Merge branch 'github:main' into patch-2

Author: Premiermoney

assets/images/help/copilot/copilot-sdk/agent-loop-architecture.png

@@ -29,6 +29,11 @@ The token is also available in the `github.token` context. For more information,
 
 {% data reusables.actions.actions-do-not-trigger-workflows %}
 
+{% ifversion actions-github-token-pull-request-approval %}
+> [!NOTE]
+> If you need workflow runs from workflow-created pull requests to execute without requiring approval, use a {% data variables.product.prodname_github_app %} installation access token or a {% data variables.product.pat_generic %} instead of `GITHUB_TOKEN` when creating or updating the pull request.
+{% endif %}
+
 {% data reusables.actions.actions-do-not-trigger-pages-rebuilds %}
 
 ## Next steps

assets/images/help/copilot/copilot-sdk/agent-loop-event-flow.png

@@ -32,7 +32,6 @@ Actions are published to {% data variables.product.prodname_marketplace %} immed
 * The action must be in a public repository.
 * Each repository must contain a single action metadata file (`action.yml` or `action.yaml`) at the root.
   * Repositories may include other actions metadata files in sub-folders, but they will not be automatically listed in the marketplace.
-* Each repository must _not_ contain any workflow files.
 * The `name` in the action's metadata file must be unique.
   * The `name` cannot match an existing action name published on {% data variables.product.prodname_marketplace %}.
   * The `name` cannot match a user or organization on {% data variables.product.prodname_dotcom %}, unless the user or organization owner is publishing the action. For example, only the {% data variables.product.prodname_dotcom %} organization can publish an action named `github`.

assets/images/help/copilot/copilot-sdk/agent-loop-tool-use-loop.png

@@ -624,9 +624,6 @@ containerMode:
   type: "kubernetes-novolume"
 ```
 
->[!NOTE]
->When using `kubernetes-novolume` mode, the container must run as `root` to support lifecycle hook operations.
-
 #### Troubleshooting Kubernetes mode
 
 When Kubernetes mode is enabled, workflows that are not configured with a container job will fail with an error similar to:

assets/images/help/copilot/copilot-sdk/bundled-cli-architecture.png

@@ -1,6 +1,6 @@
 ---
 title: Approving workflow runs from forks
-intro: You can manually approve workflow runs that have been triggered by a contributor's pull request.
+intro: You can manually approve workflow runs triggered by a contributor's pull request.
 versions:
   fpt: '*'
   ghec: '*'

assets/images/help/copilot/copilot-sdk/bundled-cli-authentication-strategies.png

@@ -25,7 +25,7 @@ To learn more about workflows and triggering workflows, see [AUTOTITLE](/actions
 
 {% data reusables.actions.actions-do-not-trigger-workflows %} For more information, see [AUTOTITLE](/actions/security-guides/automatic-token-authentication).
 
-If you do want to trigger a workflow from within a workflow run, you can use a {% data variables.product.prodname_github_app %} installation access token or a {% data variables.product.pat_generic %} instead of `GITHUB_TOKEN` to trigger events that require a token.
+If you do want to trigger a workflow from within a workflow run, you can use a {% data variables.product.prodname_github_app %} installation access token or a {% data variables.product.pat_generic %} instead of `GITHUB_TOKEN` to trigger events that require a token.{% ifversion actions-github-token-pull-request-approval %} Using one of these alternatives also lets `pull_request` workflows run automatically (without the approval prompt described above) when the pull request is created or updated by automation.{% endif %}
 
 If you use a {% data variables.product.prodname_github_app %}, you'll need to create a {% data variables.product.prodname_github_app %} and store the app ID and private key as secrets. For more information, see [AUTOTITLE](/apps/creating-github-apps/guides/making-authenticated-api-requests-with-a-github-app-in-a-github-actions-workflow). If you use a {% data variables.product.pat_generic %}, you'll need to create a {% data variables.product.pat_generic %} and store it as a secret. For more information about creating a {% data variables.product.pat_generic %}, see [AUTOTITLE](/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token). For more information about storing secrets, see [AUTOTITLE](/actions/security-guides/using-secrets-in-github-actions).