Merge branch 'main' into tyllark/flutter-google-service-plugin-typo

Author: nadetastic

.github/CODEOWNERS

@@ -0,0 +1,13 @@
+name: Set Yarn Berry
+description: Enable Yarn Berry in the workflow
+
+runs:
+  using: 'composite'
+  steps:
+    - name: Enable corepack
+      run: corepack enable
+      shell: bash
+    - name: Set yarn version to berry
+      run: yarn set version berry
+      shell: bash
+    

.github/actions/set_yarn_berry/action.yml

@@ -1,21 +1,23 @@
 name: Accessibility Scan
 on:
   pull_request:
-    branches: [main]
+    branches: [main, pre-prod/main]
     types: [opened, synchronize]
 env:
   BUILD_DIR: 'client/www/next-build'
 jobs:
   accessibility:
     name: Runs accessibility scan on changed pages
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - name: Checkout branch
         uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
       - name: Setup Node.js 20
-        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
+        uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
         with:
           node-version: 20.x
+      - name: Set Yarn Berry
+        uses: ./.github/actions/set_yarn_berry
       - name: Install dependencies
         run: yarn
       - name: Build
@@ -32,7 +34,7 @@ jobs:
             const buildDir = process.env.BUILD_DIR;
             return getChangedPages({github, context, buildDir});
       - name: Run site
-        run: | 
+        run: |
           python -m http.server 3000 -d ${{ env.BUILD_DIR }} &
           sleep 5
       - name: Run accessibility tests on changed/new MDX pages

.github/workflows/accessibility_scan.yml

@@ -1,7 +1,7 @@
 name: Test
 on:
   pull_request:
-    branches: [main, next-release/main]
+    branches: [main, next-release/main, pre-prod/main]
     types: [opened, synchronize]
 env:
   BUILD_DIR: 'client/www/next-build'
@@ -13,9 +13,11 @@ jobs:
       - name: Checkout Repo
         uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
       - name: Setup Node.js 20.x
-        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
+        uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
         with:
           node-version: 20.x
+      - name: Set Yarn Berry
+        uses: ./.github/actions/set_yarn_berry
       - name: Install Dependencies
         run: yarn
       - name: Run tests

.github/workflows/build.yml

@@ -14,9 +14,11 @@ jobs:
         with:
           ref: main
       - name: Setup Node.js 20
-        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
+        uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
         with:
           node-version: 20.x
+      - name: Set Yarn Berry
+        uses: ./.github/actions/set_yarn_berry
       - name: Install dependencies
         run: yarn
       - name: Run build and analyze base bundle sizes
@@ -38,9 +40,11 @@ jobs:
         with:
           ref: ${{ github.head_ref }}
       - name: Setup Node.js 20
-        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
+        uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
         with:
           node-version: 20.x
+      - name: Set Yarn Berry
+        uses: ./.github/actions/set_yarn_berry
       - name: Install dependencies
         run: yarn
       - name: Run build and analyze head bundle sizes

.github/workflows/check_bundle_size.yml

@@ -8,14 +8,16 @@ permissions:
   id-token: write
 jobs:
   LinkChecker:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - name: Checkout repository
         uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
       - name: Setup Node.js 20
-        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
+        uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
         with:
           node-version: 20.x
+      - name: Set Yarn Berry
+        uses: ./.github/actions/set_yarn_berry
       - name: Install Dependencies
         run: yarn
       - name: Run Link Checker
@@ -27,12 +29,12 @@ jobs:
             const { checkProdLinks } = require('./tasks/link-checker.js');
             return await checkProdLinks();
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2
+        uses: aws-actions/configure-aws-credentials@ececac1a45f3b08a01d2dd070d28d111c5fe6722 # v4.1.0
         with:
           role-to-assume: arn:aws:iam::464149486631:role/github_action_read_slack_webhook_url
           aws-region: us-west-2
       - name: Read secrets from AWS Secrets Manager into environment variables
-        uses: aws-actions/aws-secretsmanager-get-secrets@98c2d6bf1dd67c2575fa2bb14294aa64103d426c # v2.0.5
+        uses: aws-actions/aws-secretsmanager-get-secrets@fbd65ea98e018858715f591f03b251f02b2316cb # v2.0.8
         with:
           secret-ids: |
             SLACK_WEBHOOK_URL

.github/workflows/check_for_broken_links.yml

@@ -9,14 +9,16 @@ permissions:
   contents: read
 jobs:
   CheckConsoleErrors:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - name: Checkout repository
         uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
       - name: Setup Node.js 20.x
-        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
+        uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
         with:
           node-version: 20.x
+      - name: Set Yarn Berry
+        uses: ./.github/actions/set_yarn_berry
       - name: Install Dependencies
         run: yarn
       - name: Run Build

.github/workflows/check_for_console_errors.yml

@@ -32,7 +32,7 @@ jobs:
           echo ${{ env.PR_NUMBER }} >> $artifactName
           echo ${{ steps.set-deleted-files-count.outputs.result }} >> $artifactName
       - name: Upload the deleted assets file to artifacts
-        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: ${{ env.ARTIFACT_NAME }}
           path: '${{ env.ARTIFACT_NAME }}.txt'

.github/workflows/check_for_deleted_assets.yml

@@ -20,6 +20,8 @@ jobs:
           script: |
             const { getAddedFiles } = require('./.github/workflows/scripts/check_for_new_files.js');
             return await getAddedFiles({github, context, core});
+      - name: Set yarn Berry
+        uses: ./.github/actions/set_yarn_berry
       - name: Install npm package ignore
         if: ${{ steps.set-added-files-count.outputs.result > 0 }}
         run: yarn add [email protected] -W # help verify CODEOWNERS

.github/workflows/check_for_new_files.yml

@@ -1,7 +1,7 @@
 name: Block PRs with New Fragments
 on:
   pull_request:
-    branches: [main]
+    branches: [main, pre-prod/main]
 jobs:
   checkForNewFragments:
     name: Check for new fragments