[pull] main from github:main

.github/actions/clone-translations/action.yml

@@ -11,56 +11,56 @@ runs:
   using: 'composite'
   steps:
     - name: Clone Spanish
-      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       with:
         repository: github/docs-internal.es-es
         token: ${{ inputs.token }}
         path: translations/es-es
 
     - name: Clone Japanese
-      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       with:
         repository: github/docs-internal.ja-jp
         token: ${{ inputs.token }}
         path: translations/ja-jp
 
     - name: Clone Portuguese
-      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       with:
         repository: github/docs-internal.pt-br
         token: ${{ inputs.token }}
         path: translations/pt-br
 
     - name: Clone Simplified Chinese
-      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       with:
         repository: github/docs-internal.zh-cn
         token: ${{ inputs.token }}
         path: translations/zh-cn
 
     - name: Clone Russian
-      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       with:
         repository: github/docs-internal.ru-ru
         token: ${{ inputs.token }}
         path: translations/ru-ru
 
     - name: Clone French
-      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       with:
         repository: github/docs-internal.fr-fr
         token: ${{ inputs.token }}
         path: translations/fr-fr
 
     - name: Clone Korean
-      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       with:
         repository: github/docs-internal.ko-kr
         token: ${{ inputs.token }}
         path: translations/ko-kr
 
     - name: Clone German
-      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       with:
         repository: github/docs-internal.de-de
         token: ${{ inputs.token }}

.github/actions/get-docs-early-access/action.yml

@@ -19,7 +19,7 @@ runs:
       run: npm run what-docs-early-access-branch
 
     - name: Clone
-      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       with:
         repository: github/docs-early-access
         token: ${{ inputs.token }}

.github/workflows/changelog-agent.yml

@@ -321,12 +321,6 @@ jobs:
 
             core.setOutput('examples', examples.join('\n'));
 
-      - name: Set up Node.js
-        if: steps.check_parent.outputs.has_parent == 'true' && steps.check_existing.outputs.exists == 'false'
-        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
-        with:
-          node-version-file: 'package.json'
-
       - name: Prepare prompts for LLM
         if: steps.check_parent.outputs.has_parent == 'true' && steps.check_existing.outputs.exists == 'false'
         id: prepare_prompts
@@ -724,39 +718,17 @@ jobs:
               body: `<!-- changelog-agent-handled -->\n🤖 A changelog draft PR has been automatically created in docs-content: ${changelogPrUrl}`,
             });
 
-      - name: Send Slack failure alert
-        if: failure()
-        env:
-          SLACK_CHANNEL_ID: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
-          SLACK_TOKEN: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}
-          WORKFLOW_NAME: ${{ github.workflow }}
-          REPOSITORY: ${{ github.repository }}
-          RUN_ID: ${{ github.run_id }}
-          SERVER_URL: ${{ github.server_url }}
-        run: |
-          curl -sS -X POST https://slack.com/api/chat.postMessage \
-            -H "Authorization: Bearer ${SLACK_TOKEN}" \
-            -H "Content-Type: application/json; charset=utf-8" \
-            --data "$(cat <<EOF
-          {
-            "channel": "${SLACK_CHANNEL_ID}",
-            "text": ":warning: Workflow failure in ${REPOSITORY}",
-            "blocks": [
-              {
-                "type": "section",
-                "text": {
-                  "type": "mrkdwn",
-                  "text": ":warning: *${WORKFLOW_NAME}* failed in *${REPOSITORY}*"
-                }
-              },
-              {
-                "type": "section",
-                "text": {
-                  "type": "mrkdwn",
-                  "text": "<${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID}|View workflow run>"
-                }
-              }
-            ]
-          }
-          EOF
-          )"
+      # Local composite actions below require the repository to be checked out.
+      - name: Check out repo
+        if: ${{ failure() && github.event_name != 'workflow_dispatch' }}
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+
+      - uses: ./.github/actions/slack-alert
+        if: ${{ failure() && github.event_name != 'workflow_dispatch' }}
+        with:
+          slack_token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}
+
+      - uses: ./.github/actions/create-workflow-failure-issue
+        if: ${{ failure() && github.event_name != 'workflow_dispatch' }}
+        with:
+          token: ${{ secrets.DOCS_BOT_PAT_BASE }}

.github/workflows/enterprise-dates.yml

@@ -64,7 +64,7 @@ jobs:
 
       - if: ${{ steps.create-pull-request.outputs.pull-request-number }}
         name: Approve
-        uses: juliangruber/approve-pull-request-action@dcc4effb325c0b503408619918d56e40653dcc91
+        uses: juliangruber/approve-pull-request-action@68fcc9a5a73b5641cadf757cf99d73720dcb05d0 # v2.1.0
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           number: ${{ steps.create-pull-request.outputs.pull-request-number }}

.github/workflows/link-check-on-pr.yml

@@ -36,10 +36,20 @@ jobs:
 
       - uses: ./.github/actions/node-npm-setup
 
+      - name: Generate GitHub App token
+        if: ${{ github.repository == 'github/docs-internal' }}
+        id: app-token
+        uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5 # v2.0.2
+        with:
+          app-id: ${{ secrets.DOCS_BOT_APP_ID }}
+          private-key: ${{ secrets.DOCS_BOT_APP_PRIVATE_KEY }}
+          owner: github
+          repositories: docs-early-access
+
       - uses: ./.github/actions/get-docs-early-access
         if: ${{ github.repository == 'github/docs-internal' }}
         with:
-          token: ${{ secrets.DOCS_BOT_PAT_BASE }}
+          token: ${{ steps.app-token.outputs.token }}
 
       - name: Get changed files
         id: changed-files
@@ -55,7 +65,7 @@ jobs:
           FILES_CHANGED: ${{ steps.changed-files.outputs.all_changed_files }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           ACTION_RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
-          SHOULD_COMMENT: ${{ secrets.DOCS_BOT_PAT_BASE != '' }}
+          SHOULD_COMMENT: ${{ secrets.DOCS_BOT_APP_ID != '' }}
           FAIL_ON_FLAW: true
           ENABLED_LANGUAGES: en
         run: npm run check-links-pr

.github/workflows/local-dev.yml

@@ -21,10 +21,20 @@ jobs:
 
       - uses: ./.github/actions/node-npm-setup
 
+      - name: Generate GitHub App token
+        if: ${{ github.repository == 'github/docs-internal' }}
+        id: app-token
+        uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5 # v2.0.2
+        with:
+          app-id: ${{ secrets.DOCS_BOT_APP_ID }}
+          private-key: ${{ secrets.DOCS_BOT_APP_PRIVATE_KEY }}
+          owner: github
+          repositories: docs-early-access
+
       - uses: ./.github/actions/get-docs-early-access
         if: ${{ github.repository == 'github/docs-internal' }}
         with:
-          token: ${{ secrets.DOCS_BOT_PAT_BASE }}
+          token: ${{ steps.app-token.outputs.token }}
 
       - name: Disable Next.js telemetry
         run: npx next telemetry disable

.github/workflows/move-ready-to-merge-pr.yaml

@@ -23,12 +23,21 @@ jobs:
       }}
     runs-on: ubuntu-latest
     steps:
-      - name: move PR
-        uses: alex-page/github-project-automation-plus@303f24a24c67ce7adf565a07e96720faf126fe36
+      - name: Add PR to the open source board
+        uses: actions/add-to-project@5afcf98fcd03f1c2f92c3c83f58ae24323cc57fd # v2.0.0
         with:
-          project: Docs open source board
-          column: Triage
-          repo-token: ${{ secrets.DOCS_BOT_PAT_BASE }}
+          project-url: https://github.com/orgs/github/projects/2936
+          github-token: ${{ secrets.DOCS_BOT_PAT_BASE }}
+
+      - name: Move PR to Triage on the open source board
+        uses: github/update-project-action@af4f6083118f5080c89828b421ef598d1906fb60 # v4
+        with:
+          github_token: ${{ secrets.DOCS_BOT_PAT_BASE }}
+          organization: github
+          project_number: 2936
+          content_id: ${{ github.event.pull_request.node_id }}
+          field: Status
+          value: Triage
 
       - name: Check out repo
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1

.github/workflows/sync-graphql.yml

@@ -67,7 +67,7 @@ jobs:
 
       - if: ${{ steps.create-pull-request.outputs.pull-request-number }}
         name: Approve
-        uses: juliangruber/approve-pull-request-action@dcc4effb325c0b503408619918d56e40653dcc91
+        uses: juliangruber/approve-pull-request-action@68fcc9a5a73b5641cadf757cf99d73720dcb05d0 # v2.1.0
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           number: ${{ steps.create-pull-request.outputs.pull-request-number }}