ascalad/Copilot/fix dependabot docs pip versions

.devcontainer/Dockerfile

@@ -1,5 +1,3 @@
 # To find available Node images, see https://mcr.microsoft.com/en-us/product/devcontainers/javascript-node/tags
-
-# [Choice] Node.js version
-ARG VARIANT="dev-24-bullseye"
-FROM mcr.microsoft.com/devcontainers/javascript-node:${VARIANT}
+ARG VARIANT=dev-24-bullseye
+FROM mcr.microsoft.com/devcontainers/javascript-node:dev-24-bullseye@sha256:3502f1f21b1989500e8c72ada7d6e496dc4540b0707d4ea4ff743077f88a6c2d

.devcontainer/devcontainer.json

@@ -12,7 +12,11 @@
   // Install features. Type 'feature' in the VS Code command palette for a full list.
   "features": {
     "sshd": "latest",
-    "ghcr.io/devcontainers/features/github-cli:1": {}
+    "ghcr.io/devcontainers/features/copilot-cli:1": {
+      "version": "prerelease"
+    },
+    "ghcr.io/devcontainers/features/github-cli:1": {},
+    "ghcr.io/devcontainers/features/docker-in-docker:2": {}
   },
 
   "customizations": {
@@ -59,10 +63,8 @@
   },
 
   // Lifecycle commands
-  // Install dependencies then install Copilot CLI
-  "onCreateCommand": "npm ci && npm install -g @github/copilot@prerelease",
   // Start a web server and keep it running
-  "postStartCommand": "nohup bash -c 'npm start &'",
+  "postStartCommand": "nohup bash -c 'npm ci && npm start &'",
   // Set port 4000 to be public
   "postAttachCommand": "gh cs ports visibility 4000:public -c \"$CODESPACE_NAME\"",
 

.gitattributes

@@ -1,6 +1,7 @@
 # Set default behavior, in case users don't have core.autocrlf set.
 * text=auto
-# Explicitly declare text files we want to always be normalized and converted
-# to native line endings on checkout.
-*.md text diff=markdown
+# Explicitly declare text files we want to always be normalized, and for
+# Markdown files, enforce LF line endings on checkout.
+*.md text eol=lf diff=markdown
 *.json.br filter=lfs diff=lfs merge=lfs -text
+.github/workflows/*.lock.yml linguist-generated=true merge=ours

.github/actions/create-workflow-failure-issue/action.yml

@@ -0,0 +1,93 @@
+name: Create workflow failure issue
+description: Create or update a GitHub issue in docs-engineering when a workflow fails, for automated diagnosis by an agentic workflow.
+
+inputs:
+  token:
+    description: A token with issues write permission on the target repo
+    required: true
+  repo:
+    description: The repository to create the issue in
+    default: github/docs-engineering
+    required: false
+
+runs:
+  using: composite
+  steps:
+    - name: Check for existing open issue
+      id: check-existing
+      shell: bash
+      env:
+        GH_TOKEN: ${{ inputs.token }}
+        ISSUE_REPO: ${{ inputs.repo }}
+        WORKFLOW_NAME: ${{ github.workflow }}
+      run: |
+        existing=$(gh issue list \
+          --repo "$ISSUE_REPO" \
+          --label "workflow-failure" \
+          --search "in:title [Workflow Failure] $WORKFLOW_NAME" \
+          --state open \
+          --json number \
+          --jq '.[0].number // empty' 2>/dev/null || true)
+        echo "existing_issue=$existing" >> "$GITHUB_OUTPUT"
+
+    - name: Comment on existing issue
+      if: steps.check-existing.outputs.existing_issue != ''
+      shell: bash
+      env:
+        GH_TOKEN: ${{ inputs.token }}
+        ISSUE_REPO: ${{ inputs.repo }}
+        ISSUE_NUMBER: ${{ steps.check-existing.outputs.existing_issue }}
+        WORKFLOW_NAME: ${{ github.workflow }}
+        SOURCE_REPO: ${{ github.repository }}
+        RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
+        EVENT_NAME: ${{ github.event_name }}
+        GIT_REF: ${{ github.ref }}
+      run: |
+        body=$(cat <<EOF
+        ### Repeat failure
+
+        **Workflow:** \`$WORKFLOW_NAME\`
+        **Repository:** \`$SOURCE_REPO\`
+        **Run:** $RUN_URL
+        **Event:** \`$EVENT_NAME\`
+        **Ref:** \`$GIT_REF\`
+        **Timestamp:** $(date -u +%Y-%m-%dT%H:%M:%SZ)
+        EOF
+        )
+        gh issue comment "$ISSUE_NUMBER" \
+          --repo "$ISSUE_REPO" \
+          --body "$body"
+
+    - name: Create workflow failure issue
+      if: steps.check-existing.outputs.existing_issue == ''
+      shell: bash
+      env:
+        GH_TOKEN: ${{ inputs.token }}
+        ISSUE_REPO: ${{ inputs.repo }}
+        WORKFLOW_NAME: ${{ github.workflow }}
+        SOURCE_REPO: ${{ github.repository }}
+        RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
+        EVENT_NAME: ${{ github.event_name }}
+        GIT_REF: ${{ github.ref }}
+        ACTOR: ${{ github.actor }}
+      run: |
+        body=$(cat <<EOF
+        ### Workflow failure
+
+        **Workflow:** \`$WORKFLOW_NAME\`
+        **Repository:** \`$SOURCE_REPO\`
+        **Run:** $RUN_URL
+        **Event:** \`$EVENT_NAME\`
+        **Ref:** \`$GIT_REF\`
+        **Triggered by:** \`$ACTOR\`
+        **Timestamp:** $(date -u +%Y-%m-%dT%H:%M:%SZ)
+
+        ---
+        This issue was automatically created by the create-workflow-failure-issue action to enable automated diagnosis.
+        EOF
+        )
+        gh issue create \
+          --repo "$ISSUE_REPO" \
+          --label "workflow-failure" \
+          --title "[Workflow Failure] $WORKFLOW_NAME" \
+          --body "$body"

.github/actions/labeler/labeler.ts

@@ -1,6 +1,6 @@
 /* See function main in this file for documentation */
 
-import coreLib from '@actions/core'
+import * as coreLib from '@actions/core'
 import { type Octokit } from '@octokit/rest'
 import { CoreInject } from '@/links/scripts/action-injections'