chore(sync): synced file(s) with radius-project/.github

.editorconfig

@@ -1,3 +1,9 @@
+# ------------------------------------------------------------------------------
+# This file is synced from the radius-project/.github repository.
+# DO NOT EDIT MANUALLY - changes will be overwritten by the next sync.
+# Source: https://github.com/radius-project/.github
+# ------------------------------------------------------------------------------
+
 root = true
 
 [*]

.gitattributes

@@ -1,3 +1,9 @@
+# ------------------------------------------------------------------------------
+# This file is synced from the radius-project/.github repository.
+# DO NOT EDIT MANUALLY - changes will be overwritten by the next sync.
+# Source: https://github.com/radius-project/.github
+# ------------------------------------------------------------------------------
+
 # Force the following filetypes to have unix eols, so Windows does not break them
 * text eol=lf
 
@@ -23,9 +29,34 @@
 *.dotx binary
 *.vsdx binary
 
-# Lock files are generated and should ignore line endings
-devcontainer-lock.json -text linguist-generated=true
-pnpm-lock.yaml -text linguist-generated=true
+# Lock files are generated and should ignore line endings.
+
+# Node.js
 package-lock.json -text linguist-generated=true
+npm-shrinkwrap.json -text linguist-generated=true
+pnpm-lock.yaml -text linguist-generated=true
 yarn.lock -text linguist-generated=true
+bun.lock -text linguist-generated=true
+bun.lockb binary linguist-generated=true
+
+# Go
 go.sum -text linguist-generated=true
+go.work.sum -text linguist-generated=true
+
+# .NET
+packages.lock.json -text linguist-generated=true
+
+# Python
+uv.lock -text linguist-generated=true
+poetry.lock -text linguist-generated=true
+pdm.lock -text linguist-generated=true
+Pipfile.lock -text linguist-generated=true
+
+# Rust
+Cargo.lock -text linguist-generated=true
+
+# Terraform / OpenTofu
+.terraform.lock.hcl -text linguist-generated=true
+
+# Dev containers
+devcontainer-lock.json -text linguist-generated=true

.github/CODEOWNERS

@@ -1,18 +1,34 @@
 # Code Owners for github.com/radius-project/docs
-# Generated from template - do not edit directly
+#
+# ------------------------------------------------------------------------------
+# This file is synced from the radius-project/.github repository.
+# DO NOT EDIT MANUALLY - changes will be overwritten by the next sync.
+# Source: https://github.com/radius-project/.github
+# ------------------------------------------------------------------------------
 
 # General maintainers and approvers for the entire repository
 * @radius-project/maintainers-docs @radius-project/approvers-docs
 
 # Dependency files - on-call can also approve these (Dependabot, etc.)
 
+# Version managers (language-agnostic)
+**/.tool-versions         @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
+**/mise.toml              @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
+**/.mise.toml             @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
+
 # Node.js
 **/package.json           @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
 **/package-lock.json      @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
+**/npm-shrinkwrap.json    @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
 **/pnpm-lock.yaml         @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
+**/pnpm-workspace.yaml    @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
 **/yarn.lock              @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
+**/bun.lock               @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
+**/bun.lockb              @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
 **/.nvmrc                 @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
 **/.npmrc                 @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
+**/.yarnrc                @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
+**/.yarnrc.yml            @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
 **/.node-version          @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
 **/tsconfig.json          @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
 **/tsconfig.*.json        @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
@@ -30,23 +46,39 @@
 **/*.sln                  @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
 **/nuget.config           @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
 **/global.json            @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
+**/Directory.Build.props  @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
+**/Directory.Build.targets @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
+**/Directory.Packages.props @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
+**/packages.config        @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
+**/packages.lock.json     @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
 
 # Python
-**/requirements.txt       @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
+**/requirements*.txt      @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
+**/constraints*.txt       @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
+**/setup.py               @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
+**/setup.cfg              @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
 **/pyproject.toml         @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
 **/uv.lock                @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
 **/poetry.lock            @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
+**/pdm.lock               @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
 **/Pipfile                @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
 **/Pipfile.lock           @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
 **/.python-version        @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
 
 # Rust
 **/Cargo.toml             @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
 **/Cargo.lock             @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
+**/rust-toolchain         @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
+**/rust-toolchain.toml    @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
 
 # Bicep
 **/bicepconfig.json       @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
 
+# Terraform / OpenTofu
+**/versions.tf            @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
+**/.terraform.lock.hcl    @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
+**/.terraform-version     @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
+
 # Container files
 **/Dockerfile             @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call
 **/*.Dockerfile           @radius-project/maintainers-docs @radius-project/approvers-docs @radius-project/on-call

.github/configs/.cspell.yml

@@ -1,13 +1,18 @@
 # yaml-language-server: $schema=https://raw.githubusercontent.com/streetsidesoftware/cspell/main/cspell.schema.json
 # docs: https://cspell.org/docs/getting-started
+# ------------------------------------------------------------------------------
+# This file is synced from the radius-project/.github repository.
+# DO NOT EDIT MANUALLY - changes will be overwritten by the next sync.
+# Source: https://github.com/radius-project/.github
+# ------------------------------------------------------------------------------
 ---
 $schema: https://raw.githubusercontent.com/streetsidesoftware/cspell/main/cspell.schema.json
 version: "0.2"
 language: en
 
 # Built-in dictionaries plus the shared custom word list (.cspellignore at repo root).
-# Kept in sync with the radius-project/radius spellcheck configuration to provide a
-# unified spell-checking experience across the Radius repositories.
+# This is the unified Radius spell-checking configuration; per-repository custom
+# words belong in the repo's own .cspellignore file, not in this synced config.
 dictionaries:
   - softwareTerms
   - companies
@@ -23,7 +28,6 @@ ignoreRegExpList:
   - adr_yaml_formatter
   - inline_code
   - tf_docs
-  - md_image_link
   - md_link
   - url
   - at_mention
@@ -33,9 +37,8 @@ ignoreRegExpList:
   - front_matter
   - html_code_tag
 
-# Custom regex patterns matching the radius-project/radius configuration so that
-# fenced code, inline code, markdown links, URLs, HTML and similar tokens are
-# excluded from spell-checking.
+# Custom regex patterns so that fenced code, inline code, markdown links, URLs,
+# HTML and similar tokens are excluded from spell-checking.
 patterns:
   # Fenced code blocks: ```lang ... ``` (with or without language identifier).
   # Allows leading whitespace so indented code blocks inside list items match.
@@ -59,9 +62,6 @@ patterns:
   # typos in the visible link text or image alt text are still caught.
   # Matches both `[text](url)` and `![alt](url)` because we only skip the
   # parentheses payload.
-  - name: md_image_link
-    pattern:
-      - /\]\([^)]*\)/g
   - name: md_link
     pattern:
       - /\]\([^)]*\)/g
@@ -90,12 +90,10 @@ patterns:
     pattern:
       - /\{\{[%<][\s\S]*?[%>]\}\}/g
   # Hugo front matter: only skip non-rendered keys so user-facing fields
-  # (title, description, linkTitle) are still spell-checked. Keys observed
-  # in this repo: type, weight, slug, url, aliases, no_list, manualLink,
-  # manualLinkTarget, category, categories, tags. The first sub-pattern
-  # covers single-line `key: value` entries; the second covers multi-line
-  # list values (e.g. `aliases:` followed by indented `- /path` items);
-  # the third matches the `---` / `+++` delimiter lines.
+  # (title, description, linkTitle) are still spell-checked. The first
+  # sub-pattern covers single-line `key: value` entries; the second covers
+  # multi-line list values (e.g. `aliases:` followed by indented `- /path`
+  # items); the third matches the `---` / `+++` delimiter lines.
   - name: front_matter
     pattern:
       - /^(?:type|weight|slug|url|no_list|manualLink|manualLinkTarget|category|categories|tags)\s*:[^\n]*$/gm
@@ -115,7 +113,8 @@ allowCompoundWords: true
 # Paths that should not be spell-checked: vendored theme/modules, generated
 # Hugo output, dependency folders and the shared dictionary itself.
 # Patterns use the `**/` prefix because cspell resolves ignorePaths relative
-# to the config file location (.github/configs/).
+# to the config file location (.github/configs/). Entries that do not exist in
+# a given repository are simply no-ops, so this superset is safe to share.
 ignorePaths:
   - "**/node_modules/**"
   - "**/.dev/**"

.github/workflows/dependabot-manager.yml

@@ -0,0 +1,28 @@
+# yaml-language-server: $schema=https://www.schemastore.org/github-workflow.json
+# ------------------------------------------------------------------------------
+# This file is synced from the radius-project/.github repository.
+# DO NOT EDIT MANUALLY - changes will be overwritten by the next sync.
+# Source: https://github.com/radius-project/.github
+# ------------------------------------------------------------------------------
+---
+name: Dependabot Manager
+
+on:
+  pull_request:
+    types:
+      - opened
+      - reopened
+      - synchronize
+
+permissions: {}
+
+jobs:
+  dependabot-manager:
+    if: github.event.pull_request.user.login == 'dependabot[bot]'
+    uses: radius-project/.github/.github/workflows/__dependabot-manager.yml@main
+    permissions:
+      contents: read
+      pull-requests: read
+    secrets:
+      DEPENDABOT_MANAGER_BOT_CLIENT_ID: ${{ secrets.DEPENDABOT_MANAGER_BOT_CLIENT_ID }}
+      DEPENDABOT_MANAGER_BOT_PRIVATE_KEY: ${{ secrets.DEPENDABOT_MANAGER_BOT_PRIVATE_KEY }}

.github/workflows/dependency-review.yml

@@ -1,4 +1,9 @@
 # yaml-language-server: $schema=https://www.schemastore.org/github-workflow.json
+# ------------------------------------------------------------------------------
+# This file is synced from the radius-project/.github repository.
+# DO NOT EDIT MANUALLY - changes will be overwritten by the next sync.
+# Source: https://github.com/radius-project/.github
+# ------------------------------------------------------------------------------
 ---
 name: Dependency Review
 

.github/workflows/spellcheck.yaml

@@ -1,85 +1,22 @@
 # yaml-language-server: $schema=https://www.schemastore.org/github-workflow.json
+# ------------------------------------------------------------------------------
+# This file is synced from the radius-project/.github repository.
+# DO NOT EDIT MANUALLY - changes will be overwritten by the next sync.
+# Source: https://github.com/radius-project/.github
+# ------------------------------------------------------------------------------
 ---
 name: Spellcheck
 
 on:
   workflow_dispatch:
-  push:
-    branches:
-      - v*.*
-      - edge
   pull_request:
     types: [opened, synchronize, reopened]
-    branches:
-      - v*.*
-      - edge
 
 permissions: {}
 
-env:
-  ACTION_LINK: "${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
-
-concurrency:
-  group: spellcheck-${{ github.ref }}-${{ github.event.pull_request.number || github.sha }}
-  cancel-in-progress: true
-
 jobs:
   spellcheck:
-    name: Spellcheck
-    runs-on: ubuntu-24.04
-    timeout-minutes: 5
+    uses: radius-project/.github/.github/workflows/__spellcheck.yml@main
     permissions:
       contents: read
       pull-requests: write
-    steps:
-      - name: Checkout docs
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
-        with:
-          persist-credentials: false
-
-      - name: Setup NodeJS
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
-        with:
-          node-version-file: docs/.node-version
-
-      - name: Install cspell
-        run: npm install -g cspell
-
-      - name: Spellcheck
-        run: cspell lint --config ./.github/configs/.cspell.yml --no-progress --dot "**/*.md"
-
-      - name: Post GitHub workflow output on failure
-        if: failure()
-        run: |
-          {
-            echo "## :x: Spellcheck Failed"
-            echo "There are spelling errors in your PR. Visit [the workflow output](${{ env.ACTION_LINK }}) to see what words are failing."
-            echo "### Adding new words"
-            echo "If you are adding a new custom word refer to the [docs guide](https://docs.radapp.io/contributing/docs/#spelling)"
-          } >> "${GITHUB_STEP_SUMMARY}"
-
-      - name: Post GitHub workflow output on success
-        run: |
-          {
-            echo "## :white_check_mark: Spellcheck Passed"
-            echo "There are no spelling errors in your PR."
-          } >> "${GITHUB_STEP_SUMMARY}"
-
-      - name: Post GitHub comment on failure
-        if: failure()
-        uses: marocchino/sticky-pull-request-comment@0ea0beb66eb9baf113663a64ec522f60e49231c0 # v3.0.4
-        with:
-          header: spellcheck
-          recreate: true
-          message: |
-            ## :x: Spellcheck Failed
-            There are spelling errors in your PR. Visit [the workflow output](${{ env.ACTION_LINK }}) to see what words are failing.
-            ### Adding new words
-            If you are adding a new custom word refer to the [docs guide](https://docs.radapp.io/contributing/docs/#spelling)
-
-      - name: Clear GitHub comment on success
-        uses: marocchino/sticky-pull-request-comment@0ea0beb66eb9baf113663a64ec522f60e49231c0 # v3.0.4
-        continue-on-error: true
-        with:
-          header: spellcheck
-          delete: true