[Sync] Update project files from source repository (d43a344)

[mrz1836]

What Changed

• Updated 2 individual file(s) to synchronize with the source repository
• Synchronized 14 file(s) from directory mappings
• Applied file transformations and updates based on sync configuration
• Brought target repository in line with source repository state at commit 82263a5

Directory Synchronization Details

The following directories were synchronized:

.vscode → .vscode

• Files synced: 0
• Files examined: 4
• Files excluded: 0
• Processing time: 696ms

.github/tech-conventions → .github/tech-conventions

• Files synced: 0
• Files examined: 15
• Files excluded: 0
• Processing time: 3410ms

.github/ISSUE_TEMPLATE → .github/ISSUE_TEMPLATE

• Files synced: 0
• Files examined: 3
• Files excluded: 0
• Processing time: 1175ms

.github/workflows → .github/workflows

• Files synced: 13
• Files examined: 26
• Files excluded: 0
• Processing time: 4841ms

.github/actions → .github/actions

• Files synced: 1
• Files examined: 16
• Files excluded: 0
• Processing time: 2944ms

Performance Metrics

• Files processed: 84 (16 changed, 0 deleted, 68 skipped)
• Files attempted to change: 16 (go-broadcast processing)
• File processing time: 8380ms

Why It Was Necessary

This synchronization ensures the target repository stays up-to-date with the latest changes from the configured source repository. The sync operation identifies and applies only the necessary file changes while maintaining consistency across repositories.

Testing Performed

• Validated sync configuration and file mappings
• Verified file transformations applied correctly
• Confirmed no unintended changes were introduced
• All automated checks and linters passed

Impact / Risk

• Low Risk: Standard sync operation with established patterns
• No Breaking Changes: File updates maintain backward compatibility
• Performance: No impact on application performance
• Dependencies: No dependency changes included in this sync

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[Copilot]

Pull Request Overview

This PR implements comprehensive fork PR handling and security improvements across GitHub Actions workflows. The main purpose is to safely handle pull requests from forked repositories while protecting repository secrets and maintaining secure CI/CD operations.

Key Changes:

• Added fork PR detection logic across multiple workflows with proper null handling for deleted forks
• Implemented security restrictions that skip jobs requiring secrets (security scans, test coverage uploads) for fork PRs
• Enhanced audit logging and commit source tracking in the label sync workflow
• Updated CodeQL action versions from v4.31.1 to v4.31.2

Reviewed Changes

Copilot reviewed 16 out of 16 changed files in this pull request and generated 6 comments.

Show a summary per file

File	Description
.github/workflows/sync-labels.yml	Added security documentation, commit source logging, and enhanced label validation with reserved name checks
.github/workflows/pull-request-management.yml	Added same-repo PR detection job and conditional execution based on fork status
.github/workflows/pull-request-management-fork.yml	New workflow specifically for handling fork PRs with restricted permissions
.github/workflows/fortress.yml	Added fork detection and conditional job execution to skip secret-dependent jobs for fork PRs
.github/workflows/fortress-setup-config.yml	Added fork PR detection outputs and summary messaging
.github/workflows/auto-merge-on-approval.yml	Added fork PR skip logic and improved error handling for auto-merge operations
.github/actions/load-env/action.yml	Added environment variable validation for security
.github/.env.base	Updated tool versions and added fork PR configuration options
.github/labels.yml	Added new "fork-pr" label definition
Multiple fortress completion workflows	Added fork PR status handling in reporting
CodeQL and Scorecard workflows	Version bumps for CodeQL action

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.