Merge remote-tracking branch 'origin/main' into fix/scrub-open-gen-ui

The scrub and CopilotKit#4084 touched the same surface: CopilotKit#4084 re-added an `open:`
generative_ui profile listing `open-gen-ui`/`open-gen-ui-advanced`, and
re-added both features to `constrained-explicit.allowed`. Extending the
branch's scrub to both re-additions keeps the semantic consistent with
the schema (which already dropped `open` from the approaches enum).

- `showcase/shared/constraints.yaml`: drop `open-gen-ui` +
  `open-gen-ui-advanced` from `constrained-explicit.allowed`; drop main's
  re-added `open:` profile entirely.
- `showcase/packages/langgraph-python/manifest.yaml`: drop the now-orphan
  `open-gen-ui` + `open-gen-ui-advanced` feature and demo entries
  (validator confirmed they had no allowed approach left).
- Regenerated `showcase/shell/src/data/registry.json` + sibling
  `shell-docs`/`shell-dojo` registries and `constraints.json` via
  `pnpm --dir showcase/scripts generate-registry`. All 17 integrations
  validate.

`feature-registry.json` intentionally still defines both features — the
original scrub commits (2b996c5, 27f886e) left it untouched, so the
demo source files on disk also stay. Follow-up deletion if desired is
out of scope for this merge.

Author: AlemTuzlak

.dockerignore

@@ -7,16 +7,21 @@ assets
 Dockerfile
 **/.venv
 **/.env
+**/.env.local
+**/.env.*.local
 **/.vscode
 infra
 docs
 **/.turbo
 **/.husky
+**/.next
+**/coverage
 **/dist
 **/build
 **/__pycache__
 **/.pytest_cache
 **/.git
 **/.DS_Store
 **/node_modules
-**/.langgraph_api
+**/.langgraph_api
+**/*.log

.gitattributes

@@ -6,6 +6,12 @@
 *.mp4 filter=lfs diff=lfs merge=lfs -text
 *.webm filter=lfs diff=lfs merge=lfs -text
 
+# Shell scripts must retain LF line endings. Windows contributors regenerating
+# showcase starters on a Windows checkout (or with autocrlf=true) would
+# otherwise silently ship CRLF ``entrypoint.sh`` files that bash in the
+# Docker runtime rejects (``bad interpreter: No such file or directory``).
+*.sh text eol=lf
+
 # Generated showcase starters — do not edit manually
 # Regenerate with: cd showcase/scripts && npx tsx generate-starters.ts
 showcase/starters/ag2/** linguist-generated=true

.github/workflows/e2e_dojo.yml

@@ -7,6 +7,7 @@ on:
       - "packages/**"
       - "sdk-python/**"
       - ".github/workflows/e2e_dojo.yml"
+      - ".changeset"
   pull_request:
     branches: [main]
     paths:

.github/workflows/e2e_examples.yml

@@ -25,14 +25,20 @@ env:
   NX_CI_EXECUTION_ID: ${{ github.head_ref }}-${{ github.sha }}-${{ github.run_attempt }}
   NX_CI_EXECUTION_ENV: "E2E Examples"
 
+# Least-privilege by default. Individual jobs/steps can widen when needed.
+# id-token: write is required for Depot OIDC auth (runs-on: depot-ubuntu-*).
+permissions:
+  contents: read
+  id-token: write
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
 jobs:
   examples:
     name: ${{ matrix.example }}
-    runs-on: ubuntu-latest
+    runs-on: depot-ubuntu-24.04-4
     timeout-minutes: 20
     strategy:
       fail-fast: false