duplicate violation ids and recommendation references that no longer resolved, plus Spec 006 count and enforcement wording. (#3367)

• Governance audit reports now render in a stable order — Fixed report output changing with the order findings arrived, so two runs of the same audit are comparable. (#3367)

• Specs and Skills Validation Tooling — Added validation tooling and docs for agent folders, skills registries, and manifest files. Registries now validate against the 014 contract. ([PR #3434](lightspeedwp/.github#3434))

• Label Write Queue — Added a queue that spaces label writes one second apart and pauses on GitHub or Linear rate limits. Nothing calls it yet; later consolidation stages will. (#3704)

• Weekly Label Drift Check — A scheduled workflow compares every org repository and Linear label against labels.yml and updates one drift report issue; read-only, never writes labels. (#3754)

• Badge Links Stop Breaking On Spaces — The generator percent-encodes labels, so a multi-word badge resolves instead of ending at the first space. A check reports the 76,594 broken ones, with a fix mode. (#3702)

... (truncated)

Commits

• 13c3898 chore(deps-dev): bump nock in /packages/metadata-agent (#3953)
• 1648911 chore(deps): bump dompurify from 3.4.16 to 3.4.17 (#3980)
• 32cf5aa chore(deps): bump undici from 8.11.2 to 8.12.3 in /website (#3981)
• cb96a8e chore(deps): bump fast-uri from 3.1.7 to 3.1.9 (#3982)
• ae690e0 chore(deps): bump fast-uri from 3.1.8 to 3.1.9 in /agents/pr-agent (#3984)
• 501e87f chore(deps): bump glob from 13.0.6 to 14.0.3 in /scripts/validation (#3985)
• 35288e2 chore(deps): bump smol-toml from 1.8.0 to 1.9.1 in /website (#3957)
• 8086ca8 chore(deps): bump undici from 6.28.1 to 6.29.1 (#3983)
• f9e70b2 chore(deps): bump zod from 4.5.4 to 4.6.7 in /website (#3997)
• db14123 Merge pull request #3986 from lightspeedwp/dependabot/npm_and_yarn/website/fa...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Linear review: risk level 2 of 4

• Touches GitHub Actions workflows: .github/workflows/qodo-pr-agent-reusable.yml

[github-actions]

PR Template Routing

Branch Type: dependabot
Scope: github_actions/lightspeedwp/dot-github/dot-github/actions/collect-metrics-13c3898c2331aea345a2aa4ead99855308f75d5f
Template: pr_feature.md
Labels Applied: none

This PR was automatically routed based on the branch naming strategy.