Merge branch 'main' into fix/layer-editor-review-nits

Author: jtydhr88

.coderabbit.yaml

@@ -5,6 +5,10 @@ reviews:
   profile: assertive
   high_level_summary: false
   request_changes_workflow: true
+  # Without this, a review that never happened (rate limit, internal error)
+  # still reports green, so an unreviewed PR is indistinguishable from a
+  # cleanly reviewed one.
+  fail_commit_status: true
   auto_review:
     drafts: true
     ignore_title_keywords:

.github/actions/find-workflow-run/action.yaml

@@ -29,7 +29,7 @@ runs:
   steps:
     - name: Find workflow run
       id: find
-      uses: actions/github-script@v8
+      uses: actions/github-script@v9
       env:
         WORKFLOW_ID: ${{ inputs.workflow-id }}
         HEAD_SHA: ${{ inputs.head-sha }}

.github/actions/resolve-pr-from-workflow-run/action.yaml

@@ -32,7 +32,7 @@ runs:
   steps:
     - name: Resolve PR
       id: resolve
-      uses: actions/github-script@v8
+      uses: actions/github-script@v9
       with:
         github-token: ${{ inputs.token }}
         script: |

.github/actions/upsert-comment-section/action.yaml

@@ -26,7 +26,7 @@ inputs:
 runs:
   using: composite
   steps:
-    - uses: actions/github-script@v8
+    - uses: actions/github-script@v9
       env:
         INPUT_PR_NUMBER: ${{ inputs.pr-number }}
         INPUT_SECTION_NAME: ${{ inputs.section-name }}

.github/workflows/ci-lint-format.yaml

@@ -78,7 +78,7 @@ jobs:
       - name: Comment on PR about auto-fix
         if: steps.verify-changed-files.outputs.changed == 'true' && github.event.pull_request.head.repo.full_name == github.repository
         continue-on-error: true
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             github.rest.issues.createComment({

.github/workflows/ci-tests-e2e-coverage.yaml

@@ -116,7 +116,7 @@ jobs:
 
       - name: Upload E2E coverage to Codecov
         if: steps.coverage-shards.outputs.has-coverage == 'true'
-        uses: codecov/codecov-action@1af58845a975a7985b0beb0cbe6fbbb71a41dbad # v5.5.3
+        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
         with:
           files: coverage/playwright/coverage.lcov
           flags: e2e

.github/workflows/ci-tests-unit.yaml

@@ -49,7 +49,7 @@ jobs:
 
       - name: Upload coverage to Codecov
         if: always()
-        uses: codecov/codecov-action@1af58845a975a7985b0beb0cbe6fbbb71a41dbad # v5.5.3
+        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
         with:
           files: coverage/lcov.info
           flags: unit

.github/workflows/ci-vercel-website-preview.yaml

@@ -63,7 +63,7 @@ jobs:
 
       - name: Fetch head commit metadata
         id: head-commit
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const { data } = await github.rest.repos.getCommit({

.github/workflows/ci-website-e2e.yaml

@@ -105,7 +105,7 @@ jobs:
       - name: Categorize failures
         id: failures
         if: always() && !cancelled() && steps.tests.outcome != 'success'
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const fs = require('fs')
@@ -136,7 +136,7 @@ jobs:
 
       - name: Write job summary
         if: always() && !cancelled()
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         env:
           TEST_OUTCOME: ${{ steps.tests.outcome }}
           REPORT_URL: ${{ steps.deploy.outputs.url }}
@@ -221,7 +221,7 @@ jobs:
 
       - name: Build e2e section content
         id: content
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         env:
           TEST_OUTCOME: ${{ needs.website-e2e.outputs.test-outcome }}
           REPORT_URL: ${{ needs.website-e2e.outputs.report-url }}

.github/workflows/coverage-slack-notify.yaml

@@ -64,7 +64,7 @@ jobs:
 
       - name: Resolve merged PR metadata
         id: pr-meta
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const sha = context.payload.workflow_run.head_sha;