Merge branch 'main' into pageheader-sign-off-fixes-dom-order

.changeset/selfish-guests-stare.md

@@ -0,0 +1,5 @@
+---
+'@primer/react': patch
+---
+
+Update mono font in theme to use font stack as fallback to custom property

.changeset/unlucky-boats-film.md

@@ -0,0 +1,5 @@
+---
+"@primer/react": patch
+---
+
+Checkbox: Add `not-allowed` cursor to unchecked disabled state

.eslintrc.js

@@ -121,7 +121,7 @@ module.exports = {
             argsIgnorePattern: '^_',
           },
         ],
-        '@typscript-eslint/no-shadow': 'off',
+        '@typescript-eslint/no-shadow': 'off',
         '@typescript-eslint/no-empty-function': 'off',
         '@typescript-eslint/ban-ts-comment': [
           'error',

.github/workflows/codeql.yml

@@ -42,7 +42,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v2
+        uses: github/codeql-action/init@v3
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -55,7 +55,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v2
+        uses: github/codeql-action/autobuild@v3
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -68,4 +68,4 @@ jobs:
       #   ./location_of_script_within_repo/buildscript.sh
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v2
+        uses: github/codeql-action/analyze@v3

.github/workflows/deploy_preview.yml

@@ -8,7 +8,7 @@ concurrency:
 
 jobs:
   build:
-    if: ${{ github.repository == 'primer/react' }}
+    if: ${{ github.event.pull_request.head.repo.full_name == 'primer/react' }}
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
@@ -25,13 +25,13 @@ jobs:
         working-directory: docs
       - name: Build docs preview
         run: npm run build:docs:preview
-      - uses: actions/upload-pages-artifact@v2
+      - uses: actions/upload-pages-artifact@v3
         with:
           name: github-pages
           path: docs/public
 
   deploy-preview:
-    if: ${{ github.repository == 'primer/react' }}
+    if: ${{ github.event.pull_request.head.repo.full_name == 'primer/react' }}
     needs: build
     permissions:
       pages: write
@@ -45,13 +45,13 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v3
+        uses: actions/deploy-pages@v4
         with:
           preview: true
 
   deploy-storybook:
     name: Preview Storybook
-    if: ${{ github.repository == 'primer/react' }}
+    if: ${{ github.event.pull_request.head.repo.full_name == 'primer/react' }}
     needs: deploy-preview
     permissions:
       deployments: write

.github/workflows/deploy_preview_forks.yml

@@ -1,24 +1,51 @@
-name: Deploy (fork)
+name: Deploy Preview (fork)
 on:
   pull_request_target:
 
-permissions:
-  contents: read
-  pages: write
-  id-token: write
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
 
 jobs:
-  deploy-preview:
+  build:
     # target repository for pull_request is different from source repository
     if: ${{ github.repository != github.event.pull_request.head.repo.full_name }}
-    name: Preview
-    uses: primer/.github/.github/workflows/deploy_preview.yml@0cec9b9914f358846163f2428663b58da41028c9
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: 'npm'
+      - name: Install dependencies
+        run: npm ci
+      - name: Install docs dependencies
+        run: npm ci --legacy-peer-deps
+        working-directory: docs
+      - name: Build docs preview
+        run: npm run build:docs:preview
+      - uses: actions/upload-pages-artifact@v3
+        with:
+          name: github-pages
+          path: docs/public
+
+  deploy-preview:
+    if: ${{ github.repository != github.event.pull_request.head.repo.full_name }}
+    needs: build
     permissions:
-      contents: read
       pages: write
       id-token: write
-    with:
-      node_version: 18
-      install: npm ci --legacy-peer-deps && cd docs && npm ci --legacy-peer-deps && cd ..
-      build: npm run build:docs:preview
-      output_dir: docs/public
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    outputs:
+      deployment_url: ${{ steps.deployment.outputs.page_url }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Deploy to GitHub Pages
+        id: deployment
+        uses: actions/deploy-pages@v4
+        with:
+          preview: true

.github/workflows/deploy_production.yml

@@ -51,7 +51,7 @@ jobs:
     name: Production
     needs: [guard]
     if: ${{ needs.guard.outputs.should_deploy == 'true' }}
-    uses: primer/.github/.github/workflows/deploy.yml@0cec9b9914f358846163f2428663b58da41028c9
+    uses: primer/.github/.github/workflows/deploy.yml@bb0b18fb589038a93a49a24624be0559c01ed0b9
     secrets:
       gh_token: ${{ secrets.GITHUB_TOKEN }}
     with: