Support installing plugins from single PHP file URLs #486

Copilot · 2026-01-19T09:59:17Z

Implementation Plan for Single PHP Plugin File Installation

Original prompt

This section details on the original issue you should resolve

<issue_title>Links to single plugin PHP file should work with plugin install</issue_title>
<issue_description>When using wp plugin install <URL>, WP-CLI currently assumes that the URL is pointing to a ZIP file of a plugin.

This command should also work with a URL to a single PHP plugin file, so that it can for example directly install plugins from GitHub Gists:

Example of such a command that should just work:
wp plugin install --activate https://gist.githubusercontent.com/westonruter/dec7d190060732e29a09751ab99cc549/raw/d55866c2fc82ab16f8909ce73fc89986ab28d727/pwa-manifest-short-name.php
/cc @westonruter (whose numerous Gist plugins make me want to implement the above)</issue_description>

Comments on the Issue (you are @copilot in this section)

Fixes Links to single plugin PHP file should work with plugin install #233

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>

…oad message timing Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>

…plugin headers Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>

…dation Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>

swissspidy · 2026-01-19T11:33:02Z

@copilot Make sure wp plugin install --activate https://gist.github.com/westonruter/dec7d190060732e29a09751ab99cc549 works too and add a test for that

codecov · 2026-01-19T11:52:21Z

Codecov Report

❌ Patch coverage is 61.90476% with 48 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
src/WP_CLI/CommandWithUpgrade.php	61.90%	48 Missing ⚠️

📢 Thoughts on this report? Let us know!

Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>

Copilot

Pull request overview

This PR enables wp plugin install to accept URLs pointing to single PHP files in addition to ZIP archives, with special support for GitHub Gist URLs.

Changes:

Added detection and installation logic for single PHP file URLs
Implemented GitHub Gist page URL resolution to raw file URLs via the GitHub API
Added comprehensive test coverage for PHP file installations, --force flag behavior, and Gist URL handling

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 5 comments.

File	Description
src/WP_CLI/CommandWithUpgrade.php	Core implementation with Gist URL detection, raw URL conversion via GitHub API, and PHP file installation with security validations
src/Plugin_Command.php	Updated documentation to reflect support for PHP file URLs
features/plugin-install.feature	Added test scenarios for PHP file installations, `--force` flag, and Gist page URLs

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

src/WP_CLI/CommandWithUpgrade.php

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

swissspidy · 2026-01-19T17:05:47Z

/gemini review

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

- Add specific error handling for HTTP codes 401, 500, 503 - Add fallback for malformed rate limit responses - Verify plugin directory creation after wp_mkdir_p() - Fix regex pattern to properly match uppercase hex in gist IDs - Add catch-all for unexpected HTTP status codes Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

src/Plugin_Command.php

src/WP_CLI/CommandWithUpgrade.php

Anonymous gists don't have a username in the URL path (e.g., gist.github.com/1234567890abcdef). Updated regex to make the username segment optional using non-capturing group (?:[^/]+/)? so both user-owned and anonymous gists are supported. Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>

Convert extension to lowercase before comparison in all PHP extension checks to handle files with uppercase extensions (e.g., .PHP, .Php). This makes the validation more robust and consistent across: - Sanitized filename validation - URL path detection - Gist file filtering Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>

wojsmol · 2026-01-22T12:22:45Z

src/WP_CLI/CommandWithUpgrade.php

 		}

 		// Find PHP files in the gist
 		$php_files = [];


Do we use short array syntax in WP-CLI?

Initial plan

55a4daa

Copilot AI assigned Copilot and swissspidy Jan 19, 2026

Copilot started work on behalf of swissspidy January 19, 2026 09:59 View session

Copilot AI and others added 6 commits January 19, 2026 10:08

Add support for installing plugins from single PHP file URLs

da838b3

Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>

Add documentation and additional tests for PHP file installation

1f1924d

Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>

Address code review feedback: add validation and improve code structure

075cb79

Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>

Add security validations for path traversal and improve UX with downl…

0b4d7aa

…oad message timing Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>

Fix security validations: properly check path traversal and validate …

78e54f7

…plugin headers Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>

Optimize: check file existence before download and simplify path vali…

82f7819

…dation Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Add support for installing plugins from PHP file URLs~~ Support installing plugins from single PHP file URLs Jan 19, 2026

Copilot AI requested a review from swissspidy January 19, 2026 10:20

Copilot finished work on behalf of swissspidy January 19, 2026 10:20

github-actions bot added command:plugin-install Related to 'plugin install' command scope:testing Related to testing labels Jan 19, 2026

Copilot started work on behalf of swissspidy January 19, 2026 12:00 View session

This comment was marked as resolved.

Sign in to view

Copilot started work on behalf of swissspidy January 19, 2026 13:25 View session

This comment was marked as resolved.

Sign in to view

Copilot started work on behalf of swissspidy January 19, 2026 15:33 View session

Add support for GitHub Gist page URLs (gist.github.com)

551fe3e

Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>

This comment was marked as resolved.

Sign in to view

Copilot finished work on behalf of swissspidy January 19, 2026 15:39

swissspidy requested a review from Copilot January 19, 2026 16:09

Copilot started reviewing on behalf of swissspidy January 19, 2026 16:09 View session

Copilot AI reviewed Jan 19, 2026

View reviewed changes

swissspidy and others added 3 commits January 19, 2026 17:18

Update src/WP_CLI/CommandWithUpgrade.php

3a4d190

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Update src/WP_CLI/CommandWithUpgrade.php

584d505

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Update src/WP_CLI/CommandWithUpgrade.php

9f699f1

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

swissspidy requested a review from Copilot January 19, 2026 17:05

Copilot started reviewing on behalf of swissspidy January 19, 2026 17:06 View session

This comment was marked as resolved.

Sign in to view

Update src/WP_CLI/CommandWithUpgrade.php

232e96b

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Copilot started work on behalf of swissspidy January 22, 2026 09:15 View session

Copilot finished work on behalf of swissspidy January 22, 2026 09:18

swissspidy and others added 3 commits January 22, 2026 10:28

Update src/WP_CLI/CommandWithUpgrade.php

264d2aa

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Merge branch 'main' into copilot/allow-php-file-install

7138fb8

remove double check

cb58c28

swissspidy reviewed Jan 22, 2026

View reviewed changes

src/Plugin_Command.php Show resolved Hide resolved

Apply suggestion from @swissspidy

ff342c9

swissspidy reviewed Jan 22, 2026

View reviewed changes

src/WP_CLI/CommandWithUpgrade.php Outdated Show resolved Hide resolved

swissspidy reviewed Jan 22, 2026

View reviewed changes

src/WP_CLI/CommandWithUpgrade.php Outdated Show resolved Hide resolved

Copilot started work on behalf of swissspidy January 22, 2026 11:40 View session

Copilot AI requested a review from swissspidy January 22, 2026 11:43

Copilot finished work on behalf of swissspidy January 22, 2026 11:43

Copilot started work on behalf of swissspidy January 22, 2026 11:43 View session

Copilot finished work on behalf of swissspidy January 22, 2026 11:46

wojsmol reviewed Jan 22, 2026

View reviewed changes

src/WP_CLI/CommandWithUpgrade.php

}

// Find PHP files in the gist

$php_files = [];

Copy link

Contributor

wojsmol Jan 22, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we use short array syntax in WP-CLI?

Support installing plugins from single PHP file URLs #486

Are you sure you want to change the base?

Support installing plugins from single PHP file URLs #486

Conversation

Copilot AI commented Jan 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Implementation Plan for Single PHP Plugin File Installation

Comments on the Issue (you are @copilot in this section)

Uh oh!

swissspidy commented Jan 19, 2026

Uh oh!

codecov bot commented Jan 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

This comment was marked as resolved.

This comment was marked as resolved.

This comment was marked as resolved.

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

swissspidy commented Jan 19, 2026

Uh oh!

This comment was marked as resolved.

Uh oh!

This comment was marked as resolved.

Uh oh!

Uh oh!

Uh oh!

Uh oh!

wojsmol Jan 22, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Copilot AI commented Jan 19, 2026 •

edited

Loading

codecov bot commented Jan 19, 2026 •

edited

Loading