fix(tooling): keep generate:check from dirtying the spec snapshot; correct wp-env pin note

* fix(tooling): generate:check no longer leaves the spec snapshot dirty

* docs(ci): correct wp-env pin rationale (parity, not a proven 11.8.0 regression)

Author: ph33nx

.github/dependabot.yml

@@ -8,9 +8,10 @@ updates:
     groups:
       dev-dependencies:
         dependency-type: development
-    # @wordpress/env is CI-critical and has broken across minors (11.8.0
-    # regressed `wp-env run` in CI). Only auto-track patches; minor and major
-    # bumps must be vetted by a human against a green gate.
+    # @wordpress/env is CI-critical: pin it exact (package.json) for local/CI
+    # parity and only auto-track patches, so a minor or major bump is vetted by
+    # a human against a green gate rather than rolled in silently with the
+    # dev-dependencies group.
     ignore:
       - dependency-name: '@wordpress/env'
         update-types:

package.json

@@ -43,7 +43,7 @@
 		"lint:css": "wp-scripts lint-style \"blocks/**/*.{css,scss}\" \"assets/css/**/*.{css,scss}\"",
 		"wp-env": "wp-env",
 		"generate": "node bin/generate.mjs",
-		"generate:check": "node bin/generate.mjs && git diff --exit-code src/Generated blocks/generated",
+		"generate:check": "node bin/generate.mjs && git checkout -- specs/openapi.json && git diff --exit-code src/Generated blocks/generated",
 		"fetch:ui": "node bin/fetch-ui-bundle.mjs",
 		"check:distignore": "node bin/check-distignore.mjs",
 		"check:component-map": "node bin/check-component-map.mjs",