Commit 4d4522b4431 for woocommerce

commit 4d4522b443185d33e58438aaa27b701203b12253
Author: Vlad Olaru <vlad.olaru@automattic.com>
Date:   Mon Sep 7 10:30:57 2026 +0300

    [CI] Skip Markdown validation steps without matching files (#68413)

    * fix(ci): skip unselected Markdown validations

    dorny/paths-filter exposes per-filter results as text outputs.

    GitHub treats non-empty output strings as truthy, so the bare conditions
    ran Markdownlint and Docusaurus even when their filters returned false.

    Compare each output explicitly with 'true' so unselected validation
    steps remain skipped and avoid unnecessary work.

    * fix(ci): update paths-filter security patch

    The Markdown validation job consumes shell-formatted filenames from
    paths-filter v4.0.2, which is affected by GHSA-7hc6-8hq5-9q2m.

    Pin every CI use to the patched v4.0.3 commit so multiline filenames
    are escaped before the output reaches the shell.

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a31f36b98be..c51f68aa2d2 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -78,7 +78,7 @@ jobs:
       needs-markdown-validation:  ${{ steps.target-changes.outputs.needs-markdown-validation }}
       needs-syncpack-validation:  ${{ steps.target-changes.outputs.needs-syncpack-validation }}
     steps:
-      - uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # v4.0.2
+      - uses: dorny/paths-filter@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d # v4.0.3
         id: target-changes
         with:
           # `needs-code-validation` is the negation of `NON_CODE_PATHS`: a PR needs code
@@ -755,7 +755,7 @@ jobs:
     steps:
       - uses: 'actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0' # v7.0.0

-      - uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # v4.0.2
+      - uses: dorny/paths-filter@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d # v4.0.3
         id: target-changes
         with:
           list-files: shell
@@ -775,12 +775,12 @@ jobs:
         uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9

       - name: 'Validate - lint md-files'
-        if: ${{ steps.target-changes.outputs.needs-markdown-linting }}
+        if: ${{ steps.target-changes.outputs.needs-markdown-linting == 'true' }}
         shell: bash
         run: pnpm dlx markdownlint-cli -- ${{ steps.target-changes.outputs.needs-markdown-linting_files }}

       - name: 'Validate - lint docs-files'
-        if: ${{ always() && steps.target-changes.outputs.needs-docs-build-validation }}
+        if: ${{ always() && steps.target-changes.outputs.needs-docs-build-validation == 'true' }}
         shell: bash
         working-directory: docs/_docu-tools
         run: |