Add .editorconfig and SECURITY.md and nightly test (#527)

* Add .editorconfig and SECURITY.md

* Test against nightly build

Co-authored-by: Copilot <copilot@github.com>

* Relax BeautifulSoup dependency version

Co-authored-by: Copilot <copilot@github.com>

---------

Co-authored-by: Copilot <copilot@github.com>

Author: MrCordeiro

.editorconfig

@@ -0,0 +1,24 @@
+root = true
+
+[*]
+indent_style = space
+indent_size = 4
+charset = utf-8
+trim_trailing_whitespace = true
+insert_final_newline = true
+end_of_line = lf
+
+[Makefile]
+indent_style = tab
+
+[*.py]
+max_line_length = 88
+
+[*.{html,rst,md}]
+indent_size = 4
+
+[*.{js,ts,tsx,json,yml,yaml,css,scss}]
+indent_size = 2
+
+[*.md]
+trim_trailing_whitespace = false

.github/scripts/report_nightly_build_failure.py

@@ -0,0 +1,28 @@
+"""
+Called by GitHub Actions when the nightly build fails.
+This reports an error to the #nightly-build-failures Slack channel.
+"""
+import os
+import requests
+
+if "SLACK_WEBHOOK_URL" in os.environ:
+    # https://docs.github.com/en/free-pro-team@latest/actions/reference/environment-variables#default-environment-variables
+    repository = os.environ["GITHUB_REPOSITORY"]
+    run_id = os.environ["GITHUB_RUN_ID"]
+    url = f"https://github.com/{repository}/actions/runs/{run_id}"
+
+    print("Reporting to #nightly-build-failures slack channel")
+    response = requests.post(
+        os.environ["SLACK_WEBHOOK_URL"],
+        json={
+            "text": f"A Nightly build failed. See {url}",
+        },
+        timeout=10,
+    )
+
+    print(f"Slack responded with: {response}")
+
+else:
+    print(
+        "Unable to report to #nightly-build-failures slack channel because SLACK_WEBHOOK_URL is not set"
+    )

.github/workflows/nightly.yml

@@ -0,0 +1,30 @@
+name: Nightly Wagtail Test
+
+on:
+  schedule:
+    - cron: '0 1 * * *'
+    # At 01:00, daily
+  workflow_dispatch:
+
+jobs:
+  nightly-test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.14'
+      - name: Install Tox
+        run: |
+          python -m pip install --upgrade pip setuptools wheel tox
+      - name: Run 'future' tests
+        id: test
+        continue-on-error: true
+        run: |
+          tox -e future
+      - name: 'On failure, report to #nightly-build-failures in Wagtail Slack'
+        if: steps.test.outcome == 'failure'
+        run: |
+          python .github/scripts/report_nightly_build_failure.py
+        env:
+          SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}

SECURITY.md

@@ -0,0 +1,5 @@
+# Security
+
+We take the security of Wagtail, and related packages we maintain, seriously. If you have found a security issue with any of our projects please email us at security@wagtail.org so we can work together to find and patch the issue. We appreciate responsible disclosure with any security related issues, so please contact us first before creating a GitHub issue.
+
+If you want to send an encrypted email (optional), the public key ID for security@wagtail.org is 0xbed227b4daf93ff9, and this public key is available from most commonly-used keyservers.

setup.py

@@ -15,7 +15,7 @@
 ]
 
 testing_extras = [
-    'beautifulsoup4>=4.8,<4.10',
+    'beautifulsoup4>=4.8,<5.0',
     'coverage>=4.5',
     'django-webtest>=1.9,<1.10',
 ]

tox.ini

@@ -24,7 +24,7 @@ python =
 
 
 [testenv]
-description = Unit tests
+description = Unit tests against published packages
 install_command = pip install -e ".[testing]" -U {opts} {packages}
 commands = coverage run --source=wagtailmenus runtests.py
 
@@ -38,3 +38,14 @@ deps =
     wt70: wagtail>=7.0,<7.1
     wt72: wagtail>=7.2,<7.3
     wt73: wagtail>=7.3,<7.4
+
+[testenv:future]
+description = Unit tests against the latest development versions of dependencies
+install_command = pip install -e ".[testing]" -U {opts} {packages}
+commands = coverage run --source=wagtailmenus runtests.py
+basepython = python3.14
+
+deps =
+    coverage
+    beautifulsoup4>=4.13.3
+    git+https://github.com/wagtail/wagtail.git@main#egg=wagtail