Hardening: Block path traversal in package install via composer.json …

…name (#237)

Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Pascal Birchler <pascalb@google.com>

Tests: Improve Windows compatibility (#232)

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Add .gitattributes file

See wp-cli/wp-cli#5070

Merge pull request #205 from wp-cli/fix/php85-tests

Merge pull request #199 from wp-cli/refine-feature-files

Merge pull request #191 from wp-cli/update-phpunit-config

Merge pull request #188 from wp-cli/fix/unit-tests

Merge pull request #186 from ernilambar/update/package-docs

Merge pull request #183 from wp-cli/fix/add-composer-compat-for-2-3

Use auth for GitLab private repos, and fix GitLab failover behavior (#…

…157)

* - When retrieving a ZIP from a private repository, use authentication, if provided
- Fix the GitLab failover behavior (used to bail-out on private GitLab repositories without trying to use a token if one was provided)

* "fix" a phpcs warning

* handle GitLab subgroup

* use GitLab as a Github fall-back when requesting package-name without precision about Git hosting

* phpcs fixes