out of date branch Merge branch 'main' into jules-4795

.github/workflows/automerge.yml

@@ -1,4 +1,4 @@
-name: automerge
+name: Automerge
 
 # **What it does**: Pull requests with label "automerge" or "autosquash" will automatically merge.
 # **Why we have it**: While now this is a feature built into GitHub, we still use it as part of other automation.

.github/workflows/autoupdate-branch.yml

@@ -1,4 +1,4 @@
-name: autoupdate branch
+name: Autoupdate branch
 
 # **What it does**: Any pull requests with "autoupdate" label will get main branch updates.
 # **Why we have it**: Our repo-sync automation relies on it.

.github/workflows/crowdin.yml

@@ -14,6 +14,9 @@ jobs:
     name: Sync with Crowdin
     if: github.repository == 'github/docs-internal'
     runs-on: ubuntu-latest
+    # A sync's average run time is ~3.2 hours.
+    # This sets a maximum execution time of 300 minutes (5 hours) to prevent the workflow from running longer than necessary.
+    timeout-minutes: 300
     steps:
       - name: Checkout
         uses: actions/checkout@1e204e9a9253d643386038d443f96446fa156a97
@@ -59,3 +62,24 @@ jobs:
           # See https://crowdin.com/settings#api-key to generate a token
           # This token was created by logging into Crowdin with the octoglot user
           CROWDIN_PERSONAL_TOKEN: ${{ secrets.CROWDIN_PERSONAL_TOKEN }}
+
+      # When the maximum execution time is reached for this job, Actions cancels the workflow run.
+      # This emits a notification for the first responder to triage.
+      - name: Send Slack notification if workflow is cancelled
+        uses: someimportantcompany/github-actions-slack-message@f8d28715e7b8a4717047d23f48c39827cacad340
+        if: cancelled()
+        with:
+          channel: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
+          bot-token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}
+          color: failure
+          text: The last Crowdin Sync run for ${{github.repository}} was cancelled. Please try running the workflow manually; see https://github.com/${{github.repository}}/actions/workflows/crowdin.yml
+
+      # Emit a notification for the first responder to triage if the workflow failed.
+      - name: Send Slack notification if workflow failed
+        uses: someimportantcompany/github-actions-slack-message@f8d28715e7b8a4717047d23f48c39827cacad340
+        if: failure()
+        with:
+          channel: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
+          bot-token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}
+          color: failure
+          text: The last Crowdin Sync run for ${{github.repository}} failed. See https://github.com/${{github.repository}}/actions/workflows/crowdin.yml

.github/workflows/link-check-ghec.yml

@@ -0,0 +1,36 @@
+name: 'Link Checker: Enterprise Cloud'
+
+# **What it does**: This checks links for GHEC version of docs.
+# **Why we have it**: We want to know if links break.
+# **Who does it impact**: Docs content.
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - main
+  pull_request:
+
+jobs:
+  build:
+    runs-on: ${{ fromJSON('["ubuntu-latest", "self-hosted"]')[github.repository == 'github/docs-internal'] }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@1e204e9a9253d643386038d443f96446fa156a97
+
+      - name: Setup node
+        uses: actions/setup-node@270253e841af726300e85d718a5f606959b2903c
+        with:
+          node-version: 16.8.x
+          cache: npm
+
+      - name: Install
+        run: npm ci
+
+      - name: Build
+        run: npm run build
+
+      - name: 'Link check: Enterprise Cloud'
+        env:
+          DOCS_VERSION: 'enterprise-cloud'
+        run: npm run link-check

.github/workflows/move-ready-to-merge-pr.yaml

@@ -11,6 +11,7 @@ on:
 
 permissions:
   pull-requests: write
+  issues: write
 
 jobs:
   unmark_for_review:

.github/workflows/site-policy-sync.yml

@@ -1,4 +1,4 @@
-name: site-policy-sync
+name: Site policy sync
 
 # **What it does**: Updates our site-policy repo when changes happen to site policy docs.
 # **Why we have it**: We want keep site-policy repo up to date.

.github/workflows/staging-build-pr.yml

@@ -30,7 +30,7 @@ jobs:
 
   build-pr:
     if: ${{ github.repository == 'github/docs-internal' || github.repository == 'github/docs' }}
-    runs-on: ubuntu-latest
+    runs-on: ${{ fromJSON('["ubuntu-latest", "self-hosted"]')[github.repository == 'github/docs-internal'] }}
     timeout-minutes: 5
     # This interrupts Build, Deploy, and pre-write Undeploy workflow runs in
     # progress for this PR branch.
@@ -59,10 +59,13 @@ jobs:
             notAllowed:
               - '*.js'
               - '*.mjs'
+              - '*.cjs'
               - '*.ts'
               - '*.tsx'
               - '*.json'
               - '.npmrc'
+              - '.babelrc*'
+              - '.env*'
               - 'script/**'
               - 'Procfile'
 
@@ -124,10 +127,6 @@ jobs:
             app.json \
             Procfile
 
-          ls -lh app.tar
-          zstd -q app.tar -o app.tar.zst
-          ls -lh app.tar.zst
-
       # Upload only the files needed to run this application.
       # We are not willing to trust the rest (e.g. script/) for the remainder
       # of the deployment process.
@@ -135,4 +134,4 @@ jobs:
         uses: actions/upload-artifact@27121b0bdffd731efa15d66772be8dc71245d074
         with:
           name: pr_build
-          path: app.tar.zst
+          path: app.tar

.github/workflows/staging-deploy-pr.yml

@@ -251,7 +251,7 @@ jobs:
   prepare-for-deploy:
     needs: [pr-metadata, check-pr-before-prepare]
     if: ${{ needs.check-pr-before-prepare.outputs.pull_request_state == 'open' }}
-    runs-on: ubuntu-latest
+    runs-on: ${{ fromJSON('["ubuntu-latest", "self-hosted"]')[github.repository == 'github/docs-internal'] }}
     timeout-minutes: 5
     # This interrupts Build, Deploy, and pre-write Undeploy workflow runs in
     # progress for this PR branch.
@@ -325,7 +325,6 @@ jobs:
 
       - name: Extract user-changes to temp directory
         run: |
-          zstd -d -q $RUNNER_TEMP/app.tar.zst -o $RUNNER_TEMP/app.tar
           mkdir $RUNNER_TEMP/app
           tar -x --file=$RUNNER_TEMP/app.tar -C "$RUNNER_TEMP/app/"
 
@@ -447,7 +446,7 @@ jobs:
   deploy:
     needs: [pr-metadata, prepare-for-deploy, check-pr-before-deploy]
     if: ${{ needs.check-pr-before-deploy.outputs.pull_request_state == 'open' }}
-    runs-on: ubuntu-latest
+    runs-on: ${{ fromJSON('["ubuntu-latest", "self-hosted"]')[github.repository == 'github/docs-internal'] }}
     timeout-minutes: 10
     # This interrupts Build, Deploy, and pre-write Undeploy workflow runs in
     # progress for this PR branch.

.github/workflows/triage-stale-check.yml

@@ -21,7 +21,7 @@ jobs:
           days-before-pr-stale: 7
           days-before-pr-close: 3
           stale-pr-label: 'stale'
-          exempt-pr-labels: 'waiting for review,never-stale'
+          exempt-pr-labels: 'waiting for review,never-stale, ready to merge'
   stale_staff:
     if: github.repository == 'github/docs'
     runs-on: ubuntu-latest