From 2008c3ed0d2e531e25010b0e70cd55c7b48f0246 Mon Sep 17 00:00:00 2001
From: Josh Soref <2119212+jsoref@users.noreply.github.com>
Date: Thu, 28 Nov 2024 21:59:06 -0500
Subject: [PATCH] Add check-spelling

---
 .github/actions/spelling/README.md            |   3 +-
 .github/actions/spelling/allow.txt            | 429 +----------
 .../actions/spelling/block-delimiters.list    |  27 +
 .github/actions/spelling/candidate.patterns   |  82 ++-
 .github/actions/spelling/excludes.txt         |  50 +-
 .github/actions/spelling/expect.txt           | 669 ------------------
 .../actions/spelling/line_forbidden.patterns  | 100 ++-
 .github/actions/spelling/patterns.txt         | 208 ++----
 .github/actions/spelling/reject.txt           |   1 +
 .github/workflows/spelling3.yml               |  41 +-
 10 files changed, 313 insertions(+), 1297 deletions(-)
 create mode 100644 .github/actions/spelling/block-delimiters.list

diff --git a/.github/actions/spelling/README.md b/.github/actions/spelling/README.md
index 01bb8c2e1e0..da6f2e9d9b5 100644
--- a/.github/actions/spelling/README.md
+++ b/.github/actions/spelling/README.md
@@ -12,6 +12,7 @@ File | Purpose | Format | Info
 [line_forbidden.patterns](line_forbidden.patterns) | Patterns to flag in checked lines | perl regular expression (order matters, first match wins) | [patterns](https://github.com/check-spelling/check-spelling/wiki/Configuration-Examples%3A-patterns)
 [expect.txt](expect.txt) | Expected words that aren't in the dictionary | one word per line (sorted, alphabetically) | [expect](https://github.com/check-spelling/check-spelling/wiki/Configuration#expect)
 [advice.md](advice.md) | Supplement for GitHub comment when unrecognized words are found | GitHub Markdown | [advice](https://github.com/check-spelling/check-spelling/wiki/Configuration-Examples%3A-advice)
+[block-delimiters.list](block-delimiters.list) | Define block begin/end markers to ignore lines of text | line with _literal string_ for **start** followed by line with _literal string_ for **end** | [block ignore](https://github.com/check-spelling/check-spelling/wiki/Feature%3A-Block-Ignore#status)
 
 Note: you can replace any of these files with a directory by the same name (minus the suffix)
-and then include multiple files inside that directory (with that suffix) to merge multiple files.
+and then include multiple files inside that directory (with that suffix) to merge multiple files together.
diff --git a/.github/actions/spelling/allow.txt b/.github/actions/spelling/allow.txt
index 0776f0427dd..61567618d82 100644
--- a/.github/actions/spelling/allow.txt
+++ b/.github/actions/spelling/allow.txt
@@ -1,424 +1,5 @@
-ACTIONDATA
-ACTIONSTART
-activatable
-addfile
-addmanifest
-addpin
-addportablefile
-addstore
-admins
-AFX
-appinstaller
-appmodel
-appxbundle
-appxbundles
-appxrecipe
-appxsdk
-APSTUDIO
-ARRAYSIZE
-artifactstagingdirectory
-Asn
-aspirational
-Authenticode
-AUTOLISTEN
-azureedge
-binlog
-binver
-bstr
-BUILDNUMBER
-bytearray
-cdn
-cer
-certutil
-cfr
-cguid
-checkbox
-cla
-CLASSNOTAVAILABLE
-clsids
-cmake
-CNG
-COMMANDBARFLYOUT
-COMMONDATA
-comparand
-conemu
-contoso
-COSTDEFERRED
-cotaskmem
-cpprest
-cpprestsdk
-cppwinrt
-createnew
-createpintable
-createportabletable
-createtables
-CRTDECL
-CTLs
-curated
-CURSORPOSITON
-CUSTOMHEADER
-cvd
-datatelemetry
-datetime
-dbconn
-DBId
-debugbreak
-defaultlocale
-delstore
-Demitrius
-denelon
-depersist
-differentpath
-DIRECTONLY
-DISMAPI
-distro
-dllmain
-dotnet
-downloaders
-dsx
-DWORDLONG
-emoji
-ENDDIALOG
-ensureandinsert
-ensurepathexists
-entra
-ENU
-EOAC
-errorlevel
-ESRP
-etstandard
-ETW
-EULA
-EVENTTAG
-EWX
-exeenus
-exeinteractive
-exelog
-exesilent
-exeswp
-EXTRADEBUG
-EXTRAFLAGS
-FAILIFTHERE
-fakeswitch
-FATALEXIT
-FIELDTAG
-FILEFLAGS
-FILEFLAGSMASK
-FILEOS
-FILESINUSE
-FILESUBTYPE
-FILEVERSION
-florelis
-FLUSHEACHLINE
-forcerestart
-gdi
-HCCE
-hcertstore
-HCRYPTMSG
-HGlobal
-HGLOBAL
-HIDECANCEL
-hinternet
-HKCU
-HKLM
-hresult
-HRSRC
-hstring
-IAppx
-ICheckpoint
-IConfiguration
-IFACEMETHOD
-ifspec
-IInspectable
-inapplicabilities
-inheritdoc
-inno
-Inq
-installertype
-Installeruniqueness
-installlocation
-INSTALLLOGATTRIBUTES
-INSTALLLOGMODE
-INSTALLPATH
-INSTALLUILEVEL
-INVALIDARG
-INVALIDSID
-iot
-IPinning
-ipmo
-IPortable
-ISAPPROVEDFOROUTPUT
-IUnknown
-langutil
-lastwritetime
-LCIDTo
-lnk
-LOGONLYONERROR
-LOGPATH
-LOGPERFORMANCE
-logsql
-logto
-LPCGUID
-LPCSTR
-Luid
-makeappx
-MAKEINTRESOURCE
-makemsix
-MANIFESTSCHEMA
-MANIFESTVERSION
-meme
-metadatas
-Minimatch
-Moq
-motw
-mrm
-msdata
-MSHCTX
-MSHLFLAGS
-msiexec
-msix
-msixbundle
-msixinfo
-msixsdk
-msixsdkx
-msixtest
-msrc
-Multifile
-Multimatch
-ncacn
-Nelon
-netstandard
-newid
-NOCASE
-NOCLOSEPROCESS
-nodiscard
-NOMINMAX
-nonexistentsetting
-norestart
-normalizednameandpublisher
-normalizedpackagenameandpublisher
-notcontains
-NTAPI
-NTSTATUS
-nullsoft
-nunit
-nupkg
-OAuth
-ODR
-opencode
-openxmlformats
-OSVERSIONINFOEXW
-OUTOFDISKSPACE
-OUTOFPROC
-packagefamilyname
-packageidentifier
-packagename
-PACKAGESSCHEMA
-paket
-Params
-params
-parentidx
-pathpart
-Pathto
-PBYTE
-pch
-PCWSTR
-PEVENT
-pfns
-pfp
-PII
-pinnable
-pinningindex
-pipssource
-Pkcs
-portableindex
-powertoys
-pplx
-ppv
-PRECONFIG
-preindexed
-prepareforpackaging
-prepopulate
-prepopulated
-prioritization
-processthreadsapi
-PRODUCTNAME
-PRODUCTVERSION
-PROGRESSONLY
-promptrestart
-PROPERTYDUMP
-protseq
-PTOKEN
-publiccontainer
-PUCHAR
-pwa
-QCol
-Qspectre
-rclsid
-REBOOTPROMPT
-Redistributable
-REFCLSID
-removemanifest
-removepin
-removeportablefile
-repolibtest
-requeue
-rescap
-resetpins
-resheader
-resmimetype
-RESOLVESOURCE
-RESTAPI
-RESTARTAPPS
-resw
-resx
-rethrowing
-roadmap
-robuffer
-rowcount
-rubengustorage
-ruleset
-runas
-runsettings
-SANITIZERS
-Screenshot
-screenshots
-SCROLLVIEWER
-seinfo
-SERVICEPACKMAJOR
-SERVICEPACKMINOR
-setschemaversion
-setupexitcodes
-setvariable
-shcore
-SHELLEXEC
-SHELLEXECUTEINFOW
-shlobj
-Shlwapi
-SHTDN
-shtypes
-signtool
-silentwithprogress
-Silverlight
-simplesave
-simpletest
-sixel
-sixels
-sln
-sqlbuilder
-sqliteicu
-sqliteindex
-sqliteindexsource
-sqlitewrapper
-srwlock
-STARTUPINFO
-STATEACTION
-STATFLAG
-STATSTG
-STDAPI
-STGM
-storeedgefd
-stpkgmanvalwestustest
-STRINGID
-STRINGIZE
-STRSAFE
-subcontext
-SUBLANG
-subresource
-subselect
-substr
-SUPPRESSMSGBOXES
-SWIPECONTROL
-SYMED
-symlinktarget
-TARGETDIR
-targetentrypoint
-targetnametoken
-tdbuild
-tdd
-tempdb
-terabyte
-testcontainer
-testmoniker
-TESTPORTABLEFILE
-Testrun
-testsettingname
-TEXTFORMAT
-TEXTINCLUDE
-threadpool
-tpl
-TRACELOGGING
-triaged
-TRUSTEDPEOPLE
-UAC
-UACONLY
-uap
-UBool
-UBreak
-ubrk
-ucol
-UCollation
-UCollator
-UError
-UIF
-ULARGE
-und
-UNICODESTRING
-uninstalling
-Unmarshal
-unskipped
-untimes
-updatefile
-updatemanifest
-updatepin
-updateportablefile
-UPLEVEL
-uregex
-URegular
-urlmon
-USEREXIT
-userguide
-usersources
-utext
-valijson
-vcpkg
-vcvars
-vcxitems
-VERYSILENT
-VFT
-visualstudio
-VOS
-vso
-wapproj
-wcsicmp
-webpage
-WHOLECHAIN
-wil
-windbg
-wincrypt
-WINEVENT
-winget
-winhttp
-wininet
-winmd
-winmeta
-winres
-winrt
-winsqlite
-WINTRUST
-wix
-wmain
-WNS
-woah
-workflows
-wpfn
-wrl
-WTD
-wtypesbase
-Xamarin
-Xbox
-XElement
-Xlang
-XResource
-XTOKEN
-xunit
+github
+https
+ssh
+ubuntu
+workarounds
diff --git a/.github/actions/spelling/block-delimiters.list b/.github/actions/spelling/block-delimiters.list
new file mode 100644
index 00000000000..e6f7a1e6672
--- /dev/null
+++ b/.github/actions/spelling/block-delimiters.list
@@ -0,0 +1,27 @@
+# Public Keys
+-----BEGIN PUBLIC KEY-----
+-----END PUBLIC KEY-----
+
+# Private Keys
+-----BEGIN PRIVATE KEY-----
+-----END PRIVATE KEY-----
+
+# RSA Private Key
+-----BEGIN RSA PRIVATE KEY-----
+-----END RSA PRIVATE KEY-----
+
+# GPG Public Key
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+-----END PGP PUBLIC KEY BLOCK-----
+
+# GPG Signature
+-----BEGIN PGP SIGNATURE-----
+-----END PGP SIGNATURE-----
+
+# Certificates
+-----BEGIN CERTIFICATE-----
+-----END CERTIFICATE-----
+
+# All Contributors
+<!-- ALL-CONTRIBUTORS-LIST:START
+<!-- ALL-CONTRIBUTORS-LIST:END
diff --git a/.github/actions/spelling/candidate.patterns b/.github/actions/spelling/candidate.patterns
index b159d41dc00..b5d5f40f8a6 100644
--- a/.github/actions/spelling/candidate.patterns
+++ b/.github/actions/spelling/candidate.patterns
@@ -218,7 +218,7 @@ accounts\.binance\.com/[a-z/]*oauth/authorize\?[-0-9a-zA-Z&%]*
 \bmedium\.com/@?[^/\s"]+/[-\w]+
 
 # microsoft
-\b(?:https?://|)(?:(?:download\.visualstudio|docs|msdn2?|research)\.microsoft|blogs\.msdn)\.com/[-_a-zA-Z0-9()=./%]*
+\b(?:https?://|)(?:(?:(?:blogs|download\.visualstudio|docs|msdn2?|research)\.|)microsoft|blogs\.msdn)\.co(?:m|\.\w\w)/[-_a-zA-Z0-9()=./%]*
 # powerbi
 \bapp\.powerbi\.com/reportEmbed/[^"' ]*
 # vs devops
@@ -405,7 +405,7 @@ ipfs://[0-9a-zA-Z]{3,}
 # Punycode
 \bxn--[-0-9a-z]+
 # sha
-sha\d+:[0-9]*[a-f]{3,}[0-9a-f]*
+sha\d+:[0-9a-f]*?[a-f]{3,}[0-9a-f]*
 # sha-... -- uses a fancy capture
 (\\?['"]|&quot;)[0-9a-f]{40,}\g{-1}
 # hex runs
@@ -425,6 +425,9 @@ sha\d+:[0-9]*[a-f]{3,}[0-9a-f]*
 # pki
 -----BEGIN.*-----END
 
+# pki (base64)
+LS0tLS1CRUdJT.*
+
 # uuid:
 \b[0-9a-fA-F]{8}-(?:[0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}\b
 # hex digits including css/html color classes:
@@ -446,11 +449,23 @@ integrity=(['"])(?:\s*sha\d+-[-a-zA-Z=;:/0-9+]{40,})+\g{-1}
 Name\[[^\]]+\]=.*
 
 # IServiceProvider / isAThing
-(?:\b|_)(?:I|isA)(?=(?:[A-Z][a-z]{2,})+(?:[A-Z]|\b))
+(?:\b|_)(?:(?:ns|)I|isA)(?=(?:[A-Z][a-z]{2,})+(?:[A-Z\d]|\b))
 
 # crypt
 (['"])\$2[ayb]\$.{56}\g{-1}
 
+# apache/old crypt
+(['"]|)\$+(?:apr|)1\$+.{8}\$+.{22}\g{-1}
+
+# sha1 hash
+\{SHA\}[-a-zA-Z=;:/0-9+]{3,}
+
+# machine learning (?)
+#\b(?i)ml(?=[a-z]{2,})
+
+# python
+\b(?i)py(?!gments|gmy|lon|ramid|ro|th)(?=[a-z]{2,})
+
 # scrypt / argon
 \$(?:scrypt|argon\d+[di]*)\$\S+
 
@@ -463,8 +478,17 @@ Name\[[^\]]+\]=.*
 # scala modules
 ("[^"]+"\s*%%?\s*){2,3}"[^"]+"
 
+# container images
+image: [-\w./:@]+
+
+# Docker images
+^\s*FROM\s+\S+:\S+(?:\s+AS\s+\S+|)
+
+# `docker images` REPOSITORY TAG IMAGE ID CREATED SIZE
+\s*\S+/\S+\s+\S+\s+[0-9a-f]{8,}\s+\d+\s+(?:hour|day|week)s ago\s+[\d.]+[KMGT]B
+
 # Intel intrinsics
-_mm_\w+
+_mm_(?!dd)\w+
 
 # Input to GitHub JSON
 content: (['"])[-a-zA-Z=;:/0-9+]*=\g{-1}
@@ -473,15 +497,15 @@ content: (['"])[-a-zA-Z=;:/0-9+]*=\g{-1}
 # you'll want to remove the `(?=.*?")` suffix.
 # The `(?=.*?")` suffix should limit the false positives rate
 # printf
-#%(?:(?:(?:hh?|ll?|[jzt])?[diuoxn]|l?[cs]|L?[fega]|p)(?=[a-z]{2,})|(?:X|L?[FEGA]|p)(?=[a-zA-Z]{2,}))(?!%)(?=[_a-zA-Z]+(?!%)\b)(?=.*?['"])
+%(?:(?:(?:hh?|ll?|[jzt])?[diuoxn]|l?[cs]|L?[fega]|p)(?=[a-z]{2,})|(?:X|L?[FEGA])(?=[a-zA-Z]{2,}))(?!%)(?=[_a-zA-Z]+(?!%)\b)(?=.*?['"])
 
 # Alternative printf
 # %s
-%(?:s(?=[a-z]{2,}))(?!%)(?=[_a-zA-Z]+(?!%)\b)(?=.*?['"])
+%(?:s(?=[a-z]{2,}))(?!%)(?=[_a-zA-Z]+(?!%[^s])\b)(?=.*?['"])
 
 # Python string prefix / binary prefix
 # Note that there's a high false positive rate, remove the `?=` and search for the regex to see if the matches seem like reasonable strings
-(?<!['"])\b(?:B|BR|Br|F|FR|Fr|R|RB|RF|Rb|Rf|U|UR|Ur|b|bR|br|f|fR|fr|r|rB|rF|rb|rf|u|uR|ur)['"](?=[A-Z]{3,}|[A-Z][a-z]{2,}|[a-z]{3,})
+#(?<!['"])\b(?:B|BR|Br|F|FR|Fr|R|RB|RF|Rb|Rf|U|UR|Ur|b|bR|br|f|fR|fr|r|rB|rF|rb|rf|u|uR|ur)['"](?=[A-Z]{3,}|[A-Z][a-z]{2,}|[a-z]{3,})
 
 # Regular expressions for (P|p)assword
 \([A-Z]\|[a-z]\)[a-z]+
@@ -535,6 +559,9 @@ go install(?:\s+[a-z]+\.[-@\w/.]+)+
 # jetbrains schema https://youtrack.jetbrains.com/issue/RSRP-489571
 urn:shemas-jetbrains-com
 
+# Debian changelog severity
+[-\w]+ \(.*\) (?:\w+|baseline|unstable|experimental); urgency=(?:low|medium|high|emergency|critical)\b
+
 # kubernetes pod status lists
 # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#pod-phase
 \w+(?:-\w+)+\s+\d+/\d+\s+(?:Running|Pending|Succeeded|Failed|Unknown)\s+
@@ -542,9 +569,15 @@ urn:shemas-jetbrains-com
 # kubectl - pods in CrashLoopBackOff
 \w+-[0-9a-f]+-\w+\s+\d+/\d+\s+CrashLoopBackOff\s+
 
+# kubernetes applications
+\.apps/[-\w]+
+
 # kubernetes object suffix
 -[0-9a-f]{10}-\w{5}\s
 
+# kubernetes crd patterns
+^\s*pattern: .*$
+
 # posthog secrets
 ([`'"])phc_[^"',]+\g{-1}
 
@@ -575,17 +608,25 @@ PrependWithABINamepsace
 (['"])[Bb]asic [-a-zA-Z=;:/0-9+]{3,}\g{-1}
 
 # base64 encoded content
-([`'"])[-a-zA-Z=;:/0-9+]{3,}=\g{-1}
+#([`'"])[-a-zA-Z=;:/0-9+]{3,}=\g{-1}
 # base64 encoded content in xml/sgml
 >[-a-zA-Z=;:/0-9+]{3,}=</
 # base64 encoded content, possibly wrapped in mime
 #(?:^|[\s=;:?])[-a-zA-Z=;:/0-9+]{50,}(?:[\s=;:?]|$)
 # base64 encoded json
 \beyJ[-a-zA-Z=;:/0-9+]+
+# base64 encoded pkcs
+\bMII[-a-zA-Z=;:/0-9+]+
+
+# DNS rr data
+(?:\d+\s+){3}(?:[-+/=.\w]{2,}\s*){1,2}
 
 # encoded-word
 =\?[-a-zA-Z0-9"*%]+\?[BQ]\?[^?]{0,75}\?=
 
+# numerator
+\bnumer\b(?=.*denom)
+
 # Time Zones
 \b(?:Africa|Atlantic|America|Antarctica|Asia|Australia|Europe|Indian|Pacific)(?:/\w+)+
 
@@ -605,6 +646,12 @@ systemd.*?running in system mode \([-+].*\)$
 (?:(?:\w|\s|[,.])*\b(?i)(?:amet|consectetur|cursus|dolor|eros|ipsum|lacus|libero|ligula|lorem|magna|neque|nulla|suscipit|tempus)\b(?:\w|\s|[,.])*)
 
 # Non-English
+# Even repositories expecting pure English content can unintentionally have Non-English content... People will occasionally mistakenly enter [homoglyphs](https://en.wikipedia.org/wiki/Homoglyph) which are essentially typos, and using this pattern will mean check-spelling will not complain about them.
+#
+# If the content to be checked should be written in English and the only Non-English items will be people's names, then you can consider adding this.
+#
+# Alternatively, if you're using check-spelling v0.0.25+, and you would like to _check_ the Non-English content for spelling errors, you can. For information on how to do so, see:
+# https://docs.check-spelling.dev/Feature:-Configurable-word-characters.html#unicode
 [a-zA-Z]*[ÀÁÂÃÄÅÆČÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖØÙÚÛÜÝßàáâãäåæčçèéêëìíîïðñòóôõöøùúûüýÿĀāŁłŃńŅņŒœŚśŠšŜŝŸŽžź][a-zA-Z]{3}[a-zA-ZÀÁÂÃÄÅÆČÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖØÙÚÛÜÝßàáâãäåæčçèéêëìíîïðñòóôõöøùúûüýÿĀāŁłŃńŅņŒœŚśŠšŜŝŸŽžź]*|[a-zA-Z]{3,}[ÀÁÂÃÄÅÆČÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖØÙÚÛÜÝßàáâãäåæčçèéêëìíîïðñòóôõöøùúûüýÿĀāŁłŃńŅņŒœŚśŠšŜŝŸŽžź]|[ÀÁÂÃÄÅÆČÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖØÙÚÛÜÝßàáâãäåæčçèéêëìíîïðñòóôõöøùúûüýÿĀāŁłŃńŅņŒœŚśŠšŜŝŸŽžź][a-zA-Z]{3,}
 
 # highlighted letters
@@ -614,9 +661,6 @@ systemd.*?running in system mode \([-+].*\)$
 # This corpus only had capital letters, but you probably want lowercase ones as well.
 \b[LN]'+[a-z]{2,}\b
 
-# latex (check-spelling <= 0.0.21)
-\\(?:n(?:ew|ormal|osub)|r(?:enew)|t(?:able(?:of|)|he|itle))(?=[a-z]+)
-
 # latex (check-spelling >= 0.0.22)
 \\\w{2,}\{
 
@@ -629,8 +673,14 @@ TeX/AMS
 # eslint
 "varsIgnorePattern": ".+"
 
+# nolint
+nolint:\w+
+
 # Windows short paths
-[/\\][^/\\]{5,6}~\d{1,2}[/\\]
+[/\\][^/\\]{5,6}~\d{1,2}(?=[/\\])
+
+# Windows Resources with accelerators
+\b[A-Z]&[a-z]+\b(?!;)
 
 # cygwin paths
 /cygdrive/[a-zA-Z]/(?:Program Files(?: \(.*?\)| ?)(?:/[-+.~\\/()\w ]+)*|[-+.~\\/()\w])+
@@ -641,12 +691,18 @@ TeX/AMS
 # alternate printf markers if you run into latex and friends
 #(?<!\\)\\[nrt](?=[a-z]{2,})(?=.*['"`])
 
+# Markdown anchor links
+\(#\S*?[a-zA-Z]\S*?\)
+
 # apache
 a2(?:en|dis)
 
 # weak e-tag
 W/"[^"]+"
 
+# authors/credits
+^\*(?: [A-Z](?:\w+|\.)){2,} (?=\[|$)
+
 # the negative lookahead here is to allow catching 'templatesz' as a misspelling
 # but to otherwise recognize a Windows path with \templates\foo.template or similar:
 \\(?:necessary|r(?:elease|eport|esolve[dr]?|esult)|t(?:arget|emplates?))(?![a-z])
@@ -669,7 +725,7 @@ W/"[^"]+"
 ,-B
 
 # libraries
-\blib(?!erty|rar(?:i(?:an|es)|y))(?=[a-z])
+(?:\b|_)lib(?:re(?=office)|)(?!era[lt]|ero|erty|rar(?:i(?:an|es)|y))(?=[a-z])
 
 # WWNN/WWPN (NAA identifiers)
 \b(?:0x)?10[0-9a-f]{14}\b|\b(?:0x|3)?[25][0-9a-f]{15}\b|\b(?:0x|3)?6[0-9a-f]{31}\b
diff --git a/.github/actions/spelling/excludes.txt b/.github/actions/spelling/excludes.txt
index 749d52c6702..0ca112335ee 100644
--- a/.github/actions/spelling/excludes.txt
+++ b/.github/actions/spelling/excludes.txt
@@ -3,29 +3,27 @@
 (?:^|/)(?i)LICEN[CS]E
 (?:^|/)(?i)third[-_]?party/
 (?:^|/)3rdparty/
-(?:^|/)AUTHORS$
 (?:^|/)generated/
 (?:^|/)go\.sum$
+(?:^|/)Microsoft\.Management\.Deployment\.winmd$
 (?:^|/)package(?:-lock|)\.json$
 (?:^|/)Pipfile$
 (?:^|/)PSGet\.Resource\.psd1$
 (?:^|/)pyproject.toml
-(?:^|/)requirements(?:-dev|-doc|-test|)\.txt$
 (?:^|/)vendor/
-/ExternalModules/
-/shared\.manifest$
-/thirdparty/
+(?:^|/|\b)requirements(?:-dev|-doc|-test|)\.txt$
+/TestData/
+[^/]\.msi$
 \.a$
 \.ai$
 \.all-contributorsrc$
 \.avi$
 \.bmp$
 \.bz2$
-\.cer$
+\.cert?$|\.crt$
 \.class$
 \.coveragerc$
 \.crl$
-\.crt$
 \.csr$
 \.dll$
 \.docx?$
@@ -54,9 +52,6 @@
 \.mo$
 \.mod$
 \.mp[34]$
-\.msix$
-\.msi$
-\.msixbundle$
 \.o$
 \.ocf$
 \.otf$
@@ -65,14 +60,13 @@
 \.pdf$
 \.pem$
 \.pfx$
-(?i)\.png$
+\.png$
 \.psd$
 \.pyc$
 \.pylintrc$
 \.qm$
 \.s$
 \.sig$
-\.sln$
 \.so$
 \.svgz?$
 \.sys$
@@ -80,15 +74,9 @@
 \.tgz$
 \.tiff?$
 \.ttf$
-\.vcxitems$
-\.vcxproj$
-\.vcxproj\.filters$
-\.vdproj$
-\.wapproj$
 \.wav$
 \.webm$
 \.webp$
-\.winmd$
 \.woff2?$
 \.xcf$
 \.xlsx?$
@@ -98,20 +86,30 @@
 ^\.github/actions/spelling/
 ^\.github/policies/
 ^\.github/workflows/spelling\d*\.yml$
+^\Qsrc/AppInstallerCLICore/Commands/ExperimentalCommand.cpp\E$
+^\Qsrc/AppInstallerCLIE2ETests/TestData/Configuration/Empty.yml\E$
+^\Qsrc/AppInstallerCLIE2ETests/TestData/TëstPackage.msix\E$
+^\Qsrc/AppInstallerCLITests/TestData/index.1.0.0.0.msix\E$
+^\Qsrc/AppInstallerCLITests/TestData/index.1.0.0.0.signed.msix\E$
+^\Qsrc/AppInstallerCLITests/TestData/index.2.0.0.0.msix\E$
+^\Qsrc/AppInstallerCLITests/TestData/index.2.0.0.0.signed.msix\E$
+^\Qsrc/AppInstallerCLITests/TestData/InputARPData.txt\E$
+^\Qsrc/AppInstallerCLITests/TestData/Installer-Bad-NoSupportedPlatforms.msix\E$
+^\Qsrc/AppInstallerCLITests/TestData/Installer-Good-WithStub.msixbundle\E$
+^\Qsrc/AppInstallerCLITests/TestData/Installer-Good.msix\E$
+^\Qsrc/AppInstallerCLITests/TestData/Installer-Good.msixbundle\E$
+^\Qsrc/AppInstallerCLITests/TestData/Installer-Signed-Good.msix\E$
+^\Qsrc/AppInstallerCLITests/TestData/Installer-Signed-Good.msixbundle\E$
+^\Qsrc/AppInstallerCLITests/TestData/Node-Merge2.yaml\E$
+^\Qsrc/AppInstallerCLITests/TestData/TestSignedApp.msix\E$
 ^cgmanifest\.json$
 ^Localization/
 ^NOTICE
-^src/AppInstallerCLICore/Commands/ExperimentalCommand\.cpp$
-^src/AppInstallerCLIE2ETests/TestData/Configuration/Empty.yml$
-^src/AppInstallerCLITests/TestData/InputARPData.txt$
-^src/AppInstallerCLITests/TestData/InputNames.txt$
-^src/AppInstallerCLITests/TestData/InputPublishers.txt$
-^src/AppInstallerCLITests/TestData/NormalizationInitialIds.txt$
-^src/AppInstallerCommonCore/external/do.h$
+^src/AppInstallerCLIE2ETests/TestData/empty$
 ^src/catch2/
 ^src/cpprestsdk/
 ^src/JsonCppLib/
-^src/PowerShell/ExternalModules/PowerShellGet/2\.2\.5/Modules/
+^src/PowerShell/ExternalModules/
 ^src/PowerShell/Help/markdownlint.yaml$
 ^src/PureLib/
 ^src/SfsClient/
diff --git a/.github/actions/spelling/expect.txt b/.github/actions/spelling/expect.txt
index e1646184d69..e69de29bb2d 100644
--- a/.github/actions/spelling/expect.txt
+++ b/.github/actions/spelling/expect.txt
@@ -1,669 +0,0 @@
-AAD
-abcd
-abi
-ABORTIFHUNG
-accepteula
-ACCESSDENIED
-ACCESSTOKEN
-acl
-adjacents
-adml
-admx
-AFAIK
-aicli
-AICLIC
-AKV
-allusers
-alreadyinstalled
-AMap
-Amd
-amrutha
-ansistring
-Aot
-APARTMENTTHREADED
-apfn
-apicontract
-apiset
-appdata
-appinstallertest
-applic
-appname
-appshutdown
-APPTERMINATION
-archs
-ARMNT
-arp
-arphelper
-asan
-ASequence
-ashpatil
-Ashwini
-ASwitch
-Asn
-ASYNCRTIMP
-Atest
-ATL
-AType
-AUrl
-auxdata
-awgpm
-awgs
-azcopy
-azurewebsites
-Baz
-bcp
-BEFACEF
-bfd
-BFirst
-bght
-bigcatalog
-BITMAPINFOHEADER
-bitmask
-bkup
-blargle
-blockedbypolicy
-blogs
-bluetooth
-Bomgar
-BOMs
-boop
-boundparms
-bpp
-brk
-Browsable
-BSODs
-Buf
-BUILDOUTDIR
-buildtransitive
-cancelledbyuser
-casemap
-casemappings
-cch
-centralus
-certmgr
-certs
-cgi
-cinq
-CLASSNOTREG
-CLOSEAPP
-cloudapp
-clsctx
-clsid
-cmpwgc
-CMSG
-cnwgc
-cobertura
-CODEOWNERS
-codepage
-COINIT
-COMGLB
-commandline
-compressapi
-concurrencysal
-constexpr
-contactsupport
-contentfiles
-contosoinstaller
-contractversion
-copyable
-corecrt
-count'th
-countof
-countryregion
-Cov
-CPIL
-createmanifestmetadata
-cswinrt
-ctc
-CTL
-ctwgcy
-currentuser
-dacl
-datetimeoffset
-Dbg
-Dcom
-debian
-decompressor
-dedupe
-deigh
-deleteifnotneeded
-deliveryoptimization
-deliveryoptimizationerrors
-DENYWR
-desktopappinstaller
-devhome
-dic
-diskfull
-displaycatalog
-DMC
-dnld
-Dobbeleer
-DONOT
-dsc
-DUPLICATEALIAS
-dustojnikhummer
-dvinns
-dwgs
-dwrite
-ecfr
-ecfrbrowse
-EFGH
-efileresource
-ENDSESSION
-EQU
-ERANGE
-errcode
-errmsg
-ERRORONEXIT
-errstr
-ESRB
-etest
-etl
-ewgp
-ewgs
-execustom
-EXEHASH
-experimentalfeatures
-fdw
-fdwgp
-FECAFEB
-fedorapeople
-fileinuse
-filemode
-Filtercriteria
-Finalizers
-fintimes
-Fixfor
-flargle
-flexera
-FOF
-foldc
-foldcase
-FOLDERID
-FORPARSING
-foundfr
-fsanitize
-FULLMUTEX
-FULLWIDTH
-fundraiser
-fuzzer
-fzanollo
-gcpi
-GDK
-GES
-GESMBH
-getwinget
-GHS
-github
-gitlab
-gity
-goku
-Gomu
-GRPICONDIR
-GRPICONDIRENTRY
-guiddef
-Gumbalapura
-gwgc
-gwgcd
-gwgp
-gwgse
-gwgso
-gwgus
-gwgv
-Hackathon
-hashtables
-helplib
-helplibrary
-hhx
-highcontrast
-HINSTANCE
-hkey
-hlocal
-hmac
-hmodule
-Hostx
-Howto
-hre
-hresults
-hrow
-hwnd
-Hyperlink
-IARP
-IAttachment
-ICONDIR
-ICONDIRENTRY
-ICONIMAGE
-icu
-idl
-idx
-IFACEMETHODIMP
-iid
-IISOn
-img
-inet
-inproc
-Insta
-installinprogress
-INSTALLPROPERTY
-installshield
-instream
-insufficientmemory
-Intelli
-INTRESOURCE
-invalidparameter
-isable
-ishelp
-ISQ
-ISVs
-iswgp
-itr
-IWIC
-iwr
-iwgc
-JArray
-JDictionary
-jdk
-jfearn
-JObject
-jpalardy
-JREs
-jrsoftware
-jsoncpp
-JToken
-JValue
-Kaido
-KNOWNFOLDERID
-kool
-ktf
-LCID
-ldcase
-learnxinyminutes
-lhs
-LIBYAML
-liv
-liwpx
-localizationpriority
-localsource
-Logon
-LONGLONG
-LOWORD
-LPARAM
-LPBYTE
-LPCWSTR
-lpdw
-LPDWORD
-lpfn
-LPGRPICONDIR
-LPGRPICONDIRENTRY
-LPICONDIR
-LPICONDIRENTRY
-LPICONIMAGE
-lpitemidlist
-LPSTR
-lpsz
-LPVOID
-LPW
-LPWCH
-LPWSTR
-LRESULT
-LSTATUS
-LTDA
-luffy
-Luffytaro
-maclachlan
-Madhusudhan
-MAJORVERSION
-malware
-mapdatafolding
-Maxed
-MAXLENGTH
-maxvalue
-maybenull
-MBH
-MBs
-mday
-mdmp
-MDs
-megamorf
-microsoftentraid
-midl
-minexample
-minidump
-MINORVERSION
-minschema
-missingdependency
-mkgmtime
-MMmmbbbb
-mof
-monicka
-MPNS
-msdownload
-msft
-msftrubengu
-MSIHASH
-MSIXHASH
-MSIXSTRM
-msstore
-MSZIP
-mszyml
-Mugiwara
-Multideclaration
-mycustom
-myinstalldir
-mylog
-mysilent
-mysilentwithprogress
-mysource
-Nami
-nativehandle
-NBLGGH
-NESTEDINSTALLER
-netlify
-NETSDK
-Newtonsoft
-nlohmann
-NNS
-NOAGGREGATION
-NOCLOSE
-NOCRLF
-NOEXPAND
-NOLINKINFO
-nomem
-NONAME
-nonetwork
-NONFOLDERS
-nonterminated
-NOREMOVE
-normer
-NOSEARCH
-NOSEPARATOR
-notalostreference
-NOTAPROPERTY
-NOTIMPL
-notmatch
-NOTRACK
-NOUPDATE
-nowarn
-npmjs
-nsis
-NTFS
-nuffing
-objbase
-objidl
-ofile
-oid
-omus
-onefuzz
-oop
-opensource
-OPTOUT
-osfhandle
-oss
-outfile
-OUTOFMEMORY
-Outptr
-OVERLAPPEDWINDOW
-OWC
-packageinuse
-packageinusebyapplication
-PACL
-PARAMETERMAP
-pathparts
-Patil
-pbstr
-pcb
-PCCERT
-PCs
-pcwsz
-pdb
-PDWORD
-Peet
-peetdev
-PEGI
-pfn
-pgp
-Pherson
-pid
-pidl
-pidlist
-PKCS
-pkgmgr
-pkindex
-pkix
-placeholders
-PMS
-positionals
-posix
-powershellgallery
-pri
-PRIMARYKEY
-processthreads
-productcode
-PRODUCTICON
-proxystub
-pscustomobject
-pseudocode
-PSHOST
-psobject
-psz
-ptstr
-publickey
-PVD
-pvk
-pvm
-pwabuilder
-PWAs
-PWSTR
-QUERYENDSESSION
-qword
-RAII
-rebootinitiated
-rebootrequiredforinstall
-rebootrequiredtofinish
-redirector
-Redist
-REFIID
-REGDB
-regexes
-REGSAM
-REINSTALLMODE
-relativefilepath
-remoting
-removefile
-reparse
-repeatedkey
-REQS
-restsource
-RGBQUAD
-rgp
-rgpsz
-rhs
-riid
-Roblox
-ronomon
-Roronoa
-rosoft
-rowid
-roy
-rpwgpm
-RRF
-rrr
-rswgs
-RTTI
-runspace
-runtimeclass
-runtimes
-rwgch
-rwgs
-ryfu
-sacl
-SARL
-sas
-SASURL
-savepoint
-sawgc
-schematab
-Scm
-sddl
-secureobject
-securestring
-seof
-servercert
-servercertificate
-setmetadatabymanifestid
-SETTINGCHANGE
-SETTINGMAPPING
-sfs
-sfsclient
-SHCONTF
-shellapi
-SHGDN
-SHOWNORMAL
-sid
-Sideload
-SIGNATUREHASH
-silentpreferred
-similarissues
-similaritytolerance
-Skipx
-sku
-SLAPI
-SMTO
-SNAME
-sortof
-sourceforge
-SOURCESDIRECTORY
-sourceversion
-spamming
-SPAPI
-spwgc
-sqlite
-Srinivasan
-SRL
-srs
-startswith
-STDMETHODCALLTYPE
-storeapps
-storeorigin
-STRRET
-stylecop
-subdir
-subkey
-Sudarshan
-superstring
-swervy
-swgus
-SYD
-SYG
-sysrefcomp
-systemnotsupported
-Tagit
-TARG
-taskhostw
-tcs
-TEMPDIRECTORY
-templating
-temppath
-testexampleinstaller
-thiscouldbeapc
-threehundred
-timespan
-Tlg
-tombstoned
-transitioning
-trimstart
-ttl
-twgc
-twgus
-typedef
-typeparam
-UCase
-ucasemap
-UChars
-ucnv
-udwgp
-uec
-ULONGLONG
-UNAVAIL
-uninitialize
-unins
-uninstallation
-uninstaller
-uninstallprevious
-uninstalls
-unknwn
-Unknwnbase
-UNMARSHALING
-unparsable
-Unregisters
-unvirtualized
-UParse
-upgradable
-upgradecode
-URLZONE
-USEDEFAULT
-userfilesetting
-userprofile
-uswgp
-uwp
-VALUENAMECASE
-vclib
-versioned
-VERSIONINFO
-vns
-vsconfig
-vstest
-waitable
-wcex
-WDAG
-webpages
-Webserver
-website
-wesome
-wfsopen
-wgetenv
-Whatif
-WIC
-wildcards
-WINAPI
-wincodec
-windir
-windowsdeveloper
-winerror
-wingetconfigroot
-wingetcreate
-wingetdev
-wingetutil
-winreg
-winrtact
-winstring
-withstarts
-Wnd
-WNDCLASS
-WNDCLASSEX
-workaround
-WPARAM
-Wpp
-wpr
-wprp
-wputenv
-wsb
-wsl
-wsv
-wto
-wwinmain
-WZDNCRFJ
-xcopy
-XFile
-XManifest
-XMUGIWARAMODULE
-XName
-XPLATSTR
-XRESOURCEZORO
-xsi
-yamato
-yamlcreateps
-yao
-Zanollo
-ZIPHASH
-zoro
diff --git a/.github/actions/spelling/line_forbidden.patterns b/.github/actions/spelling/line_forbidden.patterns
index 58bbc703048..69925cb7045 100644
--- a/.github/actions/spelling/line_forbidden.patterns
+++ b/.github/actions/spelling/line_forbidden.patterns
@@ -15,16 +15,20 @@
 \b84600\b(?:.*\bday\b)
 
 # Should probably be `2006-01-02` (yyyy-mm-dd)
-\b2006-01-02\b
+# Assuming that the time is being passed to https://go.dev/src/time/format.go
+\b2006-02-01\b
 
 # Should probably be `YYYYMMDD`
 \b[Yy]{4}[Dd]{2}[Mm]{2}(?!.*[Yy]{4}[Dd]{2}[Mm]{2}).*$
 
+# Should be `a priori` or `and prior`
+(?i)(?<!posteriori)\sand priori\s
+
 # Should only be one of `a`, `an`, or `the`
 \b(?:(?:an?|the)\s+){2,}\b
 
 # Should be `anymore`
-\bany more[,.]
+#\bany more[,.]
 
 # Should be `'`
 (?i)\b(?:(?:i|s?he|they|what|who|you)"ll|(?:are|ca|did|do|does|ha[ds]|have|is|should|were|wo|would)n"t|(?:s?he|let|that|there|what|where|who)"s|(?:i|they|we|what|who|you)"ve)\b
@@ -32,6 +36,9 @@
 # Should be `briefcase`
 \bbrief-case\b
 
+# Should be `can, not only ..., ... also...`
+\bcan not only.*can also\b
+
 # Should be `cannot` (or `can't`)
 # See https://www.grammarly.com/blog/cannot-or-can-not/
 # > Don't use `can not` when you mean `cannot`. The only time you're likely to see `can not` written as separate words is when the word `can` happens to precede some other phrase that happens to start with `not`.
@@ -41,11 +48,26 @@
 # - if you encounter such a case, add a pattern for that case to patterns.txt.
 \b[Cc]an not\b
 
+# Do not use `(click) here` links
+# For more information, see:
+# * https://www.w3.org/QA/Tips/noClickHere
+# * https://webaim.org/techniques/hypertext/link_text
+# * https://granicus.com/blog/why-click-here-links-are-bad/
+# * https://heyoka.medium.com/dont-use-click-here-f32f445d1021
+(?:>|\[)(?:(?:click |)here|link|(?:read |)more)(?:</|\]\()(?!value>)
+
+# Should be `equals` to `is equal to`
+\bequals to\b
+
 # Should be `GitHub`
-(?<![&*.]|// |\btype )\bGithub\b(?![{)])
+(?<![&*.]|// |\b(?:from|import|type) )\bGithub\b(?![{()])
 
 # Should be `GitLab`
-(?<![&*.]|// |\btype )\bGitlab\b(?![{)])
+(?<![&*.]|// |\b(?:from|import|type) )\bGitlab\b(?![{()])
+
+# Should probably be `https://`...
+# Markdown generally doesn't assume that links are to urls
+\]\(www\.\w
 
 # Should be `JavaScript`
 \bJavascript\b
@@ -80,6 +102,15 @@
 # Should be `greater than`
 \bgreater then\b
 
+# Should be `has`
+\b[Ii]t only have\b
+
+# Should be `here-in`, `the`, `them`, `this`, `these` or reworded in some other way
+\bthe here(?:\.|,| (?!and|defined))
+
+# Should be `greater than`
+#\bhigher than\b
+
 # Should be `ID`
 #\bId\b
 
@@ -106,11 +137,23 @@
 # Should be `log in`
 \blogin to the
 
+# Should be `long-standing`
+\blong standing\b
+
+# Should probably be a person named `Nick` or the abbreviation `NIC`
+\bNic\b
+
+# Should be `not supposed`
+\bsupposed not\b
+
+# Should probably be `much more`
+\bmore much\b
+
 # Should be `perform its`
 \bperform it's\b
 
 # Should be `opt-in`
-#(?<!\sfor)\sopt in\s
+#(?<!\scan|for)(?<!\sif)\sopt in\s
 
 # Should be `less than`
 \bless then\b
@@ -122,7 +165,13 @@
 \bmute point\b
 
 # Should be `one of`
-\bon of\b
+(?<!-)\bon of\b
+
+# Should be `on the other hand`
+\b(?i)on another hand\b
+
+# Most people only have two hands. Reword.
+\b(?i)on the third hand\b
 
 # Should be `otherwise`
 \bother[- ]wise\b
@@ -163,6 +212,9 @@
 # Should be `prepopulate`
 [Pp]re[- ]populate
 
+# Should be `prerequisite`
+[Pp]re[- ]requisite
+
 # Should be `recently changed` or `recent changes`
 [Rr]ecent changed
 
@@ -172,11 +224,32 @@
 # Should be `reentrant`
 [Rr]e[- ]entrant
 
+# Should be `strong suit`
+\b(?:my|his|her|their) strong suite\b
+
 # Should be `understand`
 \bunder stand\b
 
 # Should be `URI` or `uri` unless it refers to a person named `Uri`
-#\bUri\b(?![(])
+#(?<!\.)\bUri\b(?![(])
+
+# Should be `it uses is`
+/\bis uses is\b/
+
+# Should be `uses it as`
+(?:^|\. |and )uses is as (?!an?\b|follows|livestock|[^.]+\s+as\b)
+
+# Should be `was`
+\bhas been(?= removed in v?\d)
+
+# Should be `where`
+\bwere they are\b
+
+# should be `vCenter`
+\bV[Cc]enter\b
+
+# Should be `VM`
+\bVm\b
 
 # Should be `workarounds`
 #\bwork[- ]arounds\b
@@ -187,11 +260,22 @@
 # Should be `worst`
 (?i)worse-case
 
+# Should be `you are not` or reworded
+\byour not\b
+
 # Should be `(coarse|fine)-grained`
 \b(?:coarse|fine) grained\b
 
+# Homoglyph (Cyrillic) should be `A`/`B`/`C`/`E`/`H`/`I`/`I`/`J`/`K`/`M`/`O`/`P`/`S`/`T`/`Y`
+# It's possible that your content is intentionally mixing Cyrllic and Latin scripts, but if it isn't, you definitely want to correct this.
+(?<=[A-Z]{2})[АВСЕНІӀЈКМОРЅТУ]|[АВСЕНІӀЈКМОРЅТУ](?=[A-Z]+(?:\b|[a-z]+)|[a-z]+(?:[^a-z]|$))
+
+# Homoglyph (Cyrillic) should be `a`/`b`/`e`
+# It's possible that your content is intentionally mixing Cyrllic and Latin scripts, but if it isn't, you definitely want to correct this.
+[аве](?=[A-Za-z]{2,})|(?<=[A-Za-z]{2})[аве]|(?<=[A-Za-z])[аве](?=[A-Za-z])
+
 # Should be `neither/nor` -- or reword
-#\bnot\b[^.?!"/(]+\bnor\b
+#(?!<do )\bnot\b([^.?!"/(](?!neither|,.*?,))+\bnor\b
 
 # Should be `neither/nor` (plus rewording the beginning)
 # This is probably a double negative...
diff --git a/.github/actions/spelling/patterns.txt b/.github/actions/spelling/patterns.txt
index 04978c43aca..49bb7ccb027 100644
--- a/.github/actions/spelling/patterns.txt
+++ b/.github/actions/spelling/patterns.txt
@@ -1,168 +1,94 @@
 # See https://github.com/check-spelling/check-spelling/wiki/Configuration-Examples:-patterns
 
-# hit-count: 7 file-count: 1
-# regex choice
-\(\?:[^)]+\|[^)]+\)
-
-\[[A-Z][a-z]\][a-z]+
-
-Regex::Expression \w+\{\s*R".*"
-
-"ContinuationToken"\s*:\s*"[^"]+"
-WinGetDevCLI_8wekyb3d8bbwe
-8wekyb3d8bbwe
-_tisf_sqliteReturnValue
-microsoft\.com/[^])">]*
-S[Hh][Aa]256: [0-9A-Fa-f]{64}
-SHA256::ConvertToBytes\("[0-9A-Fa-f]{64}"
-# data urls
-data:[a-zA-Z=;,/0-9+-]+
-# uuid:
-\b[0-9a-fA-F]{8}-(?:[0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}\b
-# hex digits including css/html color classes:
-(?:[\\0][xX]|\\u|[uU]\+|#|\%23)[0-9a-fA-FgGrR]{2,}[uU]?[lL]{0,2}\b
-"[0-9a-f]{32}"
-"[0-9a-f]{64}"
-# sha-1
-\b[0-9a-f]{40}\b
-El proyecto .* diferentes
-# Package family names and package full names
-\b[-_~.A-Za-z0-9]+_[a-z0-9]{13}\b
-# Locales for name normalization
-\b\p{Lu}{2,3}(?:-(?:CANS|CYRL|LATN|MONG))?-\p{Lu}{2}(?![A-Z])(?:-VALENCIA)?\b
-# Azure pipeline tasks
-- task: .*
-
-# Slash-prefixed patterns
-\\native(?![a-z])
-\\Release
-/NPH(?![a-z])
-/td(?![a-z])
-
-# .gitignore
-^\[[\w/[\]*.]*$
-
-# URLs -- Added here instead of allow.txt to facilitate wildcarding them as more are added
-http://rfc3161.gtm.corp.microsoft.com/TSS/HttpTspServer
-
-# schema regex
-"pattern": .*$
-
-# doc/ManifestSpecv1.0.md
-^ShortDescription: Le nouveau.*$
-
-# Ignore test patterns
-GetRestAPIBaseUri\(".*"\) == L".*"
-
-# fabricbot.json
-"(?:id|user)": "[-A-Za-z0-9_]*"
+\b[a-zA-Z]\[[a-zA-Z]{2,}\]\W
 
-# URL escaped characters
-\%[0-9A-F]{2}
-
-# some forms of `any more` are correct
-\battempt any more\b
-
-# Sample store product id for App Installer
-9nblggh4nns1
+REQUIRE(?:[_A-Z]+)\(.*\)
 
 # Automatically suggested patterns
-# hit-count: 407 file-count: 78
+
+# hit-count: 3076 file-count: 503
 # IServiceProvider / isAThing
-(?:\b|_)(?:[IT]|isA)(?=(?:[A-Z][a-z]{2,})+(?:[A-Z]|\b))
+(?:\b|_)(?:(?:ns|)I|isA)(?=(?:[A-Z][a-z]{2,})+(?:[A-Z\d]|\b))
 
-# hit-count: 13 file-count: 9
-# GitHub SHAs (markdown)
-(?:\[`?[0-9a-f]+`?\]\(https:/|)/(?:www\.|)github\.com(?:/[^/\s"]+){2,}(?:/[^/\s")]+)(?:[0-9a-f]+(?:[-0-9a-zA-Z/#.]*|)\b|)
+# hit-count: 1396 file-count: 96
+# uuid:
+\b[0-9a-fA-F]{8}-(?:[0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}\b
 
-# Compiler flags
-(?:^|[\t ,"'`=(])-[D](?!ata|ebug|ependency|epth|esktop|estination|ev|irectory|ownload)
-(?:^|[\t ,"'`=(])-[W](?!ait|arning|in|orking)
-(?:^|[\t ,"'`=(])-[l](?!og)
-(?:^|[\t ,"'`=(])-[f](?!eatures|ile|ind)
- -T(?=h[a-z]{2,})
+# hit-count: 366 file-count: 148
+# hex runs
+\b[0-9a-fA-F]{16,}\b
 
-# Automatically suggested patterns
-# hit-count: 30 file-count: 4
+# hit-count: 337 file-count: 135
+# microsoft
+\b(?:https?://|)(?:(?:(?:blogs|download\.visualstudio|docs|msdn2?|research)\.|)microsoft|blogs\.msdn)\.co(?:m|\.\w\w)/[-_a-zA-Z0-9()=./%]*
+
+# hit-count: 296 file-count: 23
 # version suffix <word>v#
 (?:(?<=[A-Z]{2})V|(?<=[a-z]{2}|[A-Z]{2})v)\d+(?:\b|(?=[a-zA-Z_]))
 
-# hit-count: 8 file-count: 4
-# libraries
-\b(?i)lib(?!elous|erty|rar(?:i(?:an|es)|y))(?=[a-z])
-
-# hit-count: 4 file-count: 4
-# Non-English
-[a-zA-Z]*[ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖØÙÚÛÜÝßàáâãäåæçèéêëìíîïðñòóôõöøùúûüýÿĀāŁłŃńŅņŒœŚśŠšŜŝŸŽžź][a-zA-Z]{3}[a-zA-ZÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖØÙÚÛÜÝßàáâãäåæçèéêëìíîïðñòóôõöøùúûüýÿĀāŁłŃńŅņŒœŚśŠšŜŝŸŽžź]*
+# hit-count: 171 file-count: 25
+# hex digits including css/html color classes:
+(?:[\\0][xX]|\\u|[uU]\+|#x?|%23)[0-9_a-fA-FgGrR]*?[a-fA-FgGrR]{2,}[0-9_a-fA-FgGrR]*(?:[uUlL]{0,3}|[iu]\d+)\b
 
-# hit-count: 3 file-count: 3
-# tar arguments
-\b(?:\\n|)g?tar(?:\.exe|)(?:(?:\s+--[-a-zA-Z]+|\s+-[a-zA-Z]+|\s[ABGJMOPRSUWZacdfh-pr-xz]+\b)(?:=[^ ]*|))+
+# hit-count: 157 file-count: 75
+# GitHub SHAs (markdown)
+(?:\[`?[0-9a-f]+`?\]\(https:/|)/(?:www\.|)github\.com(?:/[^/\s"]+){2,}(?:/[^/\s")]+)(?:[0-9a-f]+(?:[-0-9a-zA-Z/#.]*|)\b|)
 
-# hit-count: 3 file-count: 3
-# Python string prefix / binary prefix
-# Note that there's a high false positive rate, remove the `?=` and search for the regex to see if the matches seem like reasonable strings
-(?<!['"])\b(?:B|BR|Br|F|FR|Fr|R|RB|RF|Rb|Rf|U|UR|Ur|b|bR|br|f|fR|fr|r|rB|rF|rb|rf|u|uR|ur)['"](?=[A-Z]{3,}|[A-Z][a-z]{2,}|[a-z]{3,})
+# hit-count: 46 file-count: 17
+# base64 encoded pkcs
+\bMII[-a-zA-Z=;:/0-9+]+
 
-# hit-count: 3 file-count: 2
-# mailto urls
-mailto:[-a-zA-Z=;:/?%&0-9+@.]{3,}
+# hit-count: 35 file-count: 7
+# libraries
+(?:\b|_)lib(?:re(?=office)|)(?!era[lt]|ero|erty|rar(?:i(?:an|es)|y))(?=[a-z])
 
-# hit-count: 2 file-count: 1
-# data url
-data:[-a-zA-Z=;:/0-9+]*,\S*
+# hit-count: 14 file-count: 7
+# w3
+\bw3\.org/[-0-9a-zA-Z/#.]+
 
-# hit-count: 2 file-count: 1
-# stackexchange -- https://stackexchange.com/feeds/sites
-\b(?:askubuntu|serverfault|stack(?:exchange|overflow)|superuser).com/(?:questions/\w+/[-\w]+|a/)
+# hit-count: 13 file-count: 6
+# Alternatively, if you're using check-spelling v0.0.25+, and you would like to _check_ the Non-English content for spelling errors, you can. For information on how to do so, see:
+# https://docs.check-spelling.dev/Feature:-Configurable-word-characters.html#unicode
+[a-zA-Z]*[ÀÁÂÃÄÅÆČÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖØÙÚÛÜÝßàáâãäåæčçèéêëìíîïðñòóôõöøùúûüýÿĀāŁłŃńŅņŒœŚśŠšŜŝŸŽžź][a-zA-Z]{3}[a-zA-ZÀÁÂÃÄÅÆČÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖØÙÚÛÜÝßàáâãäåæčçèéêëìíîïðñòóôõöøùúûüýÿĀāŁłŃńŅņŒœŚśŠšŜŝŸŽžź]*|[a-zA-Z]{3,}[ÀÁÂÃÄÅÆČÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖØÙÚÛÜÝßàáâãäåæčçèéêëìíîïðñòóôõöøùúûüýÿĀāŁłŃńŅņŒœŚśŠšŜŝŸŽžź]|[ÀÁÂÃÄÅÆČÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖØÙÚÛÜÝßàáâãäåæčçèéêëìíîïðñòóôõöøùúûüýÿĀāŁłŃńŅņŒœŚśŠšŜŝŸŽžź][a-zA-Z]{3,}
 
-# hit-count: 1 file-count: 1
-# Google Groups
-\bgroups\.google\.com/(?:(?:forum/#!|d/)(?:msg|topics?|searchin)|a)/[^/\s"]+/[-a-zA-Z0-9$]+(?:/[-a-zA-Z0-9]+)*
-
-# hit-count: 1 file-count: 1
-# githubusercontent
-/[-a-z0-9]+\.githubusercontent\.com/[-a-zA-Z0-9?&=_\/.]*
+# hit-count: 10 file-count: 3
+# URL escaped characters
+%[0-9A-F][A-F](?=[A-Za-z])
 
-# hit-count: 1 file-count: 1
-# Wikipedia
-\ben\.wikipedia\.org/wiki/[-\w%.#]+
+# hit-count: 7 file-count: 3
+# Contributor
+\[[^\]]+\]\(https://github\.com/[^/\s"]+/?\)
 
-# hit-count: 1 file-count: 1
-# GitHub actions
-\buses:\s+[-\w.]+/[-\w./]+@[-\w.]+
+\bR(?:"\(.*\)"|".*?")
+"pattern":\s*".*"
 
-# hit-count: 4 file-count: 2
-# w3
-\bw3\.org/[-0-9a-zA-Z/#.]+
+# hit-count: 6 file-count: 4
+# Markdown anchor links
+\(#\S*?[a-zA-Z]\S*?\)
 
-# hit-count: 2 file-count: 2
-# hex runs
-\b[0-9a-fA-F]{16,}\b
+# hit-count: 4 file-count: 4
+# python
+\b(?i)py(?!gments|gmy|lon|ramid|ro|th)(?=[a-z]{2,})
 
-# hit-count: 1 file-count: 1
-# Contributor
-\[[^\]]+\]\(https://github\.com/[^/\s"]+\)
+# hit-count: 3 file-count: 3
+# mailto urls
+mailto:[-a-zA-Z=;:/?%&0-9+@._]{3,}
 
-# hit-count: 1 file-count: 1
-# GHSA
-GHSA(?:-[0-9a-z]{4}){3}
+# hit-count: 3 file-count: 3
+# githubusercontent
+/[-a-z0-9]+\.githubusercontent\.com/[-a-zA-Z0-9?&=_\/.]*
 
 # hit-count: 1 file-count: 1
 # hex in url queries
 =[0-9a-fA-F]*?(?:[A-F]{3,}|[a-f]{3,})[0-9a-fA-F]*?&
 
-# hit-count: 1 file-count: 1
-# hex digits including css/html color classes:
-(?:[\\0][xX]|\\u|[uU]\+|#x?|\%23)[0-9a-fA-FgGrR_]{2,}(?:[uUlL]{0,3}|u\d+)\b
-
-E2E
+# Questionably acceptable forms of `in to`
+# Personally, I prefer `log into`, but people object
+# https://www.tprteaching.com/log-into-log-in-to-login/
+\b(?:(?:[Ll]og(?:g(?=[a-z])|)|[Ss]ign)(?:ed|ing)?) in to\b
 
-# first-letter-bracketed-remainder
-\b\w\[[A-Za-z]{3,}\]
-
-# test
-ReplaceWhileCopying\(L.*\)
+# to opt in
+\bto opt in\b
 
 # acceptable duplicates
 # ls directory listings
@@ -171,15 +97,15 @@ ReplaceWhileCopying\(L.*\)
 \bmount\s+-t\s+(\w+)\s+\g{-1}\b
 # C types and repeated CSS values
 \s(Architecture|auto|buffalo|center|div|inherit|long|LONG|none|normal|solid|thin|transparent|very)(?: \g{-1})+\s
-# C struct
-\bstruct\s+(\w+)\s+\g{-1}\b
+# C enum and struct
+\b(?:enum|struct)\s+(\w+)\s+\g{-1}\b
 # go templates
 \s(\w+)\s+\g{-1}\s+\`(?:graphql|inject|json|yaml):
 # doxygen / javadoc / .net
 (?:[\\@](?:brief|defgroup|groupname|link|t?param|return|retval)|(?:public|private|\[Parameter(?:\(.+\)|)\])(?:\s+(?:static|override|readonly|required|virtual))*)(?:\s+\{\w+\}|)\s+(\w+)\s+\g{-1}\s
 
 # macOS file path
-/MacOS
+(?:Contents\W+|(?!iOS)/)MacOS\b
 
 # Python package registry has incorrect spelling for macOS / Mac OS X
 "Operating System :: MacOS :: MacOS X"
@@ -198,9 +124,3 @@ ReplaceWhileCopying\(L.*\)
 
 # ignore long runs of a single character:
 \b([A-Za-z])\g{-1}{3,}\b
-
-# devil fruits
-\s([A-Z]{3,}|[A-Z][a-z]{2,}|[a-z]{3,})\s\g{-1}\sno Mi
-
-# PowerShell Aliases defined in .cs files (not those in AliasesToExport in psd1 files)
-\[Alias\("[a-z]+"\)\]
diff --git a/.github/actions/spelling/reject.txt b/.github/actions/spelling/reject.txt
index 465ea35e43c..5cc86ef80c9 100644
--- a/.github/actions/spelling/reject.txt
+++ b/.github/actions/spelling/reject.txt
@@ -3,6 +3,7 @@
 benefitting
 occurences?
 ^dependan.*
+^diables?$
 ^oer$
 Sorce
 ^[Ss]pae.*
diff --git a/.github/workflows/spelling3.yml b/.github/workflows/spelling3.yml
index 004901df847..9c4953c95fb 100644
--- a/.github/workflows/spelling3.yml
+++ b/.github/workflows/spelling3.yml
@@ -91,26 +91,43 @@ jobs:
     steps:
       - name: check-spelling
         id: spelling
-        uses: check-spelling/check-spelling@v0.0.22
+        uses: check-spelling/check-spelling@prerelease
         with:
           suppress_push_for_open_pull_request: ${{ github.actor != 'dependabot[bot]' && 1 }}
           checkout: true
           check_file_names: 1
           post_comment: 0
           use_magic_file: 1
-          warnings: bad-regex,binary-file,deprecated-feature,ignored-expect-variant,large-file,limited-references,no-newline-at-eof,noisy-file,non-alpha-in-dictionary,token-is-substring,unexpected-line-ending,whitespace-in-dictionary,minified-file,unsupported-configuration,no-files-to-check
-          extra_dictionary_limit: 10
+          warnings: bad-regex,binary-file,deprecated-feature,ignored-expect-variant,large-file,limited-references,no-newline-at-eof,noisy-file,non-alpha-in-dictionary,token-is-substring,unexpected-line-ending,whitespace-in-dictionary,minified-file,unsupported-configuration,no-files-to-check,unclosed-block-ignore-begin,unclosed-block-ignore-end
+          use_sarif: ${{ (!github.event.pull_request || (github.event.pull_request.head.repo.full_name == github.repository)) && 1 }}
+          check_extra_dictionaries: ""
+          dictionary_source_prefixes: >
+            {
+            "cspell": "https://raw.githubusercontent.com/check-spelling/cspell-dicts/v20241114/dictionaries/"
+            }
           extra_dictionaries: |
-            cspell:cpp/src/compiler-msvc.txt
-            cspell:cpp/src/stdlib-c.txt
-            cspell:cpp/src/stdlib-cpp.txt
+            cspell:software-terms/softwareTerms.txt
+            cspell:cpp/stdlib-cpp.txt
             cspell:filetypes/filetypes.txt
-            cspell:fullstack/dict/fullstack.txt
-            cspell:powershell/dict/powershell.txt
-            cspell:software-terms/dict/softwareTerms.txt
+            cspell:cpp/stdlib-c.txt
+            cspell:php/php.txt
+            cspell:python/python/python-lib.txt
+            cspell:dotnet/dotnet.txt
+            cspell:golang/go.txt
+            cspell:cpp/compiler-msvc.txt
+            cspell:dart/dart.txt
+            cspell:html/html.txt
+            cspell:powershell/powershell.txt
+            cspell:aws/aws.txt
+            cspell:python/common/extra.txt
+            cspell:node/node.txt
+            cspell:npm/npm.txt
+            cspell:fullstack/fullstack.txt
+            cspell:java/java.txt
             cspell:csharp/csharp.txt
-            cspell:dotnet/dict/dotnet.txt
-          check_extra_dictionaries: ''
+            cspell:cpp/ecosystem.txt
+            cspell:typescript/typescript.txt
+            cspell:cpp/lang-keywords.txt
 
   comment-pr:
     name: Report (PR)
@@ -124,7 +141,7 @@ jobs:
     if: (success() || failure()) && needs.spelling.outputs.followup && contains(github.event_name, 'pull_request')
     steps:
       - name: comment
-        uses: check-spelling/check-spelling@v0.0.22
+        uses: check-spelling/check-spelling@prerelease
         with:
           checkout: true
           task: ${{ needs.spelling.outputs.followup }}