Merge branch 'main' into gha-hardening-pull-request-target

Author: Sharra-writes

.devcontainer/devcontainer.json

@@ -59,11 +59,13 @@
   },
 
   // Lifecycle commands
-  "onCreateCommand": "npm ci",
+  // Install dependencies then install Copilot CLI
+  "onCreateCommand": "npm ci && npm config set \"//npm.pkg.github.com/:_authToken=$GITHUB_TOKEN\" && npm config set \"@github:registry=https://npm.pkg.github.com/\" && npm install -g @github/copilot",
+  // Start a web server and keep it running
   "postStartCommand": "nohup bash -c 'npm start &'",
-  // Set the port to be public
+  // Set port 4000 to be public
   "postAttachCommand": "gh cs ports visibility 4000:public -c \"$CODESPACE_NAME\"",
-
+  
   // Comment out connect as root instead. More info: https://aka.ms/vscode-remote/containers/non-root.
   "remoteUser": "node",
 

CHANGELOG.md

@@ -2,6 +2,16 @@
 
 **17 September 2025**
 
+We added documentation for expanded features for reusing workflow configurations in GitHub Actions. 
+
+You can now use YAML anchors and aliases to reuse pieces of content in a workflow. See [YAML anchors and aliases](https://docs.github.com/en/actions/concepts/workflows-and-actions/reusing-workflow-configurations#yaml-anchors-and-aliases). 
+
+To keep the content focused on users' job-to-be-done, we simplified the procedures for [creating workflow templates for your organization](https://docs.github.com/en/actions/how-tos/reuse-automations/create-workflow-templates). In addition, we updated reference documentation for workflow templates with details on permissions, repository visibility rules, rules for the metadata file, and examples. See [Workflow templates](https://docs.github.com/en/actions/reference/workflows-and-actions/reusing-workflow-configurations#workflow-templates).
+
+<hr>
+
+**17 September 2025**
+
 You can now publish your Spark app as "read-only." 
 
 By default, data stored in Spark is shared across all users of the app. You can choose to publish your app as "read-only" if you want to showcase your app to others, but you don't want others to be able to edit or delete any stored data.

content/account-and-profile/how-tos/setting-up-and-managing-your-personal-account-on-github/managing-user-account-settings/index.md

@@ -19,7 +19,9 @@ children:
   - /managing-security-and-analysis-features
   - /managing-your-tab-size-rendering-preference
   - /permission-levels-for-a-project-board-owned-by-a-personal-account
+  - /manage-cookie-preferences
   - /managing-accessibility-settings
+  - /prepare-for-job-change
   - /managing-access-to-your-personal-accounts-project-boards
   - /integrating-jira-with-your-personal-projects
   - /set-your-hiring-status

…or-githubs-enterprise-marketing-pages.md …nt-settings/manage-cookie-preferences.mdcontent/account-and-profile/tutorials/managing-your-cookie-preferences-for-githubs-enterprise-marketing-pages.md renamed to content/account-and-profile/how-tos/setting-up-and-managing-your-personal-account-on-github/managing-user-account-settings/manage-cookie-preferences.md content/account-and-profile/tutorials/managing-your-cookie-preferences-for-githubs-enterprise-marketing-pages.md renamed to content/account-and-profile/how-tos/setting-up-and-managing-your-personal-account-on-github/managing-user-account-settings/manage-cookie-preferences.md

@@ -1,6 +1,6 @@
 ---
-title: Managing your cookie preferences for GitHub's enterprise marketing pages
-intro: 'You can control how {% data variables.product.company_short %} uses information from non-essential tracking cookies for enterprise marketing pages.'
+title: Manage cookie preferences
+intro: You can control how {% data variables.product.company_short %} uses information from non-essential tracking cookies for enterprise marketing pages.
 versions:
   fpt: '*'
   ghes: '*'
@@ -11,15 +11,13 @@ shortTitle: Manage cookie preferences
 redirect_from:
   - /account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-personal-account-settings/managing-your-cookie-preferences-for-githubs-enterprise-marketing-pages
   - /account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-user-account-settings/managing-your-cookie-preferences-for-githubs-enterprise-marketing-pages
+  - /account-and-profile/tutorials/managing-your-cookie-preferences-for-githubs-enterprise-marketing-pages
+contentType: how-tos
 ---
 
-## About cookie preferences on enterprise marketing pages
-
-{% data variables.product.company_short %} may use non-essential cookies on some enterprise marketing pages. You can customize how these cookies behave. For more information about how {% data variables.product.company_short %} uses cookies, see [AUTOTITLE](/free-pro-team@latest/site-policy/privacy-policies/github-privacy-statement).
-
 ## Changing your cookie preferences
 
-You can customize how non-essential cookies behave on any {% data variables.product.company_short %} enterprise marketing page.
+You can customize how non-essential cookies behave on any {% data variables.product.company_short %} enterprise marketing page.  For more information about how {% data variables.product.company_short %} uses cookies, see [AUTOTITLE](/free-pro-team@latest/site-policy/privacy-policies/github-privacy-statement).
 
 1. Navigate to the {% data variables.product.company_short %} enterprise marketing page where you'd like to change your cookie preferences. For example, navigate to [{% data variables.product.company_short %} Resources](https://resources.github.com/).
 1. Scroll to the bottom of the page, then click **Manage Cookies**.

content/account-and-profile/how-tos/setting-up-and-managing-your-personal-account-on-github/managing-user-account-settings/prepare-for-job-change.md

@@ -0,0 +1,88 @@
+---
+title: Prepare for job change
+intro: If you use your {% data variables.product.github %} account for both personal and work purposes, there are steps to follow when you leave your company or organization.
+redirect_from:
+  - /articles/best-practices-for-leaving-your-company
+  - /github/setting-up-and-managing-your-github-user-account/best-practices-for-leaving-your-company
+  - /github/setting-up-and-managing-your-github-user-account/managing-user-account-settings/best-practices-for-leaving-your-company
+  - /account-and-profile/setting-up-and-managing-your-github-user-account/managing-user-account-settings/best-practices-for-leaving-your-company
+  - /account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-personal-account-settings/best-practices-for-leaving-your-company
+  - /account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-your-personal-account/best-practices-for-leaving-your-company
+  - /account-and-profile/reference/best-practices-for-leaving-your-company
+versions:
+  fpt: '*'
+  ghec: '*'
+topics:
+  - Accounts
+shortTitle: Prepare for job change
+contentType: how-tos
+---
+
+## Update your personal account information
+
+1. Unverify your company email address by deleting it in your Email settings.
+  
+   After removal, you can re-add this email without verifying to keep any associated commits linked to your account.
+  
+   For more information, see [AUTOTITLE](/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-email-preferences/changing-your-primary-email-address).
+
+1. Change your primary email address from your company email to your personal email.
+  
+   For more information, see [AUTOTITLE](/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-email-preferences/changing-your-primary-email-address).
+
+1. Verify your new primary email address.
+  
+   For more information, see [AUTOTITLE](/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-email-preferences/verifying-your-email-address).
+
+1. Update your {% data variables.product.github %} username if it contains references to your company or organization.
+  
+   For more information, see [AUTOTITLE](/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-user-account-settings/changing-your-github-username).
+
+1. Review and update your two-factor authentication (2FA) methods to ensure they aren't linked to company resources:
+
+   * If you use a TOTP app on a company phone, transfer it to your personal device.
+   * If you've registered company-owned security keys, remove them and add personal ones instead.
+   * If you're using {% data variables.product.prodname_mobile %} on a company device, install it on your personal device.
+   * Download fresh recovery codes and store them in a personal secure location.
+
+   For more information, see [AUTOTITLE](/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication).
+
+## Leave organization memberships
+
+> [!NOTE] Unless you're using a {% data variables.enterprise.prodname_managed_user %}, you'll still be able to access your personal account after leaving an organization.
+
+1. If you're the organization owner, transfer ownership to another person before removing yourself.
+  
+   For more information, see [AUTOTITLE](/organizations/managing-organization-settings/transferring-organization-ownership).
+
+1. Remove yourself from the organization.
+  
+   For more information, see [AUTOTITLE](/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-your-membership-in-organizations/removing-yourself-from-an-organization).
+
+## Clean up professional repository associations
+
+1. Remove yourself as a collaborator from repositories owned by others.
+  
+   For more information, see [AUTOTITLE](/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/removing-yourself-from-a-collaborators-repository).
+
+1. Stop watching work-related repositories to avoid unnecessary notifications.
+  
+   To manage your watched repositories, visit https://github.com/watching.
+
+1. Transfer repositories that you own that others may need to continue working on.
+  
+   For more information, see [AUTOTITLE](/repositories/creating-and-managing-repositories/transferring-a-repository).
+
+1. Delete any work-related forks that belong to you.
+  
+   Deleting a fork doesn't delete the upstream repository.
+  
+   For more information, see [AUTOTITLE](/repositories/creating-and-managing-repositories/deleting-a-repository).
+
+1. Delete local copies of your work repositories from your computer by running the following command:
+
+   ```shell
+   rm -rf WORK_DIRECTORY
+   ```
+  
+   Replace `WORK_DIRECTORY` with the path to your work repository.

content/account-and-profile/reference/best-practices-for-leaving-your-company.md

@@ -11,7 +11,6 @@ children:
   - /personal-dashboard
   - /permission-levels-for-a-personal-account-repository
   - /profile-contributions-reference
-  - /best-practices-for-leaving-your-company
   - /types-of-emails-github-sends
   - /email-addresses-reference
   - /personal-account-reference

content/account-and-profile/reference/index.md

@@ -11,7 +11,6 @@ topics:
   - Profiles
 children:
   - /personalize-your-profile
-  - /managing-your-cookie-preferences-for-githubs-enterprise-marketing-pages
   - /using-your-github-profile-to-enhance-your-resume
 ---
 

content/account-and-profile/tutorials/index.md

@@ -83,6 +83,19 @@ env:
 
 {% data variables.product.prodname_dotcom %} provides a way to create conditional logic in expressions using binary logical operators (`&&` and `||`). This pattern can be used to achieve similar functionality to the ternary operator (`?:`) found in many programming languages, while actually using only binary operators.
 
+### Example
+
+{% raw %}
+
+```yaml
+env:
+  MY_ENV_VAR: ${{ github.ref == 'refs/heads/main' && 'value_for_main_branch' || 'value_for_other_branches' }}
+```
+
+{% endraw %}
+
+In this example, we're using a combination of `&&` and `||` operators to set the value of the `MY_ENV_VAR` environment variable based on whether the {% data variables.product.prodname_dotcom %} reference is set to `refs/heads/main` or not. If it is, the variable is set to `value_for_main_branch`. Otherwise, it is set to `value_for_other_branches`. It is important to note that the first value after the `&&` must be truthy. Otherwise, the value after the `||` will always be returned.
+
 ## Functions
 
 {% data variables.product.prodname_dotcom %} offers a set of built-in functions that you can use in expressions. Some functions cast values to a string to perform comparisons. {% data variables.product.prodname_dotcom %} casts data types to a string using these conversions:

content/actions/reference/workflows-and-actions/expressions.md

@@ -40,7 +40,7 @@ As part of the downgrade to the free plan:
 1. In the search bar, begin typing the organization's name until the organization appears in the search results.
 1. To the right of the organization's name, select the ... dropdown menu and click **Remove organization**.
 
- ![Expanded dropdown menu labelled with "...", for an organization. The "Remove organization" option outlined.](/assets/images/help/enterprises/remove-organization.png)
+ ![Expanded dropdown menu labeled with "...", for an organization. The "Remove organization" option outlined.](/assets/images/help/enterprises/remove-organization.png)
 
 1. Review the warnings, decide whether to also remove users who will become unaffiliated, then click **Remove organization**.