Merge branch 'main' into MP-455-improve-fraud-resistance

.eslintrc.cjs

@@ -1,10 +1,27 @@
+// @ts-check
 const path = require("node:path");
 const { readGitignoreFiles } = require("eslint-gitignore");
 
-const ignores = readGitignoreFiles({
-  cwd: path.join(".git", "info"),
-  patterns: ["exclude"],
-});
+/** @type {string[]} */
+let ignores = [];
+try {
+  ignores = readGitignoreFiles({
+    cwd: path.join(".git", "info"),
+    patterns: ["exclude"],
+  });
+} catch (error) {
+  if (error.code === "ENOTDIR") {
+    console.log(
+      `${path.join(
+        ".git",
+        "info",
+        "exclude"
+      )} dir doesn't exist, we're probably a submodule`
+    );
+  } else {
+    throw error;
+  }
+}
 
 module.exports = {
   ignorePatterns: ignores,

.github/CODEOWNERS

@@ -0,0 +1,17 @@
+# ----------------------------------------------------------------------------
+# MDN Yari CODEOWNERS
+# ----------------------------------------------------------------------------
+# Order is important. The last matching pattern takes precedence.
+# For more detailed information, see:
+# https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners
+# ----------------------------------------------------------------------------
+
+# ----------------------------------------------------------------------------
+# DEFAULT OWNERS
+# ----------------------------------------------------------------------------
+*    @mdn/core-dev
+
+# These are @mdn-bot because the auto-merge GHA workflow uses the PAT of this account.
+# If another reviewer is specified, update the PAT token or auto-merge will cease to be automatic.
+/package.json @mdn-bot
+/yarn.lock    @mdn-bot

.github/dependabot.yml

@@ -6,6 +6,16 @@ updates:
     schedule:
       interval: daily
     open-pull-requests-limit: 35
+    groups:
+      sentry:
+        patterns:
+          - "@sentry/*"
+      types:
+        patterns:
+          - "@types/*"
+        update-types:
+          - "minor"
+          - "patch"
     ignore:
       # Temporarily disable updates to Dinocons
       - dependency-name: "@mdn/dinocons"
@@ -19,11 +29,25 @@ updates:
     directory: "/deployer"
     schedule:
       interval: "weekly"
+    groups:
+      dependencies:
+        patterns:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"
 
   - package-ecosystem: "pip"
     directory: "/testing/integration"
     schedule:
       interval: "weekly"
+    groups:
+      dependencies:
+        patterns:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"
 
   - package-ecosystem: npm
     directory: "/client/pwa"

.github/labeler.yml

@@ -1,22 +1,45 @@
+blog:
+  - "**/blog/**/*"
 browser-compat:
-  - "client/src/document/ingredients/browser-compatability-table/**/*"
+  - "**/browser-compatability-table/**/*"
 macros:
   - "kumascript/**/*"
+cloud-function:
+  - "cloud-function/**/*"
+copy:
+  - "copy/**/*"
 dependencies:
   - "**/poetry.lock"
   - "**/yarn.lock"
 deployer:
   - "deployer/**/*"
+filecheck:
+  - "filecheck/**/*"
 flaw-system:
   - "build/flaws/**/*"
 github-actions:
   - ".github/workflows/**/*"
 markdown:
   - "markdown/**/*"
+metrics:
+  - "**/telemetry/**/*"
+placement:
+  - "**/placement/**/*"
+  - "**/pong/**/*"
 plus:
-  - "client/src/plus/**/*"
+  - "**/plus/**/*"
+  - "**/plus-docs/**/*"
+plus:ai-help:
+  - "**/ai-help/**/*"
 plus:offline:
   - "client/pwa/src/**/*"
   - "client/src/offline-settings/**/*"
+plus:playground:
+  - "**/playground/**/*"
+plus:updates:
+  - "client/src/plus/updates/**/*"
 python:
   - "**/*.py"
+redirects:
+  - "cloud-function/src/middlewares/redirect-*"
+  - "libs/fundamental-redirects/**/*"

.github/workflows/dev-build.yml

@@ -39,9 +39,9 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           repository: mdn/content
           path: mdn/content
@@ -51,20 +51,20 @@ jobs:
           # so we can figure out each document's last-modified date.
           fetch-depth: 0
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           repository: mdn/translated-content
           path: mdn/translated-content
           # See matching warning for mdn/content checkout step
           fetch-depth: 0
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           repository: mdn/mdn-contributor-spotlight
           path: mdn/mdn-contributor-spotlight
 
       - name: Setup Node.js environment
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: 18
           cache: yarn
@@ -205,7 +205,7 @@ jobs:
           poetry run deployer search-index ../client/build
 
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v1-node16
+        uses: aws-actions/configure-aws-credentials@v4.0.1
         with:
           aws-access-key-id: ${{ secrets.DEPLOYER_STAGE_AND_DEV_AWS_ACCESS_KEY_ID }}
           aws-secret-access-key: ${{ secrets.DEPLOYER_STAGE_AND_DEV_AWS_SECRET_ACCESS_KEY }}

.github/workflows/developing.yml

@@ -8,15 +8,15 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           repository: mdn/content
           path: mdn/content
 
       - name: Setup Node.js environment
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: 18
           cache: yarn

.github/workflows/npm-publish.yml

@@ -21,13 +21,20 @@ jobs:
         with:
           release-type: node
           package-name: release-please-action
+          changelog-types: |
+            [
+              {"type": "feat", "section": "Features", "hidden": false},
+              {"type": "fix", "section": "Bug Fixes", "hidden": false},
+              {"type": "enhance", "section": "Enhancements", "hidden": false},
+              {"type": "chore", "section": "Miscellaneous", "hidden": false}
+            ]
 
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         if: steps.release.outputs.release_created
 
       - name: Setup
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         if: steps.release.outputs.release_created
         with:
           node-version: 18

.github/workflows/npm-published-simulation.yml

@@ -13,15 +13,15 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           repository: mdn/content
           path: mdn/content
 
       - name: Setup Node.js environment
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: 18
           cache: "yarn"

.github/workflows/performance.yml

@@ -13,19 +13,19 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           # Needed because of
           # https://github.com/GoogleChrome/lighthouse-ci/issues/172
           ref: ${{ github.event.pull_request.head.sha }}
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           repository: mdn/content
           path: mdn/content
 
       - name: Setup Node.js environment
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: 18
           cache: yarn

.github/workflows/pr-deployer.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Install Python
         id: setup-python

.github/workflows/pr-docs.yml

@@ -11,10 +11,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Setup Node.js environment
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: 18
           cache: "yarn"

.github/workflows/pr-kumascript.yml

@@ -23,10 +23,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Setup Node.js environment
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: 18
           cache: yarn