diff --git a/.github/workflows/send-prs-to-how-how-we-work-boards.yml b/.github/workflows/send-prs-to-how-how-we-work-boards.yml new file mode 100644 index 000000000000..b8ddf2c0b420 --- /dev/null +++ b/.github/workflows/send-prs-to-how-how-we-work-boards.yml @@ -0,0 +1,45 @@ +name: Send pull_request to How We Work Boards + +# **What it does**: This sends pull requests with the feature label to the Docs Engineering feature board +# **Why we have it**: If we use PRs to track features this automates them ending up on the feature board +# **Who does it impact**: Docs Engineering team members + +on: + pull_request: + types: + - labeled + - opened + - reopened + +jobs: + triage: + runs-on: ubuntu-latest + continue-on-error: true + steps: + - if: (github.repository == 'github/docs-internal' || github.repository == 'github/docs') && (contains(github.event.pull_request.labels.*.name, 'engineering') && contains(github.event.pull_request.labels.*.name, 'feature')) + uses: actions/github-script@626af12fe9a53dc2972b48385e7fe7dec79145c9 + with: + github-token: ${{ secrets.DOCUBOT_READORG_REPO_WORKFLOW_SCOPES }} + script: | + // Only do this for work by the engineering folks since multiple teams do work + // in the docs repos + try { + await github.teams.getMembershipForUserInOrg({ + org: 'github', + team_slug: 'docs-engineering', + username: context.payload.sender.login, + }); + } catch(err) { + return + } + + var column_id = 13445681; + try { + github.projects.createCard({ + column_id: column_id, + content_id: context.payload.pull_request.id, + content_type: "PullRequest" + }); + } catch (error) { + console.log(error); + } diff --git a/assets/images/enterprise/3.1/help/repository/code-scanning-alerts-found-link.png b/assets/images/enterprise/3.1/help/repository/code-scanning-alerts-found-link.png new file mode 100644 index 000000000000..3f6622117c18 Binary files /dev/null and b/assets/images/enterprise/3.1/help/repository/code-scanning-alerts-found-link.png differ diff --git a/assets/images/enterprise/3.1/help/repository/code-scanning-branch-dropdown.png b/assets/images/enterprise/3.1/help/repository/code-scanning-branch-dropdown.png new file mode 100644 index 000000000000..d7c7e8914a9a Binary files /dev/null and b/assets/images/enterprise/3.1/help/repository/code-scanning-branch-dropdown.png differ diff --git a/assets/images/enterprise/3.1/help/repository/code-scanning-branch-filter.png b/assets/images/enterprise/3.1/help/repository/code-scanning-branch-filter.png new file mode 100644 index 000000000000..165f43daa648 Binary files /dev/null and b/assets/images/enterprise/3.1/help/repository/code-scanning-branch-filter.png differ diff --git a/assets/images/enterprise/3.1/help/repository/code-scanning-click-alert.png b/assets/images/enterprise/3.1/help/repository/code-scanning-click-alert.png new file mode 100644 index 000000000000..fb52df3b16b2 Binary files /dev/null and b/assets/images/enterprise/3.1/help/repository/code-scanning-click-alert.png differ diff --git a/assets/images/enterprise/3.1/help/repository/code-scanning-filter-by-rule.png b/assets/images/enterprise/3.1/help/repository/code-scanning-filter-by-rule.png new file mode 100644 index 000000000000..aaebc25133af Binary files /dev/null and b/assets/images/enterprise/3.1/help/repository/code-scanning-filter-by-rule.png differ diff --git a/assets/images/help/desktop/cherry-picking.png b/assets/images/help/desktop/cherry-picking.png new file mode 100644 index 000000000000..53831e8afe17 Binary files /dev/null and b/assets/images/help/desktop/cherry-picking.png differ diff --git a/assets/images/help/notifications-v2/mobile-watch-settings.png b/assets/images/help/notifications-v2/mobile-watch-settings.png index 9b6a485bfaca..2b4dec793320 100644 Binary files a/assets/images/help/notifications-v2/mobile-watch-settings.png and b/assets/images/help/notifications-v2/mobile-watch-settings.png differ diff --git a/assets/images/help/repository/code-scanning-alerts-found-link.png b/assets/images/help/repository/code-scanning-alerts-found-link.png index 1d89a9e8d6d0..4835ee3ecf72 100644 Binary files a/assets/images/help/repository/code-scanning-alerts-found-link.png and b/assets/images/help/repository/code-scanning-alerts-found-link.png differ diff --git a/assets/images/help/repository/code-scanning-branch-dropdown.png b/assets/images/help/repository/code-scanning-branch-dropdown.png index 9671a8c89125..f9101f8529d1 100644 Binary files a/assets/images/help/repository/code-scanning-branch-dropdown.png and b/assets/images/help/repository/code-scanning-branch-dropdown.png differ diff --git a/assets/images/help/repository/code-scanning-branch-filter.png b/assets/images/help/repository/code-scanning-branch-filter.png index 52ab4a784c67..6f32077e2df2 100644 Binary files a/assets/images/help/repository/code-scanning-branch-filter.png and b/assets/images/help/repository/code-scanning-branch-filter.png differ diff --git a/assets/images/help/repository/code-scanning-click-alert.png b/assets/images/help/repository/code-scanning-click-alert.png index f62f131530bd..ba87f4a8d971 100644 Binary files a/assets/images/help/repository/code-scanning-click-alert.png and b/assets/images/help/repository/code-scanning-click-alert.png differ diff --git a/assets/images/help/repository/code-scanning-filter-by-rule.png b/assets/images/help/repository/code-scanning-filter-by-rule.png index b280a3495cce..a0f9b26b8f6b 100644 Binary files a/assets/images/help/repository/code-scanning-filter-by-rule.png and b/assets/images/help/repository/code-scanning-filter-by-rule.png differ diff --git a/assets/images/help/repository/code-scanning-filter-by-tool.png b/assets/images/help/repository/code-scanning-filter-by-tool.png new file mode 100644 index 000000000000..b2a6215ea028 Binary files /dev/null and b/assets/images/help/repository/code-scanning-filter-by-tool.png differ diff --git a/content/actions/reference/environment-variables.md b/content/actions/reference/environment-variables.md index dd45eafec2ee..3acefddf7585 100644 --- a/content/actions/reference/environment-variables.md +++ b/content/actions/reference/environment-variables.md @@ -22,6 +22,7 @@ versions: To set custom environment variables, you need to specify the variables in the workflow file. You can define environment variables for a step, job, or entire workflow using the [`jobs..steps[*].env`](/github/automating-your-workflow-with-github-actions/workflow-syntax-for-github-actions#jobsjob_idstepsenv), [`jobs..env`](/github/automating-your-workflow-with-github-actions/workflow-syntax-for-github-actions#jobsjob_idenv), and [`env`](/github/automating-your-workflow-with-github-actions/workflow-syntax-for-github-actions#env) keywords. For more information, see "[Workflow syntax for {% data variables.product.prodname_dotcom %}](/articles/workflow-syntax-for-github-actions/#jobsjob_idstepsenv)." +{% raw %} ```yaml jobs: weekday_job: @@ -30,13 +31,14 @@ jobs: DAY_OF_WEEK: Mon steps: - name: "Hello world when it's Monday" - if: env.DAY_OF_WEEK == 'Mon' + if: ${{ env.DAY_OF_WEEK == 'Mon' }} run: echo "Hello $FIRST_NAME $middle_name $Last_Name, today is Monday!" env: FIRST_NAME: Mona middle_name: The Last_Name: Octocat ``` +{% endraw %} To use the value of an environment variable in a workflow file, you should use the [`env` context](/actions/reference/context-and-expression-syntax-for-github-actions#env-context). If you want to use the value of an environment variable inside a runner, you can use the runner operating system's normal method for reading environment variables. diff --git a/content/code-security/secure-coding/managing-code-scanning-alerts-for-your-repository.md b/content/code-security/secure-coding/managing-code-scanning-alerts-for-your-repository.md index 4d9e854519ec..1873a772bb69 100644 --- a/content/code-security/secure-coding/managing-code-scanning-alerts-for-your-repository.md +++ b/content/code-security/secure-coding/managing-code-scanning-alerts-for-your-repository.md @@ -45,8 +45,15 @@ You need write permission to view a summary of all the alerts for a repository o {% data reusables.repositories.navigate-to-repo %} {% data reusables.repositories.sidebar-security %} {% data reusables.repositories.sidebar-code-scanning-alerts %} +{% if currentVersion == "free-pro-team@latest" or currentVersion ver_gt "enterprise-server@3.1"%} +1. Optionally, use the drop-down menus to filter alerts. For example, you can filter by the tool that was used to identify alerts. + ![Filter by tool](/assets/images/help/repository/code-scanning-filter-by-tool.png){% endif %} 1. Under "{% data variables.product.prodname_code_scanning_capc %}," click the alert you'd like to explore. +{% if currentVersion == "free-pro-team@latest" or currentVersion ver_gt "enterprise-server@3.1"%} ![Summary of alerts](/assets/images/help/repository/code-scanning-click-alert.png) +{% else %} + ![List of alerts from {% data variables.product.prodname_code_scanning %}](/assets/images/enterprise/3.1/help/repository/code-scanning-click-alert.png) +{% endif %} 1. Optionally, if the alert highlights a problem with data flow, click **Show paths** to display the path from the data source to the sink where it's used. ![The "Show paths" link on an alert](/assets/images/help/repository/code-scanning-show-paths.png) 1. Alerts from {% data variables.product.prodname_codeql %} analysis include a description of the problem. Click **Show more** for guidance on how to fix your code. @@ -60,7 +67,11 @@ If you have write permission for a repository, you can view fixed alerts by view Alerts may be fixed in one branch but not in another. You can use the "Branch" drop-down menu, on the summary of alerts, to check whether an alert is fixed in a particular branch. +{% if currentVersion == "free-pro-team@latest" or currentVersion ver_gt "enterprise-server@3.1"%} ![Filtering alerts by branch](/assets/images/help/repository/code-scanning-branch-filter.png) +{% else %} +![Filtering alerts by branch](/assets/images/enterprise/3.1/help/repository/code-scanning-branch-filter.png) +{% endif %} {% if currentVersion == "enterprise-server@2.22" %} @@ -113,11 +124,19 @@ To dismiss or delete alerts: Optionally, you can use the filters to display a subset of alerts and then delete all matching alerts at once. For example, if you have removed a query from {% data variables.product.prodname_codeql %} analysis, you can use the "Rule" filter to list just the alerts for that query and then select and delete all of those alerts. +{% if currentVersion == "free-pro-team@latest" or currentVersion ver_gt "enterprise-server@3.1"%} ![Filter alerts by rule](/assets/images/help/repository/code-scanning-filter-by-rule.png) +{% else %} + ![Filter alerts by rule](/assets/images/enterprise/3.1/help/repository/code-scanning-filter-by-rule.png) +{% endif %} 1. If you want to dismiss an alert, it's important to explore the alert first, so that you can choose the correct dismissal reason. Click the alert you'd like to explore. +{% if currentVersion == "free-pro-team@latest" or currentVersion ver_gt "enterprise-server@3.1"%} ![Open an alert from the summary list](/assets/images/help/repository/code-scanning-click-alert.png) +{% else %} + ![List of alerts from {% data variables.product.prodname_code_scanning %}](/assets/images/enterprise/3.1/help/repository/code-scanning-click-alert.png) +{% endif %} 1. Review the alert, then click **Dismiss** and choose a reason for closing the alert. ![Choosing a reason for dismissing an alert](/assets/images/help/repository/code-scanning-alert-close-drop-down.png) diff --git a/content/code-security/secure-coding/setting-up-code-scanning-for-a-repository.md b/content/code-security/secure-coding/setting-up-code-scanning-for-a-repository.md index d409ca16f7ab..91b9a5c7b310 100644 --- a/content/code-security/secure-coding/setting-up-code-scanning-for-a-repository.md +++ b/content/code-security/secure-coding/setting-up-code-scanning-for-a-repository.md @@ -76,7 +76,11 @@ After setting up {% data variables.product.prodname_code_scanning %} for your re **Note:** If you raised a pull request to add the {% data variables.product.prodname_code_scanning %} workflow to the repository, alerts from that pull request aren't displayed directly on the {% data variables.product.prodname_code_scanning_capc %} page until the pull request is merged. If any alerts were found you can view these, before the pull request is merged, by clicking the **_n_ alerts found** link in the banner on the {% data variables.product.prodname_code_scanning_capc %} page. +{% if currentVersion == "free-pro-team@latest" or currentVersion ver_gt "enterprise-server@3.1"%} ![Click the "n alerts found" link](/assets/images/help/repository/code-scanning-alerts-found-link.png) +{% else %} + ![Click the "n alerts found" link](/assets/images/enterprise/3.1/help/repository/code-scanning-alerts-found-link.png) +{% endif %} {% endnote %} @@ -102,7 +106,11 @@ There are other situations where there may be no analysis for the latest commit To check whether a branch has been scanned, go to the {% data variables.product.prodname_code_scanning_capc %} page, click the **Branch** drop-down and select the relevant branch. +{% if currentVersion == "free-pro-team@latest" or currentVersion ver_gt "enterprise-server@3.1"%} ![Choose a branch from the Branch drop-down menu](/assets/images/help/repository/code-scanning-branch-dropdown.png) +{% else %} + ![Choose a branch from the Branch drop-down menu](/assets/images/enterprise/3.1/help/repository/code-scanning-branch-dropdown.png) +{% endif %} The solution in this situation is to add the name of the base branch to the `on:push` and `on:pull_request` specification in the {% data variables.product.prodname_code_scanning %} workflow on that branch and then make a change that updates the open pull request that you want to scan. diff --git a/content/code-security/supply-chain-security/about-dependabot-version-updates.md b/content/code-security/supply-chain-security/about-dependabot-version-updates.md index 51dcc45a08d3..eae94e1f1789 100644 --- a/content/code-security/supply-chain-security/about-dependabot-version-updates.md +++ b/content/code-security/supply-chain-security/about-dependabot-version-updates.md @@ -13,8 +13,6 @@ topics: - repositories --- -{% data reusables.dependabot.beta-note %} - ### About {% data variables.product.prodname_dependabot_version_updates %} {% data variables.product.prodname_dependabot %} takes the effort out of maintaining your dependencies. You can use it to ensure that your repository automatically keeps up with the latest releases of the packages and applications it depends on. diff --git a/content/code-security/supply-chain-security/configuration-options-for-dependency-updates.md b/content/code-security/supply-chain-security/configuration-options-for-dependency-updates.md index 6e6da252ca02..d4debc6b6ccc 100644 --- a/content/code-security/supply-chain-security/configuration-options-for-dependency-updates.md +++ b/content/code-security/supply-chain-security/configuration-options-for-dependency-updates.md @@ -11,8 +11,6 @@ topics: - repositories --- -{% data reusables.dependabot.beta-note %} - ### About the *dependabot.yml* file The {% data variables.product.prodname_dependabot %} configuration file, *dependabot.yml*, uses YAML syntax. If you're new to YAML and want to learn more, see "[Learn YAML in five minutes](https://www.codeproject.com/Articles/1214409/Learn-YAML-in-five-minutes)." diff --git a/content/code-security/supply-chain-security/customizing-dependency-updates.md b/content/code-security/supply-chain-security/customizing-dependency-updates.md index 7ca4077ba27a..f058194f72cf 100644 --- a/content/code-security/supply-chain-security/customizing-dependency-updates.md +++ b/content/code-security/supply-chain-security/customizing-dependency-updates.md @@ -10,8 +10,6 @@ topics: - repositories --- -{% data reusables.dependabot.beta-note %} - ### About customizing dependency updates After you've enabled version updates, you can customize how {% data variables.product.prodname_dependabot %} maintains your dependencies by adding further options to the *dependabot.yml* file. For example, you could: diff --git a/content/code-security/supply-chain-security/enabling-and-disabling-version-updates.md b/content/code-security/supply-chain-security/enabling-and-disabling-version-updates.md index 31a22c49556d..ed1b037ce06e 100644 --- a/content/code-security/supply-chain-security/enabling-and-disabling-version-updates.md +++ b/content/code-security/supply-chain-security/enabling-and-disabling-version-updates.md @@ -11,8 +11,6 @@ topics: --- -{% data reusables.dependabot.beta-note-no-link %} - ### About version updates for dependencies You enable {% data variables.product.prodname_dependabot_version_updates %} by checking a *dependabot.yml* configuration file in to your repository's `.github` directory. {% data variables.product.prodname_dependabot %} then raises pull requests to keep the dependencies you configure up-to-date. For each package manager's dependencies that you want to update, you must specify the location of the package manifest files and how often to check for updates to the dependencies listed in those files. For information about enabling security updates, see "[Configuring {% data variables.product.prodname_dependabot_security_updates %}](/github/managing-security-vulnerabilities/configuring-dependabot-security-updates)." diff --git a/content/code-security/supply-chain-security/keeping-your-actions-up-to-date-with-dependabot.md b/content/code-security/supply-chain-security/keeping-your-actions-up-to-date-with-dependabot.md index ebafb80bf137..639f48662567 100644 --- a/content/code-security/supply-chain-security/keeping-your-actions-up-to-date-with-dependabot.md +++ b/content/code-security/supply-chain-security/keeping-your-actions-up-to-date-with-dependabot.md @@ -10,8 +10,6 @@ topics: - repositories --- -{% data reusables.dependabot.beta-note %} - ### About {% data variables.product.prodname_dependabot_version_updates %} for actions Actions are often updated with bug fixes and new features to make automated processes more reliable, faster, and safer. When you enable {% data variables.product.prodname_dependabot_version_updates %} for {% data variables.product.prodname_actions %}, {% data variables.product.prodname_dependabot %} will help ensure that references to actions in a repository's *workflow.yml* file are kept up to date. For each action in the file, {% data variables.product.prodname_dependabot %} checks the action's reference (typically a version number or commit identifier associated with the action) against the latest version. If a more recent version of the action is available, {% data variables.product.prodname_dependabot %} will send you a pull request that updates the reference in the workflow file to the latest version. For more information about {% data variables.product.prodname_dependabot_version_updates %}, see "[About {% data variables.product.prodname_dependabot_version_updates %}](/github/administering-a-repository/about-dependabot-version-updates)." For more information about configuring workflows for {% data variables.product.prodname_actions %}, see "[Learn {% data variables.product.prodname_actions %}](/actions/learn-github-actions)." diff --git a/content/code-security/supply-chain-security/listing-dependencies-configured-for-version-updates.md b/content/code-security/supply-chain-security/listing-dependencies-configured-for-version-updates.md index ee34385d25fa..f8f61215822f 100644 --- a/content/code-security/supply-chain-security/listing-dependencies-configured-for-version-updates.md +++ b/content/code-security/supply-chain-security/listing-dependencies-configured-for-version-updates.md @@ -9,8 +9,6 @@ topics: - repositories --- -{% data reusables.dependabot.beta-note %} - ### Viewing dependencies monitored by {% data variables.product.prodname_dependabot %} After you've enabled version updates, you can confirm that your configuration is correct using the **{% data variables.product.prodname_dependabot %}** tab in the dependency graph for the repository. For more information, see "[Enabling and disabling version updates](/github/administering-a-repository/enabling-and-disabling-version-updates)." diff --git a/content/code-security/supply-chain-security/managing-pull-requests-for-dependency-updates.md b/content/code-security/supply-chain-security/managing-pull-requests-for-dependency-updates.md index 899d763033c4..53a261fe7dcc 100644 --- a/content/code-security/supply-chain-security/managing-pull-requests-for-dependency-updates.md +++ b/content/code-security/supply-chain-security/managing-pull-requests-for-dependency-updates.md @@ -9,8 +9,6 @@ topics: - repositories --- -{% data reusables.dependabot.beta-note %} - ### About {% data variables.product.prodname_dependabot %} pull requests {% data reusables.dependabot.pull-request-introduction %} diff --git a/content/code-security/supply-chain-security/troubleshooting-dependabot-errors.md b/content/code-security/supply-chain-security/troubleshooting-dependabot-errors.md index 3b794605c7fd..62c430aaead2 100644 --- a/content/code-security/supply-chain-security/troubleshooting-dependabot-errors.md +++ b/content/code-security/supply-chain-security/troubleshooting-dependabot-errors.md @@ -11,8 +11,6 @@ topics: - security --- -{% data reusables.dependabot.beta-note %} - ### About {% data variables.product.prodname_dependabot %} errors {% data reusables.dependabot.pull-request-introduction %} diff --git a/content/desktop/contributing-and-collaborating-using-github-desktop/cherry-picking-a-commit.md b/content/desktop/contributing-and-collaborating-using-github-desktop/cherry-picking-a-commit.md new file mode 100644 index 000000000000..9b54e4027608 --- /dev/null +++ b/content/desktop/contributing-and-collaborating-using-github-desktop/cherry-picking-a-commit.md @@ -0,0 +1,23 @@ +--- +title: Cherry-picking a commit +intro: You can pick a specific commit on one branch and copy the commit to another branch. +versions: + free-pro-team: '*' +--- + +### About Git cherry-pick + +You can cherry-pick a commit on one branch to create a copy of the commit with the same changes on another branch. If you commit changes to the wrong branch or want to make the same changes to another branch, you can cherry-pick the commit to apply the changes to another branch. You can also use cherry-picking to apply specific changes before you are ready to create or merge a pull request. For example, if you commit a bug fix to a feature branch, you can cherry-pick the commit with the bug fix to other branches of your project. + +You can also use cherry-picking when collaborating with a team. Some projects incorporate contributions by cherry-picking commits. For more information, see [Distributed Git - Maintaining a Project](https://git-scm.com/book/en/v2/Distributed-Git-Maintaining-a-Project#_rebase_cherry_pick) in the Git documentation. + +### Cherry-picking a commit + +{% data reusables.desktop.current-branch-menu %} +2. In the list of branches, click the branch that has the commit that you want to cherry-pick. +{% data reusables.desktop.history-tab %} +4. Drag the commit that you want to cherry-pick to the {% octicon "git-branch" aria-label="The branch icon" %} **Current Branch** menu and drop the commit on the branch that you want to copy the commit to. + ![Dragging a commit to another branch in the Current Branch menu](/assets/images/help/desktop/cherry-picking.png) + +### Further reading +- [git-cherry-pick](https://git-scm.com/docs/git-cherry-pick) in the Git documentation diff --git a/content/desktop/contributing-and-collaborating-using-github-desktop/index.md b/content/desktop/contributing-and-collaborating-using-github-desktop/index.md index 2e0f6b62fd21..6156c18c8371 100644 --- a/content/desktop/contributing-and-collaborating-using-github-desktop/index.md +++ b/content/desktop/contributing-and-collaborating-using-github-desktop/index.md @@ -22,6 +22,7 @@ versions: {% link_in_list /stashing-changes %} {% link_in_list /pushing-changes-to-github %} {% link_in_list /reverting-a-commit %} + {% link_in_list /cherry-picking-a-commit %} {% link_in_list /managing-tags %} {% link_in_list /viewing-the-branch-history %} {% topic_link_in_list /working-with-your-remote-repository-on-github-or-github-enterprise %} diff --git a/content/developers/overview/secret-scanning.md b/content/developers/overview/secret-scanning.md index 9c2d39bf94f0..d7d1e02bf326 100644 --- a/content/developers/overview/secret-scanning.md +++ b/content/developers/overview/secret-scanning.md @@ -17,12 +17,6 @@ When a match of your secret format is found in a public repository, a payload is When a match of your secret format is found in a private repository configured for {% data variables.product.prodname_secret_scanning %}, then repository admins are alerted and can view and manage the {% data variables.product.prodname_secret_scanning %} results on {% data variables.product.prodname_dotcom %}. For more information, see "[Managing alerts from {% data variables.product.prodname_secret_scanning %}](/github/administering-a-repository/managing-alerts-from-secret-scanning)." -{% note %} - -**Note:** {% data variables.product.prodname_secret_scanning_caps %} for private repositories is currently in beta. - -{% endnote %} - This article describes how you can partner with {% data variables.product.prodname_dotcom %} as a service provider and join the {% data variables.product.prodname_secret_scanning %} program. ### The {% data variables.product.prodname_secret_scanning %} process diff --git a/content/developers/webhooks-and-events/webhook-events-and-payloads.md b/content/developers/webhooks-and-events/webhook-events-and-payloads.md index 7ff7b44c4266..e2a9c0974c91 100644 --- a/content/developers/webhooks-and-events/webhook-events-and-payloads.md +++ b/content/developers/webhooks-and-events/webhook-events-and-payloads.md @@ -337,6 +337,60 @@ Key | Type | Description {{ webhookPayloadsForCurrentVersion.deployment_status }} +{% if currentVersion == "free-pro-team@latest" %} +### discussion + +{% data reusables.webhooks.discussions-webhooks-beta %} + +Activity related to a discussion. For more information, see the "[Using the GraphQL API for discussions](/graphql/guides/using-the-graphql-api-for-discussions)." +#### Availability + +- Repository webhooks +- Organization webhooks +- {% data variables.product.prodname_github_app %}s with the `discussions` permission + +#### Webhook payload object + +Key | Type | Description +----|------|------------- +`action` |`string` | The action performed. Can be `created`, `edited`, `deleted`, `pinned`, `unpinned`, `locked`, `unlocked`, `transferred`, `category_changed`, `answered`, or `unanswered`. +{% data reusables.webhooks.discussion_desc %} +{% data reusables.webhooks.repo_desc_graphql %} +{% data reusables.webhooks.org_desc_graphql %} +{% data reusables.webhooks.sender_desc %} + +#### Webhook payload example + +{{ webhookPayloadsForCurrentVersion.discussion.created }} + +### discussion_comment + +{% data reusables.webhooks.discussions-webhooks-beta %} + +Activity related to a comment in a discussion. For more information, see "[Using the GraphQL API for discussions](/graphql/guides/using-the-graphql-api-for-discussions)." + +#### Availability + +- Repository webhooks +- Organization webhooks +- {% data variables.product.prodname_github_app %}s with the `discussions` permission + +#### Webhook payload object + +Key | Type | Description +----|------|------------- +`action` |`string` | The action performed. Can be `created`, `edited`, or `deleted`. +`comment` | `object` | The [`discussion comment`](/graphql/guides/using-the-graphql-api-for-discussions#discussioncomment) resource. +{% data reusables.webhooks.discussion_desc %} +{% data reusables.webhooks.repo_desc_graphql %} +{% data reusables.webhooks.org_desc_graphql %} +{% data reusables.webhooks.sender_desc %} + +#### Webhook payload example + +{{ webhookPayloadsForCurrentVersion.discussion_comment.created }} +{% endif %} + {% if enterpriseServerVersions contains currentVersion or currentVersion == "github-ae@latest" %} ### enterprise diff --git a/content/education/explore-the-benefits-of-teaching-and-learning-with-github-education/about-campus-advisors.md b/content/education/explore-the-benefits-of-teaching-and-learning-with-github-education/about-campus-advisors.md index 72f6d0950d03..eb1f42f29828 100644 --- a/content/education/explore-the-benefits-of-teaching-and-learning-with-github-education/about-campus-advisors.md +++ b/content/education/explore-the-benefits-of-teaching-and-learning-with-github-education/about-campus-advisors.md @@ -16,3 +16,7 @@ Professors, teachers and mentors can use the Campus Advisors online training to **Note:** As an instructor, you can't create {% data variables.product.prodname_dotcom %} accounts for your students. Students must create their own {% data variables.product.prodname_dotcom %} accounts. {% endnote %} + +Teachers can manage a course on software development with {% data variables.product.prodname_education %}. {% data variables.product.prodname_classroom %} allows you to distribute code, provide feedback, and manage coursework using {% data variables.product.product_name %}. For more information, see "[Manage coursework with {% data variables.product.prodname_classroom %}](/education/manage-coursework-with-github-classroom)." + +If you're a student or academic faculty and your school isn't partnered with {% data variables.product.prodname_dotcom %} as a {% data variables.product.prodname_campus_program %} school, then you can still individually apply for discounts to use {% data variables.product.prodname_dotcom %}. For more information, see "[Use {% data variables.product.prodname_dotcom %} for your schoolwork](/education/teach-and-learn-with-github-education/use-github-for-your-schoolwork)" or "[Use {% data variables.product.prodname_dotcom %} in your classroom and research](/education/teach-and-learn-with-github-education/use-github-in-your-classroom-and-research/)." diff --git a/content/education/explore-the-benefits-of-teaching-and-learning-with-github-education/about-campus-experts.md b/content/education/explore-the-benefits-of-teaching-and-learning-with-github-education/about-campus-experts.md index 1dad791c70b8..2d9daba72532 100644 --- a/content/education/explore-the-benefits-of-teaching-and-learning-with-github-education/about-campus-experts.md +++ b/content/education/explore-the-benefits-of-teaching-and-learning-with-github-education/about-campus-experts.md @@ -9,4 +9,6 @@ versions: free-pro-team: '*' --- -Learn public speaking skills, technical writing, community leadership, and software development skills as a {% data variables.product.prodname_dotcom %} Campus Expert. For more information, see "[Campus Experts](https://education.github.com/students/experts)." +Learn public speaking skills, technical writing, community leadership, and software development skills as a {% data variables.product.prodname_dotcom %} Campus Expert. + +To learn more about training programs for student leaders and teachers, see "[{% data variables.product.prodname_dotcom %} Campus Experts](https://education.github.com/students/experts)" and "[Campus Advisors](https://education.github.com/teachers/advisors)." diff --git a/content/education/explore-the-benefits-of-teaching-and-learning-with-github-education/about-github-campus-program.md b/content/education/explore-the-benefits-of-teaching-and-learning-with-github-education/about-github-campus-program.md new file mode 100644 index 000000000000..4cbf318e6b28 --- /dev/null +++ b/content/education/explore-the-benefits-of-teaching-and-learning-with-github-education/about-github-campus-program.md @@ -0,0 +1,24 @@ +--- +title: About GitHub Campus Program +intro: '{% data variables.product.prodname_campus_program %} offers {% data variables.product.prodname_ghe_cloud %} and {% data variables.product.prodname_ghe_server %} free-of-charge for schools that want to make the most of {% data variables.product.prodname_dotcom %} for their community.' +redirect_from: + - /education/teach-and-learn-with-github-education/about-github-education + - /github/teaching-and-learning-with-github-education/about-github-education + - /articles/about-github-education + - /education/explore-the-benefits-of-teaching-and-learning-with-github-education/about-github-education +versions: + free-pro-team: '*' +--- + +{% data variables.product.prodname_campus_program %} is a package of premium {% data variables.product.prodname_dotcom %} access for teaching-focused institutions that grant degrees, diplomas, or certificates. {% data variables.product.prodname_campus_program %} includes: + +- No-cost access to {% data variables.product.prodname_ghe_cloud %} and {% data variables.product.prodname_ghe_server %} for all of your technical and academic departments +- Teacher training to master Git and {% data variables.product.prodname_dotcom %} with our Campus Advisor program +- Exclusive access to new features, GitHub Education-specific swag, and free developer tools from {% data variables.product.prodname_dotcom %} partners +- Automated access to premium {% data variables.product.prodname_education %} features, like the {% data variables.product.prodname_student_pack %} + +Any school that can agree to the [terms of the program](https://education.github.com/schools/terms) is welcome to join. + +For more information, see the [official {% data variables.product.prodname_campus_program %}](https://education.github.com/schools) page. + +If you're a student or academic faculty and your school isn't partnered with {% data variables.product.prodname_dotcom %} as a {% data variables.product.prodname_campus_program %} school, then you can still individually apply for discounts to use {% data variables.product.prodname_dotcom %}. For more information, see "[Use {% data variables.product.prodname_dotcom %} for your schoolwork](/education/explore-the-benefits-of-teaching-and-learning-with-github-education/use-github-for-your-schoolwork)" or "[Use {% data variables.product.prodname_dotcom %} in your classroom and research](/education/explore-the-benefits-of-teaching-and-learning-with-github-education/use-github-in-your-classroom-and-research/)." diff --git a/content/education/explore-the-benefits-of-teaching-and-learning-with-github-education/about-github-education.md b/content/education/explore-the-benefits-of-teaching-and-learning-with-github-education/about-github-education.md deleted file mode 100644 index c3a05c2f2352..000000000000 --- a/content/education/explore-the-benefits-of-teaching-and-learning-with-github-education/about-github-education.md +++ /dev/null @@ -1,24 +0,0 @@ ---- -title: About GitHub Education -intro: '{% data variables.product.prodname_education %} offers a special free product for schools that want to make the most of {% data variables.product.prodname_dotcom %} for their community and agree to specific program requirements.' -redirect_from: - - /education/teach-and-learn-with-github-education/about-github-education - - /github/teaching-and-learning-with-github-education/about-github-education - - /articles/about-github-education -versions: - free-pro-team: '*' ---- - -If your school agrees to meet certain requirements, your secondary school, university, or bootcamp can get {% data variables.product.prodname_education %}, which offers the best of {% data variables.product.prodname_dotcom %} for free, including: -- {% data variables.product.prodname_ghe_cloud %} and/or {% data variables.product.prodname_ghe_server %} -- Teacher training to master Git and {% data variables.product.prodname_dotcom %} with our Campus Advisor program -- Automated access to premium {% data variables.product.prodname_education %} features, like the {% data variables.product.prodname_student_pack %} -- Leadership development and technical training for students with the Campus Experts program - -For more information, see the [official {% data variables.product.prodname_education %}](https://education.github.com/partners/schools) page. - -Teachers can manage a course on software development with {% data variables.product.prodname_education %}. {% data variables.product.prodname_classroom %} allows you to distribute code, provide feedback, and manage coursework using {% data variables.product.product_name %}. For more information, see "[Manage coursework with {% data variables.product.prodname_classroom %}](/education/manage-coursework-with-github-classroom)." - -To learn more about training programs for student leaders and teachers, see "[{% data variables.product.prodname_dotcom %} Campus Experts](https://education.github.com/students/experts)" and "[Campus Advisors](https://education.github.com/teachers/advisors)." - -If you're a student or academic faculty and your school isn't partnered with {% data variables.product.prodname_dotcom %} as a {% data variables.product.prodname_education %} school, then you can still individually apply for discounts to use {% data variables.product.prodname_dotcom %}. For more information, see "[Use {% data variables.product.prodname_dotcom %} for your schoolwork](/education/explore-the-benefits-of-teaching-and-learning-with-github-education/use-github-for-your-schoolwork)" or "[Use {% data variables.product.prodname_dotcom %} in your classroom and research](/education/explore-the-benefits-of-teaching-and-learning-with-github-education/use-github-in-your-classroom-and-research/)." diff --git a/content/education/explore-the-benefits-of-teaching-and-learning-with-github-education/index.md b/content/education/explore-the-benefits-of-teaching-and-learning-with-github-education/index.md index 9dda1a2a4fa4..46f1c88ab459 100644 --- a/content/education/explore-the-benefits-of-teaching-and-learning-with-github-education/index.md +++ b/content/education/explore-the-benefits-of-teaching-and-learning-with-github-education/index.md @@ -13,7 +13,7 @@ versions: ### Table of Contents {% topic_link_in_list /use-github-at-your-educational-institution %} - {% link_in_list /about-github-education %} + {% link_in_list /about-github-campus-program %} {% link_in_list /about-campus-experts %} {% link_in_list /about-campus-advisors %} {% topic_link_in_list /use-github-for-your-schoolwork %} diff --git a/content/education/explore-the-benefits-of-teaching-and-learning-with-github-education/why-wasnt-my-application-for-a-student-developer-pack-approved.md b/content/education/explore-the-benefits-of-teaching-and-learning-with-github-education/why-wasnt-my-application-for-a-student-developer-pack-approved.md index e9994f2c8a20..8bea1963a57d 100644 --- a/content/education/explore-the-benefits-of-teaching-and-learning-with-github-education/why-wasnt-my-application-for-a-student-developer-pack-approved.md +++ b/content/education/explore-the-benefits-of-teaching-and-learning-with-github-education/why-wasnt-my-application-for-a-student-developer-pack-approved.md @@ -59,11 +59,11 @@ For more information, see: ### Ineligible student status You're ineligible for a {% data variables.product.prodname_student_pack %} if: -- You're enrolled in an informal learning program that is not part of the [{% data variables.product.prodname_dotcom %} Campus Program](https://education.github.com/schools) and not enrolled in a degree or diploma granting course of study. +- You're enrolled in an informal learning program that is not part of the [{% data variables.product.prodname_campus_program %}](https://education.github.com/schools) and not enrolled in a degree or diploma granting course of study. - You're pursuing a degree which will be terminated in the current academic session. - You're under 13 years old. -Your instructor may still apply for a {% data variables.product.prodname_education %} discount for classroom use. If you're a student at a coding school or bootcamp, you will become eligible for a {% data variables.product.prodname_student_pack %} if your school joins the [{% data variables.product.prodname_dotcom %} Campus Program](https://education.github.com/schools). +Your instructor may still apply for a {% data variables.product.prodname_education %} discount for classroom use. If you're a student at a coding school or bootcamp, you will become eligible for a {% data variables.product.prodname_student_pack %} if your school joins the [{% data variables.product.prodname_campus_program %}](https://education.github.com/schools). ### Further reading diff --git a/content/github/finding-security-vulnerabilities-and-errors-in-your-code/managing-code-scanning-alerts-for-your-repository.md b/content/github/finding-security-vulnerabilities-and-errors-in-your-code/managing-code-scanning-alerts-for-your-repository.md index 4a81d34903c6..fa0590466edc 100644 --- a/content/github/finding-security-vulnerabilities-and-errors-in-your-code/managing-code-scanning-alerts-for-your-repository.md +++ b/content/github/finding-security-vulnerabilities-and-errors-in-your-code/managing-code-scanning-alerts-for-your-repository.md @@ -38,7 +38,7 @@ You need write permission to view a summary of all the alerts for a repository o {% data reusables.repositories.sidebar-security %} {% data reusables.repositories.sidebar-code-scanning-alerts %} 1. Under "{% data variables.product.prodname_code_scanning_capc %}," click the alert you'd like to explore. - ![Summary of alerts](/assets/images/help/repository/code-scanning-click-alert.png) + ![Summary of alerts](/assets/images/enterprise/3.1/help/repository/code-scanning-click-alert.png) 1. Optionally, if the alert highlights a problem with data flow, click **Show paths** to display the path from the data source to the sink where it's used. ![The "Show paths" link on an alert](/assets/images/help/repository/code-scanning-show-paths.png) 1. Alerts from {% data variables.product.prodname_codeql %} analysis include a description of the problem. Click **Show more** for guidance on how to fix your code. @@ -52,7 +52,7 @@ If you have write permission for a repository, you can view fixed alerts by view Alerts may be fixed in one branch but not in another. You can use the "Branch" drop-down menu, on the summary of alerts, to check whether an alert is fixed in a particular branch. -![Filtering alerts by branch](/assets/images/help/repository/code-scanning-branch-filter.png) +![Filtering alerts by branch](/assets/images/enterprise/3.1/help/repository/code-scanning-branch-filter.png) {% if currentVersion == "enterprise-server@2.22" %} @@ -105,11 +105,11 @@ To dismiss or delete alerts: Optionally, you can use the filters to display a subset of alerts and then delete all matching alerts at once. For example, if you have removed a query from {% data variables.product.prodname_codeql %} analysis, you can use the "Rule" filter to list just the alerts for that query and then select and delete all of those alerts. - ![Filter alerts by rule](/assets/images/help/repository/code-scanning-filter-by-rule.png) + ![Filter alerts by rule](/assets/images/enterprise/3.1/help/repository/code-scanning-filter-by-rule.png) 1. If you want to dismiss an alert, it's important to explore the alert first, so that you can choose the correct dismissal reason. Click the alert you'd like to explore. - ![Open an alert from the summary list](/assets/images/help/repository/code-scanning-click-alert.png) + ![Open an alert from the summary list](/assets/images/enterprise/3.1/help/repository/code-scanning-click-alert.png) 1. Review the alert, then click **Dismiss** and choose a reason for closing the alert. ![Choosing a reason for dismissing an alert](/assets/images/help/repository/code-scanning-alert-close-drop-down.png) diff --git a/content/github/finding-security-vulnerabilities-and-errors-in-your-code/setting-up-code-scanning-for-a-repository.md b/content/github/finding-security-vulnerabilities-and-errors-in-your-code/setting-up-code-scanning-for-a-repository.md index 66483a89260c..96eddbb33bff 100644 --- a/content/github/finding-security-vulnerabilities-and-errors-in-your-code/setting-up-code-scanning-for-a-repository.md +++ b/content/github/finding-security-vulnerabilities-and-errors-in-your-code/setting-up-code-scanning-for-a-repository.md @@ -69,7 +69,7 @@ After setting up {% data variables.product.prodname_code_scanning %} for your re **Note:** If you raised a pull request to add the {% data variables.product.prodname_code_scanning %} workflow to the repository, alerts from that pull request aren't displayed directly on the {% data variables.product.prodname_code_scanning_capc %} page until the pull request is merged. If any alerts were found you can view these, before the pull request is merged, by clicking the **_n_ alerts found** link in the banner on the {% data variables.product.prodname_code_scanning_capc %} page. - ![Click the "n alerts found" link](/assets/images/help/repository/code-scanning-alerts-found-link.png) + ![Click the "n alerts found" link](/assets/images/enterprise/3.1/help/repository/code-scanning-alerts-found-link.png) {% endnote %} @@ -95,7 +95,7 @@ There are other situations where there may be no analysis for the latest commit To check whether a branch has been scanned, go to the {% data variables.product.prodname_code_scanning_capc %} page, click the **Branch** drop-down and select the relevant branch. - ![Choose a branch from the Branch drop-down menu](/assets/images/help/repository/code-scanning-branch-dropdown.png) + ![Choose a branch from the Branch drop-down menu](/assets/images/enterprise/3.1/help/repository/code-scanning-branch-dropdown.png) The solution in this situation is to add the name of the base branch to the `on:push` and `on:pull_request` specification in the {% data variables.product.prodname_code_scanning %} workflow on that branch and then make a change that updates the open pull request that you want to scan. diff --git a/content/github/managing-subscriptions-and-notifications-on-github/configuring-notifications.md b/content/github/managing-subscriptions-and-notifications-on-github/configuring-notifications.md index 669eb95b3569..c5247ec25001 100644 --- a/content/github/managing-subscriptions-and-notifications-on-github/configuring-notifications.md +++ b/content/github/managing-subscriptions-and-notifications-on-github/configuring-notifications.md @@ -245,18 +245,17 @@ You can also schedule when {% data variables.product.prodname_mobile %} will sen 1. In the bottom menu, tap **Profile**. 2. To view your settings, tap {% octicon "gear" aria-label="The Gear icon" %}. -3. To update your notification settings, tap **Notifications** and then use the toggles to enable or disable your preferred types of push notifications. -4. Optionally, to schedule when {% data variables.product.prodname_mobile %} will send push notifications to your mobile device, tap **Receive Notifications**, use the **Custom working hours** toggle, and then choose when you would like to receive push notifications. +3. To update your notification settings, tap **Configure Notifications** and then use the toggles to enable or disable your preferred types of push notifications. +4. Optionally, to schedule when {% data variables.product.prodname_mobile %} will send push notifications to your mobile device, tap **Working Hours**, use the **Custom working hours** toggle, and then choose when you would like to receive push notifications. ### Configuring your watch settings for an individual repository with {% data variables.product.prodname_mobile %} You can choose whether to watch or unwatch an individual repository. You can also choose to only be notified of {% if currentVersion == "free-pro-team@latest" %}certain event types such as issues, pull requests, discussions (if enabled for the repository) and {% endif %}new releases, or completely ignore an individual repository. -1. On {% data variables.product.prodname_mobile %}, navigate to main page of the repository. +1. On {% data variables.product.prodname_mobile %}, navigate to the main page of the repository. 2. Tap **Watch**. ![The watch button on {% data variables.product.prodname_mobile %}](/assets/images/help/notifications-v2/mobile-watch-button.png) 3. To choose what activities you receive notifications for, tap your preferred watch settings. ![Watch settings dropdown menu in {% data variables.product.prodname_mobile %}](/assets/images/help/notifications-v2/mobile-watch-settings.png) -{% data reusables.notifications-v2.custom-notifications-beta %} {% endif %} diff --git a/content/github/setting-up-and-managing-organizations-and-teams/managing-security-and-analysis-settings-for-your-organization.md b/content/github/setting-up-and-managing-organizations-and-teams/managing-security-and-analysis-settings-for-your-organization.md index 61d86f76ab4a..2bb4b4ebc4ad 100644 --- a/content/github/setting-up-and-managing-organizations-and-teams/managing-security-and-analysis-settings-for-your-organization.md +++ b/content/github/setting-up-and-managing-organizations-and-teams/managing-security-and-analysis-settings-for-your-organization.md @@ -99,8 +99,6 @@ You can enable or disable features for all repositories. {% if currentVersion == ### Allowing {% data variables.product.prodname_dependabot %} to access private dependencies -{% data reusables.dependabot.beta-note %} - {% data variables.product.prodname_dependabot %} can check for outdated dependency references in a project and automatically generate a pull request to update them. To do this, {% data variables.product.prodname_dependabot %} must have access to all of the targeted dependency files. Typically, version updates will fail if one or more dependencies are inaccessible. For more information, see "[About {% data variables.product.prodname_dependabot %} version updates](/github/administering-a-repository/about-dependabot-version-updates)." By default, {% data variables.product.prodname_dependabot %} can't update dependencies that are located in private repositories or private package registries. However, if a dependency is in a private {% data variables.product.prodname_dotcom %} repository within the same organization as the project that uses that dependency, you can allow {% data variables.product.prodname_dependabot %} to update the version successfully by giving it access to the host repository. diff --git a/content/github/working-with-github-pages/testing-your-github-pages-site-locally-with-jekyll.md b/content/github/working-with-github-pages/testing-your-github-pages-site-locally-with-jekyll.md index d24b5f19f731..32331bae6726 100644 --- a/content/github/working-with-github-pages/testing-your-github-pages-site-locally-with-jekyll.md +++ b/content/github/working-with-github-pages/testing-your-github-pages-site-locally-with-jekyll.md @@ -30,6 +30,7 @@ Before you can use Jekyll to test a site, you must: {% data reusables.command_line.open_the_multi_os_terminal %} {% data reusables.pages.navigate-publishing-source %} +3. Run `bundle install`. 3. Run your Jekyll site locally. ```shell $ bundle exec jekyll serve diff --git a/content/github/working-with-github-pages/troubleshooting-custom-domains-and-github-pages.md b/content/github/working-with-github-pages/troubleshooting-custom-domains-and-github-pages.md index 1c6c9279c0cd..1ac902330cfc 100644 --- a/content/github/working-with-github-pages/troubleshooting-custom-domains-and-github-pages.md +++ b/content/github/working-with-github-pages/troubleshooting-custom-domains-and-github-pages.md @@ -23,8 +23,8 @@ Then, make sure the _CNAME_ file is formatted correctly. - The _CNAME_ filename must be all uppercase. - The _CNAME_ file can contain only one domain. To point multiple domains to your site, you must set up a redirect through your DNS provider. -- The _CNAME_ entry must be the bare domain. For example, `www.example.com`,`blog.example.com`, or `example.com`. -- The _CNAME_ entry can only be used once on {% data variables.product.product_name %}. For example, if another repository's _CNAME_ file contains `example.com`, you cannot use `example.com` in the _CNAME_ file for your repository. +- The _CNAME_ file must contain the domain name only. For example, `www.example.com`, `blog.example.com`, or `example.com`. +- The domain name must be unique across all {% data variables.product.prodname_pages %} sites. For example, if another repository's _CNAME_ file contains `example.com`, you cannot use `example.com` in the _CNAME_ file for your repository. ### DNS misconfiguration diff --git a/data/glossaries/external.yml b/data/glossaries/external.yml index 2b3295b41167..6040ee6388b0 100644 --- a/data/glossaries/external.yml +++ b/data/glossaries/external.yml @@ -91,7 +91,7 @@ working tree is pointing to a new branch. - term: cherry-picking description: >- - To choose a subset of changes from a series of changes (typically commits) and record them as a new series of changes on top of a different codebase. In Git, this is performed by the `git cherry-pick` command to extract the change introduced by an existing commit on another branch and to record it based on the tip of the current branch as a new commit. + To choose a subset of changes from a series of changes (typically commits) and record them as a new series of changes on top of a different codebase. In Git, this is performed by the `git cherry-pick` command to extract the change introduced by an existing commit on another branch and to record it based on the tip of the current branch as a new commit. For more information, see [git-cherry-pick](https://git-scm.com/docs/git-cherry-pick) in the Git documentation. - term: child team description: >- Within nested teams, the subteam that inherits the parent team's access diff --git a/data/release-notes/2-21/17.yml b/data/release-notes/2-21/17.yml index 83825f205649..4f4ba8f132d9 100644 --- a/data/release-notes/2-21/17.yml +++ b/data/release-notes/2-21/17.yml @@ -1,4 +1,5 @@ date: '2021-03-23' +intro: Downloads have been disabled due to a major bug affecting multiple customers. A fix will be available in the next patch. sections: security_fixes: - '**HIGH:** A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site. User-controlled configuration options used by GitHub Pages were not sufficiently restricted and made it possible to override environment variables leading to code execution on the GitHub Enterprise Server instance. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.0.3 and was fixed in 3.0.3, 2.22.9, and 2.21.17. This vulnerability was reported via the GitHub Bug Bounty program and has been assigned CVE-2021-22864.' diff --git a/data/release-notes/2-22/9.yml b/data/release-notes/2-22/9.yml index c64c54526160..e567dad9ef9f 100644 --- a/data/release-notes/2-22/9.yml +++ b/data/release-notes/2-22/9.yml @@ -1,4 +1,5 @@ date: '2021-03-23' +intro: Downloads have been disabled due to a major bug affecting multiple customers. A fix will be available in the next patch. sections: security_fixes: - '**HIGH:** A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site. User-controlled configuration options used by GitHub Pages were not sufficiently restricted and made it possible to override environment variables leading to code execution on the GitHub Enterprise Server instance. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.0.3 and was fixed in 3.0.3, 2.22.9, and 2.21.17. This vulnerability was reported via the GitHub Bug Bounty program and has been assigned CVE-2021-22864.' diff --git a/data/release-notes/3-0/0.yml b/data/release-notes/3-0/0.yml index e6fcc561911c..dbab40a44ba1 100644 --- a/data/release-notes/3-0/0.yml +++ b/data/release-notes/3-0/0.yml @@ -131,6 +131,7 @@ sections: - Dependency graph fails to parse `setup.py` Python manifest files, resulting in HTTP 500 errors in logs. This, combined with the duplicated logging issue, results in increased root volume utilization. - A race condition can cause dependency graph database migrations to appear to fail. - Instances with a custom timezone that were upgraded from an earlier release of GitHub Enterprise Server may have incorrect timestamps in the web UI. + - Old builds of Pages are not cleaned up, which could fill up the user disk (`/data/user/`). deprecations: - heading: Deprecation of GitHub Enterprise Server 2.19 diff --git a/data/release-notes/3-0/1.yml b/data/release-notes/3-0/1.yml index 596affb9a045..c78862e536e0 100644 --- a/data/release-notes/3-0/1.yml +++ b/data/release-notes/3-0/1.yml @@ -43,6 +43,7 @@ sections: - 'reStructuredText (RST) rendering in the web UI may fail and instead display raw RST markup text.' - 'Dependency graph fails to parse `yarn.lock` Javascript manifest files, resulting in HTTP 500 errors in logs.' - 'Instances with a custom timezone that were upgraded from an earlier release of GitHub Enterprise Server may have incorrect timestamps in the web UI.' + - 'Old builds of Pages are not cleaned up, which could fill up the user disk (`/data/user/`).' - | Users may experience assets such as avatars not loading, or a failure to push/pull code. This may be caused by a PID mismatch in the `haproxy-cluster-proxy` service. To determine if you have an affected instance: diff --git a/data/release-notes/3-0/2.yml b/data/release-notes/3-0/2.yml index a4a2bf0e163a..266143486dc1 100644 --- a/data/release-notes/3-0/2.yml +++ b/data/release-notes/3-0/2.yml @@ -29,6 +29,7 @@ sections: - When maintenance mode is enabled, some services continue to be listed as "active processes". The services identified are expected to run during maintenance mode. If you experience this issue and are unsure, contact [GitHub Enterprise Support](https://enterprise.githubsupport.com/hc/en-us) or [GitHub Premium Support](https://premium.githubsupport.com/). - Jupyter Notebook rendering in the web UI may fail if the notebook includes non-ASCII UTF-8 characters. - reStructuredText (RST) rendering in the web UI may fail and instead display raw RST markup text. + - Old builds of Pages are not cleaned up, which could fill up the user disk (`/data/user/`). - | Users may experience assets such as avatars not loading, or a failure to push/pull code. This may be caused by a PID mismatch in the `haproxy-cluster-proxy` service. To determine if you have an affected instance: diff --git a/data/release-notes/3-0/3.yml b/data/release-notes/3-0/3.yml index 2828755e4fe8..09b90b287c31 100644 --- a/data/release-notes/3-0/3.yml +++ b/data/release-notes/3-0/3.yml @@ -1,5 +1,5 @@ date: '2021-03-23' -intro: The minimum infrastructure requirements have increased for {% data variables.product.prodname_ghe_server %} 3.0+. For more information, see "[About minimum requirements for GitHub Enterprise Server 3.0 and later](/admin/enterprise-management/upgrading-github-enterprise-server#about-minimum-requirements-for-github-enterprise-server-30-and-later)." +intro: Downloads have been disabled due to a major bug affecting multiple customers. A fix will be available in the next patch. sections: security_fixes: - '**HIGH:** A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site. User-controlled configuration options used by GitHub Pages were not sufficiently restricted and made it possible to override environment variables leading to code execution on the GitHub Enterprise Server instance. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.0.3 and was fixed in 3.0.3, 2.22.9, and 2.21.17. This vulnerability was reported via the GitHub Bug Bounty program and has been assigned CVE-2021-22864.' @@ -28,6 +28,7 @@ sections: - When maintenance mode is enabled, some services continue to be listed as "active processes". The services identified are expected to run during maintenance mode. If you experience this issue and are unsure, contact [GitHub Enterprise Support](https://enterprise.githubsupport.com/hc/en-us) or [GitHub Premium Support](https://premium.githubsupport.com/). - Jupyter Notebook rendering in the web UI may fail if the notebook includes non-ASCII UTF-8 characters. - reStructuredText (RST) rendering in the web UI may fail and instead display raw RST markup text. + - Old builds of Pages are not cleaned up, which could fill up the user disk (`/data/user/`). - | Log rotation may fail to signal services to transition to new log files, leading to older log files continuing to be used, and eventual root disk space exhaustion. To remedy and/or prevent this issue, run the following commands in the [administrative shell](https://docs.github.com/en/enterprise-server/admin/configuration/accessing-the-administrative-shell-ssh) (SSH), or contact [GitHub Enterprise Support](https://enterprise.githubsupport.com/hc/en-us) or [GitHub Premium Support](https://premium.githubsupport.com/) for assistance: diff --git a/data/reusables/code-scanning/click-alert-in-list.md b/data/reusables/code-scanning/click-alert-in-list.md index 314164be4219..50f6e6458ef1 100644 --- a/data/reusables/code-scanning/click-alert-in-list.md +++ b/data/reusables/code-scanning/click-alert-in-list.md @@ -1,2 +1,6 @@ 1. Under "Code scanning," click the alert you'd like to explore. +{% if currentVersion == "free-pro-team@latest" or currentVersion ver_gt "enterprise-server@3.1"%} ![List of alerts from {% data variables.product.prodname_code_scanning %}](/assets/images/help/repository/code-scanning-click-alert.png) +{% else %} + ![List of alerts from {% data variables.product.prodname_code_scanning %}](/assets/images/enterprise/3.1/help/repository/code-scanning-click-alert.png) +{% endif %} diff --git a/data/reusables/dependabot/beta-note-no-link.md b/data/reusables/dependabot/beta-note-no-link.md deleted file mode 100644 index a45785eb9810..000000000000 --- a/data/reusables/dependabot/beta-note-no-link.md +++ /dev/null @@ -1,5 +0,0 @@ -{% note %} - -**Note:** {% data variables.product.prodname_dependabot_version_updates %} are currently in beta and subject to change. To use the beta feature, follow the instructions in this article. - -{% endnote %} diff --git a/data/reusables/dependabot/beta-note.md b/data/reusables/dependabot/beta-note.md deleted file mode 100644 index 903328729666..000000000000 --- a/data/reusables/dependabot/beta-note.md +++ /dev/null @@ -1,5 +0,0 @@ -{% note %} - -**Note:** {% data variables.product.prodname_dependabot_version_updates %} are currently in beta and subject to change. To use the beta feature, check in a configuration file to tell {% data variables.product.prodname_dependabot %} which dependencies to maintain for you. For details, see "[Enabling and disabling version updates](/github/administering-a-repository/enabling-and-disabling-version-updates)." - -{% endnote %} diff --git a/data/reusables/dependabot/supported-package-managers.md b/data/reusables/dependabot/supported-package-managers.md index d4929ca10a02..709482b2d512 100644 --- a/data/reusables/dependabot/supported-package-managers.md +++ b/data/reusables/dependabot/supported-package-managers.md @@ -6,7 +6,7 @@ The following table shows, for each package manager: Package manager | YAML value | Supported versions | Private repositories | Private registries | Vendoring ---------------|------------------|------------------|:---:|:---:|:---: -Bundler | `bundler` | v1 | | **✓** | **✓** | +Bundler | `bundler` | v1, v2 | | **✓** | **✓** | Cargo | `cargo` | v1 | **✓** | **✓** | | Composer | `composer` | v1, v2 | **✓** | **✓** | | Docker | `docker` | v1 | **✓** | **✓** | | diff --git a/data/reusables/education/about-github-education-link.md b/data/reusables/education/about-github-education-link.md index 84a5d61418bc..4106c559a92d 100644 --- a/data/reusables/education/about-github-education-link.md +++ b/data/reusables/education/about-github-education-link.md @@ -1 +1 @@ -Before applying for an individual discount, check if your learning community is already partnered with us as a {% data variables.product.prodname_education %} school. For more information, see "[About {% data variables.product.prodname_education %}](/education/explore-the-benefits-of-teaching-and-learning-with-github-education/about-github-education)." +Before applying for an individual discount, check if your learning community is already partnered with us as a {% data variables.product.prodname_campus_program %} school. For more information, see "[About {% data variables.product.prodname_campus_program %}](/education/explore-the-benefits-of-teaching-and-learning-with-github-education/about-github-campus-program)." diff --git a/data/reusables/package_registry/authenticate-to-container-registry-steps.md b/data/reusables/package_registry/authenticate-to-container-registry-steps.md index bc748abafc20..d5e173f71e74 100644 --- a/data/reusables/package_registry/authenticate-to-container-registry-steps.md +++ b/data/reusables/package_registry/authenticate-to-container-registry-steps.md @@ -1,7 +1,7 @@ 1. Create a new personal access token (PAT) with the appropriate scopes for the tasks you want to accomplish. If your organization requires SSO, you must enable SSO for your new token. {% warning %} - **Note:** If you select the `write:packages` scope, deselect the `repo` scope when creating the PAT. Adding a PAT with the `repo` scope as a secret in your repository allows the credential to be accessible to all collaborators in the repository. This gives unnecessary additional access when a PAT with the `repo` scope is used within an action. For more information on security best practices for actions, see "[Security hardening for GitHub Actions](/actions/getting-started-with-github-actions/security-hardening-for-github-actions#considering-cross-repository-access)." + **Note:** By default, when you select the `write:packages` scope for your personal access token (PAT) in the user interface, the `repo` scope will also be selected. The `repo` scope offers unnecessary and broad access, which we recommend you avoid using for GitHub Actions workflows in particular. For more information, see "[Security hardening for GitHub Actions](/actions/getting-started-with-github-actions/security-hardening-for-github-actions#considering-cross-repository-access)." As a workaround, you can select just the `write:packages` scope for your PAT in the user interface with this url: `https://github.com/settings/tokens/new?scopes=write:packages`. {% endwarning %} diff --git a/data/reusables/package_registry/authenticate_with_pat_for_container_registry.md b/data/reusables/package_registry/authenticate_with_pat_for_container_registry.md index fb85de55b56e..666a29340044 100644 --- a/data/reusables/package_registry/authenticate_with_pat_for_container_registry.md +++ b/data/reusables/package_registry/authenticate_with_pat_for_container_registry.md @@ -1,5 +1,7 @@ {% if currentVersion == "free-pro-team@latest" %} +PATs can grant broad access to your account. You should select only the necessary `read:packages`, `write:packages`, or `delete:packages` scope when creating a PAT to authenticate to the {% data variables.product.prodname_container_registry %}. + To authenticate to {% data variables.product.prodname_github_container_registry %} within a {% data variables.product.prodname_actions %} workflow, use the `GITHUB_TOKEN` for the best security and experience. For guidance on updating your workflows that authenticate to `ghcr.io` with a personal access token, see "[Upgrading a workflow that accesses `ghcr.io`](/packages/guides/using-github-packages-with-github-actions#upgrading-a-workflow-that-accesses-ghcrio)." diff --git a/data/reusables/repositories/sidebar-code-scanning-alerts.md b/data/reusables/repositories/sidebar-code-scanning-alerts.md index daecf13404e2..a829504e4e01 100644 --- a/data/reusables/repositories/sidebar-code-scanning-alerts.md +++ b/data/reusables/repositories/sidebar-code-scanning-alerts.md @@ -1,2 +1,2 @@ -1. In the left sidebar, click **Code scanning alerts**. Optionally, select the code scanning tool you used. +1. In the left sidebar, click **Code scanning alerts**. !["Code scanning alerts" tab](/assets/images/help/repository/sidebar-code-scanning-alerts.png) diff --git a/data/reusables/webhooks/discussion_desc.md b/data/reusables/webhooks/discussion_desc.md new file mode 100644 index 000000000000..1b221660e028 --- /dev/null +++ b/data/reusables/webhooks/discussion_desc.md @@ -0,0 +1 @@ +`discussion` | `object` | The [`discussion`](/graphql/guides/using-the-graphql-api-for-discussions#discussion) resource. \ No newline at end of file diff --git a/data/reusables/webhooks/discussions-webhooks-beta.md b/data/reusables/webhooks/discussions-webhooks-beta.md new file mode 100644 index 000000000000..2033ca20eab8 --- /dev/null +++ b/data/reusables/webhooks/discussions-webhooks-beta.md @@ -0,0 +1,5 @@ +{% note %} + +**Note:** Webhook events for {% data variables.product.prodname_discussions %} are currently in beta and subject to change. + +{% endnote %} \ No newline at end of file diff --git a/data/reusables/webhooks/org_desc_graphql.md b/data/reusables/webhooks/org_desc_graphql.md new file mode 100644 index 000000000000..4bd5d803b119 --- /dev/null +++ b/data/reusables/webhooks/org_desc_graphql.md @@ -0,0 +1 @@ +`organization` | `object` | Webhook payloads contain the [`organization`](/graphql/reference/objects#organization) object when the webhook is configured for an organization or the event occurs from activity in a repository owned by an organization. diff --git a/data/reusables/webhooks/repo_desc_graphql.md b/data/reusables/webhooks/repo_desc_graphql.md new file mode 100644 index 000000000000..7cfc041ade0a --- /dev/null +++ b/data/reusables/webhooks/repo_desc_graphql.md @@ -0,0 +1 @@ +`repository` | `object` | The [`repository`](/graphql/reference/objects#repository) where the event occurred. \ No newline at end of file diff --git a/includes/homepage-version-switcher.html b/includes/homepage-version-switcher.html index 9bf471750eb6..90a05039bf3a 100644 --- a/includes/homepage-version-switcher.html +++ b/includes/homepage-version-switcher.html @@ -1,5 +1,5 @@ - -{% if page.relativePath == 'index.md' %} + +{% if page.relativePath == 'index.md' or page.layout == 'product-landing' or page.layout == 'product-sublanding' %}