Merge remote-tracking branch 'origin/master' into automation/master-sync/feature/breakingchanges

# Conflicts:
#	build/test-scripts/ios-uitest-run.sh

Author: github-actions[bot]

.github/workflows/claude-code-review.yml

@@ -89,7 +89,7 @@ jobs:
         # blocks exfil URL patterns (`gh ... view https://attacker/<secret>`),
         # run-summary disabled by default, and ignoring issues/comments edited
         # after trigger.
-        uses: anthropics/claude-code-action@428971d2ecd6e3a7cb0ee0da2a3a8b33fdb3678d # v1.0.157
+        uses: anthropics/claude-code-action@6c0083bb7289c31716797a039b6367b3079cc46e # v1.0.162
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_CODEREVIEW_KEY }}
           # Use the job's scoped Actions token instead of OIDC/GitHub App auth,

.github/workflows/master-sync.yml

@@ -61,7 +61,7 @@ jobs:
       branches: ${{ steps.list.outputs.branches }}
       count: ${{ steps.list.outputs.count }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: master
           fetch-depth: 0
@@ -125,7 +125,7 @@ jobs:
       # Swap-seam: SYNC_BOT_TOKEN (PAT/App) wins if present, else the default token.
       SYNC_TOKEN: ${{ secrets.SYNC_BOT_TOKEN || github.token }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           token: ${{ env.SYNC_TOKEN }}

build/test-scripts/ios-uitest-run.sh

@@ -1,4 +1,31 @@
 #!/bin/bash
+# ===========================================================================
+# ios-uitest-run.sh — CI (Azure DevOps) entry point that runs the SamplesApp
+# UI test suites against an iOS Simulator on a macOS hosted agent.
+#
+# What it does:
+#   1. Picks the NUnit test filter from $UITEST_SNAPSHOTS_ONLY /
+#      $UITEST_AUTOMATED_GROUP (snapshot groups, automated groups 1-5,
+#      RuntimeTests, Benchmarks).
+#   2. Waits for the target simulator runtime/device to exist and boots it.
+#   3. Installs the pre-built SamplesApp bundle on the simulator with `idb`
+#      (Meta's iOS Development Bridge, https://github.com/facebook/idb):
+#      `xcrun simctl install` was historically unreliable for this
+#      (see microsoft/appcenter#2389), idb is the dependable path.
+#   4. Runs the tests through the NUnit console, transforms the results and
+#      maintains the failed-tests re-run list for retry stages.
+#
+# Tooling / supply-chain notes (idb):
+#   - `idb-companion` comes from Meta's Homebrew tap `facebook/fb`
+#     (github.com/facebook/homebrew-fb). The formula pins the binary artifact
+#     of facebook/idb release v1.1.8 together with its sha256, so what gets
+#     installed is reproducible byte-for-byte; the tap itself has been
+#     dormant since 2022.
+#   - Newer Homebrew refuses formulas from third-party taps unless explicitly
+#     trusted (`brew trust`) — see the install section below.
+#   - `fb-idb` (the Python client) is installed from PyPI via pipx, pinned to
+#     Python 3.12 (asyncio breakage under 3.14) but not version-pinned.
+# ===========================================================================
 set -euo pipefail
 IFS=$'\n\t'
 
@@ -172,8 +199,21 @@ then
 	# formulae without an explicit trust, so trust facebook/fb and install the
 	# fully-qualified formula (a bare "idb-companion" now resolves to the wrong cask).
 	brew tap facebook/fb >/dev/null 2>&1 || true
+<<<<<<< HEAD
 	brew trust facebook/fb >/dev/null 2>&1 || true
 	brew list --versions idb-companion >/dev/null 2>&1 || brew install facebook/fb/idb-companion
+=======
+	# Newer Homebrew on the runner images gates third-party taps: installing
+	# idb-companion fails with "Refusing to load formula facebook/fb/idb-companion
+	# from untrusted tap facebook/fb" unless explicitly trusted. Trust only the
+	# formula we need (least privilege); fall back to tap-level trust for brew
+	# versions that only support that form. Older brews have no `trust` command
+	# at all — best effort, the install below still surfaces any real failure.
+	brew trust --formula facebook/fb/idb-companion >/dev/null 2>&1 \
+		|| brew trust facebook/fb >/dev/null 2>&1 \
+		|| true
+	brew list --versions idb-companion >/dev/null 2>&1 || brew install idb-companion
+>>>>>>> origin/master
 
 	# 3) Install fb-idb under Python 3.12
 	pipx uninstall fb-idb >/dev/null 2>&1 || true

doc/import_external_docs.ps1

@@ -10,15 +10,15 @@ Set-PSDebug -Trace 1
 # Each entry: repo name -> @{ ref = '<commit|branch>'; dest = '<sub-folder>'? }
 $external_docs = @{
     # use either commit, or branch name to use its latest commit
-    "uno.wasm.bootstrap" = @{ ref="a73ee0878c47fa70198e6f5872a8c1bd9af143e5" }  #latest main commit
+    "uno.wasm.bootstrap" = @{ ref="1e094106842f6e7f43075f06d2a0354077da3a0f" }  #latest main commit
     "uno.themes"         = @{ ref="5337d0bbced5b917a5e373d4206c3f34fdeefa9b" }  #latest master commit
     "uno.toolkit.ui"     = @{ ref="2fb1f77adb6b552bb8c86880837048d9fc0c279b" }  #latest main commit
     "uno.check"          = @{ ref="da57de1d9dd4d3ef47623a80999d5df1b5ffcb10" }  #latest main commit
     "uno.xamlmerge.task" = @{ ref="081dcfa44b5ce24ac0948675e5ee6b781e2107bc" }  #latest main commit
     "figma-docs"         = @{ ref="842a2792282b88586a337381b2b3786e779973b4" }  #latest main commit
     "uno.resizetizer"    = @{ ref="e422ad9f26cf21ed02c339e717e0dd0189bb566e" }  #latest main commit
     "uno.uitest"         = @{ ref="94d027295b779e28064aebf99aeaee2b393ad558" }  #latest master commit
-    "uno.extensions"     = @{ ref="571a3686982390a9a626a9ad87509197ab5a9aa3" }  #latest main commit
+    "uno.extensions"     = @{ ref="b781901429a5061db6c14d3e936dc5aa58e4c205" }  #latest main commit
     "workshops"          = @{ ref="3515c29e03dea36cf2206d797d1bf9f8620370e3" }  #latest master commit
     "uno.samples"        = @{ ref="e593c241f9d00eb21ca20f67fd3639e1b12f8dd9" }  #latest master commit
     "uno.chefs"          = @{ ref="d54bceea13406bca23e870a89ecee469813c69b3" }  #latest main commit