Merge branch 'master' into enh/occ-group-add-and-removeuser-multiple - resolve conflicts

Co-authored-by: miaulalala <7427347+miaulalala@users.noreply.github.com>

Author: Copilot

.docker/sphinx-latex/Dockerfile

@@ -8,8 +8,11 @@ ENV DEBIAN_FRONTEND=noninteractive
 
 RUN apt-get update \
   && apt-get install -y --no-install-recommends \
+    ca-certificates \
+    curl \
+    git \
+    lsb-release \
     make \
-    python3-pip \
     latexmk \
     tex-gyre \
     texlive-fonts-extra \
@@ -21,3 +24,7 @@ RUN apt-get update \
     xindy \
   && mktexlsr \
   && rm -rf /var/lib/apt/lists/*
+
+# Allow pip to install packages system-wide inside the container when running
+# as root (avoids PEP 668 "externally managed environment" error)
+RUN printf '[global]\nbreak-system-packages = true\n' > /etc/pip.conf

.github/labeler.yml

@@ -0,0 +1,18 @@
+# SPDX-FileCopyrightText: 2024 Nextcloud GmbH and Nextcloud contributors
+# SPDX-License-Identifier: MIT
+
+"manual: admin":
+  - changed-files:
+    - any-glob-to-any-file: "admin_manual/**"
+
+"manual: developer":
+  - changed-files:
+    - any-glob-to-any-file: "developer_manual/**"
+
+"manual: user":
+  - changed-files:
+    - any-glob-to-any-file: "user_manual/**"
+
+"github_actions":
+  - changed-files:
+    - any-glob-to-any-file: ".github/workflows/**"

.github/pull_request_template.md

@@ -9,3 +9,10 @@ Please add a screenshot of your changed or added page(s).
 This helps reviewers to quickly see how the resulting
 lists, code blocks, headers and links look.
 -->
+
+### ✅ Checklist
+
+- [ ] I have built the documentation locally and reviewed the output
+- [ ] Screenshots are included for visual changes
+- [ ] I have not moved or renamed pages (or added a redirect if I did)
+- [ ] I have run `codespell` or similar and addressed any spelling issues

.github/workflows/docker-build.yml

@@ -16,8 +16,8 @@ permissions:
   packages: write
 
 jobs:
-  build-and-push:
-    name: Build and push sphinx-latex image
+  build-and-publish:
+    name: Build and publish sphinx-latex Docker image
     runs-on: ubuntu-latest
 
     steps:
@@ -44,7 +44,7 @@ jobs:
             type=raw,value=latest,enable={{is_default_branch}}
             type=sha,prefix=sha-
 
-      - name: Build and push Docker image
+      - name: Build and publish Docker image
         uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
         with:
           context: .docker/sphinx-latex

.github/workflows/labeling.yml

@@ -0,0 +1,87 @@
+# SPDX-FileCopyrightText: 2024 Nextcloud GmbH and Nextcloud contributors
+# SPDX-License-Identifier: MIT
+
+name: Labeling
+
+on:
+  pull_request:
+    types: [opened, reopened, synchronize]
+  issues:
+    types: [opened]
+
+permissions:
+  contents: read
+
+jobs:
+  label-by-files:
+    if: github.event_name == 'pull_request'
+    name: Label by changed files
+
+    runs-on: ubuntu-latest-low
+
+    permissions:
+      contents: read
+      pull-requests: write
+
+    steps:
+      - name: Apply labels based on changed files
+        uses: actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9 # v5
+        with:
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
+          sync-labels: false
+
+  triage-pr:
+    needs: [label-by-files]
+    if: >
+      always() &&
+      github.event_name == 'pull_request' &&
+      (github.event.action == 'opened' || github.event.action == 'reopened')
+    name: Apply default PR triage label
+
+    runs-on: ubuntu-latest-low
+
+    permissions:
+      pull-requests: write
+
+    steps:
+      - name: Add '3. to review' if no triage label is set
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          script: |
+            const triageLabels = ['0. Needs triage', '1. to develop', '2. developing', '3. to review', '4. to release']
+            const currentLabels = context.payload.pull_request.labels.map(l => l.name)
+            if (!triageLabels.some(l => currentLabels.includes(l))) {
+              await github.rest.issues.addLabels({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                issue_number: context.payload.pull_request.number,
+                labels: ['3. to review'],
+              })
+            }
+
+  triage-issue:
+    if: github.event_name == 'issues'
+    name: Apply default issue triage label
+
+    runs-on: ubuntu-latest-low
+
+    permissions:
+      issues: write
+
+    steps:
+      - name: Add '0. Needs triage' if no triage label is set
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          script: |
+            const triageLabels = ['0. Needs triage', '1. to develop', '2. developing', '3. to review', '4. to release']
+            const currentLabels = context.payload.issue.labels.map(l => l.name)
+            if (!triageLabels.some(l => currentLabels.includes(l))) {
+              await github.rest.issues.addLabels({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                issue_number: context.payload.issue.number,
+                labels: ['0. Needs triage'],
+              })
+            }