Merge branch 'github:main' into main

Author: Theo13111

.dockerignore

@@ -5,7 +5,6 @@
 contributing/
 docs/
 node_modules/
-script/
 tests/
 # Folder is cloned during the preview + prod workflows, the assets are merged into other locations for use before the build
 docs-early-access/

.eslintrc.cjs

@@ -20,7 +20,7 @@ module.exports = {
     "tmp/*",
     "!/.*",
     "/.next/",
-    "script/bookmarklets/*",
+    "src/bookmarklets/*",
     "src/open-source/scripts/add-pr-links.js",
     "src/open-source/scripts/pr-link-source.js",
     "rest-api-description/",

.github/CODEOWNERS

@@ -12,3 +12,18 @@ src/ghes-releases/lib/enterprise-dates.json @github/docs-content-enterprise
 
 # Requires review of #actions-oidc-integration, docs-engineering/issues/1506
 content/actions/deployment/security-hardening-your-deployments/** @github/oidc
+
+# RAI - CELA
+data/reusables/copilot/about-copilot-chat.md @github/legal-product
+content/copilot/github-copilot-in-the-cli/about-github-copilot-in-the-cli.md @github/legal-product
+
+content/code-security/secret-scanning/about-the-regular-expression-generator-for-custom-patterns @github/legal-product
+data/reusables/secret-scanning/beta-custom-pattern-regular-expression-generator.md @github/legal-product
+
+content/code-security/secret-scanning/about-the-detection-of-generic-secrets-with-secret-scanning.md @github/legal-product
+data/reusables/secret-scanning/generic-secret-detection-ai.md @github/legal-product
+
+content/code-security/code-scanning/managing-code-scanning-alerts/about-autofix-for-codeql-code-scanning.md @github/legal-product
+data/reusables/rai/ @github/legal-product
+
+content/copilot/github-copilot-enterprise/copilot-pull-request-summaries/about-copilot-pull-request-summaries.md @github/legal-product

.github/actions/node-npm-setup/action.yml

@@ -17,7 +17,7 @@ runs:
         key: ${{ runner.os }}-node_modules-${{ hashFiles('package*.json') }}-${{ hashFiles('.github/actions/node-npm-setup/action.yml') }}
 
     - name: Setup Node.js
-      uses: actions/setup-node@8c91899e586c5b171469028077307d293428b516
+      uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4.0.0
       with:
         node-version-file: 'package.json'
         cache: npm

.github/actions/setup-elasticsearch/action.yml

@@ -15,8 +15,9 @@ runs:
       # is one that will run tests against an Elasticsearch on localhost.
       uses: getong/elasticsearch-action@95b501ab0c83dee0aac7c39b7cea3723bef14954
       with:
-        # Make sure this matches production and `sync-search-pr.yml`
-        elasticsearch version: '7.11.1'
+        # Make sure this matches production
+        # It might also need to match what's available on Docker hub
+        elasticsearch version: '8.8.2'
         host port: 9200
         container port: 9200
         host node port: 9300

.github/actions/slack-alert/action.yml

@@ -14,13 +14,6 @@ runs:
   steps:
     - name: Send Slack notification if workflow fails
       uses: someimportantcompany/github-actions-slack-message@1d367080235edfa53df415bd8e0bbab480f29bad
-      if: >-
-        ${{
-          failure() &&
-          github.repository == 'github/docs-internal' &&
-          github.event_name != 'pull_request' &&
-          github.event_name != 'pull_request_target'
-        }}
       with:
         channel: ${{ inputs.slack_channel_id }}
         bot-token: ${{ inputs.slack_token }}

.github/actions/warmup-remotejson-cache/action.yml

@@ -33,7 +33,7 @@ runs:
     - name: Run script
       if: ${{ inputs.restore-only == '' }}
       shell: bash
-      run: node script/warmup-remotejson.js
+      run: node src/archives/scripts/warmup-remotejson.js
 
     - name: Cache .remotejson-cache (save)
       if: ${{ inputs.restore-only == '' }}

.github/workflows/add-review-template.yml

@@ -37,8 +37,3 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.DOCS_BOT_PAT_WORKFLOW_READORG }}
           PR: ${{ github.event.pull_request.html_url }}
           TEMPLATE: ${{ env.TEMPLATE }}
-
-      - uses: ./.github/actions/slack-alert
-        with:
-          slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
-          slack_token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}

.github/workflows/auto-close-dependencies.yml

@@ -66,9 +66,3 @@ jobs:
               console.error(`Failed to lock the pull request. Error: ${error}`)
               throw error
             }
-      - name: Check out repo
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
-      - uses: ./.github/actions/slack-alert
-        with:
-          slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
-          slack_token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}

.github/workflows/azure-preview-env-deploy.yml

@@ -193,8 +193,6 @@ jobs:
           rsync -rptovR ./user-code/assets/./**/*.png ./assets
           rsync -rptovR ./user-code/data/./**/*.{yml,md} ./data
           rsync -rptovR ./user-code/components/./**/*.{scss,ts,tsx} ./components
-          rsync -rptovR --ignore-missing-args ./user-code/lib/./**/*.{js,ts} ./lib
-          rsync -rptovR --ignore-missing-args ./user-code/middleware/./**/*.{js,ts} ./middleware
           rsync -rptovR ./user-code/src/./**/*.tsx ./src
 
       - uses: ./.github/actions/warmup-remotejson-cache
@@ -254,8 +252,3 @@ jobs:
         # The `--fail --retry N` combination means that a 4xx response
         # code will exit immediately but a 5xx will exhaust the retries.
         run: curl --fail --retry-connrefused --retry 5 -I ${{ env.APP_URL }}
-
-      - uses: ./.github/actions/slack-alert
-        with:
-          slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
-          slack_token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}

.github/workflows/azure-preview-env-destroy.yml

@@ -70,8 +70,3 @@ jobs:
           # The token provided by the workflow does not have the permissions to delete created environments
           token: ${{ secrets.DOCS_BOT_PAT_READPUBLICKEY }}
           environment: preview-env-${{ env.PR_NUMBER }}
-
-      - uses: ./.github/actions/slack-alert
-        with:
-          slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
-          slack_token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}

.github/workflows/azure-prod-build-deploy.yml

@@ -56,7 +56,7 @@ jobs:
           persist-credentials: 'false'
 
       - name: Setup Node.js
-        uses: actions/setup-node@8c91899e586c5b171469028077307d293428b516
+        uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4.0.0
         with:
           node-version-file: 'package.json'
           cache: npm
@@ -147,6 +147,7 @@ jobs:
           az webapp deployment slot swap --slot canary --target-slot production -n ghdocs-prod -g docs-prod
 
       - uses: ./.github/actions/slack-alert
+        if: ${{ failure() && github.event_name != 'workflow_dispatch' }}
         with:
           slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
           slack_token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}

.github/workflows/azure-staging-build-deploy.yml

@@ -74,7 +74,7 @@ jobs:
           echo "DOCKER_IMAGE=${{ secrets.NONPROD_REGISTRY_SERVER }}/${{ env.IMAGE_REPO }}:${{ env.COMMIT_REF }}-${{ github.run_number }}-${{ github.run_attempt }}" >> $GITHUB_ENV
 
       - name: Setup Node.js
-        uses: actions/setup-node@8c91899e586c5b171469028077307d293428b516
+        uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4.0.0
         with:
           node-version-file: 'package.json'
           cache: npm
@@ -157,8 +157,3 @@ jobs:
       - name: 'Swap deployment slot to production'
         run: |
           az webapp deployment slot swap --slot ${{ env.SLOT_NAME }} --target-slot production -n ${{ env.APP_SERVICE_NAME }} -g ${{ env.RESOURCE_GROUP_NAME }}
-
-      - uses: ./.github/actions/slack-alert
-        with:
-          slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
-          slack_token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}

.github/workflows/check-broken-links-github-github.yml

@@ -66,7 +66,7 @@ jobs:
 
       - name: Run broken github/github link check
         run: |
-          script/check-github-github-links.js broken_github_github_links.md
+          src/links/scripts/check-github-github-links.js broken_github_github_links.md
 
       - name: Get title for issue
         # If the file 'broken_github_github_links.md' got created,
@@ -88,6 +88,7 @@ jobs:
           labels: ${{ env.REPORT_LABEL }}
 
       - uses: ./.github/actions/slack-alert
+        if: ${{ failure() && github.event_name != 'workflow_dispatch' }}
         with:
           slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
           slack_token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}

.github/workflows/check-for-spammy-issues.yml

@@ -80,10 +80,3 @@ jobs:
             } catch (error) {
               console.log(error);
             }
-
-      - name: Check out repo
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
-      - uses: ./.github/actions/slack-alert
-        with:
-          slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
-          slack_token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}

.github/workflows/close-bad-repo-sync-prs.yml

@@ -60,10 +60,3 @@ jobs:
               issue_number: prNumber,
               body: "Please leave this `repo-sync` branch to the robots!\n\nI'm going to close this pull request now, but feel free to open a new issue or ask any questions in [discussions](https://github.com/github/docs/discussions)!"
             })
-
-      - name: Check out repo
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
-      - uses: ./.github/actions/slack-alert
-        with:
-          slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
-          slack_token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}

.github/workflows/close-on-invalid-label.yaml

@@ -34,8 +34,11 @@ jobs:
         run: gh pr close ${{ github.event.pull_request.html_url }}
 
       - name: Check out repo
+        if: ${{ failure() && github.event_name != 'pull_request_target' }}
         uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
+
       - uses: ./.github/actions/slack-alert
+        if: ${{ failure() && github.event_name != 'pull_request_target' }}
         with:
           slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
           slack_token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}

.github/workflows/codeowners-content-strategy.yml

@@ -22,9 +22,12 @@ jobs:
         env:
           GH_TOKEN: ${{ secrets.DOCS_BOT_PAT_WRITEORG_PROJECT }}
           PR: ${{ github.event.pull_request.html_url }}
-        run: gh pr edit $PR --add-reviewer github/docs-content-strategy
-
-      - uses: ./.github/actions/slack-alert
-        with:
-          slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
-          slack_token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}
+        run: |
+          has_reviewer=$(
+            gh pr view $PR --json reviews |
+            jq 'any(.reviews[]; select(length > 0))'
+          )
+          if ! $has_reviewer
+          then
+            gh pr edit $PR --add-reviewer github/docs-content-strategy
+          fi

.github/workflows/codeowners-docs-engineering.yml

@@ -79,8 +79,3 @@ jobs:
             body+=$append
             gh pr edit $PR --body "$body"
           fi
-
-      - uses: ./.github/actions/slack-alert
-        with:
-          slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
-          slack_token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}

.github/workflows/codeql.yml

@@ -5,9 +5,6 @@ name: CodeQL analysis
 # **Who does it impact**: Docs engineering.
 
 on:
-  push:
-    branches:
-      - main
   pull_request:
     branches:
       - main
@@ -36,8 +33,3 @@ jobs:
           languages: javascript # comma separated list of values from {go, python, javascript, java, cpp, csharp, ruby}
       - uses: github/codeql-action/analyze@32dc499307d133bb5085bae78498c0ac2cf762d5
         continue-on-error: true
-
-      - uses: ./.github/actions/slack-alert
-        with:
-          slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
-          slack_token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}

.github/workflows/confirm-internal-staff-work-in-docs.yml

@@ -81,8 +81,10 @@ jobs:
           text: <@${{github.actor}}> opened https://github.com/github/docs/issues/${{ github.event.number || github.event.issue.number }} publicly on the github/docs repo instead of a private repo. They have been notified via a new issue in the private repo to confirm this was intentional.
 
       - name: Check out repo
+        if: ${{ failure() && github.event_name != 'pull_request_target' }}
         uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
       - uses: ./.github/actions/slack-alert
+        if: ${{ failure() && github.event_name != 'pull_request_target' }}
         with:
           slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
           slack_token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}

.github/workflows/content-changes-table-comment.yml

@@ -44,14 +44,9 @@ jobs:
             filterContentDir:
               - 'content/**/*'
 
-      - uses: ./.github/actions/slack-alert
-        with:
-          slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
-          slack_token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}
-
   filterContentDir:
     needs: PR-Preview-Links
-    if: ${{ needs.PR-Preview-Links.outputs.filterContentDir == 'true' }}
+    if: ${{ needs.PR-Preview-Links.outputs.filterContentDir == 'true' && (github.repository == 'github/docs-internal' || github.repository == 'github/docs') }}
     runs-on: ubuntu-latest
     env:
       PR_NUMBER: ${{ github.event.pull_request.number }}
@@ -65,7 +60,7 @@ jobs:
         run: src/workflows/get-preview-app-info.sh
 
       - name: Setup Node.js
-        uses: actions/setup-node@8c91899e586c5b171469028077307d293428b516
+        uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4.0.0
         with:
           node-version-file: 'package.json'
           cache: npm
@@ -115,8 +110,3 @@ jobs:
             ghes: GitHub Enterprise Server
             ghae: GitHub AE
           edit-mode: replace
-
-      - uses: ./.github/actions/slack-alert
-        with:
-          slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
-          slack_token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}

.github/workflows/content-lint-markdown.yml

@@ -30,7 +30,7 @@ jobs:
 
       - name: Get changed content/data files
         id: changed-files
-        uses: tj-actions/changed-files@246636f5fa148b5ad8e65ca4c57b18af3123e5f6 # v39.0.1
+        uses: tj-actions/changed-files@40526807ee1e208a1a8c1bbe6bd2d1b044ef6368 # v40.0.2
         with:
           files: |
             content/**
@@ -39,8 +39,3 @@ jobs:
       - name: Run content linter if changed content/data files
         if: steps.changed-files.outputs.any_changed == 'true'
         run: npm run lint-content -- --errors-only --paths ${{ steps.changed-files.outputs.all_changed_files }}
-
-      - uses: ./.github/actions/slack-alert
-        with:
-          slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
-          slack_token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}

.github/workflows/copy-api-issue-to-internal.yml

@@ -72,8 +72,10 @@ jobs:
           OLD_ISSUE: ${{ github.event.issue.html_url }}
 
       - name: Check out repo
+        if: ${{ failure() && github.event_name != 'workflow_dispatch' && github.repository == 'github/docs-internal' }}
         uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
       - uses: ./.github/actions/slack-alert
+        if: ${{ failure() && github.event_name != 'workflow_dispatch' && github.repository == 'github/docs-internal' }}
         with:
           slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
           slack_token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}

.github/workflows/docs-review-collect.yml

@@ -23,7 +23,7 @@ jobs:
         uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
 
       - name: Setup Node.js
-        uses: actions/setup-node@8c91899e586c5b171469028077307d293428b516
+        uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4.0.0
         with:
           node-version-file: 'package.json'
           cache: npm
@@ -54,6 +54,7 @@ jobs:
           FEATURE: 'Audit log event descriptions'
 
       - uses: ./.github/actions/slack-alert
+        if: ${{ failure() && github.event_name != 'workflow_dispatch' }}
         with:
           slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
           slack_token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}

.github/workflows/dont-delete-assets.yml

@@ -63,8 +63,3 @@ jobs:
           echo "More than 1 asset image was deleted as part of this PR."
           echo "See posted PR commented about how to get them back."
           exit 1
-
-      - uses: ./.github/actions/slack-alert
-        with:
-          slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
-          slack_token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}

.github/workflows/enterprise-dates.yml

@@ -88,6 +88,7 @@ jobs:
           number: ${{ steps.create-pull-request.outputs.pull-request-number }}
 
       - uses: ./.github/actions/slack-alert
+        if: ${{ failure() && github.event_name != 'workflow_dispatch' }}
         with:
           slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
           slack_token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}

.github/workflows/first-responder-docs-content.yml

@@ -65,10 +65,6 @@ jobs:
           project-url: 'https://github.com/orgs/github/projects/1367'
           column-name: 'Docs-internal external contributor PRs'
 
-      - uses: ./.github/actions/slack-alert
-        with:
-          slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
-          slack_token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}
   first-responder-remove-pr:
     name: Remove PR from FR project board
     if: github.repository == 'github/docs-internal' && ((github.event.label.name == 'docs-content-fr' && github.event.action == 'unlabeled') || github.event.action == 'closed') && github.actor != 'dependabot[bot]'
@@ -104,8 +100,3 @@ jobs:
         with:
           repo-token: '${{ secrets.DOCS_BOT_PAT_WORKFLOW_READORG }}'
           remove-labels: 'docs-content-fr'
-
-      - uses: ./.github/actions/slack-alert
-        with:
-          slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
-          slack_token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}

.github/workflows/headless-tests.yml

@@ -58,8 +58,3 @@ jobs:
         # so that we can run them without blocking merges until we can be confident
         # results for a11y tests are meaningul and scenarios we're testing are correct.
         run: npm run playwright-test -- ${{ matrix.node }} --reporter list
-
-      - uses: ./.github/actions/slack-alert
-        with:
-          slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
-          slack_token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}