Merge pull request #389 from opf/bump/primer-upstream

Bump/primer upstream

Author: myabc

.changeset/rotten-banks-speak.md

@@ -0,0 +1,5 @@
+---
+'@openproject/primer-view-components': minor
+---
+
+Add `disable_expand` param to AvatarStack for React component parity

.github/workflows/codeql-analysis.yml

@@ -17,7 +17,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
+      uses: github/codeql-action/init@v4
       with:
         languages: javascript
 
@@ -29,4 +29,4 @@ jobs:
         npm ci
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
+      uses: github/codeql-action/analyze@v4

.github/workflows/publish.yml

@@ -1,12 +1,58 @@
 name: Release
 on:
   push:
-    branches:
-      - 'main'
-jobs:
   release:
-    name: Final
-    if: ${{ github.repository == 'opf/primer_view_components' }}
+    types: [published]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  id-token: write # Required for OIDC
+  contents: read
+  checks: write
+  statuses: write
+
+jobs:
+  publish-main:
+    if: ${{ github.event_name == 'release' }}
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      - name: Setup Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: "3.3"
+          bundler-cache: true
+      - uses: actions/setup-node@v5
+        with:
+          node-version: 20
+          cache: "npm"
+      - name: Create .gem credentials
+        run: |
+          mkdir -p $HOME/.gem
+          cat << EOF > $HOME/.gem/credentials
+          ---
+          :rubygems_api_key: ${RUBYGEMS_TOKEN}
+          EOF
+          chmod 0600 $HOME/.gem/credentials
+        env:
+          RUBYGEMS_TOKEN: ${{ secrets.RUBYGEMS_TOKEN_SHARED }}
+      - uses: actions/setup-node@v6
+        with:
+          node-version: 24
+      - name: NPM install
+        run: |
+          npm ci
+      - name: Publish Gem
+        run: bundle exec rake release
+      - name: Publish NPM
+        run: npm publish --access public
+
+  release-main:
+    name: Main
+    if: ${{ github.repository == 'opf/primer_view_components' && github.ref_name == 'main' && github.event_name == 'push' }}
 
     runs-on: ubuntu-latest
     steps:
@@ -18,15 +64,15 @@ jobs:
           persist-credentials: false
 
       - name: Set up Node.js
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@v6
         with:
-          node-version: 20
-          cache: 'npm'
+          node-version: 24
+          cache: "npm"
 
       - name: Setup Ruby
         uses: ruby/setup-ruby@v1
         with:
-          ruby-version: '3.3'
+          ruby-version: "3.3"
 
       - name: Install dependencies
         run: |
@@ -41,5 +87,20 @@ jobs:
           version: npm run changeset:version
           publish: script/changeset-publish
         env:
-          GITHUB_TOKEN: ${{ secrets.GPR_AUTH_TOKEN_SHARED }}
-          NPM_TOKEN: ${{ secrets.NPM_AUTH_TOKEN_SHARED }}
+          GITHUB_TOKEN: ${{ steps.get-access-token.outputs.token }}
+
+  release-canary:
+    name: Canary
+    if: ${{ github.repository == 'opf/primer_view_components' && github.ref_name != 'main' && github.ref_name != 'changeset-release/main' && github.event_name == 'push' }}
+    uses: primer/.github/.github/workflows/release_canary.yml@v2.4.0
+    with:
+      install: npm i
+    secrets:
+      gh_token: ${{ secrets.GITHUB_TOKEN }}
+
+  release-candidate:
+    name: Candidate
+    if: ${{ github.repository == 'opf/primer_view_components' && github.ref_name == 'changeset-release/main' && github.event_name == 'push' }}
+    uses: primer/.github/.github/workflows/release_candidate.yml@v2.4.0
+    secrets:
+      gh_token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release.yml

@@ -14,6 +14,6 @@ on:
 jobs:
   release-tracking:
     name: Release Tracking
-    uses: primer/.github/.github/workflows/release_tracking.yml@v2.2.0
+    uses: primer/.github/.github/workflows/release_tracking.yml@v2.4.0
     secrets:
       datadog_api_key: ${{ secrets.DATADOG_API_KEY }}

.github/workflows/release_canary.yml

@@ -193,7 +193,8 @@ jobs:
           USE_BROWSER=firefox bundle exec rake test:system
   visual:
     name: Visual and Semantic Markup Regressions
-    if: ${{ github.event_name == 'pull_request' }}
+    # Temp skip this run
+    if: ${{ github.event_name == 'pull_request' && false }}
     timeout-minutes: 20
     runs-on: ubuntu-latest
     steps:

.github/workflows/release_candidate.yml

@@ -1,3 +1,8 @@
+/* stylelint-disable selector-max-specificity */
+/* The selector-max-specificity rule is disabled here because the nested selectors
+ in AvatarStack require high specificity to properly override default styles and 
+ achieve the intended visual stacking. */
+
 /* AvatarStack */
 
 /* Stacked avatars can be used to show who is participating in thread when
@@ -60,7 +65,7 @@
     }
   }
 
-  &:hover {
+  &:hover:not([data-disable-expand]) {
     & .avatar {
       margin-right: var(--base-size-4);
     }
@@ -74,6 +79,10 @@
       display: none !important;
     }
   }
+
+  &[data-disable-expand] {
+    position: relative;
+  }
 }
 
 .avatar.avatar-more {
@@ -110,7 +119,7 @@
     right: 0;
     flex-direction: row-reverse;
 
-    &:hover .avatar {
+    &:hover:not([data-disable-expand]) .avatar {
       margin-right: 0;
       margin-left: var(--base-size-4);
     }

.github/workflows/release_tracking.yml

@@ -22,14 +22,16 @@ class AvatarStack < Primer::Component
       # @param tag [Symbol] <%= one_of(Primer::Beta::AvatarStack::TAG_OPTIONS) %>
       # @param align [Symbol] <%= one_of(Primer::Beta::AvatarStack::ALIGN_OPTIONS) %>
       # @param tooltipped [Boolean] Whether to add a tooltip to the stack or not.
+      # @param disable_expand [Boolean] Whether to disable the expand behavior on hover. If true, avatars will not expand.
       # @param body_arguments [Hash] Parameters to add to the Body. If `tooltipped` is set, has the same arguments as <%= link_to_component(Primer::Tooltip) %>.
       #   The default tag is <%= pretty_value(Primer::Beta::AvatarStack::DEFAULT_BODY_TAG) %> but can be changed using `tag:`
       #   to <%= one_of(Primer::Beta::AvatarStack::BODY_TAG_OPTIONS, lower: true) %>
       # @param system_arguments [Hash] <%= link_to_system_arguments_docs %>
-      def initialize(tag: DEFAULT_TAG, align: ALIGN_DEFAULT, tooltipped: false, body_arguments: {}, **system_arguments)
+      def initialize(tag: DEFAULT_TAG, align: ALIGN_DEFAULT, tooltipped: false, disable_expand: false, body_arguments: {}, **system_arguments)
         @align = fetch_or_fallback(ALIGN_OPTIONS, align, ALIGN_DEFAULT)
         @system_arguments = system_arguments
         @tooltipped = tooltipped
+        @disable_expand = disable_expand
         @body_arguments = body_arguments
         @direction = @body_arguments[:direction]
 
@@ -39,6 +41,7 @@ def initialize(tag: DEFAULT_TAG, align: ALIGN_DEFAULT, tooltipped: false, body_a
           "AvatarStack-body",
           @body_arguments[:classes]
         )
+        @body_arguments[:"data-disable-expand"] = true if @disable_expand
 
         @system_arguments[:tag] = fetch_or_fallback(TAG_OPTIONS, tag, DEFAULT_TAG)
         @system_arguments[:classes] = class_names(