Merge branch 'main' into main

Author: garrettw

.github/instructions/content.instructions.md

@@ -1,5 +1,5 @@
 ---
-applyTo: "content/**,data/**,**/*.md"
+applyTo: "content/**,data/**"
 ---
 
 # Copilot content instructions for docs.github.com

.github/instructions/style-guide-summary.instructions.md

@@ -1,5 +1,5 @@
 ---
-applyTo: "content/**,data/**,**/*.md"
+applyTo: "content/**,data/**"
 ---
 
 # Concise style guide for docs.github.com

.github/workflows/enterprise-dates.yml

@@ -32,7 +32,7 @@ jobs:
           app-id: ${{ secrets.DOCS_BOT_APP_ID }}
           private-key: ${{ secrets.DOCS_BOT_APP_PRIVATE_KEY }}
           owner: github
-          repositories: docs-internal,docs-engineering
+          repositories: docs-internal,docs-engineering,enterprise-releases
 
       - uses: ./.github/actions/node-npm-setup
 

.github/workflows/enterprise-release-issue.yml

@@ -27,7 +27,7 @@ jobs:
           app-id: ${{ secrets.DOCS_BOT_APP_ID }}
           private-key: ${{ secrets.DOCS_BOT_APP_PRIVATE_KEY }}
           owner: github
-          repositories: docs-content,docs-engineering
+          repositories: docs-content,docs-engineering,enterprise-releases
 
       - uses: ./.github/actions/node-npm-setup
 

.github/workflows/line-endings.yml

@@ -0,0 +1,45 @@
+name: Line endings
+
+# **What it does**: Fails if any committed file violates the repo's `.gitattributes`
+#   line-ending rules (for example, CRLF in a file declared `eol=lf`).
+# **Why we have it**: `.gitattributes` (`*.md text eol=lf`, `* text=auto`) only
+#   normalizes line endings during a local `git add`/checkout. A server-side
+#   squash-merge can commit CRLF blobs that bypass it. A file with mixed line endings
+#   then shows as permanently "modified" on Linux runners, which breaks PR-creating
+#   sync workflows that use peter-evans/create-pull-request. See
+#   github/docs-engineering#6657 and github/docs-engineering#6656.
+# **Who does it impact**: Docs engineering, open-source engineering contributors.
+
+on:
+  workflow_dispatch:
+  merge_group:
+  pull_request:
+
+permissions:
+  contents: read
+
+# This allows a subsequently queued workflow run to interrupt previous runs
+concurrency:
+  group: '${{ github.workflow }} @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}'
+  cancel-in-progress: true
+
+jobs:
+  line-endings:
+    if: github.repository == 'github/docs-internal' || github.repository == 'github/docs'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out repo
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+
+      - name: Check line endings
+        # Re-stage every file through the `.gitattributes` filters and fail if any
+        # committed blob disagrees with them (usually CRLF where LF is required).
+        run: |
+          git add --renormalize .
+          if ! git diff --cached --quiet; then
+            echo "::error::These files violate .gitattributes line-ending rules (usually CRLF that should be LF):"
+            git diff --cached --name-only
+            echo ""
+            echo "Fix locally with: git add --renormalize . && git commit"
+            exit 1
+          fi

.github/workflows/link-check-external.yml

@@ -61,15 +61,6 @@ jobs:
         run: |
           if [ -f "artifacts/external-link-report.md" ]; then
             echo "has_report=true" >> $GITHUB_OUTPUT
-            # Prepend disclaimer banner
-            tmp=$(mktemp)
-            {
-              echo "> [!NOTE]"
-              echo "> **No action needed right now.** The link checker is being actively worked on and may produce false positives. You can safely ignore this report for now. We'll let you know when it's reliable."
-              echo ""
-              cat "artifacts/external-link-report.md"
-            } > "$tmp"
-            mv "$tmp" "artifacts/external-link-report.md"
           else
             echo "has_report=false" >> $GITHUB_OUTPUT
             echo "No broken link report generated - all links valid!"

.github/workflows/link-check-github-github.yml

@@ -55,6 +55,9 @@ jobs:
           curl --retry-connrefused --retry 5 -I http://localhost:4000/
 
       - name: Run broken github/github link check
+        env:
+          # Needs a token with access to github/github; the app token is scoped to it above
+          GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
         run: |
           npm run check-github-github-links -- broken_github_github_links.md
 

.github/workflows/link-check-internal.yml

@@ -248,9 +248,6 @@ jobs:
             # Combine all markdown reports
             echo "# Internal Links Report" > combined-report.md
             echo "" >> combined-report.md
-            echo "> [!NOTE]" >> combined-report.md
-            echo "> **No action needed right now.** The link checker is being actively worked on and may produce false positives. You can safely ignore this report for now. We'll let you know when it's reliable." >> combined-report.md
-            echo "" >> combined-report.md
             echo "Generated: $(date -u +'%Y-%m-%d %H:%M UTC')" >> combined-report.md
             echo "[Action run](${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }})" >> combined-report.md
             echo "" >> combined-report.md

.github/workflows/link-check-on-pr.yml

@@ -8,7 +8,7 @@ on:
   workflow_dispatch:
   # merge_group:
   pull_request:
-    types: [labeled, opened, synchronize, reopened]
+    types: [opened, synchronize, reopened]
 
 permissions:
   contents: read
@@ -24,9 +24,7 @@ jobs:
   check-links:
     name: Check links
     runs-on: ubuntu-latest
-    if: |
-      (github.repository == 'github/docs-internal' || github.repository == 'github/docs') &&
-      (github.event_name == 'workflow_dispatch' || contains(github.event.pull_request.labels.*.name, 'check-links'))
+    if: github.repository == 'github/docs-internal' || github.repository == 'github/docs'
     steps:
       - name: Checkout
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
@@ -61,12 +59,14 @@ jobs:
 
       - name: Check links in changed files
         if: steps.changed-files.outputs.any_changed == 'true'
+        # Work in progress: never fail the PR. The comment is informational only.
+        continue-on-error: true
         env:
           FILES_CHANGED: ${{ steps.changed-files.outputs.all_changed_files }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           ACTION_RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
           SHOULD_COMMENT: ${{ secrets.DOCS_BOT_APP_ID != '' }}
-          FAIL_ON_FLAW: true
+          FAIL_ON_FLAW: false
           ENABLED_LANGUAGES: en
         run: npm run check-links-pr
 

.github/workflows/sync-sdk-docs.yml

@@ -24,7 +24,7 @@ on:
     types: [opened, synchronize, reopened]
     paths:
       - '.github/workflows/sync-sdk-docs.yml'
-      - 'src/scripts/sync-sdk-docs/**'
+      - 'src/workflows/sync-sdk-docs/**'
 
 concurrency:
   group: sync-sdk-docs-${{ github.event_name }}
@@ -88,7 +88,7 @@ jobs:
 
       - name: Normalize content
         run: |
-          npx tsx src/scripts/sync-sdk-docs/normalize-sdk-docs.ts \
+          npx tsx src/workflows/sync-sdk-docs/normalize-sdk-docs.ts \
             --content-dir content \
             --sdk-docs-dir "$SDK_DOCS_TARGET"
 
@@ -98,7 +98,7 @@ jobs:
         run: |
           # Puppeteer needs --no-sandbox on GitHub Actions runners
           echo '{ "args": ["--no-sandbox", "--disable-setuid-sandbox"] }' > /tmp/puppeteer-config.json
-          npx tsx src/scripts/sync-sdk-docs/convert-mermaid.ts \
+          npx tsx src/workflows/sync-sdk-docs/convert-mermaid.ts \
             --sdk-docs-dir "$SDK_DOCS_TARGET" \
             --assets-dir "$ASSETS_TARGET" \
             --repo-root . \