ci: add post-release check workflow [ED-25263]

[Svitlana-Dykun]

Summary

• Adds a dispatchable Post-Release Check workflow that verifies GitHub releases, changelog on main, wordpress.org SVN/Stable tag, and zip version headers for published Core (and optional Pro).
• Upgrade-path smoke (same idea as Core plugin-upgrade-test.yml): install current wordpress.org Elementor, import a heading page, --force install the released zip, then Playwright for frontend + create/edit canvas.
• PRs that touch this workflow/actions also run it against current wordpress.org Core so the pipeline is exercised before a real GA.

https://elementor.atlassian.net/browse/ED-25263

Test plan

• Open this PR and confirm Post-Release Check runs (verify + upgrade smoke) against current wordpress.org Core.
• After merge, dispatch the workflow with core_version=4.2.2 (Pro empty) and confirm the job summary checklist is green.
• Optional: dispatch with a Pro version once MAINTAIN_TOKEN can read elementor/elementor-pro releases.

Made with Cursor

✨ PR Description

1. Problem & Context

Implements a post-release verification suite ED-25263 to automate the validation of published Core and Pro artifacts, ensuring version consistency and basic editor stability after a release.

2. What Changed (Where)

File / Module	Change
.github/workflows/post-release-check.yml	Main orchestration workflow for verification and smoke tests.
actions/post-release-verify	Node.js action validating GitHub APIs, changelogs, and zip headers.
actions/post-release-smoke	Playwright suite testing plugin upgrades and editor booting.
actions/setup-wp-env	Patched apt-get to bypass Debian Release expiry failures.
packages/editor-github-actions-utils	Added version parsing and changelog extraction utilities.

3. How It Works

The workflow resolves versions $\rightarrow$ post-release-verify checks GitHub releases and zip headers $\rightarrow$ post-release-smoke installs the released zip over a live .org site and runs Playwright editor tests.

4. Risks

• Pro Access: Requires MAINTAIN_TOKEN to access private Pro repos; missing tokens will fail verification.
• SVN Lag: wordpress.org tags can lag GitHub releases; mitigated by skip-wordpress-org input.

Generated by LinearB AI and added by gitStream.
_{AI-generated content may contain inaccuracies. Please verify before using.
💡 Tip: You can customize your AI Description using Guidelines Learn how}

[wiz-9a149474ff]

Wiz Scan Summary

Scanner	Findings
Vulnerabilities	7  2
Sensitive Data	-
Secrets	-
IaC Misconfigurations	-
SAST Findings	14
Software Management Findings	-
Total	21  2

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try the Wiz Code extension for VS Code, JetBrains, or Visual Studio.