Merge pull request #46346 from github/repo-sync

Repo sync

Author: docs-bot

.github/workflows/confirm-internal-staff-work-in-docs.yml

@@ -55,14 +55,15 @@ jobs:
 
             const issueNo = context.number || context.issue.number
 
-            await github.rest.issues.create({
+            const confirmationIssue = await github.rest.issues.create({
               owner: 'github',
               repo: process.env.TEAM_CONTENT_REPO,
               title: `@${context.payload.sender.login} confirm that \#${issueNo} should be in the public github/docs repo`,
               body: `@${context.payload.sender.login} opened https://github.com/github/docs/issues/${issueNo} publicly in the github/docs repo, instead of the private github/${process.env.TEAM_CONTENT_REPO} repo.\n\n@${context.payload.sender.login}, if this specifically belongs in the public repo, and no sensitive information is disclosed, please ignore this message. Otherwise, please ${context.payload.pull_request ? 'close the pull request and recreate it internally in https://github.com/github/docs-content.' : 'close the issue and reopen it internally in https://github.com/github/docs-content, or transfer it there.'}\n\nIf sensitive information was shared, please close https://github.com/github/docs/issues/${issueNo} and notify us in the \#docs-open-source channel, so we can delete it. Thanks!`,
               labels: ['OS confirmation', 'skip FR board'],
             });
 
+            core.setOutput('confirmation_issue_url', confirmationIssue.data.html_url);
             core.setOutput('did_warn', 'true')
 
       - name: Resolve Slack user ID from username
@@ -218,7 +219,7 @@ jobs:
           errors: true
           payload: |
             channel: ${{ steps.slack_user.outputs.slack_user_id }}
-            text: ${{ toJSON(format('You opened {0} publicly in github/docs instead of the private repo. An internal confirmation issue was created.', github.event.issue.html_url || github.event.pull_request.html_url)) }}
+            text: ${{ toJSON(format('You opened {0} publicly in github/docs instead of the private repo. An internal confirmation issue was created. <{1}|View the issue>.', github.event.issue.html_url || github.event.pull_request.html_url, steps.membership_check.outputs.confirmation_issue_url)) }}
 
       - name: Log Slack DM result
         if: ${{ !cancelled() && steps.membership_check.outputs.did_warn == 'true' }}

content/migrations/elm/migrate-your-repository.md

@@ -50,6 +50,7 @@ The operator must authenticate to both the source and destination enterprise wit
 1. On **{% data variables.product.prodname_ghe_server %}**, create a {% data variables.product.pat_v1 %} and select the required scope:
 
    * `admin:enterprise`
+   * `admin:org`
 
    You will use this token as the **Source token** when configuring the {% data variables.product.prodname_elm_cli %}.
 

content/migrations/elm/troubleshooting.md

@@ -154,7 +154,7 @@ curl --silent --show-error --output /dev/null --dump-header - \
   "$TARGET_API_URL/user"
 ```
 
-Each request should return `200 OK`. The `X-OAuth-Scopes` response header should include `admin:enterprise`.
+Each request should return `200 OK`. The `X-OAuth-Scopes` response header should include `admin:enterprise` and `admin:org`.
 
 If `/user` returns `200 OK` but an {% data variables.product.prodname_elm %} command returns `401 Bad credentials`, the CLI may have a different token or URL stored. Run `gh elm configure` again and carefully associate each token with its corresponding endpoint.
 

content/rest/dependency-graph/index.md

@@ -2,14 +2,17 @@
 title: REST API endpoints for the dependency graph
 shortTitle: Dependency graph
 allowTitleToDifferFromFilename: true
-intro: Use the REST API to view dependency changes and their security impact on your repository.
+intro: >-
+  Use the REST API to view dependency changes and their security impact on your
+  repository.
 versions:
   fpt: '*'
   ghes: '*'
   ghec: '*'
 children:
   - /dependency-review
   - /dependency-submission
+  - /license-compliance
   - /sboms
 redirect_from:
   - /rest/reference/dependency-graph

content/rest/dependency-graph/license-compliance.md

@@ -0,0 +1,13 @@
+---
+title: REST API endpoints for license compliance
+shortTitle: License compliance
+intro: Use the REST API to check packages against a repository's license compliance policy.
+versions: # DO NOT MANUALLY EDIT. CHANGES WILL BE OVERWRITTEN BY A 🤖
+  ghec: '*'
+autogenerated: rest
+allowTitleToDifferFromFilename: true
+category:
+  - Secure code and manage vulnerabilities
+---
+
+<!-- Content after this section is automatically generated -->

data/reusables/actions/larger-runners-table.md

@@ -1,4 +1,4 @@
 | Runner Size | Architecture| Processor (CPU)| Memory (RAM)  | Storage (SSD) | Workflow label                                                                                                                                   |
 | ------------| ------------| -------------- | ------------- | ------------- |--------------------------------------------------------------------------------------------------------------------------------------------------|
 | Large       | Intel       | 12             | 30 GB         | 14 GB         | <code>macos-latest-large</code>, <code>macos-14-large</code>, <code>macos-15-large</code> (latest), <code>macos-26-large</code> |
-| XLarge      | arm64 (M2)  | 5 (+ 8 GPU hardware acceleration) | 14 GB         | 14 GB         | <code>macos-latest-xlarge</code>, <code>macos-14-xlarge</code>, <code>macos-15-xlarge</code> (latest), <code>macos-26-xlarge</code>, <code>xcode-27-xlarge</code> ({% data variables.release-phases.public_preview_caps %}) |
+| XLarge      | arm64 (M2)  | 5 (+ 8 GPU hardware acceleration) | 14 GB         | 14 GB         | <code>macos-latest-xlarge</code>, <code>macos-14-xlarge</code>, <code>macos-15-xlarge</code> (latest), <code>macos-26-xlarge</code>, <code>xcode-27-xlarge</code> |

data/reusables/actions/supported-github-runners.md

@@ -86,7 +86,7 @@ For public repositories, jobs using the workflow labels shown in the table below
         <code><a href="https://github.com/actions/runner-images/blob/main/images/macos/macos-14-arm64-Readme.md">macos-14</a></code>,
         <code><a href="https://github.com/actions/runner-images/blob/main/images/macos/macos-15-arm64-Readme.md">macos-15</a></code>,
         <code><a href="https://github.com/actions/runner-images/blob/main/images/macos/macos-26-arm64-Readme.md">macos-26</a></code>,
-        <code><a href="https://github.com/actions/runner-images/blob/main/images/macos/xcode-27-arm64-Readme.md">xcode-27</a></code> ({% data variables.release-phases.public_preview_caps %})
+        <code><a href="https://github.com/actions/runner-images/blob/main/images/macos/xcode-27-arm64-Readme.md">xcode-27</a></code>
       </td>
     </tr>
   </tbody>
@@ -180,7 +180,7 @@ For {% ifversion ghec %}internal and{% endif %} private repositories, jobs using
         <code><a href="https://github.com/actions/runner-images/blob/main/images/macos/macos-14-arm64-Readme.md">macos-14</a></code>,
         <code><a href="https://github.com/actions/runner-images/blob/main/images/macos/macos-15-arm64-Readme.md">macos-15</a></code>,
         <code><a href="https://github.com/actions/runner-images/blob/main/images/macos/macos-26-arm64-Readme.md">macos-26</a></code>,
-        <code><a href="https://github.com/actions/runner-images/blob/main/images/macos/xcode-27-arm64-Readme.md">xcode-27</a></code> ({% data variables.release-phases.public_preview_caps %})
+        <code><a href="https://github.com/actions/runner-images/blob/main/images/macos/xcode-27-arm64-Readme.md">xcode-27</a></code>
       </td>
     </tr>
   </tbody>

src/frame/components/ui/MiniTocs/Minitocs.module.scss

@@ -11,18 +11,14 @@
     // Align the active indicator with the In this article heading. Brand wraps
     // each item in a 2px-padded div, so cancel that offset.
     margin-left: -2px;
-    // Long TOC headings truncate to one line; the Up next title wraps instead.
+    // Long TOC headings wrap onto multiple lines rather than truncating.
     display: block;
-    white-space: nowrap;
-    overflow: hidden;
-    text-overflow: ellipsis;
+    overflow-wrap: anywhere;
 
     // Brand wraps the visible label in labelArea and label spans. Set text size
-    // and truncation there so the ellipsis renders.
+    // there too.
     span {
       font-size: var(--brand-text-size-100, 0.875rem);
-      overflow: hidden;
-      text-overflow: ellipsis;
     }
 
     // Brand sizes labelArea for 16px text with a 31px min-height. Our 14px text
@@ -34,8 +30,8 @@
       min-width: 0;
     }
 
-    // The inner label is the bit that actually truncates; as a flex child it
-    // needs min-width: 0 to shrink below its content width.
+    // As a flex child the inner label needs min-width: 0 to shrink below its
+    // content width so it wraps.
     span span {
       display: block;
       min-width: 0;

src/github-apps/data/ghec-2022-11-28/fine-grained-pat-permissions.json

@@ -9593,6 +9593,21 @@
       }
     ]
   },
+  "repository_license_policy": {
+    "title": "Repository license policy",
+    "displayTitle": "Repository permissions for \"Repository license policy\"",
+    "permissions": [
+      {
+        "category": "dependency-graph",
+        "slug": "check-license-compliance-for-packages",
+        "subcategory": "license-compliance",
+        "verb": "post",
+        "requestPath": "/repos/{owner}/{repo}/license-compliance/package-checks",
+        "additional-permissions": false,
+        "access": "read"
+      }
+    ]
+  },
   "repository_advisories": {
     "title": "Repository security advisories",
     "displayTitle": "Repository permissions for \"Repository security advisories\"",

src/github-apps/data/ghec-2022-11-28/fine-grained-pat.json

@@ -2907,6 +2907,12 @@
       "subcategory": "dependency-submission",
       "verb": "post",
       "requestPath": "/repos/{owner}/{repo}/dependency-graph/snapshots"
+    },
+    {
+      "slug": "check-license-compliance-for-packages",
+      "subcategory": "license-compliance",
+      "verb": "post",
+      "requestPath": "/repos/{owner}/{repo}/license-compliance/package-checks"
     }
   ],
   "deploy-keys": [