[pull] gh-pages from expressjs:gh-pages

.github/CODEOWNERS

@@ -0,0 +1,8 @@
+# Website development
+* @expressjs/docs-collaborators
+
+# Codeowners
+.github/CODEOWNERS @expressjs/docs-captains
+
+# Blog
+_posts @expressjs/express-tc

.github/dependabot.yml

@@ -0,0 +1,25 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: monthly
+
+  - package-ecosystem: docker
+    directory: /
+    schedule:
+      interval: monthly
+
+  - package-ecosystem: bundler
+    directory: /
+    schedule:
+      interval: monthly
+
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: monthly
+    open-pull-requests-limit: 10
+    ignore:
+      - dependency-name: "*"
+        update-types: ["version-update:semver-major"]

.github/scripts/get-contributing.sh

@@ -0,0 +1,92 @@
+#!/bin/bash
+
+# This script replaces the contents of a section with the contents from the annotated source address or local file paths inside the DEST file.
+
+# read contents of file into memory
+DEST="../../en/resources/contributing.md"
+
+# track the header level 
+level=''
+# tracks src for curl calls
+src=''
+# tracks file paths for local file reads
+local=''
+  while IFS= read -r line; do
+  # REMOVE PREVIOUS CONTENT SECTION
+  # if src or local tags are not empty
+  if [[ -n "$src" || -n "$local" ]]; then
+    #  if current line not a horitzontal rule hr
+    if  [[ "$line" != "----"* ]]; then
+    #  if line == level -- level is num of ##
+      if [[ "$line" == "$level"'#'*  ||
+      # line not a header line
+      "$line" != '#'* ]]; then
+        # skip line and rewrite over old content
+          continue
+      fi
+    fi
+  fi
+
+ # PRINT TO PAGE SECTION
+  src=''
+  local=''
+  # if line is a header
+  if [[ "$line" == '#'* ]]; then
+  # if header has (#id-of-link) or {#id-on-page} patterns
+    if [[ $line =~ (\(\#.*\))\. || "$line" =~ \{\#.*\} ]]; then
+      # isolate the matching part of line 
+      match=${BASH_REMATCH[0]}
+      # remove match - leaving rest
+      rest=${line//${match}}
+      # remove any # symbols from start 
+      title_rest=${rest##*\#}
+      # slice rest of line to get only level
+      level="${rest:0:$((${#rest} - ${#title_rest}))}"
+    else
+    # any other headers -- these before SRC/LOCAL pages anchors
+      header=${line##*\#} 
+      level="${line:0:$((${#line} - ${#header}))}"
+    fi
+  # if line is SRC anchor in read file 
+  elif [[ "$line" == '<!-- SRC:'* ]]; then
+    # remove the first 10 chars
+    src=${line:10}
+    # % remove from end until after white space -- leaves src details
+    src=${src% *}
+  # if line is LOCAL anchor in read file 
+  elif [[ "$line" == '<!-- LOCAL:'* ]]; then
+    # remove the first 12 chars
+    local=${line:12}
+    # % remove from end until after white space -- leave local details
+    local=${local% *}
+    # leave only path to file
+    local=${local#* }
+  fi 
+  # prints line to the page 
+  echo "$line"
+
+  if [[ -n "$local" ]]; then
+  # cat file -- outputs full contents of file at local path 
+    cat "$local" | \
+    # remove the top 1# headers from cat'd file
+      sed -En '/^##|^[^#]/,$p' | \
+    # remove GH MD specific tags start w '[!NOTE\] + the following line
+      sed -E '/^>\[!NOTE\]*/{N;d;}' | \
+    # change GH specific MD IMPORTANT tags -> change into plain MD
+      sed -E 's/> \[!IMPORTANT\]/> **IMPORTANT:** /g'
+      echo
+  elif [[ -n "$src" ]]; then  
+    echo
+    path=${src#* }
+    repo=${src% *}
+    curl -s "https://raw.githubusercontent.com/${repo}/master/${path}" | \
+      # if line is ## or not #
+      sed -En '/^##|^[^#]/,$p' | \
+      # add additional # every header 
+      sed 's/^#/&'"${level:1}"'/g' | \
+      # format GH links when match
+      sed -E 's/(\[[^]]*\])\(([^):#]*)\)/\1(https:\/\/github.com\/'"$(sed 's/\//\\\//g' <<< "$repo")"'\/blob\/master\/\2)/g'
+    echo
+  fi
+  # read in dest file then write back to file
+done <<<"$(< $DEST)" > $DEST

.github/scripts/get-express-version.mjs

@@ -0,0 +1,20 @@
+import { readFile, writeFile } from 'node:fs/promises'
+import path from 'node:path'
+
+const NPMURL = 'https://registry.npmjs.org/express'
+
+const response = await (await fetch(NPMURL)).json()
+
+const { next, latest } = response['dist-tags']
+
+try {
+  const filePath = path.resolve(path.join('..', '..', '_data', 'express.yml'))
+  let content = await readFile(filePath, 'utf8')
+
+  content = content.replace(/current_version: ".*"/, `current_version: "${latest}"`)
+  content = content.replace(/next_version: ".*"/, `next_version: "${next}"`)
+
+  await writeFile(filePath, content, 'utf8')
+} catch (error) {
+  console.error('Error updating versions in _data/express.yml:', error)
+}

get-readmes.sh → .github/scripts/get-readmes.sh

@@ -14,7 +14,6 @@ expressjs connect-rid master
 expressjs cookie-parser master
 expressjs cookie-session master
 expressjs cors master
-expressjs csurf master
 expressjs errorhandler master
 expressjs method-override master
 expressjs morgan master
@@ -30,7 +29,7 @@ expressjs express master/examples
 LIST_END
 ) | while read org repo branch; do
   # Write the README.md to a file named after the repo
-  DEST="_includes/readmes/$repo.md"
+  DEST="../../_includes/readmes/$repo.md"
   # When fetching from a branch of a gh repo
   GHURL="https://raw.githubusercontent.com/$org/$repo/$branch/README.md"
   # When fetching from the latest release of a node module
@@ -43,7 +42,7 @@ LIST_END
     # This allows us to specify a branch other than master if we want to.
     # In this case, the branch name is added to the readme name in the filename.
     if [ "$branch" != "master" ]; then
-      DEST="_includes/readmes/$repo-$branch.md"
+      DEST="../../_includes/readmes/$repo-$branch.md"
     fi
     echo "fetching $org/$repo/$branch from GitHub's raw content domain..."
     curl -s $GHURL > $DEST

.github/workflows/ci.yml

@@ -4,38 +4,62 @@ on:
   pull_request:
     branches:
     - gh-pages
+  pull_request_review:
+      types: [submitted]
   push:
     branches:
     - gh-pages
 
+permissions:
+  contents: read
+
 jobs:
   test:
     runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        node-version:
-        - "16"
+    if: |
+      github.event.pull_request.draft != true &&
+      (github.event_name == 'pull_request_review' && github.event.review.state == 'approved') ||
+      github.event_name != 'pull_request_review'
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v4
+      with:
+        persist-credentials: false
+
 
-    - name: Install Node.js ${{ matrix.node-version }}
-      shell: bash -l {0}
-      run: |
-        nvm install --default ${{ matrix.node-version }}
-        dirname "$(npm which)" >> "$GITHUB_PATH"
+    - name: Set up Node.js
+      uses: actions/setup-node@v4
 
     - name: Install Node.js dependencies
       run: npm install
 
-    - name: List environment
-      id: list_env
-      shell: bash
-      run: |
-        echo "node@$(node -v)"
-        echo "npm@$(npm -v)"
-        npm -s ls
-
     - name: Run tests
       shell: bash
       run: npm test
+
+  build:
+    name: Build
+    runs-on: ubuntu-latest
+    if: |
+      github.event.pull_request.draft != true &&
+      (github.event_name == 'pull_request_review' && github.event.review.state == 'approved') ||
+      github.event_name != 'pull_request_review'
+
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+
+      - name: Setup Ruby    
+        uses: ruby/setup-ruby@2a7b30092b0caf9c046252510f9273b4875f3db9 # https://github.com/ruby/setup-ruby/releases/tag/v1.254.0
+        with:
+          bundler-cache: true # runs 'bundle install' and caches installed gems automatically
+
+      - name: Jekyll Build
+        run: bundle exec jekyll build
+
+      - name: Check Docker support
+        shell: bash
+        run: |
+          docker --version
+          make build

.github/workflows/codeql.yml

@@ -0,0 +1,73 @@
+# For most projects, this workflow file will not need changing; you simply need
+# to commit it to your repository.
+#
+# You may wish to alter this file to override the set of languages analyzed,
+# or to provide custom queries or build logic.
+#
+# ******** NOTE ********
+# We have attempted to detect the languages in your repository. Please check
+# the `language` matrix defined below to confirm you have the correct set of
+# supported CodeQL languages.
+#
+name: "CodeQL"
+
+on:
+  push:
+    branches: ["gh-pages"]
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: ["gh-pages"]
+  schedule:
+    - cron: "0 0 * * 1"
+
+permissions:
+  contents: read
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: ["javascript"]
+        # CodeQL supports [ $supported-codeql-languages ]
+        # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      # Initializes the CodeQL tools for scanning.
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: ${{ matrix.language }}
+          # If you wish to specify custom queries, you can do so here or in a config file.
+          # By default, queries listed here will override any specified in a config file.
+          # Prefix the list here with "+" to use these queries and those in the config file.
+
+      # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
+      # If this step fails, then you should remove it and run the build manually (see below)
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v3
+
+      # ℹ️ Command-line programs to run using the OS shell.
+      # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
+
+      #   If the Autobuild fails above, remove it and uncomment the following three lines.
+      #   modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.
+
+      # - run: |
+      #   echo "Run, Build Application using script"
+      #   ./location_of_script_within_repo/buildscript.sh
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v3
+        with:
+          category: "/language:${{matrix.language}}"

.github/workflows/crowdin.yml

@@ -0,0 +1,30 @@
+name: Crowdin Upload
+
+on:
+  push:
+    branches: [ gh-pages ]
+  workflow_dispatch:
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  synchronize-with-crowdin:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+
+      - name: crowdin action
+        uses: crowdin/github-action@590c05e09a29f392b203faf4d6aa8e0cd32c7835 # https://github.com/crowdin/github-action/releases/tag/v2.9.1
+        with:
+          upload_sources: true
+          upload_translations: false
+          download_translations: false
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          CROWDIN_PROJECT_ID: ${{ secrets.CROWDIN_PROJECT_ID }}
+          CROWDIN_PERSONAL_TOKEN: ${{ secrets.CROWDIN_PERSONAL_TOKEN }}