Merge branch 'main' into aaronpowell-cautious-lamp

.github/plugin/marketplace.json

@@ -280,6 +280,12 @@
         "sha": "0c2716ca4f28df375529c67b4504b41f7bd29a66"
       }
     },
+    {
+      "name": "chat-cards",
+      "source": "plugins/chat-cards",
+      "description": "Interactive card deck in a GHCP canvas: tab cards, tables, SVG charts, show/hide sections, numbered outlines, rendered markdown documents, video clips, and forms whose submissions come back to the conversation as prompts.",
+      "version": "0.1.0"
+    },
     {
       "name": "chrome-devtools-plugin",
       "description": "Reliable automation, in-depth debugging, and performance analysis in Chrome using Chrome DevTools and Puppeteer.",
@@ -730,7 +736,7 @@
       "name": "gem-team",
       "source": "plugins/gem-team",
       "description": "Self-Learning Multi-agent orchestration framework for spec-driven development and automated verification. With smarter tool calling and leaner context.",
-      "version": "1.102.0"
+      "version": "1.109.0"
     },
     {
       "name": "gesture-review",
@@ -1013,7 +1019,7 @@
     {
       "name": "modernize-java",
       "description": "GitHub Copilot modernization – Java Upgrade CLI Plugin helps you upgrade Java applications from the command line. It brings intelligent modernization capabilities to your terminal and CI/CD pipelines: analyze your project and generate an upgrade plan, automatically transform your codebase, fix build issues, validate against known CVEs, and output a detailed summary of file changes and updated dependencies.",
-      "version": "1.22.0",
+      "version": "1.23.0",
       "author": {
         "name": "microsoft",
         "url": "https://github.com/microsoft/modernize-java"
@@ -1031,8 +1037,8 @@
         "source": "github",
         "repo": "microsoft/modernize-java",
         "path": "plugins/modernize-java",
-        "ref": "1.22.0",
-        "sha": "ef5367b446566bdc90960deeb40def63f9e7024e"
+        "ref": "1.23.0",
+        "sha": "5ccc2ad4011314602e1b80f0b818c95bcf198f67"
       }
     },
     {
@@ -1282,8 +1288,8 @@
     {
       "name": "signals-dashboard",
       "source": "plugins/signals-dashboard",
-      "description": "Real-time Workshop dashboard with agent signals, honesty calibration, and cost-aware repo or connected desk launch profiles.",
-      "version": "0.2.0"
+      "description": "Real-time Workshop dashboard with agent signals, honesty calibration, cost-aware desk profiles, and fail-closed Local Delegation.",
+      "version": "0.3.0"
     },
     {
       "name": "site-studio",
@@ -1330,7 +1336,7 @@
     {
       "name": "sonarqube",
       "description": "SonarQube is the AI code quality and security verification platform used by millions of developers to catch bugs, vulnerabilities, and leaked secrets. This plugin enforces those standards in the coding loop: 7,500+ distinct issue types, secrets scanning, agentic analysis, and quality gates across 40+ languages.",
-      "version": "2.3.0",
+      "version": "2.5.0",
       "author": {
         "name": "Sonar",
         "url": "https://sonarsource.com/"
@@ -1348,7 +1354,7 @@
       "source": {
         "source": "github",
         "repo": "SonarSource/sonarqube-agent-plugins",
-        "ref": "2.3.0"
+        "ref": "2.5.0"
       }
     },
     {
@@ -1547,7 +1553,7 @@
     {
       "name": "upgrade-agent",
       "description": "AI-powered upgrade assistant for upgrading and migrating applications. Helps modernize legacy code and upgrade .NET applications to current frameworks.",
-      "version": "1.1.290",
+      "version": "1.1.441",
       "author": {
         "name": "Microsoft",
         "url": "https://www.microsoft.com"
@@ -1566,7 +1572,8 @@
         "source": "github",
         "repo": "microsoft/upgrade-agent-plugins",
         "path": "plugins/upgrade-agent",
-        "sha": "559f6fea2deea78fb5adf2cfacba2a5151a5fa7f"
+        "ref": "v1.1.441",
+        "sha": "f8abab778cfb5b57a3c745d540631b7aab15d5b3"
       }
     },
     {

.github/workflows/build-website.yml

@@ -1,47 +0,0 @@
-name: Build Website
-
-on:
-  pull_request:
-    branches: [main]
-    paths:
-      - "website/**"
-      - "agents/**"
-      - "skills/**"
-      - "plugins/**"
-      - "instructions/**"
-      - "hooks/**"
-      - "workflows/**"
-      - "extensions/**"
-      - "cookbook/**"
-      - "eng/**"
-      - ".all-contributorsrc"
-      - "package.json"
-      - "package-lock.json"
-
-permissions:
-  contents: read
-
-jobs:
-  build:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
-        with:
-          fetch-depth: 0 # Full history needed for git-based last updated dates
-
-      - name: Setup Node.js
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
-        with:
-          node-version: "22"
-          cache: "npm"
-
-      - name: Install root dependencies
-        run: npm ci
-
-      - name: Install website dependencies
-        run: npm ci
-        working-directory: ./website
-
-      - name: Build Astro site
-        run: npm run website:build

.github/workflows/contributor-check.yml

@@ -270,6 +270,7 @@ jobs:
     permissions:
       contents: read
       pull-requests: read
+      issues: read
     steps:
       - name: Setup Python
         uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0

.github/workflows/deploy-website-preview.yml

@@ -0,0 +1,86 @@
+# GitHub Pages preview deployment workflow
+# Builds the Astro website and deploys a preview for pull requests
+
+name: Deploy preview website to GitHub Pages
+
+on:
+  pull_request:
+    branches: [main]
+    paths:
+      - "website/**"
+      - "agents/**"
+      - "skills/**"
+      - "plugins/**"
+      - "instructions/**"
+      - "hooks/**"
+      - "workflows/**"
+      - ".github/workflows/**"
+      - "extensions/**"
+      - "cookbook/**"
+      - "eng/**"
+      - ".all-contributorsrc"
+      - "package.json"
+      - "package-lock.json"
+
+concurrency:
+  group: pages-preview-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  # Build job
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      checks: read
+      contents: read
+      pages: read
+      pull-requests: read
+    steps:
+      - name: Checkout
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        with:
+          fetch-depth: 0 # Full history needed for git-based last updated dates
+
+      - name: Setup Node.js
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: "22"
+          cache: "npm"
+
+      - name: Install root dependencies
+        run: npm ci
+
+      - name: Install website dependencies
+        run: npm ci
+        working-directory: ./website
+
+      - name: Build Astro site
+        run: npm run website:build
+
+      - name: Setup Pages
+        if: github.event.pull_request.head.repo.full_name == github.repository # Not a fork
+        uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5.0.0
+
+      - name: Upload artifact
+        if: github.event.pull_request.head.repo.full_name == github.repository # Not a fork
+        uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3.0.1
+        with:
+          path: "./website/dist"
+
+  # Deployment job
+  deploy:
+    if: github.event.pull_request.head.repo.full_name == github.repository # Not a fork
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    runs-on: ubuntu-latest
+    needs: build
+    permissions:
+      pages: write
+      id-token: write
+    steps:
+      - name: Deploy to GitHub Pages
+        id: deployment
+        uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4.0.5
+        with:
+          preview: true