From 4495bcf4dc4da436042ff41bb9448166beccdb88 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 27 Mar 2026 09:30:06 +0000
Subject: [PATCH 1/3] Initial plan


From c3c485ee6a9f159bcb51b34d16adab6f05d1f8a8 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 27 Mar 2026 09:45:02 +0000
Subject: [PATCH 2/3] Add MariaDB wrapper scripts to suppress
 ssl-verify-server-cert warnings

Agent-Logs-Url: https://github.com/wp-cli/.github/sessions/c36fe78c-cf30-4dea-bdb3-fa2d47816735

Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>
---
 .github/workflows/reusable-functional.yml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/.github/workflows/reusable-functional.yml b/.github/workflows/reusable-functional.yml
index 5583050..cc21dbf 100644
--- a/.github/workflows/reusable-functional.yml
+++ b/.github/workflows/reusable-functional.yml
@@ -107,6 +107,22 @@ jobs:
             ${{ inputs.dbtype == 'mariadb' && '[client]' || '' }}
             ${{ inputs.dbtype == 'mariadb' && 'disable-ssl-verify-server-cert' || '' }}
 
+      - name: Configure MariaDB client SSL settings
+        if: ${{ inputs.dbtype == 'mariadb' }}
+        run: |
+          # WP-CLI passes --no-defaults to mysql/mysqldump which bypasses config files.
+          # Wrapper scripts ensure --skip-ssl-verify-server-cert is always passed,
+          # preventing MariaDB 11.4+ warnings about ssl-verify-server-cert being
+          # auto-disabled when MYSQL_PWD is used.
+          mkdir -p "$HOME/.mariadb-wrappers"
+          for TOOL in mysql mysqldump mysqlcheck mysqlimport mariadb mariadb-dump mariadb-check mariadb-import; do
+            REAL=$(command -v "$TOOL" 2>/dev/null) || continue
+            printf '#!/bin/sh\nexec "%s" --skip-ssl-verify-server-cert "$@"\n' "$REAL" \
+              > "$HOME/.mariadb-wrappers/$TOOL"
+            chmod +x "$HOME/.mariadb-wrappers/$TOOL"
+          done
+          echo "$HOME/.mariadb-wrappers" >> "$GITHUB_PATH"
+
       - name: Prepare test database
         if: ${{ inputs.dbtype != 'sqlite' }}
         run: composer prepare-tests

From 86737db1240843905d60f2429e3387d8067409c3 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 27 Mar 2026 10:07:31 +0000
Subject: [PATCH 3/3] Switch MariaDB connections to Unix socket to suppress
 ssl-verify-server-cert warnings

Agent-Logs-Url: https://github.com/wp-cli/.github/sessions/ffe107ab-bf0d-425c-b414-3366b78154ce

Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>
---
 .github/workflows/reusable-functional.yml | 20 +++++---------------
 1 file changed, 5 insertions(+), 15 deletions(-)

diff --git a/.github/workflows/reusable-functional.yml b/.github/workflows/reusable-functional.yml
index cc21dbf..13a55a9 100644
--- a/.github/workflows/reusable-functional.yml
+++ b/.github/workflows/reusable-functional.yml
@@ -104,24 +104,14 @@ jobs:
           # Fall back to legacy configuration for MySQL 5.6, 5.7, 8.0 and MariaDB.
           my-cnf: |
             ${{ steps.mysql-config.outputs.auth-config || 'default_authentication_plugin=mysql_native_password' }}
-            ${{ inputs.dbtype == 'mariadb' && '[client]' || '' }}
-            ${{ inputs.dbtype == 'mariadb' && 'disable-ssl-verify-server-cert' || '' }}
 
-      - name: Configure MariaDB client SSL settings
+      - name: Configure MariaDB to connect via Unix socket
         if: ${{ inputs.dbtype == 'mariadb' }}
         run: |
-          # WP-CLI passes --no-defaults to mysql/mysqldump which bypasses config files.
-          # Wrapper scripts ensure --skip-ssl-verify-server-cert is always passed,
-          # preventing MariaDB 11.4+ warnings about ssl-verify-server-cert being
-          # auto-disabled when MYSQL_PWD is used.
-          mkdir -p "$HOME/.mariadb-wrappers"
-          for TOOL in mysql mysqldump mysqlcheck mysqlimport mariadb mariadb-dump mariadb-check mariadb-import; do
-            REAL=$(command -v "$TOOL" 2>/dev/null) || continue
-            printf '#!/bin/sh\nexec "%s" --skip-ssl-verify-server-cert "$@"\n' "$REAL" \
-              > "$HOME/.mariadb-wrappers/$TOOL"
-            chmod +x "$HOME/.mariadb-wrappers/$TOOL"
-          done
-          echo "$HOME/.mariadb-wrappers" >> "$GITHUB_PATH"
+          # MariaDB 11.4+ prints a warning when MYSQL_PWD is used over TCP, because it
+          # auto-disables ssl-verify-server-cert. Connecting via Unix socket instead of
+          # TCP bypasses that check entirely.
+          echo "WP_CLI_TEST_DBHOST=localhost:${{ steps.setup-mysql.outputs.base-dir }}/tmp/mysql.sock" >> "$GITHUB_ENV"
 
       - name: Prepare test database
         if: ${{ inputs.dbtype != 'sqlite' }}