Repo sync

.github/workflows/check-broken-links-github-github.yml

@@ -7,7 +7,7 @@ name: Check Broken Docs Links in github/github
 on:
   workflow_dispatch:
   schedule:
-    - cron: '20 16 * * 1' # Run every Monday at 16:20 UTC / 8:20 PST
+    - cron: '20 16 * * 1' # Run every Monday at 16:20 UTC / 8:20 PST — link & content quality theme
 
 permissions:
   contents: read

.github/workflows/delete-orphan-translation-files.yml

@@ -14,7 +14,7 @@ name: Delete orphan translation files
 on:
   workflow_dispatch:
   schedule:
-    - cron: '20 16 * * 1' # Run every Monday at 16:20 UTC / 8:20 PST
+    - cron: '20 16 * * 3' # Run every Wednesday at 16:20 UTC / 8:20 PST — orphan & hygiene cleanup theme
 
 permissions:
   contents: write

.github/workflows/docs-review-collect.yml

@@ -7,7 +7,7 @@ name: Add docs-reviewers request to the docs-content review board
 on:
   workflow_dispatch:
   schedule:
-    - cron: '20 */6 * * *' # Run every 6 hours at 20 minutes after
+    - cron: '20 16 * * 1-5' # Run Mon-Fri at 16:20 UTC / 8:20 PST
 
 permissions:
   contents: read

.github/workflows/enterprise-dates.yml

@@ -11,7 +11,7 @@ name: Enterprise date updater
 on:
   workflow_dispatch:
   schedule:
-    - cron: '20 16 * * 2' # Run every Tuesday at 16:20 UTC / 8:20 PST
+    - cron: '20 16 * * 4' # Run every Thursday at 16:20 UTC / 8:20 PST — infrastructure & releases theme
 
 permissions:
   contents: write

.github/workflows/enterprise-release-issue.yml

@@ -7,7 +7,7 @@ name: Open Enterprise release or deprecation issue
 on:
   workflow_dispatch:
   schedule:
-    - cron: '20 16 * * *' # Run every day at 16:20 UTC / 8:20 PST
+    - cron: '20 16 * * 4' # Run every Thursday at 16:20 UTC / 8:20 PST — infrastructure & releases theme
 
 permissions:
   contents: read

.github/workflows/index-autocomplete-search.yml

@@ -7,7 +7,7 @@ name: Index autocomplete search in Elasticsearch
 on:
   workflow_dispatch:
   schedule:
-    - cron: '20 16 * * *' # Run every day at 16:20 UTC / 8:20 PST
+    - cron: '20 16 * * 1-5' # Run Mon-Fri at 16:20 UTC / 8:20 PST
   pull_request:
     paths:
       - .github/workflows/index-autocomplete-search.yml

.github/workflows/index-general-search.yml

@@ -17,7 +17,7 @@ on:
         required: false
         default: ''
   schedule:
-    - cron: '20 16 * * *' # Run every 24 hours at 20 minutes past the hour
+    - cron: '20 16 * * 1-5' # Run Mon-Fri at 16:20 UTC / 8:20 PST
   workflow_run:
     workflows: ['Purge Fastly']
     types:

.github/workflows/link-check-external.yml

@@ -5,7 +5,7 @@ name: Check External Links
 
 on:
   schedule:
-    - cron: '20 16 * * 3' # Wednesday at 16:20 UTC
+    - cron: '20 16 * * 1' # Run every Monday at 16:20 UTC / 8:20 PST — link & content quality theme
   workflow_dispatch:
     inputs:
       max_urls:

.github/workflows/link-check-internal.yml

@@ -6,7 +6,7 @@ name: Check Internal Links
 
 on:
   schedule:
-    - cron: '20 16 * * 2' # Tuesday at 16:20 UTC
+    - cron: '20 16 * * 1' # Run every Monday at 16:20 UTC / 8:20 PST — link & content quality theme
   workflow_dispatch:
     inputs:
       version:

.github/workflows/lint-entire-content-data-markdown.yml

@@ -7,7 +7,7 @@ name: 'Lint entire content and data markdown files'
 on:
   workflow_dispatch:
   schedule:
-    - cron: '20 16 * * 0' # Run every day at 16:20 UTC / 8:20 PST every Sunday
+    - cron: '20 16 * * 1' # Run every Monday at 16:20 UTC / 8:20 PST — link & content quality theme
 
 permissions:
   contents: read

.github/workflows/moda-allowed-ips.yml

@@ -6,7 +6,7 @@ name: Update Moda allowed IPs
 
 on:
   schedule:
-    - cron: '20 16 * * 4' # Run every Thursday at 16:20 UTC / 8:20 PST
+    - cron: '20 16 * * 4' # Run every Thursday at 16:20 UTC / 8:20 PST — infrastructure & releases theme
   workflow_dispatch:
 
 permissions:

.github/workflows/needs-sme-stale-check.yaml

@@ -6,7 +6,7 @@ name: Stale check for issues or PRs with "needs SME" label
 
 on:
   schedule:
-    - cron: '20 16 * * 3' # Run each Wedneday at 16:20 UTC / 8:20 PST
+    - cron: '20 16 * * 2' # Run every Tuesday at 16:20 UTC / 8:20 PST — staleness & triage theme
 
 permissions:
   contents: read

.github/workflows/no-response.yaml

@@ -12,7 +12,7 @@ on:
     types: [created]
 
   schedule:
-    - cron: '20 16 * * 1' # Run each Monday at 16:20 UTC / 8:20 PST
+    - cron: '20 16 * * 2' # Run every Tuesday at 16:20 UTC / 8:20 PST — staleness & triage theme
 
 permissions:
   contents: read

.github/workflows/orphaned-features-check.yml

@@ -7,7 +7,7 @@ name: 'Orphaned features check'
 on:
   workflow_dispatch:
   schedule:
-    - cron: '20 16 * * 1' # Run every Monday at 16:20 UTC / 8:20 PST
+    - cron: '20 16 * * 3' # Run every Wednesday at 16:20 UTC / 8:20 PST — orphan & hygiene cleanup theme
   pull_request:
     paths:
       - .github/workflows/orphaned-features-check.yml

.github/workflows/orphaned-files-check.yml

@@ -7,7 +7,7 @@ name: 'Orphaned files check'
 on:
   workflow_dispatch:
   schedule:
-    - cron: '20 16 * * 1' # Run every Monday at 16:20 UTC / 8:20 PST
+    - cron: '20 16 * * 3' # Run every Wednesday at 16:20 UTC / 8:20 PST — orphan & hygiene cleanup theme
   pull_request:
     paths:
       - .github/workflows/orphaned-assets-check.yml

.github/workflows/repo-sync.yml

@@ -10,7 +10,7 @@ name: Repo Sync
 on:
   workflow_dispatch:
   schedule:
-    - cron: '20 */3 * * *' # Run every 3rd hour at 20 minutes after
+    - cron: '20 14-23/3 * * 1-5' # Mon-Fri 6:20a, 9:20a, 12:20p, 3:20p PST
 
 permissions:
   contents: write

.github/workflows/stale.yml

@@ -6,7 +6,7 @@ name: Stale check for stalled pull requests in the docs-internal repository
 
 on:
   schedule:
-    - cron: '20 16 * * 1' # Run each Monday at 16:20 UTC / 8:20 PST
+    - cron: '20 16 * * 2' # Run every Tuesday at 16:20 UTC / 8:20 PST — staleness & triage theme
   push:
     paths:
       - .github/workflows/stale.yml

.github/workflows/sync-audit-logs.yml

@@ -7,7 +7,7 @@ name: Sync Audit Log data
 on:
   workflow_dispatch:
   schedule:
-    - cron: '20 16 * * *' # Run every day at 16:20 UTC / 8:20 PST
+    - cron: '20 16 * * 1-5' # Run Mon-Fri at 16:20 UTC / 8:20 PST
 
 permissions:
   contents: write

.github/workflows/sync-graphql.yml

@@ -7,7 +7,7 @@ name: Sync GraphQL schema
 on:
   workflow_dispatch:
   schedule:
-    - cron: '20 16 * * *' # Run every day at 16:20 UTC / 8:20 PST
+    - cron: '20 16 * * 1-5' # Run Mon-Fri at 16:20 UTC / 8:20 PST
 
 permissions:
   contents: write

.github/workflows/sync-openapi.yml

@@ -13,7 +13,7 @@ on:
         required: true
         default: 'main'
   schedule:
-    - cron: '20 16 * * *' # Run every day at 16:20 UTC / 8:20 PST
+    - cron: '20 16 * * 1-5' # Run Mon-Fri at 16:20 UTC / 8:20 PST
 
 permissions:
   contents: write

.github/workflows/sync-secret-scanning.yml

@@ -7,7 +7,7 @@ name: Sync Secret Scanning data
 on:
   workflow_dispatch:
   schedule:
-    - cron: '20 16 * * *' # Run every day at 16:20 UTC / 8:22 PST
+    - cron: '20 16 * * 1-5' # Run Mon-Fri at 16:20 UTC / 8:20 PST
 
 permissions:
   contents: write

.github/workflows/triage-stale-check.yml

@@ -6,7 +6,7 @@ name: Stale check for no activity
 
 on:
   schedule:
-    - cron: '20 16 * * 2' # Run each Tuesday at 16:20 UTC / 8:20 PST
+    - cron: '20 16 * * 2' # Run every Tuesday at 16:20 UTC / 8:20 PST — staleness & triage theme
 
 permissions:
   contents: read

.github/workflows/validate-github-github-docs-urls.yml

@@ -7,7 +7,7 @@ name: Validate github/github docs URLs
 on:
   workflow_dispatch:
   schedule:
-    - cron: '20 16 * * 1' # Run every Monday at 16:20 UTC / 8:20 PST
+    - cron: '20 16 * * 3' # Run every Wednesday at 16:20 UTC / 8:20 PST — orphan & hygiene cleanup theme
   # See https://gh.io/AAsyyao before uncommenting:
   # pull_request:
   #   paths:

content/code-security/how-tos/secure-your-secrets/index.md

@@ -15,8 +15,8 @@ redirect_from:
 children:
   - /detect-secret-leaks
   - /customize-leak-detection
-  - /troubleshooting-secret-scanning
   - /prevent-future-leaks
   - /work-with-leak-prevention
   - /manage-bypass-requests
 ---
+

content/code-security/how-tos/secure-your-supply-chain/troubleshoot-dependency-security/index.md

@@ -10,9 +10,9 @@ contentType: how-tos
 redirect_from:
   - /code-security/dependabot/troubleshooting-dependabot
 children:
-  - /troubleshooting-dependabot-errors
   - /troubleshooting-the-detection-of-vulnerable-dependencies
   - /dependabot-updates-stopped
   - /troubleshooting-the-dependency-graph
   - /troubleshooting-dependabot-on-github-actions
 ---
+

content/code-security/reference/secret-security/index.md

@@ -12,6 +12,8 @@ contentType: reference
 children:
   - /understanding-github-secret-types
   - /supported-secret-scanning-patterns
+  - /secret-scanning-detection-scope
   - /risk-report-csv-contents
   - /secret-scanning-pattern-configuration-data
 ---
+

content/code-security/how-tos/secure-your-secrets/troubleshooting-secret-scanning.md → content/code-security/reference/secret-security/secret-scanning-detection-scope.md

@@ -1,7 +1,7 @@
 ---
-title: Troubleshooting secret scanning
-shortTitle: Troubleshoot secret scanning
-intro: When using {% data variables.product.prodname_secret_scanning %} to detect secrets in your repository, or secrets about to be committed into your repository, you may need to troubleshoot unexpected issues.
+title: Secret scanning detection scope
+shortTitle: Secret scanning scope
+intro: Secret scanning uses pattern matching and validation to detect secrets. Detection varies based on pattern pairs, token types, and push protection settings.
 product: '{% data reusables.gated-features.secret-scanning %}'
 versions:
   fpt: '*'
@@ -15,7 +15,8 @@ redirect_from:
   - /code-security/secret-scanning/troubleshooting-secret-scanning
   - /code-security/secret-scanning/troubleshooting-secret-scanning-and-push-protection/troubleshooting-secret-scanning
   - /code-security/secret-scanning/troubleshooting-secret-scanning-and-push-protection
-contentType: how-tos
+  - /code-security/how-tos/secure-your-secrets/troubleshooting-secret-scanning
+contentType: reference
 ---
 
 {% data reusables.secret-scanning.enterprise-enable-secret-scanning %}

content/code-security/how-tos/secure-your-supply-chain/troubleshoot-dependency-security/troubleshooting-dependabot-errors.md → content/code-security/reference/supply-chain-security/dependabot-errors.md

@@ -1,6 +1,6 @@
 ---
-title: Troubleshooting Dependabot errors
-intro: Sometimes {% data variables.product.prodname_dependabot %} is unable to raise a pull request to update your dependencies. You can review the error and unblock {% data variables.product.prodname_dependabot %}.
+title: Dependabot errors
+intro: '{% data variables.product.prodname_dependabot %} automatically maintains your dependencies, keeping your code secure and current. This reference helps you diagnose and resolve issues so automated updates can continue.'
 shortTitle: Troubleshoot Dependabot errors
 redirect_from:
   - /github/managing-security-vulnerabilities/troubleshooting-github-dependabot-errors
@@ -9,6 +9,7 @@ redirect_from:
   - /code-security/supply-chain-security/managing-vulnerabilities-in-your-projects-dependencies/troubleshooting-dependabot-errors
   - /code-security/dependabot/working-with-dependabot/troubleshooting-dependabot-errors
   - /code-security/dependabot/troubleshooting-dependabot/troubleshooting-dependabot-errors
+  - /code-security/how-tos/secure-your-supply-chain/troubleshoot-dependency-security/troubleshooting-dependabot-errors
 versions:
   fpt: '*'
   ghec: '*'
@@ -22,7 +23,7 @@ topics:
   - Troubleshooting
   - Errors
   - Dependencies
-contentType: how-tos
+contentType: reference
 ---
 
 This article provides troubleshooting information to help you resolve issues when {% data variables.product.prodname_dependabot %} doesn't work as expected. If you encounter errors when {% data variables.product.prodname_dependabot %} tries to update your dependencies, you can use this guidance to diagnose and fix common problems.

content/code-security/reference/supply-chain-security/index.md

@@ -24,6 +24,7 @@ children:
   - /supported-ecosystems-and-repositories
   - /dependency-graph-supported-package-ecosystems
   - /dependabot-on-actions
+  - /dependabot-errors
 redirect_from:
   - /code-security/dependabot/ecosystems-supported-by-dependabot
 ---

data/learning-tracks/code-security.yml

@@ -56,7 +56,7 @@ dependabot_alerts:
     - >-
       /code-security/how-tos/secure-your-supply-chain/troubleshoot-dependency-security/troubleshooting-the-detection-of-vulnerable-dependencies
     - >-
-      /code-security/how-tos/secure-your-supply-chain/troubleshoot-dependency-security/troubleshooting-dependabot-errors
+      /code-security/reference/supply-chain-security/dependabot-errors
 dependabot_security_updates:
   title: Get pull requests to update your vulnerable dependencies
   description: >-
@@ -104,7 +104,7 @@ dependency_version_updates:
     - >-
       /code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/managing-pull-requests-for-dependency-updates
     - >-
-      /code-security/how-tos/secure-your-supply-chain/troubleshoot-dependency-security/troubleshooting-dependabot-errors
+      /code-security/reference/supply-chain-security/dependabot-errors
 secret_scanning:
   title: Scan for secrets
   description: >-
@@ -140,7 +140,7 @@ secret_scanning:
       %}/code-security/how-tos/secure-your-secrets/work-with-leak-prevention/working-with-push-protection-in-the-github-ui{%
       endif %}
     - >-
-      /code-security/how-tos/secure-your-secrets/troubleshooting-secret-scanning
+      /code-security/reference/secret-security/secret-scanning-detection-scope
 security_alerts:
   title: Explore and manage security alerts
   description: Learn where to find and resolve security alerts.

src/frame/lib/constants.ts

@@ -12,6 +12,7 @@ const DEFAULT_MAX_REQUEST_TIMEOUT = isDev ? 15_000 : 10_000
 
 export const ROOT = process.env.ROOT || '.'
 export const USER_LANGUAGE_COOKIE_NAME = 'user_language'
+export const USER_VERSION_COOKIE_NAME = 'user_version'
 export const TRANSLATIONS_ROOT = process.env.TRANSLATIONS_ROOT || 'translations'
 export const MAX_REQUEST_TIMEOUT = process.env.REQUEST_TIMEOUT
   ? parseInt(process.env.REQUEST_TIMEOUT, 10)

src/frame/middleware/cache-control.ts

@@ -93,6 +93,13 @@ export function languageCacheControl(res: Response): void {
   res.set('vary', 'accept-language, x-user-language')
 }
 
+// Vary on both language and version for homepage redirects
+// x-user-version is a custom request header derived from req.cookie:user_version
+export function languageAndVersionCacheControl(res: Response): void {
+  defaultCacheControl(res)
+  res.set('vary', 'accept-language, x-user-language, x-user-version')
+}
+
 // Long cache control for versioned assets: images, CSS, JS...
 export const assetCacheControl = cacheControlFactory(60 * 60 * 24 * 7, { immutable: true })
 

src/frame/middleware/index.ts

@@ -16,6 +16,7 @@ import {
 import handleErrors from '@/observability/middleware/handle-errors'
 import handleNextDataPath from './handle-next-data-path'
 import detectLanguage from '@/languages/middleware/detect-language'
+import detectVersion from '@/versions/middleware/detect-version'
 import reloadTree from './reload-tree'
 import context from './context/context'
 import shortVersions from '@/versions/middleware/short-versions'
@@ -213,6 +214,7 @@ export default function index(app: Express) {
   // *** Config and context for redirects ***
   app.use(urlDecode) // Must come before detectLanguage to decode @ symbols in version segments
   app.use(detectLanguage) // Must come before context, breadcrumbs, find-page, handle-errors, homepages
+  app.use(detectVersion) // Must come before handle-redirects for version cookie support
   app.use(asyncMiddleware(reloadTree)) // Must come before context
   app.use(asyncMiddleware(context)) // Must come before early-access-*, handle-redirects
   app.use(shortVersions) // Support version shorthands

src/observability/logger/lib/logger-context.ts

@@ -16,6 +16,7 @@ export type LoggerContext = {
   body?: any
   language?: string
   userLanguage?: string
+  userVersion?: string
   version?: string
   pagePath?: string
 }
@@ -51,6 +52,8 @@ const INCLUDE_HEADERS = [
   // Language
   'x-user-language',
   'accept-language',
+  // Version
+  'x-user-version',
   // Host
   'host',
   'x-host',