Merge main into claude-helpsite-assignNewCards

Resolve merge conflicts:
- Configure-Company-Card-Settings.md: integrate "Assign new cards" bullet
  into main's updated formatting
- Direct-feeds.md was renamed to Set-up-a-Direct-Company-Card-Feed-Connection.md
  on main; accept deletion and add the new FAQ to the renamed file

Co-authored-by: Fedi Rajhi <fedirjh@users.noreply.github.com>

Author: MelvinBot

.claude/agents/deploy-blocker-investigator.md

@@ -129,6 +129,10 @@ removeDeployBlockerLabel.sh "$ISSUE_URL" DeployBlocker      # For Frontend bugs
 
 Call scripts by name only (e.g., `removeDeployBlockerLabel.sh`), not with full paths.
 
+### Step 8: Assign contributors
+
+When a causing PR is identified with medium or high confidence, assign the PR author and all approving reviewers to the deploy blocker issue using `gh issue edit "$ISSUE_URL" --add-assignee`. Extract approving reviewers from `gh pr view <PR_NUMBER> --json reviews`.
+
 ---
 
 ## Decision Tree
@@ -182,6 +186,7 @@ Post ONE comment using this exact format:
 Brief explanation of why this recommendation (1-2 sentences).
 
 
+**Assigned**: @author (PR author), @reviewer (approving reviewer) — or omit if no causing PR identified
 **Labels**: [Describe any label changes made]
 
 <details>

.claude/commands/investigate-deploy-blocker.md

@@ -1,5 +1,5 @@
 ---
-allowed-tools: Bash(gh issue view:*),Bash(gh issue comment:*),Bash(gh issue list:*),Bash(gh pr view:*),Bash(gh pr list:*),Bash(gh pr diff:*),Bash(gh api:*),Bash(git log:*),Bash(git show:*),Bash(git blame:*),Bash(removeDeployBlockerLabel.sh:*),Glob,Grep,Read
+allowed-tools: Bash(gh issue view:*),Bash(gh issue comment:*),Bash(gh issue edit:*),Bash(gh issue list:*),Bash(gh pr view:*),Bash(gh pr list:*),Bash(gh pr diff:*),Bash(gh api:*),Bash(git log:*),Bash(git show:*),Bash(git blame:*),Bash(removeDeployBlockerLabel.sh:*),Glob,Grep,Read
 description: Investigate a deploy blocker issue to find the causing PR and recommend resolution
 ---
 

.claude/scripts/createInlineComment.sh

@@ -3,7 +3,7 @@
 # Secure proxy script to create an inline comment on a GitHub PR.
 set -eu
 
-readonly ALLOWED_RULES_FILE="${GITHUB_WORKSPACE}/.claude/allowed-rules.txt"
+readonly ALLOWED_RULES_FILE="${ALLOWED_RULES_FILE:-${GITHUB_WORKSPACE}/.claude/allowed-rules.txt}"
 
 # Print error and exit.
 die() {
@@ -47,11 +47,12 @@ readonly LINE_ARG="${3:-}"
 validate_rule "$BODY_ARG"
 echo "Comment approved: $COMMENT_STATUS_REASON"
 
-readonly FOOTER=$'\n\n---\n\nPlease rate this suggestion with 👍 or 👎 to help us improve! Reactions are used to monitor reviewer efficiency.'
-readonly COMMENT_BODY="${BODY_ARG}${FOOTER}"
-
 COMMIT_ID=$(gh api "/repos/$GITHUB_REPOSITORY/pulls/$PR_NUMBER" --jq '.head.sha')
 readonly COMMIT_ID
+readonly SHORT_SHA="${COMMIT_ID:0:7}"
+
+readonly FOOTER=$'\n\n---\n\n'"Reviewed at: [${SHORT_SHA}](https://github.com/${GITHUB_REPOSITORY}/commit/${COMMIT_ID}) | Please rate this suggestion with 👍 or 👎 to help us improve! Reactions are used to monitor reviewer efficiency."
+readonly COMMENT_BODY="${BODY_ARG}${FOOTER}"
 
 PAYLOAD=$(jq -n \
     --arg body "$COMMENT_BODY" \

.claude/skills/coding-standards/rules/clean-react-1-composition-over-config.md

@@ -462,11 +462,11 @@ In all cases, the rule applies to: **new components**, **new features added to e
 - The optional prop is used for logic beyond just conditional rendering (e.g., computing derived values, passed to callbacks, used in multiple places within the component)
 - The component is a thin wrapper around a platform primitive (e.g., wrapping `TextInput`, `ScrollView`, `Pressable`) — these naturally pass through configuration props
 - Items come from **runtime data** (API responses, user-generated content, Onyx collections) — dynamic data must be mapped
-- The array is used with **list components** (e.g., `FlatList`, `SectionList`, or custom wrappers) — these require data arrays by design
+- The array is used with **list components** (e.g., `FlatList`, or custom wrappers) — these require data arrays by design
 - Items are truly **homogeneous** (same shape, same behavior, only values differ) and the count is **unbounded** (e.g., list of chat messages, search results)
 - The array is a **framework requirement** (e.g., React Navigation screen config, form validation rules)
 - The `ReactNode` prop is `children` itself — `children` is the foundation of composition, not configuration
-- The render function is a **list component callback** (`renderItem` on `FlatList`, `SectionList`, `DraggableList`) — these are framework requirements
+- The render function is a **list component callback** (`renderItem` on `FlatList`, `DraggableList`) — these are framework requirements
 - The render function receives **per-item runtime data** from a dynamic collection (e.g., `renderSuggestionMenuItem(item, index)`) — this is list-style rendering, not slot configuration
 
 **Search Patterns** (hints for reviewers):

.claude/skills/coding-standards/rules/perf-1-no-spread-in-renderitem.md

@@ -37,7 +37,7 @@ title: No spread in list item's renderItem
 
 Flag ONLY when ALL of these are true:
 
-- Code is inside a renderItem function (function passed to FlatList, SectionList, etc.)
+- Code is inside a renderItem function (function passed to FlatList, etc.)
 - A spread operator (...) is used on an object
 - That object is being passed as a prop to a component
 - The spread creates a NEW object literal inline

.github/ISSUE_TEMPLATE/Standard.md

@@ -1,7 +1,7 @@
 ---
 name: Standard issue template
 about: A standard template to follow when creating a new issue in this repository
-labels: Bug, Daily, External
+labels: Bug, Daily
 ---
 
 If you haven’t already, check out our [contributing guidelines](https://github.com/Expensify/ReactNativeChat/blob/main/contributingGuides/CONTRIBUTING.md) for onboarding and email contributors@expensify.com to request to join our Slack channel!

.github/actions/composite/getMergedPullRequest/action.yml

@@ -0,0 +1,66 @@
+name: Get merged pull request
+description: Given the current push event's commit SHA, finds the pull request that was merged to produce it.
+
+inputs:
+  github_token:
+    description: GitHub token used to call the API
+    required: true
+
+outputs:
+  number:
+    description: The PR number
+    value: ${{ steps.getMergedPR.outputs.number }}
+  title:
+    description: The PR title
+    value: ${{ steps.getMergedPR.outputs.title }}
+  body:
+    description: The PR body
+    value: ${{ steps.getMergedPR.outputs.body }}
+  labels:
+    description: Newline-separated label names
+    value: ${{ steps.getMergedPR.outputs.labels }}
+  assignees:
+    description: Newline-separated assignee logins
+    value: ${{ steps.getMergedPR.outputs.assignees }}
+
+runs:
+  using: composite
+  steps:
+    - name: Find merged pull request for this commit
+      id: getMergedPR
+      shell: bash
+      run: |
+        RESP=$(gh api -H "Accept: application/vnd.github+json" "/repos/${GITHUB_REPOSITORY}/commits/${GITHUB_SHA}/pulls")
+
+        # Prefer the PR whose merge_commit_sha matches exactly (parity with the old action)
+        PR=$(echo "$RESP" | jq -c "first(.[] | select(.merge_commit_sha == \"${GITHUB_SHA}\"))" 2>/dev/null)
+
+        # Fall back to the first merged PR associated with this commit
+        if [[ -z "$PR" || "$PR" == "null" ]]; then
+          PR=$(echo "$RESP" | jq -c 'first(.[] | select(.merged_at != null))' 2>/dev/null)
+        fi
+
+        if [[ -z "$PR" || "$PR" == "null" ]]; then
+          echo "::warning::No merged pull request found for commit ${GITHUB_SHA}"
+          exit 0
+        fi
+
+        {
+          echo "number=$(echo "$PR" | jq -r '.number')"
+          echo "title=$(echo "$PR" | jq -r '.title')"
+
+          echo "body<<GETMPR_EOF"
+          echo "$PR" | jq -r '.body // ""'
+          echo "GETMPR_EOF"
+
+          echo "labels<<GETMPR_LABELS_EOF"
+          echo "$PR" | jq -r '[.labels[].name] | join("\n")'
+          echo "GETMPR_LABELS_EOF"
+
+          echo "assignees<<GETMPR_ASSIGNEES_EOF"
+          echo "$PR" | jq -r '[.assignees[].login] | join("\n")'
+          echo "GETMPR_ASSIGNEES_EOF"
+
+        } >> "$GITHUB_OUTPUT"
+      env:
+        GITHUB_TOKEN: ${{ inputs.github_token }}

.github/actions/composite/setupNode/action.yml

@@ -49,7 +49,7 @@ runs:
 
     - name: Install root project node packages
       if:  steps.cache-node-modules.outputs.cache-hit != 'true' || (inputs.IS_HYBRID_BUILD == 'true' && steps.cache-old-dot-node-modules.outputs.cache-hit != 'true')
-      uses: nick-fields/retry@3f757583fb1b1f940bc8ef4bf4734c8dc02a5847
+      uses: nick-fields/retry@ad984534de44a9489a53aefd81eb77f87c70dc60 # v4
       with:
         timeout_minutes: 30
         max_attempts: 3

.github/actions/javascript/authorChecklist/action.yml

@@ -5,5 +5,5 @@ inputs:
     description: Auth token for New Expensify Github
     required: true
 runs:
-  using: 'node20'
+  using: 'node24'
   main: './index.js'

.github/actions/javascript/awaitStagingDeploys/action.yml

@@ -8,5 +8,5 @@ inputs:
     description: If provided, this action will only wait for a deploy matching this tag.
     required: false
 runs:
-  using: 'node20'
+  using: 'node24'
   main: './index.js'