[pull] master from mozilla:master

.babelrc

@@ -0,0 +1,12 @@
+{
+  "exclude": "node_modules/**",
+  "presets": [
+    [
+      "@babel/preset-env",
+      {
+        "useBuiltIns": "entry",
+        "corejs": 3
+      }
+    ]
+  ]
+}

.browserslistrc

@@ -0,0 +1,2 @@
+> 0.5%, last 2 versions, Firefox ESR, not dead
+not ie <= 11

.dockerignore

@@ -1,8 +1,69 @@
+# Copy of .gitignore please keep these in sync
+*.css.tmp
+*.egg-info
+*.js.tmp
+*.less.css
+*.mo
+*.po~
+*.py[co]
+*.signed.zip
+*.styl.css
+*-all.css
+*-all.js
+*-min.css
+*-min.js
+.*.sw?
+.cache
+.DS_Store
 .env
+.ipython
+.mysql_history
+.nose*
+.npm/
+.pdbhistory
+.pytest_cache
+.ssh
+.tox/
+.vscode
+backups
+build*.py
+buildx-bake-metadata.json
+deps/*
+docker*.yml
+docker/artifacts/*
+docs/_build
+docs/_gh-pages
+docs/api/_build
+local_settings.py
+MANIFEST
+node_modules
+pip-log.txt
+private/
+.ruff_cache
+settings_local.py*
+settings_local_*.py
+shellng_local.py
+site-static/*
+src/olympia/discovery/strings.jinja2
+static-build/*
+static/css/node_lib/*
+static/js/node_lib/*
+storage
+tmp/*
+
+# Additionally ignore these files from the docker build that are not in .gitignore
+
+.dockerignore
+.github
+docs
+private
+docker-bake.hcl
+docker-compose*.yml
+Dockerfile*
+Makefile-os
+
+# Do not copy .git directory to docker images
 .git
-.cache
-.tox
-deps/
-node_modules/
-storage/
-logs/*
+
+# Ignore generated credentials from google-github-actions/auth
+gha-creds-*.json

.github/CONTRIBUTING.md

@@ -0,0 +1,29 @@
+(contributing)=
+
+# Contributing
+
+If you're not sure this is the correct place to file an issue
+then please file an issue on the [mozilla/addons] project instead.
+
+Before contributing code, please note:
+
+- You agree to license your contributions under the [license].
+- Please ask on the [dev-addons mailing list] before submitting
+  pull-requests for new features or large changes that are not related to
+  existing issues.
+- Follow [PEP8], [jshint] and our other [style guide conventions].
+- Please write tests and read the docs on [addons-server].
+
+Ready to get started? Follow [these steps](https://wiki.mozilla.org/Add-ons/Contribute/Code).
+
+**Note to staff:** If you come across a potential "good first bug" for contributors, please tag it with "**maybe good first bug**". The community team [triages](https://wiki.mozilla.org/Add-ons/Contribute/Goodfirstbugs_triage) these every other week to ensure they have mentors assigned, onboarding information, and basic steps to get started. This gives new contributors a better experience when they pick a "good first bug" to work on.
+
+Thank you for contributing!
+
+[addons-server]: https://addons-server.readthedocs.io/en/latest/
+[dev-addons mailing list]: https://mail.mozilla.org/listinfo/dev-addons
+[jshint]: http://www.jshint.com/
+[license]: https://github.com/mozilla/addons-server/blob/master/LICENSE
+[mozilla/addons]: https://github.com/mozilla/addons/issues/new
+[pep8]: https://www.python.org/dev/peps/pep-0008/
+[style guide conventions]: https://mozweb.readthedocs.io/en/latest/

.github/PULL_REQUEST_TEMPLATE.md

@@ -1,15 +1,43 @@
+Fixes: mozilla/addons#ISSUENUM
+
+<!--
 Thanks for opening a Pull Request (PR), here's a few guidelines as to what we need in your PR before we review it.
+-->
+
+### Description
+
+<!--
+Your PR will be squashed when merged so the 1st commit must contain a descriptive and concise summary of the change.
+Additional details should be added in the description. If your change is simple enough to summarize in the commit, or
+if it is not relevant for your PR, remove this section.
+-->
+
+### Context
+
+<!--
+Often a pull request contains changes that are not fully self explanatory. Maybe this PR is a part of a series,
+or maybe it is a partial change now with a more ambitious plan for the future. Add this additional context here.
+If it is not relevant for your PR, remove this section.
+-->
+
+### Testing
+
+<!--
+Your change must be related to an existing, open issue. This issue should contain testing instructions.
+Often, the testing info in the issue is higher level, geared towards a user or QA experience.
+Here you can provide information for a developer verifying this PR. Get technical.
+If it is not relevant to your PR, remove this section.
+-->
+
+### Checklist
 
+<!--
+Here's a few guidelines as to what we need in your PR before we review it.
 Please delete anything that isn't relevant to your patch.
+-->
 
-* [ ] This PR relates to an existing open issue and there are no existing
-      PRs open for the same issue.
-* [ ] Add `Fixes #ISSUENUM` at the top of your PR.
-* [ ] Add a description of the changes introduced in this PR.
-* [ ] The change has been successfully run locally.
-* [ ] Add tests to cover the changes added in this PR.
-* [ ] Add before and after screenshots (Only for changes that impact the UI).
-
-Once you have met the above requirements please replace this section with
-a `Fixes #ISSUENUM` linking to the issue fixed by this PR along with an
-explanation of the changes. Thanks for your contribution!
+- [ ] Add `#ISSUENUM` at the top of your PR to an existing open issue in the mozilla/addons repository.
+- [ ] Successfully verified the change locally.
+- [ ] The change is covered by automated tests, or otherwise indicated why doing so is unnecessary/impossible.
+- [ ] Add before and after screenshots (Only for changes that impact the UI).
+- [ ] Add or update relevant [docs](../docs/) reflecting the changes made.

.github/actions/build-docker/action.yml

@@ -0,0 +1,84 @@
+name: 'Docker Build Action'
+description: 'Build the docker image'
+inputs:
+  registry:
+    required: true
+    description: The registry to tag the image with
+  image:
+    required: true
+    description: The image to tag the image with
+  version:
+    required: true
+    description: The image version to tag with
+  push:
+    required: false
+    description: Push the image?
+    default: 'false'
+
+outputs:
+  tag:
+    description: The docker tag of the built image
+    value: ${{ steps.build_meta.outputs.tag }}
+  version:
+    description: The docker version of the built image
+    value: ${{ steps.meta.outputs.version }}
+  digest:
+    description: The docker build digest of the built image
+    value: ${{ steps.build_meta.outputs.digest }}
+
+runs:
+  using: 'composite'
+  steps:
+    - name: Context
+      id: context
+      shell: bash
+      run: |
+        git_repo_url="${{ github.server_url }}/${{ github.repository }}"
+
+        echo "git_build_url=$git_repo_url/actions/runs/${{ github.run_id }}" >> $GITHUB_OUTPUT
+        echo "git_sha=${{ github.sha }}" >> $GITHUB_OUTPUT
+        echo "metadata_file=buildx-bake-metadata.json" >> $GITHUB_OUTPUT
+
+        cat $GITHUB_OUTPUT
+
+    - name: Docker meta
+      id: meta
+      uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804
+      with:
+        bake-target: web
+        images: ${{ inputs.registry }}/${{ inputs.image }}
+        tags: |
+          # use raw tag to allow the calling workflow to define the version of the image
+          # and to prevent multiple tags from being associated with a build
+          type=raw,value=${{ inputs.version }}
+
+    - name: Build Image
+      id: build
+      shell: bash
+      env:
+        # These values are irrelevant for local builds, so don't include them
+        # in the make command directly but set them on the environment to be picked up.
+        DOCKER_TAGS_FILE: ${{ steps.meta.outputs.bake-file-tags }}
+        DOCKER_ANNOTATIONS_FILE: ${{ steps.meta.outputs.bake-file-annotations }}
+        DOCKER_METADATA_FILE: ${{ steps.context.outputs.metadata_file }}
+        DOCKER_PUSH: ${{ inputs.push }}
+        version: ${{ steps.meta.outputs.version }}
+        git_sha: ${{ steps.context.outputs.git_sha }}
+        git_build_url: ${{ steps.context.outputs.git_build_url }}
+      run: |
+        make build \
+          DOCKER_VERSION="$version" \
+          DOCKER_COMMIT="$git_sha" \
+          DOCKER_BUILD="$git_build_url"
+
+    - name: Get image digest
+      id: build_meta
+      shell: bash
+      env:
+        metadata_file: ${{ steps.context.outputs.metadata_file }}
+      run: |
+        metadata=$(cat $metadata_file)
+        echo "digest=$(echo $metadata | jq -r '.web."containerimage.digest"')" >> $GITHUB_OUTPUT
+        echo "tag=$(echo $metadata | jq -r '.web."image.name"')" >> $GITHUB_OUTPUT
+        cat $GITHUB_OUTPUT
+

.github/actions/run-docker/action.yml

@@ -0,0 +1,72 @@
+name: 'Docker Run Action'
+description: 'Run a command in a new container'
+inputs:
+  version:
+    description: 'The version of the image to run. '
+    required: true
+    default: 'local'
+  digest:
+    description: 'The build digest of the image to run. Overrides version.'
+    required: true
+    default: ''
+  run:
+    description: 'Run command in container'
+    required: true
+  logs:
+    description: 'Show logs'
+    required: false
+  skip_data_seed:
+    description: 'Skip data backup'
+    required: false
+    default: 'true'
+  target:
+    description: 'Docker target to run (development|production)'
+    required: false
+    default: 'production'
+  deps:
+    description: 'Which dependencies to install at runtime? (development|production)'
+    required: false
+    default: 'production'
+
+runs:
+  using: 'composite'
+  steps:
+    - name: Run Docker Container
+      id: run
+      continue-on-error: true
+      shell: bash
+      env:
+        version: ${{ inputs.version }}
+        digest: ${{ inputs.digest }}
+        target: ${{ inputs.target }}
+        deps: ${{ inputs.deps }}
+        skip_data_seed: ${{ inputs.skip_data_seed }}
+        run: ${{ inputs.run }}
+      run: |
+        # Start the specified services
+        make up \
+          DOCKER_VERSION="${version}" \
+          DOCKER_DIGEST="${digest}" \
+          DOCKER_TARGET="${target}" \
+          OLYMPIA_UID="$(id -u)" \
+          OLYMPIA_DEPS="${deps}" \
+          SKIP_DATA_SEED="${skip_data_seed}" \
+          DOCKER_WAIT="true"
+
+        docker compose exec --user olympia web bash -c "${run}"
+
+    - name: Post Run (logs and exit code)
+      if: always()
+      shell: bash
+      env:
+        logs: ${{ inputs.logs }}
+        outcome: ${{ steps.run.outcome }}
+      run: |
+        if [[ "$logs" == "true" ]]; then
+          docker compose logs
+        fi
+
+        # If the run command failed, exit with a non-zero exit code
+        if [ "$outcome" != 'success' ]; then
+          exit 1
+        fi