Merge remote-tracking branch 'origin/main' into fix/android-text-descender-clipping

Author: TorinAsakura

.flowconfig

@@ -43,16 +43,8 @@ packages/react-native/interface.js
 packages/react-native/flow/
 
 [options]
-enums=true
-experimental.pattern_matching=true
-experimental.allow_variance_keywords=true
-casting_syntax=both
-component_syntax=true
-
 emoji=true
 
-exact_by_default=true
-
 format.bracket_spacing=false
 
 module.file_ext=.js
@@ -73,6 +65,9 @@ module.system.haste.module_ref_prefix=m#
 
 react.runtime=automatic
 
+experimental.deprecated_utilities.excludes=<PROJECT_ROOT>/packages/react-native/Libraries/Renderer/shims/ReactNativeTypes.js
+experimental.deprecated_utilities.excludes=<PROJECT_ROOT>/packages/react-native/Libraries/Renderer/shims/ReactNativeViewConfigRegistry.js
+experimental.deprecated_utilities.excludes=<PROJECT_ROOT>/packages/react-native/src/private/featureflags/ReactNativeFeatureFlags.js
 ban_spread_key_props=true
 
 [lints]
@@ -96,4 +91,4 @@ untyped-import
 untyped-type-import
 
 [version]
-^0.317.0
+^0.318.0

.github/actions/build-npm-package/action.yml

@@ -4,10 +4,6 @@ inputs:
   release-type:
     required: true
     description: The type of release we are building. It could be nightly, release or dry-run
-  gha-npm-token:
-    required: false
-    description: The GHA npm token, required only to publish to npm
-    default: ''
   gradle-cache-encryption-key:
     description: The encryption key needed to store the Gradle Configuration cache
   skip-apple-prebuilts:
@@ -45,6 +41,8 @@ runs:
         cache-encryption-key: ${{ inputs.gradle-cache-encryption-key }}
     - name: Setup node.js
       uses: ./.github/actions/setup-node
+      with:
+        registry-url: 'https://registry.npmjs.org'
     - name: Install dependencies
       uses: ./.github/actions/yarn-install
     - name: Build packages
@@ -53,12 +51,9 @@ runs:
     - name: Build types
       shell: bash
       run: yarn build-types --skip-snapshot
-    # Continue with publish steps
-    - name: Set npm credentials
-      if: ${{ inputs.release-type == 'release' ||
-        inputs.release-type == 'nightly' }}
-      shell: bash
-      run: echo "//registry.npmjs.org/:_authToken=${{ inputs.gha-npm-token }}" > ~/.npmrc
+    # `npm publish` below authenticates via npm Trusted Publishing (OIDC).
+    # The caller (the reusable `publish-npm.yml` workflow) MUST grant
+    # `id-token: write`; this composite action runs inside that job.
     - name: Publish NPM
       shell: bash
       run: |

.github/actions/setup-node/action.yml

@@ -5,6 +5,13 @@ inputs:
     description: 'The node.js version to use'
     required: false
     default: '22.14.0'
+  registry-url:
+    description: |
+      Optional npm registry URL passed through to actions/setup-node. Set on
+      jobs that publish to npm so setup-node writes a `.npmrc` configured to
+      pick up the OIDC-minted token from npm Trusted Publishing.
+    required: false
+    default: ''
 runs:
   using: "composite"
   steps:
@@ -13,3 +20,4 @@ runs:
       with:
         node-version: ${{ inputs.node-version }}
         cache: yarn
+        registry-url: ${{ inputs.registry-url }}

.github/workflows/analyze-pr.yml

@@ -11,7 +11,7 @@ permissions:
 jobs:
   analyze_pr:
     runs-on: ubuntu-latest
-    if: github.repository == 'facebook/react-native'
+    if: github.repository == 'react/react-native'
     steps:
       - name: Check out main branch
         uses: actions/checkout@v6

.github/workflows/api-changes.yml

@@ -10,7 +10,7 @@ permissions:
 jobs:
   api_changes:
     runs-on: ubuntu-latest
-    if: github.repository == 'facebook/react-native'
+    if: github.repository == 'react/react-native'
     steps:
       - name: Check out main branch
         uses: actions/checkout@v6

.github/workflows/cache-reaper.yml

@@ -8,7 +8,7 @@ on:
 
 jobs:
   cache-cleaner:
-    if: github.repository == 'facebook/react-native'
+    if: github.repository == 'react/react-native'
     runs-on: ubuntu-latest
     env:
       GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/check-for-reproducer.yml

@@ -8,7 +8,7 @@ jobs:
   check-for-reproducer:
     runs-on: ubuntu-latest
     if: |
-      github.repository == 'facebook/react-native' && github.event.issue.pull_request == null && github.event.issue.state == 'open' && !contains(github.event.issue.labels.*.name, ':open_umbrella: Umbrella')
+      github.repository == 'react/react-native' && github.event.issue.pull_request == null && github.event.issue.state == 'open' && !contains(github.event.issue.labels.*.name, ':open_umbrella: Umbrella')
     steps:
       - uses: actions/checkout@v6
       - uses: actions/github-script@v8

.github/workflows/close-pr.yml

@@ -9,7 +9,7 @@ permissions:
 jobs:
   comment-and-label:
     runs-on: ubuntu-latest
-    if: github.repository == 'facebook/react-native'
+    if: github.repository == 'react/react-native'
     steps:
       - uses: actions/github-script@v8
         with:

.github/workflows/create-release.yml

@@ -19,7 +19,7 @@ on:
 
 jobs:
   create_release:
-    if: github.repository == 'facebook/react-native'
+    if: github.repository == 'react/react-native'
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
@@ -28,21 +28,6 @@ jobs:
           token: ${{ secrets.REACT_NATIVE_BOT_GITHUB_TOKEN }}
           fetch-depth: 0
           fetch-tags: 'true'
-      - name: Verify NPM token
-        run: |
-          if [[ -z "$GHA_NPM_TOKEN" ]]; then
-            echo "⚠️ No NPM token found. Skipping validation."
-            exit 0
-          fi
-          echo "//registry.npmjs.org/:_authToken=$GHA_NPM_TOKEN" > ~/.npmrc
-          if ! npm whoami > /dev/null 2>&1; then
-            echo "❌ NPM token is invalid or expired. Aborting release."
-            exit 1
-          fi
-          echo "✅ NPM token is valid ($(npm whoami))"
-          rm -f ~/.npmrc
-        env:
-          GHA_NPM_TOKEN: ${{ secrets.GHA_NPM_TOKEN }}
       - name: Check if on stable branch
         id: check_stable_branch
         run: |

.github/workflows/e2e-android-templateapp.yml

@@ -66,7 +66,7 @@ jobs:
 
           echo "Feed maven local to gradle.properties"
           cd /tmp/RNTestProject
-          echo "\nreact.internal.mavenLocalRepo=$MAVEN_LOCAL" >> android/gradle.properties
+          echo -e "\nreact.internal.mavenLocalRepo=$MAVEN_LOCAL" >> android/gradle.properties
 
           # Build
           cd android