@pulumi/github 6.0.0-alpha.1709363818 → 6.0.0-alpha.1768023817

package/types/output.d.ts

@@ -1,4 +1,50 @@
 import * as outputs from "../types/output";
+export interface ActionsHostedRunnerImage {
+    /**
+     * The image ID. For GitHub-owned images, use numeric IDs like "2306" for Ubuntu Latest 24.04. To get available images, use the GitHub API: `GET /orgs/{org}/actions/hosted-runners/images/github-owned`.
+     */
+    id: string;
+    /**
+     * The size of the image in gigabytes.
+     */
+    sizeGb: number;
+    /**
+     * The image source. Valid values are "github", "partner", or "custom". Defaults to "github".
+     */
+    source?: string;
+}
+export interface ActionsHostedRunnerMachineSizeDetail {
+    /**
+     * Number of CPU cores.
+     */
+    cpuCores: number;
+    /**
+     * Machine size identifier.
+     */
+    id: string;
+    /**
+     * Amount of memory in gigabytes.
+     */
+    memoryGb: number;
+    /**
+     * Amount of storage in gigabytes.
+     */
+    storageGb: number;
+}
+export interface ActionsHostedRunnerPublicIp {
+    /**
+     * Whether this IP range is enabled.
+     */
+    enabled: boolean;
+    /**
+     * Subnet length.
+     */
+    length: number;
+    /**
+     * IP address prefix.
+     */
+    prefix: string;
+}
 export interface ActionsOrganizationPermissionsAllowedActionsConfig {
     /**
      * Whether GitHub-owned actions are allowed in the organization.
@@ -112,13 +158,17 @@ export interface BranchProtectionV3RequiredPullRequestReviews {
      */
     dismissalUsers?: string[];
     /**
-     * @deprecated Use enforce_admins instead
+     * @deprecated Use enforceAdmins instead
      */
     includeAdmins?: boolean;
     /**
      * Require an approved review in pull requests including files with a designated code owner. Defaults to `false`.
      */
     requireCodeOwnerReviews?: boolean;
+    /**
+     * Require that the most recent push must be approved by someone other than the last pusher.  Defaults to `false`
+     */
+    requireLastPushApproval?: boolean;
     /**
      * Require x number of approvals to satisfy branch protection requirements. If this is specified it must be a number between 0-6. This requirement matches GitHub's API, see the upstream [documentation](https://developer.github.com/v3/repos/branches/#parameters-1) for more information.
      */
@@ -142,7 +192,7 @@ export interface BranchProtectionV3RequiredStatusChecks {
     /**
      * The list of status checks to require in order to merge into this branch. No status checks are required by default. Checks should be strings containing the context and appId like so "context:app_id".
      */
-    checks?: string[];
+    checks: string[];
     /**
      * [**DEPRECATED**] (Optional) The list of status checks to require in order to merge into this branch. No status checks are required by default.
      *
@@ -153,9 +203,9 @@ export interface BranchProtectionV3RequiredStatusChecks {
      *
      * @deprecated GitHub is deprecating the use of `contexts`. Use a `checks` array instead.
      */
-    contexts?: string[];
+    contexts: string[];
     /**
-     * @deprecated Use enforce_admins instead
+     * @deprecated Use enforceAdmins instead
      */
     includeAdmins?: boolean;
     /**
@@ -180,6 +230,26 @@ export interface BranchProtectionV3Restrictions {
      */
     users?: string[];
 }
+export interface EnterpriseActionsPermissionsAllowedActionsConfig {
+    /**
+     * Whether GitHub-owned actions are allowed in the organization.
+     */
+    githubOwnedAllowed: boolean;
+    /**
+     * Specifies a list of string-matching patterns to allow specific action(s). Wildcards, tags, and SHAs are allowed. For example, monalisa/octocat@*, monalisa/octocat@v2, monalisa/*."
+     */
+    patternsAlloweds?: string[];
+    /**
+     * Whether actions in GitHub Marketplace from verified creators are allowed. Set to true to allow all GitHub Marketplace actions by verified creators.
+     */
+    verifiedAllowed?: boolean;
+}
+export interface EnterpriseActionsPermissionsEnabledOrganizationsConfig {
+    /**
+     * List of organization IDs to enable for GitHub Actions.
+     */
+    organizationIds: number[];
+}
 export interface GetActionsEnvironmentSecretsSecret {
     /**
      * Timestamp of the secret creation
@@ -374,7 +444,7 @@ export interface GetCollaboratorsCollaborator {
      */
     organizationsUrl: string;
     /**
-     * The permission of the collaborator.
+     * Filter collaborators returned by their permission. Can be one of: `pull`, `triage`, `push`, `maintain`, `admin`.  Defaults to not doing any filtering on permission.
      */
     permission: string;
     /**
@@ -516,6 +586,100 @@ export interface GetOrganizationIpAllowListIpAllowList {
      */
     updatedAt: string;
 }
+export interface GetOrganizationRepositoryRolesRole {
+    /**
+     * The system role from which this role inherits permissions.
+     */
+    baseRole: string;
+    /**
+     * The description of the organization repository role.
+     */
+    description: string;
+    /**
+     * The name of the organization repository role.
+     */
+    name: string;
+    /**
+     * The permissions included in this role.
+     */
+    permissions: string[];
+    /**
+     * The ID of the organization repository role.
+     */
+    roleId: number;
+}
+export interface GetOrganizationRoleTeamsTeam {
+    /**
+     * The name of the team.
+     */
+    name: string;
+    /**
+     * The permission that the team will have for its repositories.
+     */
+    permission: string;
+    /**
+     * The Slug of the team name.
+     */
+    slug: string;
+    /**
+     * The ID of the team.
+     */
+    teamId: number;
+}
+export interface GetOrganizationRoleUsersUser {
+    /**
+     * The login for the GitHub user account.
+     */
+    login: string;
+    /**
+     * The ID of the user.
+     */
+    userId: number;
+}
+export interface GetOrganizationRolesRole {
+    /**
+     * The system role from which this role inherits permissions.
+     */
+    baseRole: string;
+    /**
+     * The description of the organization role.
+     */
+    description: string;
+    /**
+     * The name of the organization role.
+     */
+    name: string;
+    /**
+     * A list of permissions included in this role.
+     */
+    permissions: string[];
+    /**
+     * The ID of the organization role.
+     */
+    roleId: number;
+    /**
+     * The source of this role; one of `Predefined`, `Organization`, or `Enterprise`.
+     */
+    source: string;
+}
+export interface GetOrganizationSecurityManagersTeam {
+    /**
+     * Unique identifier of the team.
+     */
+    id: number;
+    /**
+     * Name of the team.
+     */
+    name: string;
+    /**
+     * Permission that the team will have for its repositories.
+     */
+    permission: string;
+    /**
+     * Name based identifier of the team.
+     */
+    slug: string;
+}
 export interface GetOrganizationTeamSyncGroupsGroup {
     /**
      * The description of the IdP group.
@@ -532,11 +696,11 @@ export interface GetOrganizationTeamSyncGroupsGroup {
 }
 export interface GetOrganizationTeamsTeam {
     /**
-     * the team's description.
+     * The team's description.
      */
     description: string;
     /**
-     * the ID of the team.
+     * The ID of the team.
      */
     id: number;
     /**
@@ -544,21 +708,31 @@ export interface GetOrganizationTeamsTeam {
      */
     members: string[];
     /**
-     * the team's full name.
+     * The team's full name.
      */
     name: string;
     /**
-     * the Node ID of the team.
+     * The Node ID of the team.
      */
     nodeId: string;
     /**
-     * the parent team.
+     * (**DEPRECATED**) The parent team, use `parentTeamId` or `parentTeamSlug` instead.
+     *
+     * @deprecated Use parentTeamId and parentTeamSlug instead.
      */
     parent: {
         [key: string]: string;
     };
     /**
-     * the team's privacy type.
+     * The ID of the parent team, if there is one.
+     */
+    parentTeamId: string;
+    /**
+     * The slug of the parent team, if there is one.
+     */
+    parentTeamSlug: string;
+    /**
+     * The team's privacy type.
      */
     privacy: string;
     /**
@@ -566,7 +740,7 @@ export interface GetOrganizationTeamsTeam {
      */
     repositories: string[];
     /**
-     * the slug of the team.
+     * The slug of the team.
      */
     slug: string;
 }
@@ -658,6 +832,16 @@ export interface GetRepositoryBranchesBranch {
      */
     protected: boolean;
 }
+export interface GetRepositoryCustomPropertiesProperty {
+    /**
+     * Name of the property
+     */
+    propertyName: string;
+    /**
+     * Value of the property
+     */
+    propertyValues: string[];
+}
 export interface GetRepositoryDeployKeysKey {
     /**
      * Key id
@@ -686,6 +870,16 @@ export interface GetRepositoryDeploymentBranchPoliciesDeploymentBranchPolicy {
      */
     name: string;
 }
+export interface GetRepositoryEnvironmentDeploymentPoliciesPolicy {
+    /**
+     * The pattern that branch or tag names must match in order to deploy to the environment.
+     */
+    pattern: string;
+    /**
+     * Type of the policy; this could be `branch` or `tag`.
+     */
+    type: string;
+}
 export interface GetRepositoryEnvironmentsEnvironment {
     /**
      * Environment name.
@@ -926,6 +1120,7 @@ export interface GetRepositoryWebhooksWebhook {
 }
 export interface GetTeamRepositoriesDetailed {
     repoId: number;
+    repoName: string;
     roleName: string;
 }
 export interface GetTreeEntry {
@@ -957,15 +1152,18 @@ export interface OrganizationRulesetBypassActor {
     /**
      * (Number) The ID of the actor that can bypass a ruleset.
      */
-    actorId: number;
+    actorId?: number;
     /**
      * The type of actor that can bypass a ruleset. Can be one of: `RepositoryRole`, `Team`, `Integration`, `OrganizationAdmin`.
      */
     actorType: string;
     /**
-     * (String) When the specified actor can bypass the ruleset. pullRequest means that an actor can only bypass rules on pull requests. Can be one of: `always`, `pullRequest`.
+     * (String) When the specified actor can bypass the ruleset. pullRequest means that an actor can only bypass rules on pull requests. Can be one of: `always`, `pullRequest`, `exempt`.
      *
      * ~>Note: at the time of writing this, the following actor types correspond to the following actor IDs:
+     *
+     * * `OrganizationAdmin` > `1`
+     * * `RepositoryRole` (This is the actor type, the following are the base repository roles and their associated IDs.)
      */
     bypassMode: string;
 }
@@ -987,21 +1185,21 @@ export interface OrganizationRulesetConditions {
 }
 export interface OrganizationRulesetConditionsRefName {
     /**
-     * (List of String) Array of repository names or patterns to exclude. The condition will not pass if any of these patterns match.
+     * Array of ref names or patterns to exclude. The condition will not pass if any of these patterns match.
      */
     excludes: string[];
     /**
-     * (List of String) Array of repository names or patterns to include. One of these patterns must match for the condition to pass. Also accepts `~ALL` to include all repositories.
+     * Array of ref names or patterns to include. One of these patterns must match for the condition to pass. Also accepts `~DEFAULT_BRANCH` to include the default branch or `~ALL` to include all branches.
      */
     includes: string[];
 }
 export interface OrganizationRulesetConditionsRepositoryName {
     /**
-     * (List of String) Array of repository names or patterns to exclude. The condition will not pass if any of these patterns match.
+     * Array of repository names or patterns to exclude. The condition will not pass if any of these patterns match.
      */
     excludes: string[];
     /**
-     * (List of String) Array of repository names or patterns to include. One of these patterns must match for the condition to pass. Also accepts `~ALL` to include all repositories.
+     * Array of repository names or patterns to include. One of these patterns must match for the condition to pass. Also accepts `~ALL` to include all repositories.
      */
     includes: string[];
     /**
@@ -1034,6 +1232,22 @@ export interface OrganizationRulesetRules {
      * (Boolean) Only allow users with bypass permissions to delete matching refs.
      */
     deletion?: boolean;
+    /**
+     * (Block List, Max: 1) Prevent commits that include files with specified file extensions from being pushed to the commit graph. This rule only applies to rulesets with target `push`. (see below for nested schema)
+     */
+    fileExtensionRestriction?: outputs.OrganizationRulesetRulesFileExtensionRestriction;
+    /**
+     * (Block List, Max: 1) Prevent commits that include changes to specified file paths from being pushed to the commit graph. This rule only applies to rulesets with target `push`. (see below for nested schema)
+     */
+    filePathRestriction?: outputs.OrganizationRulesetRulesFilePathRestriction;
+    /**
+     * (Integer) The maximum number of characters allowed in file paths.
+     */
+    maxFilePathLength?: outputs.OrganizationRulesetRulesMaxFilePathLength;
+    /**
+     * (Integer) The maximum allowed size, in megabytes (MB), of a file. Valid range is 1-100 MB.
+     */
+    maxFileSize?: outputs.OrganizationRulesetRulesMaxFileSize;
     /**
      * (Boolean) Prevent users with push access from force pushing to branches.
      */
@@ -1042,6 +1256,10 @@ export interface OrganizationRulesetRules {
      * (Block List, Max: 1) Require all commits be made to a non-target branch and submitted via a pull request before they can be merged. (see below for nested schema)
      */
     pullRequest?: outputs.OrganizationRulesetRulesPullRequest;
+    /**
+     * (Block List, Max: 1) Define which tools must provide code scanning results before the reference is updated. When configured, code scanning must be enabled and have results for both the commit and the reference being updated. Multiple code scanning tools can be specified. (see below for nested schema)
+     */
+    requiredCodeScanning?: outputs.OrganizationRulesetRulesRequiredCodeScanning;
     /**
      * (Boolean) Prevent merge commits from being pushed to matching branches.
      */
@@ -1073,15 +1291,15 @@ export interface OrganizationRulesetRulesBranchNamePattern {
      */
     name?: string;
     /**
-     * (Boolean) If true, the rule will fail if the pattern matches.
+     * If true, the rule will fail if the pattern matches.
      */
     negate?: boolean;
     /**
-     * (String) The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
+     * The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
      */
     operator: string;
     /**
-     * (String) The pattern to match with.
+     * The pattern to match with.
      */
     pattern: string;
 }
@@ -1091,15 +1309,15 @@ export interface OrganizationRulesetRulesCommitAuthorEmailPattern {
      */
     name?: string;
     /**
-     * (Boolean) If true, the rule will fail if the pattern matches.
+     * If true, the rule will fail if the pattern matches.
      */
     negate?: boolean;
     /**
-     * (String) The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
+     * The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
      */
     operator: string;
     /**
-     * (String) The pattern to match with.
+     * The pattern to match with.
      */
     pattern: string;
 }
@@ -1109,15 +1327,15 @@ export interface OrganizationRulesetRulesCommitMessagePattern {
      */
     name?: string;
     /**
-     * (Boolean) If true, the rule will fail if the pattern matches.
+     * If true, the rule will fail if the pattern matches.
      */
     negate?: boolean;
     /**
-     * (String) The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
+     * The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
      */
     operator: string;
     /**
-     * (String) The pattern to match with.
+     * The pattern to match with.
      */
     pattern: string;
 }
@@ -1127,77 +1345,129 @@ export interface OrganizationRulesetRulesCommitterEmailPattern {
      */
     name?: string;
     /**
-     * (Boolean) If true, the rule will fail if the pattern matches.
+     * If true, the rule will fail if the pattern matches.
      */
     negate?: boolean;
     /**
-     * (String) The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
+     * The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
      */
     operator: string;
     /**
-     * (String) The pattern to match with.
+     * The pattern to match with.
      */
     pattern: string;
 }
+export interface OrganizationRulesetRulesFileExtensionRestriction {
+    /**
+     * The file extensions that are restricted from being pushed to the commit graph.
+     */
+    restrictedFileExtensions: string[];
+}
+export interface OrganizationRulesetRulesFilePathRestriction {
+    /**
+     * The file paths that are restricted from being pushed to the commit graph.
+     */
+    restrictedFilePaths: string[];
+}
+export interface OrganizationRulesetRulesMaxFilePathLength {
+    /**
+     * The maximum allowed length of a file path.
+     */
+    maxFilePathLength: number;
+}
+export interface OrganizationRulesetRulesMaxFileSize {
+    /**
+     * The maximum allowed size of a file in megabytes (MB). Valid range is 1-100 MB.
+     */
+    maxFileSize: number;
+}
 export interface OrganizationRulesetRulesPullRequest {
     /**
-     * (Boolean) New, reviewable commits pushed will dismiss previous pull request review approvals. Defaults to `false`.
+     * New, reviewable commits pushed will dismiss previous pull request review approvals. Defaults to `false`.
      */
     dismissStaleReviewsOnPush?: boolean;
     /**
-     * (Boolean) Require an approving review in pull requests that modify files that have a designated code owner. Defaults to `false`.
+     * Require an approving review in pull requests that modify files that have a designated code owner. Defaults to `false`.
      */
     requireCodeOwnerReview?: boolean;
     /**
-     * (Boolean) Whether the most recent reviewable push must be approved by someone other than the person who pushed it. Defaults to `false`.
+     * Whether the most recent reviewable push must be approved by someone other than the person who pushed it. Defaults to `false`.
      */
     requireLastPushApproval?: boolean;
     /**
-     * (Number) The number of approving reviews that are required before a pull request can be merged. Defaults to `0`.
+     * The number of approving reviews that are required before a pull request can be merged. Defaults to `0`.
      */
     requiredApprovingReviewCount?: number;
     /**
-     * (Boolean) All conversations on code must be resolved before a pull request can be merged. Defaults to `false`.
+     * All conversations on code must be resolved before a pull request can be merged. Defaults to `false`.
      */
     requiredReviewThreadResolution?: boolean;
 }
+export interface OrganizationRulesetRulesRequiredCodeScanning {
+    /**
+     * Tools that must provide code scanning results for this rule to pass.
+     */
+    requiredCodeScanningTools: outputs.OrganizationRulesetRulesRequiredCodeScanningRequiredCodeScanningTool[];
+}
+export interface OrganizationRulesetRulesRequiredCodeScanningRequiredCodeScanningTool {
+    /**
+     * The severity level at which code scanning results that raise alerts block a reference update. Can be one of: `none`, `errors`, `errorsAndWarnings`, `all`.
+     */
+    alertsThreshold: string;
+    /**
+     * The severity level at which code scanning results that raise security alerts block a reference update. Can be one of: `none`, `critical`, `highOrHigher`, `mediumOrHigher`, `all`.
+     */
+    securityAlertsThreshold: string;
+    /**
+     * The name of a code scanning tool.
+     */
+    tool: string;
+}
 export interface OrganizationRulesetRulesRequiredStatusChecks {
     /**
-     * (Block Set, Min: 1) Status checks that are required. Several can be defined. (see below for nested schema)
+     * (Boolean) Allow repositories and branches to be created if a check would otherwise prohibit it. Defaults to `false`.
+     */
+    doNotEnforceOnCreate?: boolean;
+    /**
+     * Status checks that are required. Several can be defined.
      */
     requiredChecks: outputs.OrganizationRulesetRulesRequiredStatusChecksRequiredCheck[];
     /**
-     * (Boolean) Whether pull requests targeting a matching branch must be tested with the latest code. This setting will not take effect unless at least one status check is enabled. Defaults to `false`.
+     * Whether pull requests targeting a matching branch must be tested with the latest code. This setting will not take effect unless at least one status check is enabled. Defaults to `false`.
      */
     strictRequiredStatusChecksPolicy?: boolean;
 }
 export interface OrganizationRulesetRulesRequiredStatusChecksRequiredCheck {
     /**
-     * (String) The status check context name that must be present on the commit.
+     * The status check context name that must be present on the commit.
      */
     context: string;
     /**
-     * (Number) The optional integration ID that this status check must originate from.
+     * The optional integration ID that this status check must originate from.
      */
     integrationId?: number;
 }
 export interface OrganizationRulesetRulesRequiredWorkflows {
     /**
-     * (Block Set, Min: 1) Actions workflows that are required. Multiple can be defined. (see below for nested schema)
+     * Allow repositories and branches to be created if a check would otherwise prohibit it.
+     */
+    doNotEnforceOnCreate?: boolean;
+    /**
+     * Actions workflows that are required. Several can be defined.
      */
     requiredWorkflows: outputs.OrganizationRulesetRulesRequiredWorkflowsRequiredWorkflow[];
 }
 export interface OrganizationRulesetRulesRequiredWorkflowsRequiredWorkflow {
     /**
-     * (String) The path to the YAML definition file of the workflow.
+     * The path to the workflow YAML definition file.
      */
     path: string;
     /**
-     * (String) The optional ref from which to fetch the workflow. Defaults to `master`.
+     * The ref (branch or tag) of the workflow file to use.
      */
     ref?: string;
     /**
-     * The repository IDs that the ruleset applies to. One of these IDs must match for the condition to pass. Conflicts with `repositoryName`.
+     * The repository in which the workflow is defined.
      */
     repositoryId: number;
 }
@@ -1207,15 +1477,15 @@ export interface OrganizationRulesetRulesTagNamePattern {
      */
     name?: string;
     /**
-     * (Boolean) If true, the rule will fail if the pattern matches.
+     * If true, the rule will fail if the pattern matches.
      */
     negate?: boolean;
     /**
-     * (String) The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
+     * The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
      */
     operator: string;
     /**
-     * (String) The pattern to match with.
+     * The pattern to match with.
      */
     pattern: string;
 }
@@ -1237,6 +1507,12 @@ export interface OrganizationWebhookConfiguration {
      */
     url: string;
 }
+export interface RepositoryCollaboratorsIgnoreTeam {
+    /**
+     * The GitHub team id or the GitHub team slug.
+     */
+    teamId: string;
+}
 export interface RepositoryCollaboratorsTeam {
     /**
      * The permission of the outside collaborators for the repository.
@@ -1245,7 +1521,7 @@ export interface RepositoryCollaboratorsTeam {
      */
     permission?: string;
     /**
-     * The GitHub team id or the GitHub team slug
+     * The GitHub team id or the GitHub team slug.
      */
     teamId: string;
 }
@@ -1303,7 +1579,7 @@ export interface RepositoryPages {
      */
     source?: outputs.RepositoryPagesSource;
     /**
-     * Set to `enabled` to enable advanced security features on the repository. Can be `enabled` or `disabled`.
+     * The GitHub Pages site's build status e.g. `building` or `built`.
      */
     status: string;
     url: string;
@@ -1320,17 +1596,20 @@ export interface RepositoryPagesSource {
 }
 export interface RepositoryRulesetBypassActor {
     /**
-     * (Number) The ID of the actor that can bypass a ruleset.
+     * The ID of the actor that can bypass a ruleset. If `actorType` is `Integration`, `actorId` is a GitHub App ID. App ID can be obtained by following instructions from the [Get an App API docs](https://docs.github.com/en/rest/apps/apps?apiVersion=2022-11-28#get-an-app)
      */
-    actorId: number;
+    actorId?: number;
     /**
-     * The type of actor that can bypass a ruleset. Can be one of: `RepositoryRole`, `Team`, `Integration`, `OrganizationAdmin`.
+     * The type of actor that can bypass a ruleset. Can be one of: `RepositoryRole`, `Team`, `Integration`, `OrganizationAdmin`, `DeployKey`.
      */
     actorType: string;
     /**
-     * (String) When the specified actor can bypass the ruleset. pullRequest means that an actor can only bypass rules on pull requests. Can be one of: `always`, `pullRequest`.
+     * (String) When the specified actor can bypass the ruleset. pullRequest means that an actor can only bypass rules on pull requests. Can be one of: `always`, `pullRequest`, `exempt`.
      *
      * > Note: at the time of writing this, the following actor types correspond to the following actor IDs:
+     *
+     * * `OrganizationAdmin` > `1`
+     * * `RepositoryRole` (This is the actor type, the following are the base repository roles and their associated IDs.)
      */
     bypassMode: string;
 }
@@ -1342,11 +1621,11 @@ export interface RepositoryRulesetConditions {
 }
 export interface RepositoryRulesetConditionsRefName {
     /**
-     * (List of String) Array of ref names or patterns to exclude. The condition will not pass if any of these patterns match.
+     * Array of ref names or patterns to exclude. The condition will not pass if any of these patterns match.
      */
     excludes: string[];
     /**
-     * (List of String) Array of ref names or patterns to include. One of these patterns must match for the condition to pass. Also accepts `~DEFAULT_BRANCH` to include the default branch or `~ALL` to include all branches.
+     * Array of ref names or patterns to include. One of these patterns must match for the condition to pass. Also accepts `~DEFAULT_BRANCH` to include the default branch or `~ALL` to include all branches.
      */
     includes: string[];
 }
@@ -1375,6 +1654,26 @@ export interface RepositoryRulesetRules {
      * (Boolean) Only allow users with bypass permissions to delete matching refs.
      */
     deletion?: boolean;
+    /**
+     * (Block List, Max: 1) Prevent commits that include files with specified file extensions from being pushed to the commit graph. This rule only applies to rulesets with target `push`. (see below for nested schema)
+     */
+    fileExtensionRestriction?: outputs.RepositoryRulesetRulesFileExtensionRestriction;
+    /**
+     * (Block List, Max 1) Parameters to be used for the filePathRestriction rule. When enabled restricts access to files within the repository. (See below for nested schema)
+     */
+    filePathRestriction?: outputs.RepositoryRulesetRulesFilePathRestriction;
+    /**
+     * (Integer) The maximum number of characters allowed in file paths.
+     */
+    maxFilePathLength?: outputs.RepositoryRulesetRulesMaxFilePathLength;
+    /**
+     * (Integer) The maximum allowed size, in megabytes (MB), of a file. Valid range is 1-100 MB.
+     */
+    maxFileSize?: outputs.RepositoryRulesetRulesMaxFileSize;
+    /**
+     * (Block List, Max: 1) Merges must be performed via a merge queue. (see below for nested schema)
+     */
+    mergeQueue?: outputs.RepositoryRulesetRulesMergeQueue;
     /**
      * (Boolean) Prevent users with push access from force pushing to branches.
      */
@@ -1383,6 +1682,10 @@ export interface RepositoryRulesetRules {
      * (Block List, Max: 1) Require all commits be made to a non-target branch and submitted via a pull request before they can be merged. (see below for nested schema)
      */
     pullRequest?: outputs.RepositoryRulesetRulesPullRequest;
+    /**
+     * (Block List, Max: 1) Define which tools must provide code scanning results before the reference is updated. When configured, code scanning must be enabled and have results for both the commit and the reference being updated. Multiple code scanning tools can be specified. (see below for nested schema)
+     */
+    requiredCodeScanning?: outputs.RepositoryRulesetRulesRequiredCodeScanning;
     /**
      * (Block List, Max: 1) Choose which environments must be successfully deployed to before branches can be merged into a branch that matches this rule. (see below for nested schema)
      */
@@ -1418,15 +1721,15 @@ export interface RepositoryRulesetRulesBranchNamePattern {
      */
     name?: string;
     /**
-     * (Boolean) If true, the rule will fail if the pattern matches.
+     * If true, the rule will fail if the pattern matches.
      */
     negate?: boolean;
     /**
-     * (String) The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
+     * The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
      */
     operator: string;
     /**
-     * (String) The pattern to match with.
+     * The pattern to match with.
      */
     pattern: string;
 }
@@ -1436,15 +1739,15 @@ export interface RepositoryRulesetRulesCommitAuthorEmailPattern {
      */
     name?: string;
     /**
-     * (Boolean) If true, the rule will fail if the pattern matches.
+     * If true, the rule will fail if the pattern matches.
      */
     negate?: boolean;
     /**
-     * (String) The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
+     * The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
      */
     operator: string;
     /**
-     * (String) The pattern to match with.
+     * The pattern to match with.
      */
     pattern: string;
 }
@@ -1454,15 +1757,15 @@ export interface RepositoryRulesetRulesCommitMessagePattern {
      */
     name?: string;
     /**
-     * (Boolean) If true, the rule will fail if the pattern matches.
+     * If true, the rule will fail if the pattern matches.
      */
     negate?: boolean;
     /**
-     * (String) The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
+     * The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
      */
     operator: string;
     /**
-     * (String) The pattern to match with.
+     * The pattern to match with.
      */
     pattern: string;
 }
@@ -1472,63 +1775,141 @@ export interface RepositoryRulesetRulesCommitterEmailPattern {
      */
     name?: string;
     /**
-     * (Boolean) If true, the rule will fail if the pattern matches.
+     * If true, the rule will fail if the pattern matches.
      */
     negate?: boolean;
     /**
-     * (String) The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
+     * The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
      */
     operator: string;
     /**
-     * (String) The pattern to match with.
+     * The pattern to match with.
      */
     pattern: string;
 }
+export interface RepositoryRulesetRulesFileExtensionRestriction {
+    /**
+     * A list of file extensions.
+     */
+    restrictedFileExtensions: string[];
+}
+export interface RepositoryRulesetRulesFilePathRestriction {
+    /**
+     * The file paths that are restricted from being pushed to the commit graph.
+     */
+    restrictedFilePaths: string[];
+}
+export interface RepositoryRulesetRulesMaxFilePathLength {
+    /**
+     * The maximum allowed length of a file path.
+     */
+    maxFilePathLength: number;
+}
+export interface RepositoryRulesetRulesMaxFileSize {
+    /**
+     * The maximum allowed size of a file in megabytes (MB). Valid range is 1-100 MB.
+     */
+    maxFileSize: number;
+}
+export interface RepositoryRulesetRulesMergeQueue {
+    /**
+     * Maximum time for a required status check to report a conclusion. After this much time has elapsed, checks that have not reported a conclusion will be assumed to have failed. Defaults to `60`.
+     */
+    checkResponseTimeoutMinutes?: number;
+    /**
+     * When set to ALLGREEN, the merge commit created by merge queue for each PR in the group must pass all required checks to merge. When set to HEADGREEN, only the commit at the head of the merge group, i.e. the commit containing changes from all of the PRs in the group, must pass its required checks to merge. Can be one of: ALLGREEN, HEADGREEN. Defaults to `ALLGREEN`.
+     */
+    groupingStrategy?: string;
+    /**
+     * Limit the number of queued pull requests requesting checks and workflow runs at the same time. Defaults to `5`.
+     */
+    maxEntriesToBuild?: number;
+    /**
+     * The maximum number of PRs that will be merged together in a group. Defaults to `5`.
+     */
+    maxEntriesToMerge?: number;
+    /**
+     * Method to use when merging changes from queued pull requests. Can be one of: MERGE, SQUASH, REBASE. Defaults to `MERGE`.
+     */
+    mergeMethod?: string;
+    /**
+     * The minimum number of PRs that will be merged together in a group. Defaults to `1`.
+     */
+    minEntriesToMerge?: number;
+    /**
+     * The time merge queue should wait after the first PR is added to the queue for the minimum group size to be met. After this time has elapsed, the minimum group size will be ignored and a smaller group will be merged. Defaults to `5`.
+     */
+    minEntriesToMergeWaitMinutes?: number;
+}
 export interface RepositoryRulesetRulesPullRequest {
     /**
-     * (Boolean) New, reviewable commits pushed will dismiss previous pull request review approvals. Defaults to `false`.
+     * New, reviewable commits pushed will dismiss previous pull request review approvals. Defaults to `false`.
      */
     dismissStaleReviewsOnPush?: boolean;
     /**
-     * (Boolean) Require an approving review in pull requests that modify files that have a designated code owner. Defaults to `false`.
+     * Require an approving review in pull requests that modify files that have a designated code owner. Defaults to `false`.
      */
     requireCodeOwnerReview?: boolean;
     /**
-     * (Boolean) Whether the most recent reviewable push must be approved by someone other than the person who pushed it. Defaults to `false`.
+     * Whether the most recent reviewable push must be approved by someone other than the person who pushed it. Defaults to `false`.
      */
     requireLastPushApproval?: boolean;
     /**
-     * (Number) The number of approving reviews that are required before a pull request can be merged. Defaults to `0`.
+     * The number of approving reviews that are required before a pull request can be merged. Defaults to `0`.
      */
     requiredApprovingReviewCount?: number;
     /**
-     * (Boolean) All conversations on code must be resolved before a pull request can be merged. Defaults to `false`.
+     * All conversations on code must be resolved before a pull request can be merged. Defaults to `false`.
      */
     requiredReviewThreadResolution?: boolean;
 }
+export interface RepositoryRulesetRulesRequiredCodeScanning {
+    /**
+     * Tools that must provide code scanning results for this rule to pass.
+     */
+    requiredCodeScanningTools: outputs.RepositoryRulesetRulesRequiredCodeScanningRequiredCodeScanningTool[];
+}
+export interface RepositoryRulesetRulesRequiredCodeScanningRequiredCodeScanningTool {
+    /**
+     * The severity level at which code scanning results that raise alerts block a reference update. Can be one of: `none`, `errors`, `errorsAndWarnings`, `all`.
+     */
+    alertsThreshold: string;
+    /**
+     * The severity level at which code scanning results that raise security alerts block a reference update. Can be one of: `none`, `critical`, `highOrHigher`, `mediumOrHigher`, `all`.
+     */
+    securityAlertsThreshold: string;
+    /**
+     * The name of a code scanning tool
+     */
+    tool: string;
+}
 export interface RepositoryRulesetRulesRequiredDeployments {
     /**
-     * (List of String) The environments that must be successfully deployed to before branches can be merged.
+     * The environments that must be successfully deployed to before branches can be merged.
      */
     requiredDeploymentEnvironments: string[];
 }
 export interface RepositoryRulesetRulesRequiredStatusChecks {
     /**
-     * (Block Set, Min: 1) Status checks that are required. Several can be defined. (see below for nested schema)
+     * Allow repositories and branches to be created if a check would otherwise prohibit it.
+     */
+    doNotEnforceOnCreate?: boolean;
+    /**
+     * Status checks that are required. Several can be defined.
      */
     requiredChecks: outputs.RepositoryRulesetRulesRequiredStatusChecksRequiredCheck[];
     /**
-     * (Boolean) Whether pull requests targeting a matching branch must be tested with the latest code. This setting will not take effect unless at least one status check is enabled. Defaults to `false`.
+     * Whether pull requests targeting a matching branch must be tested with the latest code. This setting will not take effect unless at least one status check is enabled. Defaults to `false`.
      */
     strictRequiredStatusChecksPolicy?: boolean;
 }
 export interface RepositoryRulesetRulesRequiredStatusChecksRequiredCheck {
     /**
-     * (String) The status check context name that must be present on the commit.
+     * The status check context name that must be present on the commit.
      */
     context: string;
     /**
-     * (Number) The optional integration ID that this status check must originate from.
+     * The optional integration ID that this status check must originate from.
      */
     integrationId?: number;
 }
@@ -1538,15 +1919,15 @@ export interface RepositoryRulesetRulesTagNamePattern {
      */
     name?: string;
     /**
-     * (Boolean) If true, the rule will fail if the pattern matches.
+     * If true, the rule will fail if the pattern matches.
      */
     negate?: boolean;
     /**
-     * (String) The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
+     * The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
      */
     operator: string;
     /**
-     * (String) The pattern to match with.
+     * The pattern to match with.
      */
     pattern: string;
 }
@@ -1555,10 +1936,22 @@ export interface RepositorySecurityAndAnalysis {
      * The advanced security configuration for the repository. See Advanced Security Configuration below for details. If a repository's visibility is `public`, advanced security is always enabled and cannot be changed, so this setting cannot be supplied.
      */
     advancedSecurity?: outputs.RepositorySecurityAndAnalysisAdvancedSecurity;
+    /**
+     * The code security configuration for the repository. See Code Security below for details.
+     */
+    codeSecurity?: outputs.RepositorySecurityAndAnalysisCodeSecurity;
     /**
      * The secret scanning configuration for the repository. See Secret Scanning Configuration below for details.
      */
     secretScanning?: outputs.RepositorySecurityAndAnalysisSecretScanning;
+    /**
+     * The secret scanning ai detection configuration for the repository. See Secret Scanning AI Detection Configuration below for details.
+     */
+    secretScanningAiDetection?: outputs.RepositorySecurityAndAnalysisSecretScanningAiDetection;
+    /**
+     * The secret scanning non-provider patterns configuration for this repository. See Secret Scanning Non-Provider Patterns Configuration below for more details.
+     */
+    secretScanningNonProviderPatterns?: outputs.RepositorySecurityAndAnalysisSecretScanningNonProviderPatterns;
     /**
      * The secret scanning push protection configuration for the repository. See Secret Scanning Push Protection Configuration below for details.
      */
@@ -1570,15 +1963,33 @@ export interface RepositorySecurityAndAnalysisAdvancedSecurity {
      */
     status: string;
 }
+export interface RepositorySecurityAndAnalysisCodeSecurity {
+    /**
+     * The GitHub Pages site's build status e.g. `building` or `built`.
+     */
+    status: string;
+}
 export interface RepositorySecurityAndAnalysisSecretScanning {
     /**
-     * Set to `enabled` to enable advanced security features on the repository. Can be `enabled` or `disabled`.
+     * The GitHub Pages site's build status e.g. `building` or `built`.
+     */
+    status: string;
+}
+export interface RepositorySecurityAndAnalysisSecretScanningAiDetection {
+    /**
+     * The GitHub Pages site's build status e.g. `building` or `built`.
+     */
+    status: string;
+}
+export interface RepositorySecurityAndAnalysisSecretScanningNonProviderPatterns {
+    /**
+     * The GitHub Pages site's build status e.g. `building` or `built`.
      */
     status: string;
 }
 export interface RepositorySecurityAndAnalysisSecretScanningPushProtection {
     /**
-     * Set to `enabled` to enable advanced security features on the repository. Can be `enabled` or `disabled`.
+     * The GitHub Pages site's build status e.g. `building` or `built`.
      */
     status: string;
 }
@@ -1627,15 +2038,15 @@ export interface TeamMembersMember {
 }
 export interface TeamSettingsReviewRequestDelegation {
     /**
-     * The algorithm to use when assigning pull requests to team members. Supported values are `ROUND_ROBIN` and `LOAD_BALANCE`. Default value is `ROUND_ROBIN`
+     * The algorithm to use when assigning pull requests to team members. Supported values are 'ROUND_ROBIN' and 'LOAD_BALANCE'.
      */
     algorithm?: string;
     /**
-     * The number of team members to assign to a pull request
+     * The number of team members to assign to a pull request.
      */
     memberCount?: number;
     /**
-     * whether to notify the entire team when at least one member is also assigned to the pull request
+     * whether to notify the entire team when at least one member is also assigned to the pull request.
      */
     notify?: boolean;
 }