Merge branch 'main' into add-button-for-scrolling-to-top

.github/allowed-actions.js

@@ -9,22 +9,22 @@ module.exports = [
   'actions/github-script@626af12fe9a53dc2972b48385e7fe7dec79145c9', //actions/script@v3.0.0
   'actions/labeler@5f867a63be70efff62b767459b009290364495eb', //actions/labeler@v2.2.0
   'actions/setup-node@c46424eee26de4078d34105d3de3cc4992202b1e', //actions/[email protected]
-  'actions/setup-ruby@5f29a1cd8dfebf420691c4c9a0e832e2fae5a526', //actions/setup-ruby@v1.1.2
-  'actions/stale@af4072615903a8b031f986d25b1ae3bf45ec44d4', //actions/stale@v3.0.13
+  'ruby/setup-ruby@fdcfbcf14ec9672f6f615cb9589a1bc5dd69d262', //ruby/setup-ruby@vv1.64.1
+  'actions/stale@9d6f46564a515a9ea11e7762ab3957ee58ca50da', //actions/stale@v3.0.16
   'crowdin/github-action@fd9429dd63d6c0f8a8cb4b93ad8076990bd6e688',
   'crykn/copy_folder_to_another_repo_action@0282e8b9fef06de92ddcae9fe6cb44df6226646c',
-  'cschleiden/actions-linter@43fd4e08e52ed40c0e2782dc2425694388851576',
+  'cschleiden/actions-linter@0ff16d6ac5103cca6c92e6cbc922b646baaea5be',
   'dawidd6/action-delete-branch@47743101a121ad657031e6704086271ca81b1911',
   'docker://chinthakagodawita/autoupdate-action:v1',
   'fkirc/skip-duplicate-actions@36feb0d8d062137530c2e00bd278d138fe191289',
   'github/codeql-action/analyze@v1',
   'github/codeql-action/init@v1',
-  'ianwalter/puppeteer@12728ddef82390d1ecd4732fb543f62177392fbb',
+  'ianwalter/puppeteer-container@2466ba8ecf689ccf4e5dfadeff3ac2db227b2e17',
   'juliangruber/approve-pull-request-action@c530832d4d346c597332e20e03605aa94fa150a8',
   'juliangruber/find-pull-request-action@2fc55e82a6d5d36fe1e7f1848f7e64fd02d99de9',
   'juliangruber/read-file-action@e0a316da496006ffd19142f0fd594a1783f3b512',
   'lee-dohm/close-matching-issues@22002609b2555fe18f52b8e2e7c07cbf5529e8a8',
-  'pascalgn/automerge-action@c9bd182',
+  'pascalgn/automerge-action@c9bd1823770819dc8fb8a5db2d11a3a95fbe9b07', //pascalgn/[email protected]
   'peter-evans/create-issue-from-file@a04ce672e3acedb1f8e416b46716ddfd09905326',
   'peter-evans/create-or-update-comment@5221bf4aa615e5c6e95bb142f9673a9c791be2cd',
   'peter-evans/create-pull-request@8c603dbb04b917a9fc2dd991dc54fef54b640b43',

.github/workflows/60-days-stale-check.yml

@@ -8,7 +8,7 @@ jobs:
     if: github.repository == 'github/docs-internal' || github.repository == 'github/docs'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@af4072615903a8b031f986d25b1ae3bf45ec44d4
+      - uses: actions/stale@9d6f46564a515a9ea11e7762ab3957ee58ca50da
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           stale-issue-message: 'This issue is stale because it has been open 60 days with no activity.'

.github/workflows/auto-label-prs.yml

@@ -1,4 +1,5 @@
 name: Auto label Pull Requests
+
 on:
   pull_request:
 
@@ -7,6 +8,7 @@ jobs:
     if: github.repository == 'github/docs-internal'
     runs-on: ubuntu-latest
     steps:
+      # See labeling configuration in the `.github/labeler.yml` file
       - uses: actions/labeler@5f867a63be70efff62b767459b009290364495eb
         with:
           repo-token: '${{ secrets.GITHUB_TOKEN }}'

.github/workflows/automerge.yml

@@ -23,7 +23,7 @@ jobs:
     if: (contains(github.event.pull_request.labels.*.name, 'automerge') || contains(github.event.pull_request.labels.*.name, 'autosquash')) && (github.repository == 'github/docs-internal' || github.repository == 'github/docs')
     steps:
       - name: automerge
-        uses: 'pascalgn/automerge-action@c9bd182'
+        uses: 'pascalgn/automerge-action@c9bd1823770819dc8fb8a5db2d11a3a95fbe9b07'
         env:
           GITHUB_TOKEN: '${{ secrets.OCTOMERGER_PAT_WITH_REPO_AND_WORKFLOW_SCOPE }}'
           MERGE_METHOD_LABELS: 'automerge=merge,autosquash=squash'

.github/workflows/autoupdate-branch.yml

@@ -1,8 +1,23 @@
 name: autoupdate branch
+
+#
+# This workflow checks all open PRs targeting `main` as their base branch and
+# will attempt to update them if they have the `autoupdate` label applied.
+# It is triggered when a `push` event occurs ON the `main` branch (e.g. a PR
+# was merged or a force-push was done).
+#
+# It should work on all PRs created from source branches within the repo itself
+# but is unlikely to work for PRs created from forked repos.
+#
+# It is still worthwhile to leave it enabled for the `docs` open source repo as
+# it should at least be running on `repo-sync` branch PRs.
+#
+
 on:
   push:
     branches:
       - main
+
 jobs:
   autoupdate:
     if: github.repository == 'github/docs-internal' || github.repository == 'github/docs'

.github/workflows/browser-test.yml

@@ -3,6 +3,9 @@ name: Browser Tests
 on:
   workflow_dispatch:
   push:
+    branches:
+      - main
+  pull_request:
 
 jobs:
   see_if_should_skip:
@@ -28,14 +31,20 @@ jobs:
         name: Checkout
         uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f
 
+      - if: ${{ needs.see_if_should_skip.outputs.should_skip != 'true' }}
+        name: Setup Node
+        uses: actions/setup-node@c46424eee26de4078d34105d3de3cc4992202b1e
+        with:
+          node-version: 14.x
+
       - if: ${{ needs.see_if_should_skip.outputs.should_skip != 'true' }}
         name: Install
-        uses: ianwalter/puppeteer@12728ddef82390d1ecd4732fb543f62177392fbb
+        uses: ianwalter/puppeteer-container@2466ba8ecf689ccf4e5dfadeff3ac2db227b2e17
         with:
           args: npm ci
 
       - if: ${{ needs.see_if_should_skip.outputs.should_skip != 'true' }}
         name: Test
-        uses: ianwalter/puppeteer@12728ddef82390d1ecd4732fb543f62177392fbb
+        uses: ianwalter/puppeteer-container@2466ba8ecf689ccf4e5dfadeff3ac2db227b2e17
         with:
           args: npm run browser-test

.github/workflows/build-docker-image.yml

@@ -7,14 +7,15 @@ on:
     branches:
       - main
   pull_request:
-    branches-ignore:
-      - translations
 
 env:
   CI: true
 
 jobs:
   build:
+    # Do not run this job for translations PRs
+    if: ${{ github.ref != 'refs/heads/translations' }}
+
     runs-on: ubuntu-latest
     steps:
       - name: Check out repo

.github/workflows/confirm-internal-staff-work-in-docs.yml

@@ -4,12 +4,10 @@ on:
   issues:
     types:
       - opened
-      - reopened
       - transferred
   pull_request_target:
     types:
       - opened
-      - reopened
 
 jobs:
   check-team-membership:

.github/workflows/js-lint.yml

@@ -6,8 +6,6 @@ on:
     branches:
       - main
   pull_request:
-    branches-ignore:
-      - translations
 
 jobs:
   lint:

.github/workflows/link-check-dotcom.yml

@@ -3,6 +3,9 @@ name: 'Link Checker: Dotcom'
 on:
   workflow_dispatch:
   push:
+    branches:
+      - main
+  pull_request:
 
 jobs:
   see_if_should_skip:

.github/workflows/link-check-ghae.yml

@@ -3,6 +3,9 @@ name: 'Link Checker: GitHub AE'
 on:
   workflow_dispatch:
   push:
+    branches:
+      - main
+  pull_request:
 
 jobs:
   see_if_should_skip:

.github/workflows/link-check-ghes.yml

@@ -3,6 +3,9 @@ name: 'Link Checker: Enterprise Server'
 on:
   workflow_dispatch:
   push:
+    branches:
+      - main
+  pull_request:
 
 jobs:
   see_if_should_skip:

.github/workflows/merged-notification.yml

@@ -15,5 +15,5 @@ jobs:
             github.issues.createComment({
               ...context.repo,
               issue_number: context.payload.pull_request.number,
-              body: 'Thanks very much for contributing! Your pull request has been merged 🎉 You should see your changes appear on the site in approximately 24 hours.'
+              body: 'Thanks very much for contributing! Your pull request has been merged 🎉 You should see your changes appear on the site in approximately 24 hours. If you're looking for your next contribution, check out our [help wanted issues](https://github.com/github/docs/issues?q=is%3Aopen+is%3Aissue+label%3A%22help+wanted%22) :zap:'
             })

.github/workflows/openapi-schema-check.yml

@@ -3,9 +3,13 @@ name: OpenAPI dev mode check
 on:
   workflow_dispatch:
   push:
+    branches:
+      - main
+  pull_request:
 
 jobs:
   check-schema-versions:
+    if: ${{ github.repository == 'github/docs-internal' }}
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository code

.github/workflows/remove-unused-assets.yml

@@ -1,12 +1,12 @@
 name: Remove unused assets
 
-env:
-  FREEZE: ${{ secrets.FREEZE }}
-
 on:
   schedule:
     - cron: '20 15 * * 0' # run every Sunday at 20:15 UTC / 12:15 PST
 
+env:
+  FREEZE: ${{ secrets.FREEZE }}
+
 jobs:
   remove_unused_assets:
     name: Remove unused assets

.github/workflows/repo-freeze-check.yml

@@ -1,7 +1,8 @@
 name: Repo Freeze Check
 
 on:
-  pull_request:
+  workflow_dispatch:
+  pull_request_target:
     types:
       - opened
       - reopened
@@ -16,12 +17,12 @@ env:
 
 jobs:
   check-freezer:
-    if: github.repository == 'github/docs-internal' || github.repository == 'github/docs'
+    if: ${{ github.repository == 'github/docs-internal' || github.repository == 'github/docs' }}
     name: Prevent merging during deployment freezes
     runs-on: ubuntu-latest
     steps:
       - name: Fail if repo merges are paused
-        if: ${{ env.FREEZE == 'true' }}
+        if: ${{ env.FREEZE == 'true' && github.ref != 'refs/heads/repo-sync' }}
         run: |
           echo 'Merges into the "main" branch on this repo are currently paused!'
           exit 1

.github/workflows/repo-sync-stalls.yml

@@ -1,18 +1,11 @@
 name: Repo Sync Stalls
+
 on:
   workflow_dispatch:
   schedule:
     - cron: '0 */2 * * *'
+
 jobs:
-  check-freezer:
-    name: Check for deployment freezes
-    runs-on: ubuntu-latest
-    steps:
-      - name: Exit if repo is frozen
-        if: ${{ env.FREEZE == 'true' }}
-        run: |
-          echo 'The repo is currently frozen! Exiting this workflow.'
-          exit 1 # prevents further steps from running
   repo-sync-stalls:
     runs-on: ubuntu-latest
     steps:
@@ -54,7 +47,7 @@ jobs:
             })
       - name: Send Slack notification if workflow fails
         uses: someimportantcompany/github-actions-slack-message@0b470c14b39da4260ed9e3f9a4f1298a74ccdefd
-        if: failure()
+        if: ${{ failure() }}
         with:
           channel: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
           bot-token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}

.github/workflows/repo-sync.yml

@@ -11,24 +11,10 @@ on:
   schedule:
     - cron: '*/15 * * * *' # every 15 minutes
 
-env:
-  FREEZE: ${{ secrets.FREEZE }}
-
 jobs:
-  check-freezer:
-    name: Check for deployment freezes
-    runs-on: ubuntu-latest
-    steps:
-      - name: Exit if repo is frozen
-        if: ${{ env.FREEZE == 'true' }}
-        run: |
-          echo 'The repo is currently frozen! Exiting this workflow.'
-          exit 1 # prevents further steps from running
-
   repo-sync:
     if: github.repository == 'github/docs-internal' || github.repository == 'github/docs'
     name: Repo Sync
-    needs: check-freezer
     runs-on: ubuntu-latest
     steps:
       - name: Check out repo