Merge branch 'main' of github.com:Esri/calcite-components into epic/7…

…180-component-tokens

# Conflicts:
#	packages/calcite-components/src/components/input/input.stories.ts
#	packages/calcite-components/src/components/stepper-item/stepper-item.scss
#	packages/calcite-components/src/components/tip/tip.stories.ts

.github/workflows/deploy-latest.yml

@@ -8,7 +8,9 @@ permissions:
   pull-requests: write
 jobs:
   release-please:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - uses: google-github-actions/release-please-action@v3.7.13
         id: release
@@ -58,5 +60,7 @@ jobs:
           git commit -m "build: update types and package-lock" || true
 
           npm run publish:latest
+          npm run util:upload-release-assets -- "${{ steps.release.outputs.paths_released }}"
         env:
           NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}
+          NPM_CONFIG_PROVENANCE: true

.github/workflows/deploy-next.yml

@@ -8,7 +8,9 @@ on:
     branches: [main]
 jobs:
   build:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - uses: actions/checkout@v4
         with:
@@ -26,6 +28,7 @@ jobs:
           NEXT_RELEASE_ENABLED: ${{ secrets.NEXT_RELEASE_ENABLED }}
           # https://github.com/storybookjs/storybook-deployer/issues/77#issuecomment-618560481
           GH_TOKEN_FOR_STORYBOOK: ${{ github.actor }}:${{ secrets.ADMIN_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true
         run: |
           if [ "$NEXT_RELEASE_ENABLED" == "true" ]; then
             npm install

.github/workflows/issue-add-labels.yml

@@ -0,0 +1,30 @@
+name: Add Issue Labels
+on:
+  issues:
+    types: [opened, edited]
+jobs:
+  product-label:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Add Esri Product Label
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const action = require('${{ github.workspace }}/.github/scripts/addEsriProductLabel.js')
+            await action({github, context, core})
+
+      - name: Add Calcite Package Label
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const action = require('${{ github.workspace }}/.github/scripts/addCalcitePackageLabel.js')
+            await action({github, context, core})
+
+      - name: Add Priority Label
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const action = require('${{ github.workspace }}/.github/scripts/addPriorityLabel.js')
+            await action({github, context, core})

.github/workflows/issue-notifications.yaml

@@ -0,0 +1,53 @@
+name: Issue Notifications
+on:
+  issues:
+    types: [labeled]
+jobs:
+  determine-action:
+    runs-on: ubuntu-latest
+    permissions:
+      issues: write
+    steps:
+      - uses: actions/checkout@v4
+
+      - name : "Assign for verification"
+        if: github.event.label.name == '3 - installed'
+        uses: actions/github-script@v7
+        env:
+          ISSUE_VERIFIERS: ${{secrets.ISSUE_VERIFIERS}}
+          CALCITE_DESIGNERS: ${{secrets.CALCITE_DESIGNERS}}
+        with:
+          script: |
+            const action = require('${{ github.workspace }}/.github/scripts/assignForVerification.js')
+            await action({github, context, core})
+
+      - name: "Spike complete notification"
+        if: github.event.label.name == 'spike complete'
+        uses: actions/github-script@v7
+        env:
+          managers: ${{secrets.CALCITE_MANAGERS}}
+        with:
+          script: |
+            const action = require('${{ github.workspace }}/.github/scripts/notifyWhenSpikeComplete.js')
+            await action({github, context, core})
+
+      - name: "Ready for dev notification"
+        if: github.event.label.name == 'ready for dev'
+        uses: actions/github-script@v7
+        env:
+          managers: ${{secrets.CALCITE_MANAGERS}}
+        with:
+          script: |
+            const action = require('${{ github.workspace }}/.github/scripts/notifyWhenReadyForDev.js')
+            await action({github, context, core})
+
+      - name: "New component notification"
+        if: github.event.label.name == 'new component'
+        uses: actions/github-script@v7
+        env:
+          designers: ${{secrets.CALCITE_DESIGNERS}}
+        with:
+          script: |
+            const action = require('${{ github.workspace }}/.github/scripts/notifyAboutNewComponent.js')
+            await action({github, context, core})
+

.github/workflows/pr-bot.yml

@@ -6,22 +6,21 @@ permissions:
   pull-requests: write
   issues: write
 jobs:
-  assign-author:
+  assign-and-label:
     if: github.event.pull_request.user.login != 'dependabot[bot]' && github.event.pull_request.user.login != 'renovate[bot]'
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/github-script@v7
+
+      - name: "Assign author"
+        uses: actions/github-script@v7
         with:
           script: |
             const action = require('${{ github.workspace }}/.github/scripts/assignPullRequestAuthor.js')
             await action({github, context, core})
-  label-type:
-    if: github.event.pull_request.user.login != 'dependabot[bot]' && github.event.pull_request.user.login != 'renovate[bot]'
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/github-script@v7
+
+      - name: "Add commit type label"
+        uses: actions/github-script@v7
         with:
           script: |
             const action = require('${{ github.workspace }}/.github/scripts/labelPullRequestWithCommitType.js')

.github/workflows/schedule-updates.yml

@@ -0,0 +1,56 @@
+name: Schedule Updates
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: "0 0 * * *"
+jobs:
+  component-docs:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version-file: package.json
+      - name: generate doc
+        run: |
+          npm install
+          npm --workspace=@esri/calcite-design-tokens run build
+          npm --workspace=@esri/eslint-plugin-calcite-components run build
+          npx --workspace=@esri/calcite-components stencil build --docs
+          npm run --workspace=@esri/calcite-components lint:md
+      - name: Commit and create pull request
+        uses: peter-evans/create-pull-request@v4
+        with:
+          base: main
+          branch: ci/update-component-docs
+          commit-message: "docs: update component READMEs"
+          token: ${{ secrets.ADMIN_TOKEN }}
+          title: "docs: update component READMEs"
+          body: This PR was automatically generated by the update-doc GitHub action
+          labels: "docs,skip visual snapshots"
+
+  browserslist-db:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-node@v4
+        with:
+          node-version-file: package.json
+          cache: npm
+      - name: Run update-browserslist-db
+        run: |
+          git config --global user.email "github-actions[bot]@users.noreply.github.com"
+          git config --global user.name "github-actions[bot]"
+          npx update-browserslist-db@latest
+      - name: Commit and create pull request
+        uses: peter-evans/create-pull-request@v4
+        with:
+          base: main
+          branch: ci/update-browserslist-db
+          commit-message: "build: update browserslist db"
+          title: "build: update browserslist db"
+          body: "This PR was automatically generated by the update-browserslist-db GitHub action"
+          token: ${{ secrets.ADMIN_TOKEN }}
+          labels: "chore,skip visual snapshots"

.github/workflows/stale.yml

@@ -6,7 +6,7 @@ jobs:
   stale:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@v3
+      - uses: actions/stale@v9
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           stale-issue-message: "This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions."