Checklist

WordPress release engineering checklist for Claude Code

Shipping WordPress code safely usually means combining multiple review surfaces: schema and data migrations, WP-CLI operational commands, static analysis, regression planning, and rollout safety. This checklist shows how to combine the existing WordPress Skills commands into a practical release review.

Recommended command sequence

/wordpress-skills:wp-migration-review .
/wordpress-skills:wp-ops-review .
/wordpress-skills:wp-phpstan-review .
/wordpress-skills:wp-test-review .

Release checklist

1. Migration safety

  • Versioned upgrade routines are idempotent
  • dbDelta() usage is constrained and intentional
  • Backfills are batched instead of running in a single risky request
  • Rollback or failure handling is at least understood and documented

2. Operational safety

  • WP-CLI commands are explicit about multisite scope
  • Search-replace or destructive operations have guardrails
  • Maintenance workflows can run non-interactively
  • Long-running jobs avoid brittle request-time execution

3. Static analysis and code health

  • PHPStan config is valid and scoped sensibly
  • Baselines are not masking new issues without review
  • WordPress-specific stubs or bootstrap assumptions are wired correctly

4. Test coverage before ship

  • High-risk flows have at least one regression path
  • REST, admin, checkout, or migration behavior has explicit verification
  • Manual smoke tests are named when automation is missing

Example findings this checklist is meant to catch

Critical — Upgrade routine performs unbounded data backfill during admin request
- File: includes/upgrades/class-upgrade-210.php:51
- Why it matters: large sites may time out mid-upgrade and leave partial state
- Fix: persist upgrade progress and batch work asynchronously

Warning — WP-CLI command defaults to all sites on multisite without confirmation guard
- File: includes/cli/class-reindex-command.php:109
- Why it matters: operational blast radius is larger than a caller may expect
- Fix: require an explicit network flag or targeted site selection

Useful natural-language prompts

Review this WordPress release for migration risk
Check this WP-CLI command for multisite safety
Audit this phpstan.neon before we tighten CI
What tests should we add before shipping this plugin update?

When to use this page

This guide is a good fit when a team is searching for terms like WordPress release checklist, WordPress migration review, WP-CLI safety review, or PHPStan for WordPress plugins and wants concrete starting commands instead of a generic release blog post.