Merge branch 'main' into dev

Author: fisker

.angular-github/actions/deploy-docs-site/lib/main.mts

@@ -3,7 +3,7 @@ import {context} from '@actions/github';
 import {deployToFirebase, setupRedirect} from './deploy.mjs';
 import {getDeployments} from './deployments.mjs';
 import {generateSitemap} from './sitemap.mjs';
-import {AuthenticatedGitClient, GithubConfig, setConfig} from '@angular/ng-dev';
+import {assertValidGithubConfig, AuthenticatedGitClient, getConfig} from '@angular/ng-dev';
 import {githubReleaseTrainReadToken} from './credential.mjs';
 import {spawnSync} from 'child_process';
 import {cp, mkdtemp} from 'fs/promises';
@@ -13,13 +13,7 @@ import {join} from 'path';
 const refMatcher = /refs\/heads\/(.*)/;
 
 async function deployDocs() {
-  setConfig({
-    github: {
-      mainBranchName: 'main',
-      name: 'angular',
-      owner: 'angular',
-    } as GithubConfig,
-  });
+  getConfig([assertValidGithubConfig]);
 
   AuthenticatedGitClient.configure(githubReleaseTrainReadToken);
 

.angular-github/actions/deploy-docs-site/main.js

@@ -5,9 +5,9 @@ runs:
   using: 'composite'
   steps:
     - name: Setup Bazel
-      uses: angular/dev-infra/github-actions/bazel/setup@f47684669736e28fd77eab64e65b2952c8a948ee
+      uses: angular/dev-infra/github-actions/bazel/setup@3a9e55f990cc60290af394a388368199dfabc805
     - name: Setup Saucelabs Variables
-      uses: angular/dev-infra/github-actions/saucelabs@f47684669736e28fd77eab64e65b2952c8a948ee
+      uses: angular/dev-infra/github-actions/saucelabs@3a9e55f990cc60290af394a388368199dfabc805
     - name: Starting Saucelabs tunnel service
       shell: bash
       run: ./tools/saucelabs/sauce-service.sh run &

.angular-github/actions/saucelabs-legacy/action.yml

@@ -21,17 +21,17 @@ jobs:
       (github.event.action == 'synchronize' && contains(github.event.pull_request.labels.*.name, 'adev: preview'))
     steps:
       - name: Initialize environment
-        uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@f47684669736e28fd77eab64e65b2952c8a948ee
+        uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@3a9e55f990cc60290af394a388368199dfabc805
       - name: Setup Bazel
-        uses: angular/dev-infra/github-actions/bazel/setup@f47684669736e28fd77eab64e65b2952c8a948ee
+        uses: angular/dev-infra/github-actions/bazel/setup@3a9e55f990cc60290af394a388368199dfabc805
       - name: Setup Bazel RBE
-        uses: angular/dev-infra/github-actions/bazel/configure-remote@f47684669736e28fd77eab64e65b2952c8a948ee
+        uses: angular/dev-infra/github-actions/bazel/configure-remote@3a9e55f990cc60290af394a388368199dfabc805
       - name: Install node modules
         run: pnpm install --frozen-lockfile
       - name: Build adev
         # `snapshot-build` config is used to stamp the exact version with sha in the footer.
         run: pnpm bazel build //adev:build.production --config=snapshot-build
-      - uses: angular/dev-infra/github-actions/previews/pack-and-upload-artifact@f47684669736e28fd77eab64e65b2952c8a948ee
+      - uses: angular/dev-infra/github-actions/previews/pack-and-upload-artifact@3a9e55f990cc60290af394a388368199dfabc805
         with:
           workflow-artifact-name: 'adev-preview'
           pull-number: '${{github.event.pull_request.number}}'

.angular-github/workflows/adev-preview-build.yml

@@ -29,7 +29,7 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ github.event.workflow_run.conclusion == 'success' }}
     steps:
-      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
         with:
           token: '${{secrets.GITHUB_TOKEN}}'
 
@@ -40,7 +40,7 @@ jobs:
           npx -y firebase-tools@latest target:clear --config adev/firebase.json --project ${{env.PREVIEW_PROJECT}} hosting angular-docs
           npx -y firebase-tools@latest target:apply --config adev/firebase.json --project ${{env.PREVIEW_PROJECT}} hosting angular-docs ${{env.PREVIEW_SITE}}
 
-      - uses: angular/dev-infra/github-actions/previews/upload-artifacts-to-firebase@f47684669736e28fd77eab64e65b2952c8a948ee
+      - uses: angular/dev-infra/github-actions/previews/upload-artifacts-to-firebase@3a9e55f990cc60290af394a388368199dfabc805
         with:
           github-token: '${{secrets.GITHUB_TOKEN}}'
           workflow-artifact-name: 'adev-preview'

.angular-github/workflows/adev-preview-deploy.yml

@@ -12,10 +12,11 @@ permissions:
 jobs:
   assistant_to_the_branch_manager:
     runs-on: ubuntu-latest
+    if: github.event.repository.fork == false
     steps:
-      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           persist-credentials: false
-      - uses: angular/dev-infra/github-actions/branch-manager@f47684669736e28fd77eab64e65b2952c8a948ee
+      - uses: angular/dev-infra/github-actions/branch-manager@3a9e55f990cc60290af394a388368199dfabc805
         with:
           angular-robot-key: ${{ secrets.ANGULAR_ROBOT_PRIVATE_KEY }}

.angular-github/workflows/assistant-to-the-branch-manager.yml

@@ -28,7 +28,7 @@ jobs:
       - uses: alessbell/pull-request-comment-branch@aad01d65d6982b8eacabed5e9a684cd8ceb98da6 # v1.1
         id: comment-branch
 
-      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           # Specify repository as the PR branch might be from a fork.
           repository: ${{steps.comment-branch.outputs.head_owner}}/${{steps.comment-branch.outputs.head_repo}}
@@ -38,7 +38,7 @@ jobs:
 
       - run: pnpm install --frozen-lockfile
 
-      - uses: angular/dev-infra/github-actions/bazel/configure-remote@f47684669736e28fd77eab64e65b2952c8a948ee
+      - uses: angular/dev-infra/github-actions/bazel/configure-remote@3a9e55f990cc60290af394a388368199dfabc805
         with:
           bazelrc: ./.bazelrc.user
 

.angular-github/workflows/benchmark-compare.yml

@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Initialize environment
-        uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@f47684669736e28fd77eab64e65b2952c8a948ee
+        uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@3a9e55f990cc60290af394a388368199dfabc805
       - name: Install node modules
         run: pnpm install --frozen-lockfile
       - name: Check code lint
@@ -39,13 +39,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Initialize environment
-        uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@f47684669736e28fd77eab64e65b2952c8a948ee
+        uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@3a9e55f990cc60290af394a388368199dfabc805
         with:
           disable-package-manager-cache: true
       - name: Setup Bazel
-        uses: angular/dev-infra/github-actions/bazel/setup@f47684669736e28fd77eab64e65b2952c8a948ee
+        uses: angular/dev-infra/github-actions/bazel/setup@3a9e55f990cc60290af394a388368199dfabc805
       - name: Setup Bazel RBE
-        uses: angular/dev-infra/github-actions/bazel/configure-remote@f47684669736e28fd77eab64e65b2952c8a948ee
+        uses: angular/dev-infra/github-actions/bazel/configure-remote@3a9e55f990cc60290af394a388368199dfabc805
         with:
           google_credential: ${{ secrets.RBE_TRUSTED_BUILDS_USER }}
       - name: Install node modules
@@ -55,7 +55,7 @@ jobs:
       - name: Test build
         run: pnpm devtools:build:chrome
       - name: Cypress run
-        uses: cypress-io/github-action@7ef72e250a9e564efb4ed4c2433971ada4cc38b4 # v6.10.4
+        uses: cypress-io/github-action@2ad32e649e4db26c07674ebae31a297601dbcbaf # v6.10.8
         with:
           command: pnpm devtools:test:e2e
           start: pnpm bazel run //devtools/src:devserver
@@ -67,11 +67,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Initialize environment
-        uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@f47684669736e28fd77eab64e65b2952c8a948ee
+        uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@3a9e55f990cc60290af394a388368199dfabc805
       - name: Setup Bazel
-        uses: angular/dev-infra/github-actions/bazel/setup@f47684669736e28fd77eab64e65b2952c8a948ee
+        uses: angular/dev-infra/github-actions/bazel/setup@3a9e55f990cc60290af394a388368199dfabc805
       - name: Setup Bazel Remote Caching
-        uses: angular/dev-infra/github-actions/bazel/configure-remote@f47684669736e28fd77eab64e65b2952c8a948ee
+        uses: angular/dev-infra/github-actions/bazel/configure-remote@3a9e55f990cc60290af394a388368199dfabc805
         with:
           google_credential: ${{ secrets.RBE_TRUSTED_BUILDS_USER }}
       - name: Install node modules
@@ -83,11 +83,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Initialize environment
-        uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@f47684669736e28fd77eab64e65b2952c8a948ee
+        uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@3a9e55f990cc60290af394a388368199dfabc805
       - name: Setup Bazel
-        uses: angular/dev-infra/github-actions/bazel/setup@f47684669736e28fd77eab64e65b2952c8a948ee
+        uses: angular/dev-infra/github-actions/bazel/setup@3a9e55f990cc60290af394a388368199dfabc805
       - name: Setup Bazel Remote Caching
-        uses: angular/dev-infra/github-actions/bazel/configure-remote@f47684669736e28fd77eab64e65b2952c8a948ee
+        uses: angular/dev-infra/github-actions/bazel/configure-remote@3a9e55f990cc60290af394a388368199dfabc805
         with:
           google_credential: ${{ secrets.RBE_TRUSTED_BUILDS_USER }}
       - name: Install node modules
@@ -100,11 +100,11 @@ jobs:
       labels: ubuntu-latest
     steps:
       - name: Initialize environment
-        uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@f47684669736e28fd77eab64e65b2952c8a948ee
+        uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@3a9e55f990cc60290af394a388368199dfabc805
       - name: Setup Bazel
-        uses: angular/dev-infra/github-actions/bazel/setup@f47684669736e28fd77eab64e65b2952c8a948ee
+        uses: angular/dev-infra/github-actions/bazel/setup@3a9e55f990cc60290af394a388368199dfabc805
       - name: Setup Bazel RBE
-        uses: angular/dev-infra/github-actions/bazel/configure-remote@f47684669736e28fd77eab64e65b2952c8a948ee
+        uses: angular/dev-infra/github-actions/bazel/configure-remote@3a9e55f990cc60290af394a388368199dfabc805
         with:
           google_credential: ${{ secrets.RBE_TRUSTED_BUILDS_USER }}
       - name: Install node modules
@@ -119,11 +119,11 @@ jobs:
       labels: ubuntu-latest
     steps:
       - name: Initialize environment
-        uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@f47684669736e28fd77eab64e65b2952c8a948ee
+        uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@3a9e55f990cc60290af394a388368199dfabc805
       - name: Setup Bazel
-        uses: angular/dev-infra/github-actions/bazel/setup@f47684669736e28fd77eab64e65b2952c8a948ee
+        uses: angular/dev-infra/github-actions/bazel/setup@3a9e55f990cc60290af394a388368199dfabc805
       - name: Setup Bazel RBE
-        uses: angular/dev-infra/github-actions/bazel/configure-remote@f47684669736e28fd77eab64e65b2952c8a948ee
+        uses: angular/dev-infra/github-actions/bazel/configure-remote@3a9e55f990cc60290af394a388368199dfabc805
         with:
           google_credential: ${{ secrets.RBE_TRUSTED_BUILDS_USER }}
       - name: Install node modules
@@ -136,11 +136,11 @@ jobs:
       labels: ubuntu-latest
     steps:
       - name: Initialize environment
-        uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@f47684669736e28fd77eab64e65b2952c8a948ee
+        uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@3a9e55f990cc60290af394a388368199dfabc805
       - name: Setup Bazel
-        uses: angular/dev-infra/github-actions/bazel/setup@f47684669736e28fd77eab64e65b2952c8a948ee
+        uses: angular/dev-infra/github-actions/bazel/setup@3a9e55f990cc60290af394a388368199dfabc805
       - name: Setup Bazel RBE
-        uses: angular/dev-infra/github-actions/bazel/configure-remote@f47684669736e28fd77eab64e65b2952c8a948ee
+        uses: angular/dev-infra/github-actions/bazel/configure-remote@3a9e55f990cc60290af394a388368199dfabc805
       - name: Install node modules
         run: pnpm install --frozen-lockfile
       - run: echo "https://${{secrets.SNAPSHOT_BUILDS_GITHUB_TOKEN}}:@github.com" > ${HOME}/.git_credentials
@@ -152,11 +152,11 @@ jobs:
       labels: ubuntu-latest
     steps:
       - name: Initialize environment
-        uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@f47684669736e28fd77eab64e65b2952c8a948ee
+        uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@3a9e55f990cc60290af394a388368199dfabc805
       - name: Setup Bazel
-        uses: angular/dev-infra/github-actions/bazel/setup@f47684669736e28fd77eab64e65b2952c8a948ee
+        uses: angular/dev-infra/github-actions/bazel/setup@3a9e55f990cc60290af394a388368199dfabc805
       - name: Setup Bazel RBE
-        uses: angular/dev-infra/github-actions/bazel/configure-remote@f47684669736e28fd77eab64e65b2952c8a948ee
+        uses: angular/dev-infra/github-actions/bazel/configure-remote@3a9e55f990cc60290af394a388368199dfabc805
         with:
           google_credential: ${{ secrets.RBE_TRUSTED_BUILDS_USER }}
       - name: Install node modules
@@ -206,11 +206,11 @@ jobs:
     runs-on: ubuntu-latest-8core
     steps:
       - name: Initialize environment
-        uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@f47684669736e28fd77eab64e65b2952c8a948ee
+        uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@3a9e55f990cc60290af394a388368199dfabc805
       - name: Setup Bazel
-        uses: angular/dev-infra/github-actions/bazel/setup@f47684669736e28fd77eab64e65b2952c8a948ee
+        uses: angular/dev-infra/github-actions/bazel/setup@3a9e55f990cc60290af394a388368199dfabc805
       - name: Setup Bazel RBE
-        uses: angular/dev-infra/github-actions/bazel/configure-remote@f47684669736e28fd77eab64e65b2952c8a948ee
+        uses: angular/dev-infra/github-actions/bazel/configure-remote@3a9e55f990cc60290af394a388368199dfabc805
       - name: Install node modules
         run: pnpm install --frozen-lockfile
       - name: Build adev

.angular-github/workflows/ci.yml

@@ -24,7 +24,7 @@ jobs:
 
     steps:
       - name: Checkout the repository
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           # Setting `persist-credentials: false` prevents the github-action account from being the
           # account that is attempted to be used for authentication, instead the remote is set to
@@ -37,7 +37,7 @@ jobs:
           ANGULAR_READONLY_GITHUB_TOKEN: ${{ secrets.READONLY_GITHUB_TOKEN }}
 
       - name: Create a PR (if necessary)
-        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8
+        uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725 # v8.0.0
         with:
           token: ${{ secrets.ANGULAR_ROBOT_ACCESS_TOKEN }}
           push-to-fork: 'angular-robot/angular'

.angular-github/workflows/cross-repo-adev-docs.yml

@@ -12,14 +12,14 @@ jobs:
   labels:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
-      - uses: angular/dev-infra/github-actions/pull-request-labeling@f47684669736e28fd77eab64e65b2952c8a948ee
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: angular/dev-infra/github-actions/pull-request-labeling@3a9e55f990cc60290af394a388368199dfabc805
         with:
           angular-robot-key: ${{ secrets.ANGULAR_ROBOT_PRIVATE_KEY }}
   post_approval_changes:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
-      - uses: angular/dev-infra/github-actions/post-approval-changes@f47684669736e28fd77eab64e65b2952c8a948ee
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: angular/dev-infra/github-actions/post-approval-changes@3a9e55f990cc60290af394a388368199dfabc805
         with:
           angular-robot-key: ${{ secrets.ANGULAR_ROBOT_PRIVATE_KEY }}