Merge branch 'w3f:master' into master

.github/pull_request_template.md

@@ -14,7 +14,7 @@
 
 - [x] The [application template](https://github.com/w3f/Grants-Program/blob/master/applications/application-template.md) has been copied and aptly renamed (`project_name.md`).
 - [ ] I have read the [application guidelines](https://github.com/w3f/Grants-Program/blob/master/docs/Support%20Docs/grant_guidelines_per_category.md).
-- [ ] A BTC, Ethereum (USDC/DAI) or Polkadot/Kusama (aUSD/USDT) address for the payment of the milestones is provided in the application.
+- [ ] Payment details have been provided (bank details via email _or_ BTC, Ethereum (USDC/DAI) or Polkadot/Kusama (USDT) address in the application).
 - [ ] The software delivered for this grant will be released under an open-source license specified in the application.
 - [ ] The initial PR contains only one commit (squash and force-push if needed).
 - [ ] The grant will only be announced once the first milestone [has been accepted](https://github.com/w3f/Grant-Milestone-Delivery#process) (see the [announcement guidelines](https://github.com/w3f/Grants-Program/blob/master/docs/Support%20Docs/announcement-guidelines.md)).

.github/workflows/application_accepted.yml

@@ -80,12 +80,12 @@ jobs:
                     "https://github.com/w3f/Grants-Program/pull/${{ github.event.pull_request.number }}",
                     "https://github.com/w3f/Grants-Program/pull/${{ github.event.pull_request.number }}",
                     "USD", "0", "0", "0",
-                    "${{ steps.grant_parser.outputs.total_cost_btc }}",
+                    "",
                     "${{ steps.grant_parser.outputs.total_cost_dai }}",
                     "",
                     "",
                     "Signed",
-                    "https://github.com/w3f/Open-Grants-Program/pull/${{ github.event.pull_request.number }}",
+                    "https://github.com/w3f/Grants-Program/pull/${{ github.event.pull_request.number }}",
                     "${{ steps.date.outputs.date }}"
                   ]],
                   "worksheetTitle": "Legal",
@@ -114,7 +114,7 @@ jobs:
             [support section of our README](https://github.com/w3f/Grants-Program/blob/master/README.md#support)
             for more ways to find answers to your questions. <br/><br/>
             Before you start, take a moment to read through our
-            [announcement guidelines](https://github.com/w3f/Grants-Program/blob/master/docs/announcement-guidelines.md)
+            [announcement guidelines](https://github.com/w3f/Grants-Program/blob/master/docs/Support%20Docs/announcement-guidelines.md)
             for all communications related to the grant or make them known to the right person in your organisation.
             In particular, please <b>don't announce the grant publicly before at least the first milestone of your
             project has been approved.</b> At that point or shortly before, you can get in touch with us at

.github/workflows/check_application_document.yml

@@ -0,0 +1,59 @@
+name: Check application document
+
+on:
+  workflow_dispatch:
+  pull_request:
+    types: [opened, synchronize]
+
+jobs:
+  discussion_private:
+    if: |
+        github.event.action == 'opened' &&
+        github.event.pull_request.body && (
+          contains(github.event.pull_request.body, '- [x] I prefer the discussion') || 
+          (
+            contains(github.event.pull_request.body, '- [ ] I prefer the discussion') &&
+            !contains(github.event.pull_request.body, '@_______:matrix.org')
+          )
+        )
+    runs-on: ubuntu-latest
+    steps:
+      - name: Add 'discussion private' label if the application is private
+        uses: actions/github-script@v6
+        with:
+          script: |
+            github.rest.issues.addLabels({
+              issue_number: context.issue.number,
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              labels: ["discussion private"]
+            })
+
+  get_filename:
+    if: contains(github.event.pull_request.body, 'Project Abstract')
+    runs-on: ubuntu-latest
+    outputs:
+      filename: ${{ steps.files.outputs.added }}
+    steps:
+
+      - name: Get application filename # We assume there's only one
+        id: 'files'
+        uses: Ana06/[email protected]
+        with:
+          filter: 'applications/*.md'
+          format: 'csv'
+
+  parse_document:
+    needs: get_filename
+    if: needs.get_filename.outputs.filename
+    runs-on: ubuntu-latest
+    steps:
+
+      - name: Checkout
+        uses: actions/checkout@v2
+
+      - name: Parse application file
+        id: grant_parser
+        uses: w3f/parse-grant-application-action@master
+        with:
+          path: "${{ github.workspace }}/${{ needs.get_filename.outputs.filename }}"

.github/workflows/codeql.yml

@@ -0,0 +1,76 @@
+# For most projects, this workflow file will not need changing; you simply need
+# to commit it to your repository.
+#
+# You may wish to alter this file to override the set of languages analyzed,
+# or to provide custom queries or build logic.
+#
+# ******** NOTE ********
+# We have attempted to detect the languages in your repository. Please check
+# the `language` matrix defined below to confirm you have the correct set of
+# supported CodeQL languages.
+#
+name: "CodeQL"
+
+on:
+  push:
+    branches: [ "master" ]
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [ "master" ]
+  schedule:
+    - cron: '18 7 * * 5'
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [ 'javascript' ]
+        # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
+        # Use only 'java' to analyze code written in Java, Kotlin or both
+        # Use only 'javascript' to analyze code written in JavaScript, TypeScript or both
+        # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v3
+
+    # Initializes the CodeQL tools for scanning.
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v2
+      with:
+        languages: ${{ matrix.language }}
+        # If you wish to specify custom queries, you can do so here or in a config file.
+        # By default, queries listed here will override any specified in a config file.
+        # Prefix the list here with "+" to use these queries and those in the config file.
+
+        # Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
+        # queries: security-extended,security-and-quality
+
+
+    # Autobuild attempts to build any compiled languages  (C/C++, C#, Go, or Java).
+    # If this step fails, then you should remove it and run the build manually (see below)
+    - name: Autobuild
+      uses: github/codeql-action/autobuild@v2
+
+    # ℹ️ Command-line programs to run using the OS shell.
+    # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
+
+    #   If the Autobuild fails above, remove it and uncomment the following three lines.
+    #   modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.
+
+    # - run: |
+    #   echo "Run, Build Application using script"
+    #   ./location_of_script_within_repo/buildscript.sh
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v2
+      with:
+        category: "/language:${{matrix.language}}"

.github/workflows/ready_for_review.yml

@@ -1,12 +1,11 @@
 name: Ready for Review notification
 
 on:
-  pull_request:
-    types: [labeled]
+  pull_request_target:
+    types: [ready_for_review]
 
 jobs:
   send_matrix_review_msg:
-    if: github.event.label.name == 'ready for review'
     runs-on: ubuntu-latest
     steps:
     - uses: fadenb/[email protected]

.github/workflows/stale_checker.yml

@@ -0,0 +1,25 @@
+name: Stale checker
+
+on:
+  schedule:
+    - cron: '0 7 * * *' # run at 7:00 UTC every day
+  workflow_dispatch:
+
+jobs:
+  mark_as_stale:
+    if:  github.repository_owner == 'w3f'
+    runs-on: ubuntu-latest
+    steps:
+    - id: stale
+      uses: w3f/label-stale-pull-requests@main
+      with:
+        context: ${{ toJSON(github) }}
+        token: ${{ secrets.GITHUB_TOKEN }}
+    - if: steps.stale.outputs.message != ''
+      uses: fadenb/[email protected]
+      with:
+        homeserver: 'matrix.web3.foundation'
+        token: ${{ secrets.MATRIX_TOKEN }}
+        channel: ${{ secrets.MATRIX_CHANNEL_ID }}
+        message: |
+          ${{ steps.stale.outputs.message }}