Merge branch 'dev' into merge-release/17.7-20260807041945

Author: bsatarnejad

.github/dangerfiles/op_primer_changes/Dangerfile

@@ -0,0 +1,55 @@
+# frozen_string_literal: true
+
+#-- copyright
+# OpenProject is an open source project management software.
+# Copyright (C) the OpenProject GmbH
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License version 3.
+#
+# OpenProject is a fork of ChiliProject, which is a fork of Redmine. The copyright follows:
+# Copyright (C) 2006-2013 Jean-Philippe Lang
+# Copyright (C) 2010-2013 the ChiliProject Team
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+#
+# See COPYRIGHT and LICENSE files for more details.
+#++
+
+OP_PRIMER_REGEX = %r{app/components/op_primer/}
+
+def modified_op_primer_files
+  (git.modified_files + git.added_files).grep(OP_PRIMER_REGEX)
+end
+
+changed_files = modified_op_primer_files
+
+if changed_files.any?
+  message_lines = [
+    "@opf/dream-team Files in `app/components/op_primer` were modified:",
+    ""
+  ]
+
+  changed_files.each do |file|
+    message_lines << "- #{file}"
+  end
+
+  message_lines << <<~EOS
+
+    Please review these changes to ensure they align with the design system guidelines.
+  EOS
+
+  warn message_lines.join("\n")
+end

.github/workflows/brakeman-scan-core.yml

@@ -6,18 +6,18 @@ on:
       - dev
       - release/*
     paths:
-      - '**.rb'
+      - "**.rb"
   schedule:
-    - cron: '10 6 * * 1'
+    - cron: "10 6 * * 1"
 
 permissions:
   contents: read
 
 jobs:
   brakeman-scan:
     permissions:
-      contents: read  # for actions/checkout to fetch code
-      security-events: write  # for github/codeql-action/upload-sarif to upload SARIF results
+      contents: read # for actions/checkout to fetch code
+      security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
     if: github.repository == 'opf/openproject'
     name: Brakeman Scan
     runs-on: ubuntu-latest
@@ -30,7 +30,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Ruby
-        uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # v1
+        uses: ruby/setup-ruby@003a5c4d8d6321bd302e38f6f0ec593f77f06600 # v1
 
       - name: Setup Brakeman
         run: |

.github/workflows/cla.yml

@@ -78,6 +78,7 @@ jobs:
             openprojectci,
             psatyal,
             samachon,
+            schm,
             shiroginne,
             toy,
             tiroessler,
@@ -91,7 +92,8 @@ jobs:
             fereshtehnm,
             thykel,
             j-racsko,
-            FeliciaMundhenke2904
+            FeliciaMundhenke2904,
+            tinexw
           # the followings are the optional inputs - If the optional inputs are not given, then default values will be taken
           remote-organization-name: opf
           remote-repository-name: legal

.github/workflows/crowdin.yml

@@ -46,7 +46,7 @@ jobs:
         with:
           ref: ${{ matrix.branch }}
           fetch-depth: 1
-      - uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # v1
+      - uses: ruby/setup-ruby@003a5c4d8d6321bd302e38f6f0ec593f77f06600 # v1
         with:
           bundler-cache: true
       - name: "Set crowdin branch name"

.github/workflows/danger.yml

@@ -4,10 +4,10 @@ on:
   pull_request:
     types: [opened, reopened, synchronize]
     paths-ignore:
-      - 'docs/**'
-      - 'help/**'
-      - 'packaging/**'
-      - '.pkgr.yml'
+      - "docs/**"
+      - "help/**"
+      - "packaging/**"
+      - ".pkgr.yml"
 
 jobs:
   danger:
@@ -22,7 +22,7 @@ jobs:
         with:
           fetch-depth: 0
           persist-credentials: false
-      - uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # v1
+      - uses: ruby/setup-ruby@003a5c4d8d6321bd302e38f6f0ec593f77f06600 # v1
         with:
           ruby-version: .ruby-version
           bundler-cache: true

.github/workflows/docs.yaml

@@ -6,8 +6,8 @@ on:
       - dev
       - release/*
     paths:
-      - 'docs/**'
-      - 'config/static_links.yml'
+      - "docs/**"
+      - "config/static_links.yml"
 
 permissions:
   contents: read
@@ -20,7 +20,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           persist-credentials: false
-      - uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # v1
+      - uses: ruby/setup-ruby@003a5c4d8d6321bd302e38f6f0ec593f77f06600 # v1
         with:
           bundler-cache: true
       - run: bundle exec ./script/docs/check_links
@@ -39,7 +39,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           persist-credentials: false
-      - uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # v1
+      - uses: ruby/setup-ruby@003a5c4d8d6321bd302e38f6f0ec593f77f06600 # v1
         with:
           bundler-cache: true
       - run: script/docs/check_readme_yaml_header_syntax

.github/workflows/erb-lint-core.yml

@@ -3,9 +3,9 @@ name: ERB lint
 on:
   pull_request:
     paths:
-      - '**/*.erb'
-      - '.erb_lint.yml'
-      - '.erb_linters/**'
+      - "**/*.erb"
+      - ".erb_lint.yml"
+      - ".erb_linters/**"
 
 jobs:
   erb-lint:
@@ -20,7 +20,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up Ruby
-        uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # v1
+        uses: ruby/setup-ruby@003a5c4d8d6321bd302e38f6f0ec593f77f06600 # v1
         with:
           bundler-cache: true
       - name: Run ERB lint

.github/workflows/i18n-tasks.yml

@@ -6,15 +6,15 @@ on:
       - dev
       - release/*
     paths-ignore:
-      - 'docs/**'
-      - 'help/**'
+      - "docs/**"
+      - "help/**"
   pull_request:
     types: [opened, reopened, synchronize]
     paths-ignore:
-      - 'docs/**'
-      - 'help/**'
-      - 'packaging/**'
-      - '.pkgr.yml'
+      - "docs/**"
+      - "help/**"
+      - "packaging/**"
+      - ".pkgr.yml"
 
 permissions:
   contents: read
@@ -33,7 +33,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Ruby
-        uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # v1
+        uses: ruby/setup-ruby@003a5c4d8d6321bd302e38f6f0ec593f77f06600 # v1
 
       - name: Setup i18n-tasks
         run: |

.github/workflows/openapi.yaml

@@ -6,11 +6,11 @@ on:
       - dev
       - release/*
     paths:
-      - 'docs/api/apiv3/**'
+      - "docs/api/apiv3/**"
   pull_request:
     types: [opened, reopened, synchronize]
     paths:
-      - 'docs/api/apiv3/**'
+      - "docs/api/apiv3/**"
 
 jobs:
   api-spec:
@@ -20,14 +20,14 @@ jobs:
     permissions:
       contents: read
     steps:
-    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-      with:
-        persist-credentials: false
-    - uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # v1
-      with:
-        bundler-cache: false
-    - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
-      with:
-        node-version: '24.18.0'
-        package-manager-cache: false
-    - run: ./script/api/validate_spec
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        with:
+          persist-credentials: false
+      - uses: ruby/setup-ruby@003a5c4d8d6321bd302e38f6f0ec593f77f06600 # v1
+        with:
+          bundler-cache: false
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
+        with:
+          node-version: "24.18.0"
+          package-manager-cache: false
+      - run: ./script/api/validate_spec

.github/workflows/rubocop-core.yml

@@ -3,7 +3,7 @@ name: RuboCop
 on:
   pull_request:
     paths-ignore:
-      - 'docs/**'
+      - "docs/**"
 
 jobs:
   rubocop:
@@ -18,7 +18,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up Ruby
-        uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # v1
+        uses: ruby/setup-ruby@003a5c4d8d6321bd302e38f6f0ec593f77f06600 # v1
       - name: Run RuboCop
         uses: reviewdog/action-rubocop@b6d5e953a5fc0bf3ab65254e77730ea2174d6d6d # v2
         with: