[pull] master from microsoft:master

.github/ISSUE_TEMPLATE/bug_report.md

@@ -1,6 +1,9 @@
 ---
 name: Bug report
 about: Create a report to help us improve
+title: ''
+labels: ''
+assignees: ''
 
 ---
 

.github/ISSUE_TEMPLATE/design-request.md

@@ -0,0 +1,26 @@
+---
+name: Design Request
+about: 'Describe a design or art need '
+title: ''
+labels: design
+assignees: soniakandah, unthinkmedia, BeckHaru
+
+---
+
+Describe your design or art need by answering the questions below: 
+
+## What are the requirements for the project? 
+
+## Is there a deadline or date this is needed by? 
+
+## Please share any existing references, screenshots, links, etc. here that will help us better understand your requirements 
+
+## Optional Additional Questions: 
+
+### Who are the stakeholders that need to sign off on this design? Tag them here. 
+
+### What audience is this request for? 
+
+### What does success look like? 
+
+### How will we measure if this is successful or not?

.github/ISSUE_TEMPLATE/feature_request.md

@@ -1,6 +1,9 @@
 ---
 name: Feature request
 about: Suggest an idea for this project
+title: ''
+labels: ''
+assignees: ''
 
 ---
 

.github/dependabot.yml

@@ -0,0 +1,11 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    groups:
+      github-actions:
+        patterns: ["*"]
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 7

.github/workflows/check-if-merged-pr.yml

@@ -0,0 +1,54 @@
+name: Check if the commit is part of a merged PR
+
+on:
+  workflow_call:
+    outputs:
+      is_merged_pr:
+        description: "Whether the current push came from a merged PR"
+        value: ${{ jobs.check-pr.outputs.is_merged_pr }}
+      pr_head_sha:
+        description: "The head SHA of the merged PR"
+        value: ${{ jobs.check-pr.outputs.pr_head_sha }}
+
+jobs:
+  check-pr:
+    runs-on: ubuntu-latest
+    outputs:
+      is_merged_pr: ${{ steps.parse-check-pr.outputs.is_merged_pr }}
+      pr_head_sha: ${{ steps.parse-check-pr.outputs.pr_head_sha }}
+    steps:
+      - name: Check if this commit is from a merged PR
+        id: check-pr
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+        with:
+          result-encoding: string
+          script: |
+            const commitSha = context.sha;
+            const { data: prs } = await github.rest.repos.listPullRequestsAssociatedWithCommit({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              commit_sha: commitSha
+            });
+
+            if (!prs.length) {
+              core.info('No PRs associated with this commit.');
+              return JSON.stringify({ is_merged_pr: false, pr_head_sha: '' });
+            }
+
+            const mergedPr = prs.find(pr => pr.merged_at !== null);
+
+            if (!mergedPr) {
+              core.info('PRs found, but none were merged.');
+              return JSON.stringify({ is_merged_pr: false, pr_head_sha: '' });
+            }
+
+            core.info(`Found merged PR head SHA: ${mergedPr.head.sha}`);
+            return JSON.stringify({ is_merged_pr: true, pr_head_sha: mergedPr.head.sha });
+
+      - name: Parse outputs
+        id: parse-check-pr
+        shell: bash
+        run: |
+          echo "Parsing result: ${{ steps.check-pr.outputs.result }}"
+          echo "is_merged_pr=$(jq -r '.is_merged_pr' <<< '${{ steps.check-pr.outputs.result }}')" >> $GITHUB_OUTPUT
+          echo "pr_head_sha=$(jq -r '.pr_head_sha' <<< '${{ steps.check-pr.outputs.result }}')" >> $GITHUB_OUTPUT

.github/workflows/codeql.yml

@@ -2,39 +2,48 @@ name: "Code scanning - action"
 
 on:
   push:
+    branches: [ 'master', 'stable*', 'v[0-9]*' ]
   pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [ master ]
   schedule:
     - cron: '0 19 * * 0'
+  workflow_dispatch:
 
 jobs:
-  CodeQL-Build:
+  analyze:
+    name: Analyze
+
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+        - language: javascript-typescript
+          build-mode: none
+        - language: cpp
+          build-mode: none
 
     # CodeQL runs on ubuntu-latest and windows-latest
     runs-on: ubuntu-latest
+    permissions:
+      security-events: write
+      # required to fetch internal or private CodeQL packs
+      packages: read
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v2
-      with:
-        # We must fetch at least the immediate parents so that if this is
-        # a pull request then we can checkout the head.
-        fetch-depth: 2
-
-    # If this run was triggered by a pull request event, then checkout
-    # the head of the pull request instead of the merge commit.
-    - run: git checkout HEAD^2
-      if: ${{ github.event_name == 'pull_request' }}
-
+      uses: actions/checkout@main
+
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v1
+      uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
       with:
-         languages: javascript
-
-    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
-    # If this step fails, then you should remove it and run the build manually (see below)
-    - name: Autobuild
-      uses: github/codeql-action/autobuild@v1
+        languages: ${{ matrix.language }}
+        build-mode: ${{ matrix.build-mode }}
+    # # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
+    # # If this step fails, then you should remove it and run the build manually (see below)
+    # - name: Autobuild
+    #   uses: github/codeql-action/autobuild@v3
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 https://git.io/JvXDl
@@ -48,4 +57,6 @@ jobs:
     #   make release
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v1
+      uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
+      with:
+        category: "/language:${{matrix.language}}"

.github/workflows/is-vtag.yml

@@ -0,0 +1,31 @@
+name: Whether the tag is a semver tag
+
+on:
+  workflow_call:
+    outputs:
+      is_vtag:
+        description: 'Whether the tag is a semver tag'
+        value: ${{ jobs.filter-vtags.outputs.is_vtag }}
+
+jobs:
+  filter-vtags:
+    runs-on: ubuntu-latest
+    outputs:
+      is_vtag: ${{ steps.check-tag.outputs.is_vtag }}
+      tag: ${{ steps.check-tag.outputs.tag }}
+    steps:
+      - name: Inputs
+        run: |
+          echo "GITHUB_REF_TYPE=${GITHUB_REF_TYPE}"
+          echo "GITHUB_REF_NAME=${GITHUB_REF_NAME}"
+      - name: Check tag pattern
+        id: check-tag
+        run: |
+          if [[ "${GITHUB_REF_TYPE}" == "tag" && "${GITHUB_REF_NAME}" =~ ^v[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+            echo "is_vtag=true" >> "$GITHUB_OUTPUT"
+            echo "tag=${GITHUB_REF_NAME}" >> "$GITHUB_OUTPUT"
+          else
+            echo "is_vtag=false" >> "$GITHUB_OUTPUT"
+          fi
+      - name: Outputs
+        run: echo "Step output is_vtag = ${{ steps.check-tag.outputs.is_vtag }}" && echo "Step output tag = ${{ steps.check-tag.outputs.tag }}"