Merge branch 'main' into dependabot/npm_and_yarn/changesets/cli-2.29.7

Author: siddharthkp

.changeset/cyan-carrots-boil.md

@@ -16,7 +16,7 @@ jobs:
     name: Check for changeset
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: 'Check for changeset'
         uses: brettcannon/check-for-changed-files@v1
         with:

.github/workflows/check-for-changeset.yml

@@ -9,7 +9,7 @@ jobs:
   format:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Use Node.js
         uses: actions/setup-node@v4
         with:
@@ -21,7 +21,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Use Node.js
         uses: actions/setup-node@v4
         with:
@@ -33,7 +33,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Use Node.js
         uses: actions/setup-node@v4
         with:

.github/workflows/ci.yml

@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           # This makes Actions fetch all Git history so that Changesets can generate changelogs with the correct commits
           fetch-depth: 0

.github/workflows/release.yml

@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           # This makes Actions fetch all Git history so that Changesets can generate changelogs with the correct commits
           fetch-depth: 0

.github/workflows/release_canary.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           # This makes Actions fetch all Git history so that Changesets can generate changelogs with the correct commits
           fetch-depth: 0

.github/workflows/release_candidate.yml

@@ -14,6 +14,6 @@ on:
 jobs:
   release-tracking:
     name: Release Tracking
-    uses: primer/.github/.github/workflows/release_tracking.yml@v2.2.0
+    uses: primer/.github/.github/workflows/release_tracking.yml@v2.2.1
     secrets:
       datadog_api_key: ${{ secrets.DATADOG_API_KEY }}

.github/workflows/release_tracking.yml

@@ -1,5 +1,23 @@
 # eslint-plugin-primer-react
 
+## 8.4.0
+
+### Minor Changes
+
+- [#437](https://github.com/primer/eslint-plugin-primer-react/pull/437) [`9270d40`](https://github.com/primer/eslint-plugin-primer-react/commit/9270d40d73bd046e21156b68ef6bd13a20008585) Thanks [@copilot-swe-agent](https://github.com/apps/copilot-swe-agent)! - Add spread-props-first rule to ensure spread props come before other props
+
+## 8.3.0
+
+### Minor Changes
+
+- [#426](https://github.com/primer/eslint-plugin-primer-react/pull/426) [`b83f467`](https://github.com/primer/eslint-plugin-primer-react/commit/b83f46761945d73dfea6c1381ff776e9f50e0bd2) Thanks [@siddharthkp](https://github.com/siddharthkp)! - use-styled-react-import: Add ThemeProvider, BaseStyles and useTheme. Allow theme components to be imported from styled-react without sx
+
+## 8.2.1
+
+### Patch Changes
+
+- [#410](https://github.com/primer/eslint-plugin-primer-react/pull/410) [`f3e47b1`](https://github.com/primer/eslint-plugin-primer-react/commit/f3e47b1a75ad27aceaed89d50175cc59754c8b9d) Thanks [@jonrohan](https://github.com/jonrohan)! - Fix for deprecated and experimental import paths
+
 ## 8.2.0
 
 ### Minor Changes

CHANGELOG.md

@@ -0,0 +1,66 @@
+# Ensure spread props come before other props (spread-props-first)
+
+Spread props should come before other named props to avoid unintentionally overriding props. When spread props are placed after named props, they can override the named props, which is often unintended and can lead to UI bugs.
+
+## Rule details
+
+This rule enforces that all spread props (`{...rest}`, `{...props}`, etc.) come before any named props in JSX elements.
+
+👎 Examples of **incorrect** code for this rule:
+
+```jsx
+/* eslint primer-react/spread-props-first: "error" */
+
+// ❌ Spread after named prop
+<Example className="..." {...rest} />
+
+// ❌ Spread in the middle
+<Example className="..." {...rest} id="foo" />
+
+// ❌ Multiple spreads after named props
+<Example className="..." {...rest} {...other} />
+```
+
+👍 Examples of **correct** code for this rule:
+
+```jsx
+/* eslint primer-react/spread-props-first: "error" */
+
+// ✅ Spread before named props
+<Example {...rest} className="..." />
+
+// ✅ Multiple spreads before named props
+<Example {...rest} {...other} className="..." />
+
+// ✅ Only spread props
+<Example {...rest} />
+
+// ✅ Only named props
+<Example className="..." id="foo" />
+```
+
+## Why this matters
+
+Placing spread props after named props can cause unexpected behavior:
+
+```jsx
+// ❌ Bad: className might get overridden by rest
+<Button className="custom-class" {...rest} />
+
+// If rest = { className: "other-class" }
+// Result: className="other-class" (custom-class is lost!)
+
+// ✅ Good: className will override any className in rest
+<Button {...rest} className="custom-class" />
+
+// If rest = { className: "other-class" }
+// Result: className="custom-class" (as intended)
+```
+
+## Options
+
+This rule has no configuration options.
+
+## When to use autofix
+
+This rule includes an autofix that will automatically reorder your props to place all spread props first. The autofix is safe to use as it preserves the order of spreads relative to each other and the order of named props relative to each other.