[pull] main from github:main

.devcontainer/Dockerfile

@@ -1,7 +1,7 @@
 # To find available Node images, see https://mcr.microsoft.com/en-us/product/devcontainers/javascript-node/tags
 
 # [Choice] Node.js version
-ARG VARIANT="dev-20-bullseye"
+ARG VARIANT="dev-22-bullseye"
 FROM mcr.microsoft.com/devcontainers/javascript-node:${VARIANT}
 
 # [Optional] Uncomment this section to install additional OS packages.

.devcontainer/devcontainer.json

@@ -2,66 +2,67 @@
 // https://github.com/microsoft/vscode-dev-containers/tree/v0.177.0/containers/javascript-node
 // -
 {
-    "name": "docs.github.com",
-    "build": {
-        "dockerfile": "Dockerfile",
-        // Update 'VARIANT' to pick a Node version
-        "args": { "VARIANT": "20" }
-    },
+  "name": "docs.github.com",
+  "build": {
+    "dockerfile": "Dockerfile",
+    // Update 'VARIANT' to pick a Node version
+    "args": { "VARIANT": "22" }
+  },
 
-    // Install features. Type 'feature' in the VS Code command palette for a full list.
-    "features": {
-        "sshd": "latest"
-    },
+  // Install features. Type 'feature' in the VS Code command palette for a full list.
+  "features": {
+    "sshd": "latest"
+  },
 
-    "customizations": {
-        "vscode": {
-            // Set *default* container specific settings.json values on container create.
-            "settings": {
-                "terminal.integrated.shell.linux": "/bin/bash",
-                "cSpell.language": ",en"
-            },
-            // Visual Studio Code extensions which help authoring for docs.github.com.
-            "extensions": [
-                "dbaeumer.vscode-eslint",
-                "sissel.shopify-liquid",
-                "davidanson.vscode-markdownlint",
-                "bierner.markdown-preview-github-styles",
-                "streetsidesoftware.code-spell-checker",
-                "alistairchristie.open-reusables",
-                "AlistairChristie.version-identifier",
-                "GitHub.copilot",
-                "GitHub.copilot-chat"
-            ]
-        },
-        "codespaces": {
-            "repositories": {
-                // allow Codespaces to pull from separate repo when user has access
-                "github/docs-early-access": {
-                    "permissions": {
-                        "contents": "write"
-                    }
-                }
-            }
-        }
+  "customizations": {
+    "vscode": {
+      // Set *default* container specific settings.json values on container create.
+      "settings": {
+        "terminal.integrated.shell.linux": "/bin/bash",
+        "cSpell.language": ",en"
+      },
+      // Visual Studio Code extensions which help authoring for docs.github.com.
+      "extensions": [
+        "dbaeumer.vscode-eslint",
+        "sissel.shopify-liquid",
+        "davidanson.vscode-markdownlint",
+        "bierner.markdown-preview-github-styles",
+        "streetsidesoftware.code-spell-checker",
+        "alistairchristie.open-reusables",
+        "AlistairChristie.version-identifier",
+        "peterbe.ghdocs-goer",
+        "GitHub.copilot",
+        "GitHub.copilot-chat"
+      ]
     },
+    "codespaces": {
+      "repositories": {
+        // allow Codespaces to pull from separate repo when user has access
+        "github/docs-early-access": {
+          "permissions": {
+            "contents": "write"
+          }
+        }
+      }
+    }
+  },
 
-    // Use 'forwardPorts' to make a list of ports inside the container available locally.
-    "forwardPorts": [4000],
+  // Use 'forwardPorts' to make a list of ports inside the container available locally.
+  "forwardPorts": [4000],
 
-    "portsAttributes": {
-        "4000": {
-            "label": "Preview"
-        }
-    },
+  "portsAttributes": {
+    "4000": {
+      "label": "Preview"
+    }
+  },
 
-    // Use 'postCreateCommand' to run commands after the container is created.
-    "postCreateCommand": "npm ci",
+  // Use 'postCreateCommand' to run commands after the container is created.
+  "postCreateCommand": "npm ci",
 
-    // Comment out connect as root instead. More info: https://aka.ms/vscode-remote/containers/non-root.
-    "remoteUser": "node",
+  // Comment out connect as root instead. More info: https://aka.ms/vscode-remote/containers/non-root.
+  "remoteUser": "node",
 
-    "hostRequirements": {
-        "memory": "8gb"
-    }
+  "hostRequirements": {
+    "memory": "8gb"
+  }
 }

.github/CODEOWNERS

@@ -11,7 +11,7 @@
 src/ghes-releases/lib/enterprise-dates.json @github/docs-content-enterprise
 
 # Requires review of #actions-oidc-integration, docs-engineering/issues/1506
-content/actions/deployment/security-hardening-your-deployments/** @github/oidc
+# content/actions/deployment/security-hardening-your-deployments/** @github/oidc
 
 # RAI - CELA
 data/reusables/rai/** @github/legal-product

.github/actions/labeler/action.yml

@@ -0,0 +1,33 @@
+name: Labeler
+
+description: Adds labels to an Issue or PR
+inputs:
+  token:
+    description: defaults to GITHUB_TOKEN, otherwise can use a PAT
+    required: false
+    default: ${{ github.token }}
+  addLabels:
+    description: array of labels to apply
+    required: false
+  removeLabels:
+    description: array of labels to remove
+    required: false
+  ignoreIfAssigned:
+    description: don't apply labels if there are assignees
+    required: false
+  ignoreIfLabeled:
+    description: don't apply labels if there are already labels added
+    required: false
+
+runs:
+  using: 'composite'
+  steps:
+    - name: Add label to an issue or pr
+      run: node .github/actions/labeler/labeler.js
+      shell: bash
+      env:
+        GITHUB_TOKEN: ${{ inputs.token }}
+        ADD_LABELS: ${{ inputs.addLabels }}
+        REMOVE_LABELS: ${{ inputs.removeLabels }}
+        IGNORE_IF_ASSIGNED: ${{ inputs.ignoreIfAssigned }}
+        IGNORE_IF_LABELED: ${{ inputs.ignoreIfLabeled }}

.github/actions/labeler/labeler.js

@@ -0,0 +1,160 @@
+/* See function main in this file for documentation */
+
+import coreLib from '@actions/core'
+
+import github from '#src/workflows/github.js'
+import { getActionContext } from '#src/workflows/action-context.js'
+import { boolEnvVar } from '#src/workflows/get-env-inputs.js'
+
+// When this file is invoked directly from action as opposed to being imported
+if (import.meta.url.endsWith(process.argv[1])) {
+  if (!process.env.GITHUB_TOKEN) {
+    throw new Error('You must set the GITHUB_TOKEN environment variable.')
+  }
+
+  const { ADD_LABELS, REMOVE_LABELS } = process.env
+
+  const octokit = github()
+
+  const opts = {
+    addLabels: ADD_LABELS,
+    removeLabels: REMOVE_LABELS,
+    ignoreIfAssigned: boolEnvVar('IGNORE_IF_ASSIGNED'),
+    ignoreIfLabeled: boolEnvVar('IGNORE_IF_LABELED'),
+  }
+
+  // labels come in comma separated from actions
+  let addLabels
+
+  if (opts.addLabels) {
+    addLabels = [...opts.addLabels.split(',')]
+    opts.addLabels = addLabels.map((l) => l.trim())
+  } else {
+    opts.addLabels = []
+  }
+
+  let removeLabels
+
+  if (opts.removeLabels) {
+    removeLabels = [...opts.removeLabels.split(',')]
+    opts.removeLabels = removeLabels.map((l) => l.trim())
+  } else {
+    opts.removeLabels = []
+  }
+
+  const actionContext = getActionContext()
+  const { owner, repo } = actionContext
+  let issueOrPrNumber = actionContext?.pull_request?.number
+
+  if (!issueOrPrNumber) {
+    issueOrPrNumber = actionContext?.issue?.number
+  }
+
+  opts.issue_number = issueOrPrNumber
+  opts.owner = owner
+  opts.repo = repo
+
+  main(coreLib, octokit, opts, {})
+}
+
+/*
+ * Applies labels to an issue or pull request.
+ *
+ * opts:
+ *  issue_number {number} id of the issue or pull request to label
+ *  owner {string} owner of the repository
+ *  repo {string} repository name
+ *  addLabels {Array<string>} array of labels to apply
+ *  removeLabels {Array<string>} array of labels to remove
+ *  ignoreIfAssigned {boolean} don't apply labels if there are assignees
+ *  ignoreIfLabeled {boolean} don't apply labels if there are already labels added
+ */
+export default async function main(core, octokit, opts = {}) {
+  if (opts.addLabels?.length === 0 && opts.removeLabels?.length === 0) {
+    core.info('No labels to add or remove specified, nothing to do.')
+    return
+  }
+
+  if (opts.ignoreIfAssigned || opts.ignoreIfLabeled) {
+    try {
+      const { data } = await octokit.issues.get({
+        issue_number: opts.issue_number,
+        owner: opts.owner,
+        repo: opts.repo,
+      })
+
+      if (opts.ignoreIfAssigned) {
+        if (data.assignees.length > 0) {
+          core.info(
+            `ignore-if-assigned is true: not applying labels since there's ${data.assignees.length} assignees`,
+          )
+          return 0
+        }
+      }
+
+      if (opts.ignoreIfLabeled) {
+        if (data.labels.length > 0) {
+          core.info(
+            `ignore-if-labeled is true: not applying labels since there's ${data.labels.length} labels applied`,
+          )
+          return 0
+        }
+      }
+    } catch (err) {
+      throw new Error(`Error getting issue: ${err}`)
+    }
+  }
+
+  if (opts.removeLabels?.length > 0) {
+    // removing a label fails if the label isn't already applied
+    let appliedLabels = []
+
+    try {
+      const { data } = await octokit.issues.get({
+        issue_number: opts.issue_number,
+        owner: opts.owner,
+        repo: opts.repo,
+      })
+
+      appliedLabels = data.labels.map((l) => l.name)
+    } catch (err) {
+      throw new Error(`Error getting issue: ${err}`)
+    }
+
+    opts.removeLabels = opts.removeLabels.filter((l) => appliedLabels.includes(l))
+
+    await Promise.all(
+      opts.removeLabels.map(async (label) => {
+        try {
+          await octokit.issues.removeLabel({
+            issue_number: opts.issue_number,
+            owner: opts.owner,
+            repo: opts.repo,
+            name: label,
+          })
+        } catch (err) {
+          throw new Error(`Error removing label: ${err}`)
+        }
+      }),
+    )
+
+    if (opts.removeLabels.length > 0) {
+      core.info(`Removed labels: ${opts.removeLabels.join(', ')}`)
+    }
+  }
+
+  if (opts.addLabels?.length > 0) {
+    try {
+      await octokit.issues.addLabels({
+        issue_number: opts.issue_number,
+        owner: opts.owner,
+        repo: opts.repo,
+        labels: opts.addLabels,
+      })
+
+      core.info(`Added labels: ${opts.addLabels.join(', ')}`)
+    } catch (err) {
+      throw new Error(`Error adding label: ${err}`)
+    }
+  }
+}