Merge remote-tracking branch 'origin/main' into matt/be-5612-extension-store-duplicate-warn

Author: mattmillerai

.gitattributes

@@ -6,3 +6,4 @@ packages/registry-types/src/comfyRegistryTypes.ts linguist-generated=true
 packages/ingest-types/src/types.gen.ts linguist-generated=true
 packages/ingest-types/src/zod.gen.ts linguist-generated=true
 src/workbench/extensions/manager/types/generatedManagerTypes.ts linguist-generated=true
+browser_tests/fixtures/data/customNodeManifest.cloud.json linguist-generated=true

.github/actions/changes-filter/action.yaml

@@ -51,7 +51,7 @@ runs:
     - name: Filter typed changes
       if: ${{ github.event_name == 'pull_request' }}
       id: filter
-      uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
+      uses: dorny/paths-filter@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d # v4.0.3
       with:
         filters: |
           app_website:
@@ -75,7 +75,7 @@ runs:
     - name: Filter relevant changes
       if: ${{ github.event_name == 'pull_request' }}
       id: relevant
-      uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
+      uses: dorny/paths-filter@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d # v4.0.3
       with:
         predicate-quantifier: 'every'
         filters: |

.github/actions/setup-comfyui-server/action.yaml

@@ -9,6 +9,10 @@ inputs:
     description: 'Whether to launch the server after setup'
     required: false
     default: 'false'
+  comfyui_ref:
+    description: 'ComfyUI git ref to check out (tag/branch/SHA). Empty = default branch (master).'
+    required: false
+    default: ''
 runs:
   using: 'composite'
   steps:
@@ -19,6 +23,7 @@ runs:
       uses: actions/checkout@v7
       with:
         repository: 'comfyanonymous/ComfyUI'
+        ref: ${{ inputs.comfyui_ref }}
         path: 'ComfyUI'
 
     - name: Install ComfyUI_devtools from frontend repo

.github/actions/setup-playwright/action.yaml

@@ -1,5 +1,10 @@
 name: Setup Playwright
 description: Cache and install Playwright browsers with dependencies
+inputs:
+  install_deps:
+    description: Install Playwright operating-system dependencies
+    required: false
+    default: 'true'
 runs:
   using: composite
   steps:
@@ -17,12 +22,33 @@ runs:
         path: '~/.cache/ms-playwright'
         key: ${{ runner.os }}-playwright-browsers-${{ steps.detect-version.outputs.playwright-version }}
 
-    - name: Install Playwright Browsers
-      if: steps.cache-playwright-browsers.outputs.cache-hit != 'true'
+    - name: Bound Playwright dependency downloads
+      if: inputs.install_deps == 'true'
       shell: bash
-      run: pnpm exec playwright install chromium --with-deps
+      run: |
+        set -euo pipefail
+        printf '%s\n' \
+          'Acquire::Retries "3";' \
+          'Acquire::http::Timeout "60";' \
+          'Acquire::https::Timeout "60";' \
+          | sudo tee /etc/apt/apt.conf.d/80-playwright-ci >/dev/null
 
-    - name: Install Playwright Browsers (operating system dependencies)
-      if: steps.cache-playwright-browsers.outputs.cache-hit == 'true'
+    - name: Install Playwright browser and dependencies
       shell: bash
-      run: pnpm exec playwright install-deps
+      env:
+        BROWSER_CACHE_HIT: ${{ steps.cache-playwright-browsers.outputs.cache-hit }}
+        INSTALL_DEPS: ${{ inputs.install_deps }}
+      run: |
+        set -euo pipefail
+        if [ "$INSTALL_DEPS" != true ]; then
+          playwright_args=(install chromium)
+        elif [ "$BROWSER_CACHE_HIT" = true ]; then
+          playwright_args=(install-deps chromium)
+        else
+          playwright_args=(install chromium --with-deps)
+        fi
+        for attempt in 1 2; do
+          pnpm exec playwright "${playwright_args[@]}" && exit 0
+          [ "$attempt" -lt 2 ] || exit 1
+          sleep 2
+        done

.github/risk.json

@@ -83,22 +83,42 @@
     {
       "class": "billing",
       "tier": "R3",
-      "why": "billing / credits — money moves",
+      "why": "billing / credits — money moves. Scoped to the application source tree: an unscoped **/ token glob matched the marketing site, e2e specs, PNG snapshots, stories, locale files and docs on filename characters alone",
       "paths": [
-        "**/billing/**",
-        "**/pricing/**",
-        "**/credits/**",
-        "**/subscription/**",
-        "**/*billing*",
-        "**/*Billing*",
-        "**/*subscription*",
-        "**/*Subscription*",
-        "**/*credit*",
-        "**/*Credit*",
-        "**/*price*",
-        "**/*Price*",
-        "**/*pricing*",
-        "**/*Pricing*"
+        "src/**/billing/**",
+        "src/**/pricing/**",
+        "src/**/credit/**",
+        "src/**/credits/**",
+        "src/**/subscription/**",
+        "src/**/*TopUp*.vue",
+        "src/platform/**/*billing*",
+        "src/platform/**/*Billing*",
+        "src/platform/**/*subscription*",
+        "src/platform/**/*Subscription*",
+        "src/platform/**/*credit*",
+        "src/platform/**/*Credit*",
+        "src/platform/**/*price*",
+        "src/platform/**/*Price*",
+        "src/platform/**/*pricing*",
+        "src/platform/**/*Pricing*",
+        "src/stores/*billing*",
+        "src/stores/*Billing*",
+        "src/stores/*credit*",
+        "src/stores/*Credit*",
+        "src/services/*billing*",
+        "src/services/*Billing*",
+        "src/services/*credit*",
+        "src/services/*Credit*",
+        "src/config/*billing*",
+        "src/config/*Billing*",
+        "src/config/*credit*",
+        "src/config/*Credit*",
+        "src/config/*price*",
+        "src/config/*Price*",
+        "src/config/*pricing*",
+        "src/config/*Pricing*",
+        "src/config/*subscription*",
+        "src/config/*Subscription*"
       ]
     },
     {
@@ -198,6 +218,12 @@
         "packages/**"
       ]
     },
+    {
+      "class": "website",
+      "tier": "R2",
+      "why": "the marketing site is production and had no rule at all — but it is copy and layout, so it cannot corrupt a saved workflow or move money",
+      "paths": ["apps/website/**"]
+    },
 
     {
       "class": "docs",