sync: upstream v2.46.0 (bba63222)

.github/workflows/cleanup-closed-pr-branches.yml

@@ -34,7 +34,7 @@ jobs:
       pull-requests: read
     steps:
       - name: Checkout trusted default-branch code
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
           sparse-checkout: .github/scripts

.github/workflows/enforce-issue-quality.yml

@@ -53,7 +53,7 @@ jobs:
       copilot-requests: write
     steps:
       - name: Checkout trusted workflow code
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           ref: ${{ github.event.repository.default_branch }}
           persist-credentials: false
@@ -458,7 +458,7 @@ jobs:
       copilot-requests: write
     steps:
       - name: Checkout trusted workflow code
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           ref: ${{ github.event.repository.default_branch }}
           persist-credentials: false
@@ -764,7 +764,7 @@ jobs:
 
     steps:
       - name: Checkout trusted workflow code
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           # Always load validator scripts from the repository default branch so
           # a branch-selected workflow_dispatch cannot execute untrusted code
@@ -1196,7 +1196,7 @@ jobs:
       issues: write
     steps:
       - name: Checkout trusted workflow code
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           ref: ${{ github.event.repository.default_branch }}
           persist-credentials: false

.github/workflows/issue-quality-tests.yml

@@ -28,14 +28,6 @@ on:
       - ".github/scripts/run-copilot-inference*.cjs"
       - ".github/scripts/parse-issue-translation-response.cjs"
       - ".github/scripts/parse-issue-translation-response.test.cjs"
-      - ".github/scripts/pr-automation*.cjs"
-      - ".github/scripts/agent-maintenance*.cjs"
-      - ".github/scripts/automation-health*.cjs"
-      - ".github/scripts/closed-pr-branch-cleanup.cjs"
-      - ".github/scripts/closed-pr-branch-cleanup.test.cjs"
-      - ".github/workflows/pr-automation.yml"
-      - ".github/workflows/agent-maintenance.yml"
-      - ".github/workflows/automation-health.yml"
       - ".github/workflows/enforce-issue-quality.yml"
       - ".github/workflows/enforce-pr-target.yml"
       - ".github/workflows/pr-labeler.yml"
@@ -69,14 +61,6 @@ on:
       - ".github/scripts/run-copilot-inference*.cjs"
       - ".github/scripts/parse-issue-translation-response.cjs"
       - ".github/scripts/parse-issue-translation-response.test.cjs"
-      - ".github/scripts/pr-automation*.cjs"
-      - ".github/scripts/agent-maintenance*.cjs"
-      - ".github/scripts/automation-health*.cjs"
-      - ".github/scripts/closed-pr-branch-cleanup.cjs"
-      - ".github/scripts/closed-pr-branch-cleanup.test.cjs"
-      - ".github/workflows/pr-automation.yml"
-      - ".github/workflows/agent-maintenance.yml"
-      - ".github/workflows/automation-health.yml"
       - ".github/workflows/enforce-issue-quality.yml"
       - ".github/workflows/enforce-pr-target.yml"
       - ".github/workflows/pr-labeler.yml"
@@ -93,7 +77,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 
@@ -112,10 +96,6 @@ jobs:
           node --test .github/scripts/copilot-workflows.test.cjs
           node --test .github/scripts/run-copilot-inference.test.cjs
           node --test .github/scripts/parse-issue-translation-response.test.cjs
-          node --test .github/scripts/pr-automation*.test.cjs
-          node --test .github/scripts/agent-maintenance*.test.cjs
-          node --test .github/scripts/automation-health.test.cjs
-          node --test .github/scripts/closed-pr-branch-cleanup.test.cjs
 
       - name: Validate issue-form YAML
         run: |

.github/workflows/issue-triage.yml

@@ -20,7 +20,7 @@ jobs:
       matches: ${{ steps.parse.outputs.matches }}
     steps:
       - name: Checkout trusted triage scripts
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           # Issue events load this workflow from the default branch; keep scripts
           # aligned with that same trusted ref.
@@ -169,7 +169,7 @@ jobs:
       issues: write
     steps:
       - name: Checkout trusted triage scripts
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           ref: ${{ github.event.repository.default_branch }}
           persist-credentials: false

.github/workflows/pr-hygiene.yml

@@ -34,7 +34,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Checkout trusted hygiene script
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           # Source trusted scripts from an integration branch, never from the
           # PR's own base commit. A stacked child PR's base is another open

.github/workflows/pr-labeler.yml

@@ -32,7 +32,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout labeler script (default-branch trusted code)
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           ref: ${{ github.event.repository.default_branch }}
           persist-credentials: false