Repo sync

.github/workflows/confirm-internal-staff-work-in-docs.yml

@@ -55,14 +55,15 @@ jobs:
 
             const issueNo = context.number || context.issue.number
 
-            await github.rest.issues.create({
+            const confirmationIssue = await github.rest.issues.create({
               owner: 'github',
               repo: process.env.TEAM_CONTENT_REPO,
               title: `@${context.payload.sender.login} confirm that \#${issueNo} should be in the public github/docs repo`,
               body: `@${context.payload.sender.login} opened https://github.com/github/docs/issues/${issueNo} publicly in the github/docs repo, instead of the private github/${process.env.TEAM_CONTENT_REPO} repo.\n\n@${context.payload.sender.login}, if this specifically belongs in the public repo, and no sensitive information is disclosed, please ignore this message. Otherwise, please ${context.payload.pull_request ? 'close the pull request and recreate it internally in https://github.com/github/docs-content.' : 'close the issue and reopen it internally in https://github.com/github/docs-content, or transfer it there.'}\n\nIf sensitive information was shared, please close https://github.com/github/docs/issues/${issueNo} and notify us in the \#docs-open-source channel, so we can delete it. Thanks!`,
               labels: ['OS confirmation', 'skip FR board'],
             });
 
+            core.setOutput('confirmation_issue_url', confirmationIssue.data.html_url);
             core.setOutput('did_warn', 'true')
 
       - name: Resolve Slack user ID from username
@@ -218,7 +219,7 @@ jobs:
           errors: true
           payload: |
             channel: ${{ steps.slack_user.outputs.slack_user_id }}
-            text: ${{ toJSON(format('You opened {0} publicly in github/docs instead of the private repo. An internal confirmation issue was created.', github.event.issue.html_url || github.event.pull_request.html_url)) }}
+            text: ${{ toJSON(format('You opened {0} publicly in github/docs instead of the private repo. An internal confirmation issue was created. <{1}|View the issue>.', github.event.issue.html_url || github.event.pull_request.html_url, steps.membership_check.outputs.confirmation_issue_url)) }}
 
       - name: Log Slack DM result
         if: ${{ !cancelled() && steps.membership_check.outputs.did_warn == 'true' }}

content/actions/tutorials/build-and-test-code/net.md

@@ -145,7 +145,21 @@ steps:
 
 ### Caching dependencies
 
-You can cache NuGet dependencies for future workflows using the optional `cache` input. For example, the YAML below caches the NuGet `global-packages` folder, and then installs the `Newtonsoft` package. A second optional input, `cache-dependency-path`, can be used to specify the path to a dependency file: `packages.lock.json`.
+You can cache NuGet dependencies for future workflows using the optional `cache` input. Caching requires a `packages.lock.json` file. If the action cannot find a matching lock file, it fails.
+
+Before enabling caching:
+
+1. In the directory containing your project or solution, generate the lock files locally.
+
+   ```shell
+   dotnet restore --use-lock-file
+   ```
+
+1. Commit the generated `packages.lock.json` files to your repository so they are available when the workflow runs.
+
+For more information, see [Locking dependencies](https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies) in the NuGet documentation.
+
+By default, `setup-dotnet` looks for a lock file in the repository root. Use `cache-dependency-path` to specify lock files in subdirectories or multiple lock files. The following example caches the NuGet `global-packages` folder using lock files throughout the repository, then restores the dependencies in locked mode.
 
 For more information, see [AUTOTITLE](/actions/reference/workflows-and-actions/dependency-caching).
 
@@ -157,8 +171,9 @@ steps:
   with:
     dotnet-version: '6.x'
     cache: true
-- name: Install dependencies
-  run: dotnet add package Newtonsoft.Json --version 12.0.1
+    cache-dependency-path: '**/packages.lock.json'
+- name: Restore dependencies
+  run: dotnet restore --locked-mode
 ```
 
 > [!NOTE]
@@ -202,23 +217,23 @@ jobs:
       matrix:
         dotnet-version: [ '3.1.x', '6.0.x' ]
 
-      steps:
-        - uses: {% data reusables.actions.action-checkout %}
-        - name: Setup dotnet
-          uses: {% data reusables.actions.action-setup-dotnet %}
-          with:
-            dotnet-version: {% raw %}${{ matrix.dotnet-version }}{% endraw %}
-        - name: Install dependencies
-          run: dotnet restore
-        - name: Test with dotnet
-          run: dotnet test --no-restore --logger trx --results-directory {% raw %}"TestResults-${{ matrix.dotnet-version }}"{% endraw %}
-        - name: Upload dotnet test results
-          uses: {% data reusables.actions.action-upload-artifact %}
-          with:
-            name: {% raw %}dotnet-results-${{ matrix.dotnet-version }}{% endraw %}
-            path: {% raw %}TestResults-${{ matrix.dotnet-version }}{% endraw %}
-          # Use always() to always run this step to publish test results when there are test failures
-          if: {% raw %}${{ always() }}{% endraw %}
+    steps:
+      - uses: {% data reusables.actions.action-checkout %}
+      - name: Setup dotnet
+        uses: {% data reusables.actions.action-setup-dotnet %}
+        with:
+          dotnet-version: {% raw %}${{ matrix.dotnet-version }}{% endraw %}
+      - name: Install dependencies
+        run: dotnet restore
+      - name: Test with dotnet
+        run: dotnet test --no-restore --logger trx --results-directory {% raw %}"TestResults-${{ matrix.dotnet-version }}"{% endraw %}
+      - name: Upload dotnet test results
+        uses: {% data reusables.actions.action-upload-artifact %}
+        with:
+          name: {% raw %}dotnet-results-${{ matrix.dotnet-version }}{% endraw %}
+          path: {% raw %}TestResults-${{ matrix.dotnet-version }}{% endraw %}
+        # Use always() to always run this step to publish test results when there are test failures
+        if: {% raw %}${{ always() }}{% endraw %}
 ```
 
 ## Publishing to package registries

content/migrations/elm/migrate-your-repository.md

@@ -50,6 +50,7 @@ The operator must authenticate to both the source and destination enterprise wit
 1. On **{% data variables.product.prodname_ghe_server %}**, create a {% data variables.product.pat_v1 %} and select the required scope:
 
    * `admin:enterprise`
+   * `admin:org`
 
    You will use this token as the **Source token** when configuring the {% data variables.product.prodname_elm_cli %}.
 

content/migrations/elm/troubleshooting.md

@@ -154,7 +154,7 @@ curl --silent --show-error --output /dev/null --dump-header - \
   "$TARGET_API_URL/user"
 ```
 
-Each request should return `200 OK`. The `X-OAuth-Scopes` response header should include `admin:enterprise`.
+Each request should return `200 OK`. The `X-OAuth-Scopes` response header should include `admin:enterprise` and `admin:org`.
 
 If `/user` returns `200 OK` but an {% data variables.product.prodname_elm %} command returns `401 Bad credentials`, the CLI may have a different token or URL stored. Run `gh elm configure` again and carefully associate each token with its corresponding endpoint.
 

content/rest/dependency-graph/index.md

@@ -2,14 +2,17 @@
 title: REST API endpoints for the dependency graph
 shortTitle: Dependency graph
 allowTitleToDifferFromFilename: true
-intro: Use the REST API to view dependency changes and their security impact on your repository.
+intro: >-
+  Use the REST API to view dependency changes and their security impact on your
+  repository.
 versions:
   fpt: '*'
   ghes: '*'
   ghec: '*'
 children:
   - /dependency-review
   - /dependency-submission
+  - /license-compliance
   - /sboms
 redirect_from:
   - /rest/reference/dependency-graph

content/rest/dependency-graph/license-compliance.md

@@ -0,0 +1,13 @@
+---
+title: REST API endpoints for license compliance
+shortTitle: License compliance
+intro: Use the REST API to check packages against a repository's license compliance policy.
+versions: # DO NOT MANUALLY EDIT. CHANGES WILL BE OVERWRITTEN BY A 🤖
+  ghec: '*'
+autogenerated: rest
+allowTitleToDifferFromFilename: true
+category:
+  - Secure code and manage vulnerabilities
+---
+
+<!-- Content after this section is automatically generated -->

data/reusables/actions/larger-runners-table.md

@@ -1,4 +1,4 @@
 | Runner Size | Architecture| Processor (CPU)| Memory (RAM)  | Storage (SSD) | Workflow label                                                                                                                                   |
 | ------------| ------------| -------------- | ------------- | ------------- |--------------------------------------------------------------------------------------------------------------------------------------------------|
 | Large       | Intel       | 12             | 30 GB         | 14 GB         | <code>macos-latest-large</code>, <code>macos-14-large</code>, <code>macos-15-large</code> (latest), <code>macos-26-large</code> |
-| XLarge      | arm64 (M2)  | 5 (+ 8 GPU hardware acceleration) | 14 GB         | 14 GB         | <code>macos-latest-xlarge</code>, <code>macos-14-xlarge</code>, <code>macos-15-xlarge</code> (latest), <code>macos-26-xlarge</code>, <code>xcode-27-xlarge</code> ({% data variables.release-phases.public_preview_caps %}) |
+| XLarge      | arm64 (M2)  | 5 (+ 8 GPU hardware acceleration) | 14 GB         | 14 GB         | <code>macos-latest-xlarge</code>, <code>macos-14-xlarge</code>, <code>macos-15-xlarge</code> (latest), <code>macos-26-xlarge</code>, <code>xcode-27-xlarge</code> |

data/reusables/actions/supported-github-runners.md

@@ -86,7 +86,7 @@ For public repositories, jobs using the workflow labels shown in the table below
         <code><a href="https://github.com/actions/runner-images/blob/main/images/macos/macos-14-arm64-Readme.md">macos-14</a></code>,
         <code><a href="https://github.com/actions/runner-images/blob/main/images/macos/macos-15-arm64-Readme.md">macos-15</a></code>,
         <code><a href="https://github.com/actions/runner-images/blob/main/images/macos/macos-26-arm64-Readme.md">macos-26</a></code>,
-        <code><a href="https://github.com/actions/runner-images/blob/main/images/macos/xcode-27-arm64-Readme.md">xcode-27</a></code> ({% data variables.release-phases.public_preview_caps %})
+        <code><a href="https://github.com/actions/runner-images/blob/main/images/macos/xcode-27-arm64-Readme.md">xcode-27</a></code>
       </td>
     </tr>
   </tbody>
@@ -180,7 +180,7 @@ For {% ifversion ghec %}internal and{% endif %} private repositories, jobs using
         <code><a href="https://github.com/actions/runner-images/blob/main/images/macos/macos-14-arm64-Readme.md">macos-14</a></code>,
         <code><a href="https://github.com/actions/runner-images/blob/main/images/macos/macos-15-arm64-Readme.md">macos-15</a></code>,
         <code><a href="https://github.com/actions/runner-images/blob/main/images/macos/macos-26-arm64-Readme.md">macos-26</a></code>,
-        <code><a href="https://github.com/actions/runner-images/blob/main/images/macos/xcode-27-arm64-Readme.md">xcode-27</a></code> ({% data variables.release-phases.public_preview_caps %})
+        <code><a href="https://github.com/actions/runner-images/blob/main/images/macos/xcode-27-arm64-Readme.md">xcode-27</a></code>
       </td>
     </tr>
   </tbody>

data/reusables/copilot/copilot-cli/custom-agents-about-details.md

@@ -34,7 +34,8 @@ Focus on the following instructions:
 
 You can define {% data variables.copilot.agent_profiles %} at different levels:
 
-* **Repository level**: Create `.github/agents/CUSTOM-AGENT-NAME.md` in your repository for project-specific agents.
+* **User level**: Create `$HOME/.copilot/agents/CUSTOM-AGENT-NAME.md` to define a custom agent that is available to you across repositories.
+* **Repository level**: Create `.github/agents/CUSTOM-AGENT-NAME.md` in your repository to define a project-specific agent.
 * **Organization level**: Create `/agents/CUSTOM-AGENT-NAME.md` in the organization's `.github` or `.github-private` repository for broader availability within the organization.
 * **Enterprise level**: Create `/agents/CUSTOM-AGENT-NAME.md` in the `.github-private` repository of an organization that an enterprise owner has designated in enterprise settings for availability across all repositories in the enterprise.
 

src/frame/components/ui/MiniTocs/Minitocs.module.scss

@@ -11,18 +11,14 @@
     // Align the active indicator with the In this article heading. Brand wraps
     // each item in a 2px-padded div, so cancel that offset.
     margin-left: -2px;
-    // Long TOC headings truncate to one line; the Up next title wraps instead.
+    // Long TOC headings wrap onto multiple lines rather than truncating.
     display: block;
-    white-space: nowrap;
-    overflow: hidden;
-    text-overflow: ellipsis;
+    overflow-wrap: anywhere;
 
     // Brand wraps the visible label in labelArea and label spans. Set text size
-    // and truncation there so the ellipsis renders.
+    // there too.
     span {
       font-size: var(--brand-text-size-100, 0.875rem);
-      overflow: hidden;
-      text-overflow: ellipsis;
     }
 
     // Brand sizes labelArea for 16px text with a 31px min-height. Our 14px text
@@ -34,8 +30,8 @@
       min-width: 0;
     }
 
-    // The inner label is the bit that actually truncates; as a flex child it
-    // needs min-width: 0 to shrink below its content width.
+    // As a flex child the inner label needs min-width: 0 to shrink below its
+    // content width so it wraps.
     span span {
       display: block;
       min-width: 0;

src/github-apps/data/ghec-2022-11-28/fine-grained-pat-permissions.json

@@ -9593,6 +9593,21 @@
       }
     ]
   },
+  "repository_license_policy": {
+    "title": "Repository license policy",
+    "displayTitle": "Repository permissions for \"Repository license policy\"",
+    "permissions": [
+      {
+        "category": "dependency-graph",
+        "slug": "check-license-compliance-for-packages",
+        "subcategory": "license-compliance",
+        "verb": "post",
+        "requestPath": "/repos/{owner}/{repo}/license-compliance/package-checks",
+        "additional-permissions": false,
+        "access": "read"
+      }
+    ]
+  },
   "repository_advisories": {
     "title": "Repository security advisories",
     "displayTitle": "Repository permissions for \"Repository security advisories\"",

src/github-apps/data/ghec-2022-11-28/fine-grained-pat.json

@@ -2907,6 +2907,12 @@
       "subcategory": "dependency-submission",
       "verb": "post",
       "requestPath": "/repos/{owner}/{repo}/dependency-graph/snapshots"
+    },
+    {
+      "slug": "check-license-compliance-for-packages",
+      "subcategory": "license-compliance",
+      "verb": "post",
+      "requestPath": "/repos/{owner}/{repo}/license-compliance/package-checks"
     }
   ],
   "deploy-keys": [

src/github-apps/data/ghec-2022-11-28/server-to-server-permissions.json

@@ -13355,6 +13355,23 @@
       }
     ]
   },
+  "repository_license_policy": {
+    "title": "Repository license policy",
+    "displayTitle": "Repository permissions for \"Repository license policy\"",
+    "permissions": [
+      {
+        "category": "dependency-graph",
+        "slug": "check-license-compliance-for-packages",
+        "subcategory": "license-compliance",
+        "verb": "post",
+        "requestPath": "/repos/{owner}/{repo}/license-compliance/package-checks",
+        "access": "read",
+        "user-to-server": true,
+        "server-to-server": true,
+        "additional-permissions": false
+      }
+    ]
+  },
   "repository_advisories": {
     "title": "Repository security advisories",
     "displayTitle": "Repository permissions for \"Repository security advisories\"",

src/github-apps/data/ghec-2022-11-28/server-to-server-rest.json

@@ -3163,6 +3163,12 @@
       "subcategory": "dependency-submission",
       "verb": "post",
       "requestPath": "/repos/{owner}/{repo}/dependency-graph/snapshots"
+    },
+    {
+      "slug": "check-license-compliance-for-packages",
+      "subcategory": "license-compliance",
+      "verb": "post",
+      "requestPath": "/repos/{owner}/{repo}/license-compliance/package-checks"
     }
   ],
   "deploy-keys": [

src/github-apps/data/ghec-2022-11-28/user-to-server-rest.json

@@ -3373,6 +3373,12 @@
       "subcategory": "dependency-submission",
       "verb": "post",
       "requestPath": "/repos/{owner}/{repo}/dependency-graph/snapshots"
+    },
+    {
+      "slug": "check-license-compliance-for-packages",
+      "subcategory": "license-compliance",
+      "verb": "post",
+      "requestPath": "/repos/{owner}/{repo}/license-compliance/package-checks"
     }
   ],
   "deploy-keys": [

src/github-apps/data/ghec-2026-03-10/fine-grained-pat-permissions.json

@@ -9593,6 +9593,21 @@
       }
     ]
   },
+  "repository_license_policy": {
+    "title": "Repository license policy",
+    "displayTitle": "Repository permissions for \"Repository license policy\"",
+    "permissions": [
+      {
+        "category": "dependency-graph",
+        "slug": "check-license-compliance-for-packages",
+        "subcategory": "license-compliance",
+        "verb": "post",
+        "requestPath": "/repos/{owner}/{repo}/license-compliance/package-checks",
+        "additional-permissions": false,
+        "access": "read"
+      }
+    ]
+  },
   "repository_advisories": {
     "title": "Repository security advisories",
     "displayTitle": "Repository permissions for \"Repository security advisories\"",

src/github-apps/data/ghec-2026-03-10/fine-grained-pat.json

@@ -2907,6 +2907,12 @@
       "subcategory": "dependency-submission",
       "verb": "post",
       "requestPath": "/repos/{owner}/{repo}/dependency-graph/snapshots"
+    },
+    {
+      "slug": "check-license-compliance-for-packages",
+      "subcategory": "license-compliance",
+      "verb": "post",
+      "requestPath": "/repos/{owner}/{repo}/license-compliance/package-checks"
     }
   ],
   "deploy-keys": [

src/github-apps/data/ghec-2026-03-10/server-to-server-permissions.json

@@ -13355,6 +13355,23 @@
       }
     ]
   },
+  "repository_license_policy": {
+    "title": "Repository license policy",
+    "displayTitle": "Repository permissions for \"Repository license policy\"",
+    "permissions": [
+      {
+        "category": "dependency-graph",
+        "slug": "check-license-compliance-for-packages",
+        "subcategory": "license-compliance",
+        "verb": "post",
+        "requestPath": "/repos/{owner}/{repo}/license-compliance/package-checks",
+        "access": "read",
+        "user-to-server": true,
+        "server-to-server": true,
+        "additional-permissions": false
+      }
+    ]
+  },
   "repository_advisories": {
     "title": "Repository security advisories",
     "displayTitle": "Repository permissions for \"Repository security advisories\"",

src/github-apps/data/ghec-2026-03-10/server-to-server-rest.json

@@ -3163,6 +3163,12 @@
       "subcategory": "dependency-submission",
       "verb": "post",
       "requestPath": "/repos/{owner}/{repo}/dependency-graph/snapshots"
+    },
+    {
+      "slug": "check-license-compliance-for-packages",
+      "subcategory": "license-compliance",
+      "verb": "post",
+      "requestPath": "/repos/{owner}/{repo}/license-compliance/package-checks"
     }
   ],
   "deploy-keys": [

src/github-apps/data/ghec-2026-03-10/user-to-server-rest.json

@@ -3373,6 +3373,12 @@
       "subcategory": "dependency-submission",
       "verb": "post",
       "requestPath": "/repos/{owner}/{repo}/dependency-graph/snapshots"
+    },
+    {
+      "slug": "check-license-compliance-for-packages",
+      "subcategory": "license-compliance",
+      "verb": "post",
+      "requestPath": "/repos/{owner}/{repo}/license-compliance/package-checks"
     }
   ],
   "deploy-keys": [

src/github-apps/lib/config.json

@@ -60,5 +60,5 @@
       "2022-11-28"
     ]
   },
-  "sha": "2297ff28f52e233d97bd482eb43bdaa5723add16"
+  "sha": "a7fb3ea21794469181243b7611b6e7cb99e0cef9"
 }