Merge upstream

.eslintrc.yml

@@ -213,6 +213,7 @@ overrides:
   - files: 'app/test/**/*'
     rules:
       '@typescript-eslint/no-non-null-assertion': off
+      react/jsx-no-bind: off
   - files: 'script/**/*'
     rules:
       '@typescript-eslint/no-non-null-assertion': off

.github/CODEOWNERS

@@ -0,0 +1,2 @@
+# Automatically request review from desktop/code-reviewers on all PRs
+* @desktop/code-reviewers

.github/actions/setup-ci-environment/action.yml

@@ -0,0 +1,39 @@
+name: Setup CI Environment
+description: Set up Python, Node.js, optional ffmpeg, and install dependencies.
+
+inputs:
+  node-version:
+    description: Node.js version to use.
+    required: true
+  arch:
+    description: Target architecture for dependency installation.
+    required: true
+  install-ffmpeg:
+    description: Whether to install ffmpeg on Windows.
+    required: false
+    default: 'false'
+
+runs:
+  using: composite
+  steps:
+    - uses: actions/setup-python@v5
+      with:
+        python-version: '3.11'
+
+    - name: Use Node.js ${{ inputs.node-version }}
+      uses: actions/setup-node@v4
+      with:
+        node-version: ${{ inputs.node-version }}
+        cache: yarn
+
+    - name: Install ffmpeg
+      if: ${{ runner.os == 'Windows' && inputs.install-ffmpeg == 'true' }}
+      shell: bash
+      run: choco install ffmpeg --yes --no-progress
+
+    - name: Install and build dependencies
+      shell: bash
+      run: yarn
+      env:
+        npm_config_arch: ${{ inputs.arch }}
+        TARGET_ARCH: ${{ inputs.arch }}

.github/actions/setup-windows-signing/action.yml

@@ -0,0 +1,35 @@
+name: Setup Windows Signing
+description: Install Azure Code Signing prerequisites and authenticate.
+
+inputs:
+  enabled:
+    description: Whether Windows signing setup should run.
+    required: false
+    default: 'false'
+  azure-client-id:
+    description: Azure Code Signing client ID.
+    required: false
+  azure-tenant-id:
+    description: Azure Code Signing tenant ID.
+    required: false
+
+runs:
+  using: composite
+  steps:
+    - name: Install Azure Code Signing Client
+      if: ${{ runner.os == 'Windows' && inputs.enabled == 'true' }}
+      shell: pwsh
+      run: |
+        $acsZip = Join-Path $env:RUNNER_TEMP "acs.zip"
+        $acsDir = Join-Path $env:RUNNER_TEMP "acs"
+        Invoke-WebRequest -Uri https://www.nuget.org/api/v2/package/Microsoft.Trusted.Signing.Client/1.0.95 -OutFile $acsZip -Verbose
+        Expand-Archive $acsZip -Destination $acsDir -Force -Verbose
+        Copy-Item -Path "C:\Program Files (x86)\Windows Kits\10\bin\10.0.22621.0\x64\*" -Include signtool.exe,signtool.exe.manifest,Microsoft.Windows.Build.Signing.mssign32.dll.manifest,mssign32.dll,Microsoft.Windows.Build.Signing.wintrust.dll.manifest,wintrust.dll,Microsoft.Windows.Build.Appx.AppxSip.dll.manifest,AppxSip.dll,Microsoft.Windows.Build.Appx.AppxPackaging.dll.manifest,AppxPackaging.dll,Microsoft.Windows.Build.Appx.OpcServices.dll.manifest,OpcServices.dll -Destination "node_modules\electron-winstaller\vendor" -Verbose
+
+    - name: Azure Login (OIDC)
+      if: ${{ runner.os == 'Windows' && inputs.enabled == 'true' }}
+      uses: azure/login@v2
+      with:
+        client-id: ${{ inputs.azure-client-id }}
+        tenant-id: ${{ inputs.azure-tenant-id }}
+        allow-no-subscriptions: true