[pull] main from npm:main

.eslint.config.js

@@ -0,0 +1,9 @@
+import github from 'eslint-plugin-github'
+
+export default [
+  github.getFlatConfigs().react,
+  {
+    // This lets your .eslintrc.js handle most configuration
+    ignores: ['.cache/**', 'public/**'],
+  },
+]

.eslintrc.js

@@ -1,23 +1,34 @@
-const {getGlobals} = require('eslint-plugin-mdx/lib/helpers')
+const {getGlobals} = require('eslint-plugin-mdx')
 
 module.exports = {
   root: true,
   ignorePatterns: ['.cache/', 'public/'],
+  plugins: ['primer-react'], // github plugin now comes from flat config
   extends: [
     '@npmcli',
     'react-app',
-    // 'react-app/jest',
     'eslint:recommended',
     'plugin:react/recommended',
-    'plugin:github/react',
-    'plugin:primer-react/recommended',
+    // 'plugin:github/react',  // REMOVED: now handled by flat config
     'plugin:react-hooks/recommended',
     'prettier',
   ],
   rules: {
     'max-len': 'off',
     'react/prop-types': 'off',
+    'primer-react/direct-slot-children': 'error',
     'primer-react/no-system-props': ['error', {includeUtilityComponents: true}],
+    'primer-react/a11y-tooltip-interactive-trigger': 'error',
+    'primer-react/new-color-css-vars': 'error',
+    'primer-react/a11y-explicit-heading': 'error',
+    'primer-react/no-deprecated-props': 'warn',
+    'primer-react/a11y-remove-disable-tooltip': 'error',
+    'primer-react/a11y-use-next-tooltip': 'error',
+  },
+  settings: {
+    'import/resolver': {
+      typescript: {},
+    },
   },
   overrides: [
     {

.github/CODEOWNERS

@@ -1,21 +1,21 @@
 * @npm/cli-team
 
 # Content
-/.github/CODEOWNERS   @MylesBorins @monishcm @lukekarrys
-/content/             @MylesBorins @monishcm @lukekarrys
-/src/                 @MylesBorins @monishcm @lukekarrys
-/static/              @MylesBorins @monishcm @lukekarrys
-/CONTENT-MODEL.md     @MylesBorins @monishcm @lukekarrys
+/.github/CODEOWNERS   @leobalter @monishcm @wraithgar
+/content/             @leobalter @monishcm @wraithgar
+/src/                 @leobalter @monishcm @wraithgar
+/static/              @leobalter @monishcm @wraithgar
+/CONTENT-MODEL.md     @leobalter @monishcm @wraithgar
 
 # Policies
-/content/policies/    @MylesBorins
-/CODE_OF_CONDUCT.md   @MylesBorins
+/content/policies/    @leobalter
+/CODE_OF_CONDUCT.md   @leobalter
 
 # Licensing
-/.reuse/              @MylesBorins @lukekarrys
-/LICENSES/            @MylesBorins
-/LICENSE              @MylesBorins
-/LICENSE-CODE         @MylesBorins
+/.reuse/              @leobalter @wraithgar
+/LICENSES/            @leobalter
+/LICENSE              @leobalter
+/LICENSE-CODE         @leobalter
 
 # CLI
 /content/cli/         @npm/cli-team

.github/actions/create-check/action.yml

@@ -17,15 +17,15 @@ runs:
   using: "composite"
   steps:
     - name: Get Workflow Job
-      uses: actions/github-script@v6
+      uses: actions/github-script@v7
       id: workflow
       env:
         JOB_NAME: "${{ inputs.name }}"
         SHA: "${{ inputs.sha }}"
       with:
         result-encoding: string
         script: |
-          const { repo: { owner, repo}, runId, serverUrl } = context          
+          const { repo: { owner, repo}, runId, serverUrl } = context
           const { JOB_NAME, SHA } = process.env
 
           const job = await github.rest.actions.listJobsForWorkflowRun({

.github/actions/install-latest-npm/action.yml

@@ -44,7 +44,7 @@ runs:
             MATCH=$SPEC
             echo "Found compatible version: npm@$MATCH"
             break
-          fi  
+          fi
         done
 
         if [ -z $MATCH ]; then

.github/dependabot.yml

@@ -17,3 +17,11 @@ updates:
     labels:
       - "Dependencies"
     open-pull-requests-limit: 10
+    groups:
+      dependency-updates:
+        applies-to: version-updates
+        patterns:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"

.github/workflows/audit.yml

@@ -8,6 +8,9 @@ on:
     # "At 08:00 UTC (01:00 PT) on Monday" https://crontab.guru/#0_8_*_*_1
     - cron: "0 8 * * 1"
 
+permissions:
+  contents: read
+
 jobs:
   audit:
     name: Audit Dependencies
@@ -18,17 +21,17 @@ jobs:
         shell: bash
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Setup Git User
         run: |
           git config --global user.email "[email protected]"
           git config --global user.name "npm CLI robot"
       - name: Setup Node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         id: node
         with:
-          node-version: 18.x
-          check-latest: contains('18.x', '.x')
+          node-version: 22.x
+          check-latest: contains('22.x', '.x')
           cache: npm
       - name: Install Latest npm
         uses: ./.github/actions/install-latest-npm

.github/workflows/ci-cli.yml

@@ -16,6 +16,9 @@ on:
     # "At 09:00 UTC (02:00 PT) on Monday" https://crontab.guru/#0_9_*_*_1
     - cron: "0 9 * * 1"
 
+permissions:
+  contents: read
+
 jobs:
   lint:
     name: Lint
@@ -26,17 +29,17 @@ jobs:
         shell: bash
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Setup Git User
         run: |
           git config --global user.email "[email protected]"
           git config --global user.name "npm CLI robot"
       - name: Setup Node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         id: node
         with:
-          node-version: 18.x
-          check-latest: contains('18.x', '.x')
+          node-version: 22.x
+          check-latest: contains('22.x', '.x')
           cache: npm
       - name: Install Latest npm
         uses: ./.github/actions/install-latest-npm
@@ -62,20 +65,20 @@ jobs:
             os: ubuntu-latest
             shell: bash
         node-version:
-          - 18.x
+          - 22.x
     runs-on: ${{ matrix.platform.os }}
     defaults:
       run:
         shell: ${{ matrix.platform.shell }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Setup Git User
         run: |
           git config --global user.email "[email protected]"
           git config --global user.name "npm CLI robot"
       - name: Setup Node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         id: node
         with:
           node-version: ${{ matrix.node-version }}

.github/workflows/ci.yml

@@ -16,6 +16,9 @@ on:
     # "At 09:00 UTC (02:00 PT) on Monday" https://crontab.guru/#0_9_*_*_1
     - cron: "0 9 * * 1"
 
+permissions:
+  contents: read
+
 jobs:
   lint:
     name: Lint
@@ -26,17 +29,17 @@ jobs:
         shell: bash
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Setup Git User
         run: |
           git config --global user.email "[email protected]"
           git config --global user.name "npm CLI robot"
       - name: Setup Node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         id: node
         with:
-          node-version: 18.x
-          check-latest: contains('18.x', '.x')
+          node-version: 22.x
+          check-latest: contains('22.x', '.x')
           cache: npm
       - name: Install Latest npm
         uses: ./.github/actions/install-latest-npm
@@ -62,20 +65,20 @@ jobs:
             os: ubuntu-latest
             shell: bash
         node-version:
-          - 18.x
+          - 22.x
     runs-on: ${{ matrix.platform.os }}
     defaults:
       run:
         shell: ${{ matrix.platform.shell }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Setup Git User
         run: |
           git config --global user.email "[email protected]"
           git config --global user.name "npm CLI robot"
       - name: Setup Node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         id: node
         with:
           node-version: ${{ matrix.node-version }}
@@ -103,20 +106,20 @@ jobs:
             os: ubuntu-latest
             shell: bash
         node-version:
-          - 18.x
+          - 22.x
     runs-on: ${{ matrix.platform.os }}
     defaults:
       run:
         shell: ${{ matrix.platform.shell }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Setup Git User
         run: |
           git config --global user.email "[email protected]"
           git config --global user.name "npm CLI robot"
       - name: Setup Node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         id: node
         with:
           node-version: ${{ matrix.node-version }}
@@ -137,6 +140,6 @@ jobs:
     name: REUSE Compliance Check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: REUSE Compliance Check
         uses: fsfe/reuse-action@v1

.github/workflows/codeql-analysis.yml

@@ -13,6 +13,9 @@ on:
     # "At 10:00 UTC (03:00 PT) on Monday" https://crontab.guru/#0_10_*_*_1
     - cron: "0 10 * * 1"
 
+permissions:
+  contents: read
+
 jobs:
   analyze:
     name: Analyze
@@ -23,14 +26,14 @@ jobs:
       security-events: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Setup Git User
         run: |
           git config --global user.email "[email protected]"
           git config --global user.name "npm CLI robot"
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v2
+        uses: github/codeql-action/init@v3
         with:
           languages: javascript
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v2
+        uses: github/codeql-action/analyze@v3

.github/workflows/post-dependabot.yml

@@ -17,19 +17,19 @@ jobs:
         shell: bash
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           ref: ${{ github.event.pull_request.head.ref }}
       - name: Setup Git User
         run: |
           git config --global user.email "[email protected]"
           git config --global user.name "npm CLI robot"
       - name: Setup Node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         id: node
         with:
-          node-version: 18.x
-          check-latest: contains('18.x', '.x')
+          node-version: 22.x
+          check-latest: contains('22.x', '.x')
           cache: npm
       - name: Install Latest npm
         uses: ./.github/actions/install-latest-npm
@@ -50,7 +50,7 @@ jobs:
         id: flags
         run: |
           dependabot_dir="${{ steps.metadata.outputs.directory }}"
-          if [[ "$dependabot_dir" == "/" ]]; then
+          if [[ "$dependabot_dir" == "/" || "$dependabot_dir" == "/main" ]]; then
             echo "workspace=-iwr" >> $GITHUB_OUTPUT
           else
             # strip leading slash from directory so it works as a