From 70a3cee88d7ac8f86b0062419dd9003372e43bed Mon Sep 17 00:00:00 2001
From: Josh Soref <2119212+jsoref@users.noreply.github.com>
Date: Thu, 28 Nov 2024 21:59:06 -0500
Subject: [PATCH] Add check-spelling

---
 .github/actions/spelling/README.md            |   3 +-
 .../actions/spelling/block-delimiters.list    |  27 +++
 .github/actions/spelling/candidate.patterns   |  82 ++++++--
 .github/actions/spelling/excludes.txt         |  26 +--
 .github/actions/spelling/expect.txt           | 163 ++--------------
 .../actions/spelling/line_forbidden.patterns  |  98 +++++++++-
 .github/actions/spelling/patterns.txt         | 179 +++++++-----------
 .github/actions/spelling/reject.txt           |   1 +
 .github/workflows/spelling3.yml               |  41 ++--
 9 files changed, 310 insertions(+), 310 deletions(-)
 create mode 100644 .github/actions/spelling/block-delimiters.list

diff --git a/.github/actions/spelling/README.md b/.github/actions/spelling/README.md
index 01bb8c2e1e0..da6f2e9d9b5 100644
--- a/.github/actions/spelling/README.md
+++ b/.github/actions/spelling/README.md
@@ -12,6 +12,7 @@ File | Purpose | Format | Info
 [line_forbidden.patterns](line_forbidden.patterns) | Patterns to flag in checked lines | perl regular expression (order matters, first match wins) | [patterns](https://github.com/check-spelling/check-spelling/wiki/Configuration-Examples%3A-patterns)
 [expect.txt](expect.txt) | Expected words that aren't in the dictionary | one word per line (sorted, alphabetically) | [expect](https://github.com/check-spelling/check-spelling/wiki/Configuration#expect)
 [advice.md](advice.md) | Supplement for GitHub comment when unrecognized words are found | GitHub Markdown | [advice](https://github.com/check-spelling/check-spelling/wiki/Configuration-Examples%3A-advice)
+[block-delimiters.list](block-delimiters.list) | Define block begin/end markers to ignore lines of text | line with _literal string_ for **start** followed by line with _literal string_ for **end** | [block ignore](https://github.com/check-spelling/check-spelling/wiki/Feature%3A-Block-Ignore#status)
 
 Note: you can replace any of these files with a directory by the same name (minus the suffix)
-and then include multiple files inside that directory (with that suffix) to merge multiple files.
+and then include multiple files inside that directory (with that suffix) to merge multiple files together.
diff --git a/.github/actions/spelling/block-delimiters.list b/.github/actions/spelling/block-delimiters.list
new file mode 100644
index 00000000000..e6f7a1e6672
--- /dev/null
+++ b/.github/actions/spelling/block-delimiters.list
@@ -0,0 +1,27 @@
+# Public Keys
+-----BEGIN PUBLIC KEY-----
+-----END PUBLIC KEY-----
+
+# Private Keys
+-----BEGIN PRIVATE KEY-----
+-----END PRIVATE KEY-----
+
+# RSA Private Key
+-----BEGIN RSA PRIVATE KEY-----
+-----END RSA PRIVATE KEY-----
+
+# GPG Public Key
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+-----END PGP PUBLIC KEY BLOCK-----
+
+# GPG Signature
+-----BEGIN PGP SIGNATURE-----
+-----END PGP SIGNATURE-----
+
+# Certificates
+-----BEGIN CERTIFICATE-----
+-----END CERTIFICATE-----
+
+# All Contributors
+<!-- ALL-CONTRIBUTORS-LIST:START
+<!-- ALL-CONTRIBUTORS-LIST:END
diff --git a/.github/actions/spelling/candidate.patterns b/.github/actions/spelling/candidate.patterns
index b159d41dc00..b5d5f40f8a6 100644
--- a/.github/actions/spelling/candidate.patterns
+++ b/.github/actions/spelling/candidate.patterns
@@ -218,7 +218,7 @@ accounts\.binance\.com/[a-z/]*oauth/authorize\?[-0-9a-zA-Z&%]*
 \bmedium\.com/@?[^/\s"]+/[-\w]+
 
 # microsoft
-\b(?:https?://|)(?:(?:download\.visualstudio|docs|msdn2?|research)\.microsoft|blogs\.msdn)\.com/[-_a-zA-Z0-9()=./%]*
+\b(?:https?://|)(?:(?:(?:blogs|download\.visualstudio|docs|msdn2?|research)\.|)microsoft|blogs\.msdn)\.co(?:m|\.\w\w)/[-_a-zA-Z0-9()=./%]*
 # powerbi
 \bapp\.powerbi\.com/reportEmbed/[^"' ]*
 # vs devops
@@ -405,7 +405,7 @@ ipfs://[0-9a-zA-Z]{3,}
 # Punycode
 \bxn--[-0-9a-z]+
 # sha
-sha\d+:[0-9]*[a-f]{3,}[0-9a-f]*
+sha\d+:[0-9a-f]*?[a-f]{3,}[0-9a-f]*
 # sha-... -- uses a fancy capture
 (\\?['"]|&quot;)[0-9a-f]{40,}\g{-1}
 # hex runs
@@ -425,6 +425,9 @@ sha\d+:[0-9]*[a-f]{3,}[0-9a-f]*
 # pki
 -----BEGIN.*-----END
 
+# pki (base64)
+LS0tLS1CRUdJT.*
+
 # uuid:
 \b[0-9a-fA-F]{8}-(?:[0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}\b
 # hex digits including css/html color classes:
@@ -446,11 +449,23 @@ integrity=(['"])(?:\s*sha\d+-[-a-zA-Z=;:/0-9+]{40,})+\g{-1}
 Name\[[^\]]+\]=.*
 
 # IServiceProvider / isAThing
-(?:\b|_)(?:I|isA)(?=(?:[A-Z][a-z]{2,})+(?:[A-Z]|\b))
+(?:\b|_)(?:(?:ns|)I|isA)(?=(?:[A-Z][a-z]{2,})+(?:[A-Z\d]|\b))
 
 # crypt
 (['"])\$2[ayb]\$.{56}\g{-1}
 
+# apache/old crypt
+(['"]|)\$+(?:apr|)1\$+.{8}\$+.{22}\g{-1}
+
+# sha1 hash
+\{SHA\}[-a-zA-Z=;:/0-9+]{3,}
+
+# machine learning (?)
+#\b(?i)ml(?=[a-z]{2,})
+
+# python
+\b(?i)py(?!gments|gmy|lon|ramid|ro|th)(?=[a-z]{2,})
+
 # scrypt / argon
 \$(?:scrypt|argon\d+[di]*)\$\S+
 
@@ -463,8 +478,17 @@ Name\[[^\]]+\]=.*
 # scala modules
 ("[^"]+"\s*%%?\s*){2,3}"[^"]+"
 
+# container images
+image: [-\w./:@]+
+
+# Docker images
+^\s*FROM\s+\S+:\S+(?:\s+AS\s+\S+|)
+
+# `docker images` REPOSITORY TAG IMAGE ID CREATED SIZE
+\s*\S+/\S+\s+\S+\s+[0-9a-f]{8,}\s+\d+\s+(?:hour|day|week)s ago\s+[\d.]+[KMGT]B
+
 # Intel intrinsics
-_mm_\w+
+_mm_(?!dd)\w+
 
 # Input to GitHub JSON
 content: (['"])[-a-zA-Z=;:/0-9+]*=\g{-1}
@@ -473,15 +497,15 @@ content: (['"])[-a-zA-Z=;:/0-9+]*=\g{-1}
 # you'll want to remove the `(?=.*?")` suffix.
 # The `(?=.*?")` suffix should limit the false positives rate
 # printf
-#%(?:(?:(?:hh?|ll?|[jzt])?[diuoxn]|l?[cs]|L?[fega]|p)(?=[a-z]{2,})|(?:X|L?[FEGA]|p)(?=[a-zA-Z]{2,}))(?!%)(?=[_a-zA-Z]+(?!%)\b)(?=.*?['"])
+%(?:(?:(?:hh?|ll?|[jzt])?[diuoxn]|l?[cs]|L?[fega]|p)(?=[a-z]{2,})|(?:X|L?[FEGA])(?=[a-zA-Z]{2,}))(?!%)(?=[_a-zA-Z]+(?!%)\b)(?=.*?['"])
 
 # Alternative printf
 # %s
-%(?:s(?=[a-z]{2,}))(?!%)(?=[_a-zA-Z]+(?!%)\b)(?=.*?['"])
+%(?:s(?=[a-z]{2,}))(?!%)(?=[_a-zA-Z]+(?!%[^s])\b)(?=.*?['"])
 
 # Python string prefix / binary prefix
 # Note that there's a high false positive rate, remove the `?=` and search for the regex to see if the matches seem like reasonable strings
-(?<!['"])\b(?:B|BR|Br|F|FR|Fr|R|RB|RF|Rb|Rf|U|UR|Ur|b|bR|br|f|fR|fr|r|rB|rF|rb|rf|u|uR|ur)['"](?=[A-Z]{3,}|[A-Z][a-z]{2,}|[a-z]{3,})
+#(?<!['"])\b(?:B|BR|Br|F|FR|Fr|R|RB|RF|Rb|Rf|U|UR|Ur|b|bR|br|f|fR|fr|r|rB|rF|rb|rf|u|uR|ur)['"](?=[A-Z]{3,}|[A-Z][a-z]{2,}|[a-z]{3,})
 
 # Regular expressions for (P|p)assword
 \([A-Z]\|[a-z]\)[a-z]+
@@ -535,6 +559,9 @@ go install(?:\s+[a-z]+\.[-@\w/.]+)+
 # jetbrains schema https://youtrack.jetbrains.com/issue/RSRP-489571
 urn:shemas-jetbrains-com
 
+# Debian changelog severity
+[-\w]+ \(.*\) (?:\w+|baseline|unstable|experimental); urgency=(?:low|medium|high|emergency|critical)\b
+
 # kubernetes pod status lists
 # https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#pod-phase
 \w+(?:-\w+)+\s+\d+/\d+\s+(?:Running|Pending|Succeeded|Failed|Unknown)\s+
@@ -542,9 +569,15 @@ urn:shemas-jetbrains-com
 # kubectl - pods in CrashLoopBackOff
 \w+-[0-9a-f]+-\w+\s+\d+/\d+\s+CrashLoopBackOff\s+
 
+# kubernetes applications
+\.apps/[-\w]+
+
 # kubernetes object suffix
 -[0-9a-f]{10}-\w{5}\s
 
+# kubernetes crd patterns
+^\s*pattern: .*$
+
 # posthog secrets
 ([`'"])phc_[^"',]+\g{-1}
 
@@ -575,17 +608,25 @@ PrependWithABINamepsace
 (['"])[Bb]asic [-a-zA-Z=;:/0-9+]{3,}\g{-1}
 
 # base64 encoded content
-([`'"])[-a-zA-Z=;:/0-9+]{3,}=\g{-1}
+#([`'"])[-a-zA-Z=;:/0-9+]{3,}=\g{-1}
 # base64 encoded content in xml/sgml
 >[-a-zA-Z=;:/0-9+]{3,}=</
 # base64 encoded content, possibly wrapped in mime
 #(?:^|[\s=;:?])[-a-zA-Z=;:/0-9+]{50,}(?:[\s=;:?]|$)
 # base64 encoded json
 \beyJ[-a-zA-Z=;:/0-9+]+
+# base64 encoded pkcs
+\bMII[-a-zA-Z=;:/0-9+]+
+
+# DNS rr data
+(?:\d+\s+){3}(?:[-+/=.\w]{2,}\s*){1,2}
 
 # encoded-word
 =\?[-a-zA-Z0-9"*%]+\?[BQ]\?[^?]{0,75}\?=
 
+# numerator
+\bnumer\b(?=.*denom)
+
 # Time Zones
 \b(?:Africa|Atlantic|America|Antarctica|Asia|Australia|Europe|Indian|Pacific)(?:/\w+)+
 
@@ -605,6 +646,12 @@ systemd.*?running in system mode \([-+].*\)$
 (?:(?:\w|\s|[,.])*\b(?i)(?:amet|consectetur|cursus|dolor|eros|ipsum|lacus|libero|ligula|lorem|magna|neque|nulla|suscipit|tempus)\b(?:\w|\s|[,.])*)
 
 # Non-English
+# Even repositories expecting pure English content can unintentionally have Non-English content... People will occasionally mistakenly enter [homoglyphs](https://en.wikipedia.org/wiki/Homoglyph) which are essentially typos, and using this pattern will mean check-spelling will not complain about them.
+#
+# If the content to be checked should be written in English and the only Non-English items will be people's names, then you can consider adding this.
+#
+# Alternatively, if you're using check-spelling v0.0.25+, and you would like to _check_ the Non-English content for spelling errors, you can. For information on how to do so, see:
+# https://docs.check-spelling.dev/Feature:-Configurable-word-characters.html#unicode
 [a-zA-Z]*[ÀÁÂÃÄÅÆČÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖØÙÚÛÜÝßàáâãäåæčçèéêëìíîïðñòóôõöøùúûüýÿĀāŁłŃńŅņŒœŚśŠšŜŝŸŽžź][a-zA-Z]{3}[a-zA-ZÀÁÂÃÄÅÆČÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖØÙÚÛÜÝßàáâãäåæčçèéêëìíîïðñòóôõöøùúûüýÿĀāŁłŃńŅņŒœŚśŠšŜŝŸŽžź]*|[a-zA-Z]{3,}[ÀÁÂÃÄÅÆČÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖØÙÚÛÜÝßàáâãäåæčçèéêëìíîïðñòóôõöøùúûüýÿĀāŁłŃńŅņŒœŚśŠšŜŝŸŽžź]|[ÀÁÂÃÄÅÆČÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖØÙÚÛÜÝßàáâãäåæčçèéêëìíîïðñòóôõöøùúûüýÿĀāŁłŃńŅņŒœŚśŠšŜŝŸŽžź][a-zA-Z]{3,}
 
 # highlighted letters
@@ -614,9 +661,6 @@ systemd.*?running in system mode \([-+].*\)$
 # This corpus only had capital letters, but you probably want lowercase ones as well.
 \b[LN]'+[a-z]{2,}\b
 
-# latex (check-spelling <= 0.0.21)
-\\(?:n(?:ew|ormal|osub)|r(?:enew)|t(?:able(?:of|)|he|itle))(?=[a-z]+)
-
 # latex (check-spelling >= 0.0.22)
 \\\w{2,}\{
 
@@ -629,8 +673,14 @@ TeX/AMS
 # eslint
 "varsIgnorePattern": ".+"
 
+# nolint
+nolint:\w+
+
 # Windows short paths
-[/\\][^/\\]{5,6}~\d{1,2}[/\\]
+[/\\][^/\\]{5,6}~\d{1,2}(?=[/\\])
+
+# Windows Resources with accelerators
+\b[A-Z]&[a-z]+\b(?!;)
 
 # cygwin paths
 /cygdrive/[a-zA-Z]/(?:Program Files(?: \(.*?\)| ?)(?:/[-+.~\\/()\w ]+)*|[-+.~\\/()\w])+
@@ -641,12 +691,18 @@ TeX/AMS
 # alternate printf markers if you run into latex and friends
 #(?<!\\)\\[nrt](?=[a-z]{2,})(?=.*['"`])
 
+# Markdown anchor links
+\(#\S*?[a-zA-Z]\S*?\)
+
 # apache
 a2(?:en|dis)
 
 # weak e-tag
 W/"[^"]+"
 
+# authors/credits
+^\*(?: [A-Z](?:\w+|\.)){2,} (?=\[|$)
+
 # the negative lookahead here is to allow catching 'templatesz' as a misspelling
 # but to otherwise recognize a Windows path with \templates\foo.template or similar:
 \\(?:necessary|r(?:elease|eport|esolve[dr]?|esult)|t(?:arget|emplates?))(?![a-z])
@@ -669,7 +725,7 @@ W/"[^"]+"
 ,-B
 
 # libraries
-\blib(?!erty|rar(?:i(?:an|es)|y))(?=[a-z])
+(?:\b|_)lib(?:re(?=office)|)(?!era[lt]|ero|erty|rar(?:i(?:an|es)|y))(?=[a-z])
 
 # WWNN/WWPN (NAA identifiers)
 \b(?:0x)?10[0-9a-f]{14}\b|\b(?:0x|3)?[25][0-9a-f]{15}\b|\b(?:0x|3)?6[0-9a-f]{31}\b
diff --git a/.github/actions/spelling/excludes.txt b/.github/actions/spelling/excludes.txt
index 749d52c6702..b3931f6ec46 100644
--- a/.github/actions/spelling/excludes.txt
+++ b/.github/actions/spelling/excludes.txt
@@ -3,29 +3,28 @@
 (?:^|/)(?i)LICEN[CS]E
 (?:^|/)(?i)third[-_]?party/
 (?:^|/)3rdparty/
-(?:^|/)AUTHORS$
 (?:^|/)generated/
 (?:^|/)go\.sum$
+(?:^|/)Microsoft\.Management\.Deployment\.winmd$
 (?:^|/)package(?:-lock|)\.json$
 (?:^|/)Pipfile$
 (?:^|/)PSGet\.Resource\.psd1$
 (?:^|/)pyproject.toml
-(?:^|/)requirements(?:-dev|-doc|-test|)\.txt$
 (?:^|/)vendor/
+(?:^|/|\b)requirements(?:-dev|-doc|-test|)\.txt$
 /ExternalModules/
-/shared\.manifest$
-/thirdparty/
+/TestData/
+[^/]\.msi$
 \.a$
 \.ai$
 \.all-contributorsrc$
 \.avi$
 \.bmp$
 \.bz2$
-\.cer$
+\.cert?$|\.crt$
 \.class$
 \.coveragerc$
 \.crl$
-\.crt$
 \.csr$
 \.dll$
 \.docx?$
@@ -54,9 +53,6 @@
 \.mo$
 \.mod$
 \.mp[34]$
-\.msix$
-\.msi$
-\.msixbundle$
 \.o$
 \.ocf$
 \.otf$
@@ -65,7 +61,7 @@
 \.pdf$
 \.pem$
 \.pfx$
-(?i)\.png$
+\.png$
 \.psd$
 \.pyc$
 \.pylintrc$
@@ -88,7 +84,6 @@
 \.wav$
 \.webm$
 \.webp$
-\.winmd$
 \.woff2?$
 \.xcf$
 \.xlsx?$
@@ -102,17 +97,10 @@
 ^Localization/
 ^NOTICE
 ^src/AppInstallerCLICore/Commands/ExperimentalCommand\.cpp$
-^src/AppInstallerCLIE2ETests/TestData/Configuration/Empty.yml$
-^src/AppInstallerCLITests/TestData/InputARPData.txt$
-^src/AppInstallerCLITests/TestData/InputNames.txt$
-^src/AppInstallerCLITests/TestData/InputPublishers.txt$
-^src/AppInstallerCLITests/TestData/NormalizationInitialIds.txt$
-^src/AppInstallerCommonCore/external/do.h$
 ^src/catch2/
 ^src/cpprestsdk/
 ^src/JsonCppLib/
-^src/PowerShell/ExternalModules/PowerShellGet/2\.2\.5/Modules/
-^src/PowerShell/Help/markdownlint.yaml$
+^src/PowerShell/Help/markdownlint\.yaml$
 ^src/PureLib/
 ^src/SfsClient/
 ^src/UndockedRegFreeWinRT/
diff --git a/.github/actions/spelling/expect.txt b/.github/actions/spelling/expect.txt
index e1646184d69..c16318dab10 100644
--- a/.github/actions/spelling/expect.txt
+++ b/.github/actions/spelling/expect.txt
@@ -1,22 +1,16 @@
-AAD
-abcd
-abi
-ABORTIFHUNG
 accepteula
 ACCESSDENIED
 ACCESSTOKEN
-acl
+activetab
 adjacents
 adml
 admx
 AFAIK
+affle
 aicli
 AICLIC
-AKV
 allusers
 alreadyinstalled
-AMap
-Amd
 amrutha
 ansistring
 Aot
@@ -24,33 +18,25 @@ APARTMENTTHREADED
 apfn
 apicontract
 apiset
-appdata
 appinstallertest
 applic
 appname
 appshutdown
 APPTERMINATION
 archs
-ARMNT
 arp
 arphelper
-asan
 ASequence
 ashpatil
 Ashwini
 ASwitch
-Asn
 ASYNCRTIMP
 Atest
 ATL
-AType
-AUrl
 auxdata
 awgpm
 awgs
-azcopy
 azurewebsites
-Baz
 bcp
 BEFACEF
 bfd
@@ -58,22 +44,17 @@ BFirst
 bght
 bigcatalog
 BITMAPINFOHEADER
-bitmask
 bkup
 blargle
 blockedbypolicy
 blogs
-bluetooth
 Bomgar
 BOMs
 boop
 boundparms
 bpp
-brk
 Browsable
 BSODs
-Buf
-BUILDOUTDIR
 buildtransitive
 cancelledbyuser
 casemap
@@ -81,26 +62,19 @@ casemappings
 cch
 centralus
 certmgr
-certs
-cgi
 cinq
 CLASSNOTREG
 CLOSEAPP
 cloudapp
 clsctx
-clsid
 cmpwgc
-CMSG
 cnwgc
-cobertura
 CODEOWNERS
-codepage
 COINIT
 COMGLB
-commandline
 compressapi
+compschema
 concurrencysal
-constexpr
 contactsupport
 contentfiles
 contosoinstaller
@@ -110,21 +84,16 @@ corecrt
 count'th
 countof
 countryregion
-Cov
 CPIL
 createmanifestmetadata
 cswinrt
 ctc
-CTL
 ctwgcy
 currentuser
 dacl
 datetimeoffset
-Dbg
 Dcom
 debian
-decompressor
-dedupe
 deigh
 deleteifnotneeded
 deliveryoptimization
@@ -134,13 +103,11 @@ desktopappinstaller
 devhome
 dic
 diskfull
-displaycatalog
+DISPLAYCATALOG
 DMC
 dnld
 Dobbeleer
 DONOT
-dsc
-DUPLICATEALIAS
 dustojnikhummer
 dvinns
 dwgs
@@ -148,16 +115,11 @@ dwrite
 ecfr
 ecfrbrowse
 EFGH
-efileresource
+elous
 ENDSESSION
 EQU
-ERANGE
-errcode
-errmsg
 ERRORONEXIT
-errstr
 ESRB
-etest
 etl
 ewgp
 ewgs
@@ -169,9 +131,7 @@ fdwgp
 FECAFEB
 fedorapeople
 fileinuse
-filemode
 Filtercriteria
-Finalizers
 fintimes
 Fixfor
 flargle
@@ -184,17 +144,13 @@ FORPARSING
 foundfr
 fsanitize
 FULLMUTEX
-FULLWIDTH
 fundraiser
-fuzzer
 fzanollo
 gcpi
 GDK
-GES
 GESMBH
 getwinget
 GHS
-github
 gitlab
 gity
 goku
@@ -216,31 +172,21 @@ helplib
 helplibrary
 hhx
 highcontrast
-HINSTANCE
 hkey
-hlocal
-hmac
 hmodule
 Hostx
 Howto
 hre
 hresults
-hrow
 hwnd
-Hyperlink
 IARP
 IAttachment
-ICONDIR
 ICONDIRENTRY
 ICONIMAGE
-icu
 idl
-idx
 IFACEMETHODIMP
 iid
 IISOn
-img
-inet
 inproc
 Insta
 installinprogress
@@ -248,21 +194,19 @@ INSTALLPROPERTY
 installshield
 instream
 insufficientmemory
-Intelli
 INTRESOURCE
 invalidparameter
-isable
 ishelp
 ISQ
 ISVs
 iswgp
 itr
+iwgc
 IWIC
 iwr
-iwgc
 JArray
 JDictionary
-jdk
+JDKs
 jfearn
 JObject
 jpalardy
@@ -275,23 +219,17 @@ Kaido
 KNOWNFOLDERID
 kool
 ktf
-LCID
 ldcase
 learnxinyminutes
-lhs
 LIBYAML
 liv
 liwpx
 localizationpriority
 localsource
 Logon
-LONGLONG
 LOWORD
 LPARAM
-LPBYTE
-LPCWSTR
 lpdw
-LPDWORD
 lpfn
 LPGRPICONDIR
 LPGRPICONDIRENTRY
@@ -299,12 +237,9 @@ LPICONDIR
 LPICONDIRENTRY
 LPICONIMAGE
 lpitemidlist
-LPSTR
 lpsz
-LPVOID
 LPW
 LPWCH
-LPWSTR
 LRESULT
 LSTATUS
 LTDA
@@ -312,11 +247,9 @@ luffy
 Luffytaro
 maclachlan
 Madhusudhan
-MAJORVERSION
 malware
 mapdatafolding
 Maxed
-MAXLENGTH
 maxvalue
 maybenull
 MBH
@@ -327,9 +260,7 @@ MDs
 megamorf
 microsoftentraid
 midl
-minexample
 minidump
-MINORVERSION
 minschema
 missingdependency
 mkgmtime
@@ -352,16 +283,13 @@ mycustom
 myinstalldir
 mylog
 mysilent
-mysilentwithprogress
 mysource
-Nami
 nativehandle
 NBLGGH
 NESTEDINSTALLER
 netlify
 NETSDK
 Newtonsoft
-nlohmann
 NNS
 NOAGGREGATION
 NOCLOSE
@@ -369,40 +297,31 @@ NOCRLF
 NOEXPAND
 NOLINKINFO
 nomem
-NONAME
 nonetwork
 NONFOLDERS
 nonterminated
 NOREMOVE
 normer
 NOSEARCH
-NOSEPARATOR
 notalostreference
-NOTAPROPERTY
 NOTIMPL
-notmatch
 NOTRACK
-NOUPDATE
 nowarn
 npmjs
 nsis
-NTFS
 nuffing
 objbase
 objidl
-ofile
-oid
+ocid
 omus
 onefuzz
-oop
 opensource
-OPTOUT
+ORSEARCH
 osfhandle
 oss
-outfile
-OUTOFMEMORY
 Outptr
 OVERLAPPEDWINDOW
+overviewtab
 OWC
 packageinuse
 packageinusebyapplication
@@ -415,25 +334,16 @@ pcb
 PCCERT
 PCs
 pcwsz
-pdb
-PDWORD
-Peet
 peetdev
 PEGI
 pfn
 pgp
 Pherson
-pid
 pidl
 pidlist
-PKCS
 pkgmgr
 pkindex
-pkix
-placeholders
 PMS
-positionals
-posix
 powershellgallery
 pri
 PRIMARYKEY
@@ -442,12 +352,9 @@ productcode
 PRODUCTICON
 proxystub
 pscustomobject
-pseudocode
-PSHOST
 psobject
 psz
 ptstr
-publickey
 PVD
 pvk
 pvm
@@ -455,52 +362,35 @@ pwabuilder
 PWAs
 PWSTR
 QUERYENDSESSION
-qword
 RAII
 rebootinitiated
 rebootrequiredforinstall
 rebootrequiredtofinish
-redirector
 Redist
 REFIID
 REGDB
-regexes
 REGSAM
-REINSTALLMODE
-relativefilepath
-remoting
 removefile
-reparse
 repeatedkey
-REQS
 restsource
 RGBQUAD
 rgp
 rgpsz
-rhs
 riid
 Roblox
 ronomon
-Roronoa
-rosoft
-rowid
+rowids
 roy
 rpwgpm
 RRF
 rrr
 rswgs
-RTTI
-runspace
+rtc
 runtimeclass
-runtimes
 rwgch
 rwgs
 ryfu
 sacl
-SARL
-sas
-SASURL
-savepoint
 sawgc
 schematab
 Scm
@@ -519,12 +409,9 @@ SHCONTF
 shellapi
 SHGDN
 SHOWNORMAL
-sid
 Sideload
 SIGNATUREHASH
 silentpreferred
-similarissues
-similaritytolerance
 Skipx
 sku
 SLAPI
@@ -537,32 +424,25 @@ sourceversion
 spamming
 SPAPI
 spwgc
-sqlite
 Srinivasan
 SRL
 srs
-startswith
 STDMETHODCALLTYPE
 storeapps
 storeorigin
 STRRET
 stylecop
-subdir
-subkey
 Sudarshan
 superstring
 swervy
 swgus
 SYD
 SYG
-sysrefcomp
 systemnotsupported
 Tagit
 TARG
 taskhostw
 tcs
-TEMPDIRECTORY
-templating
 temppath
 testexampleinstaller
 thiscouldbeapc
@@ -572,11 +452,9 @@ Tlg
 tombstoned
 transitioning
 trimstart
-ttl
 twgc
 twgus
-typedef
-typeparam
+uac
 UCase
 ucasemap
 UChars
@@ -585,15 +463,12 @@ udwgp
 uec
 ULONGLONG
 UNAVAIL
-uninitialize
 unins
-uninstallation
 uninstaller
 uninstallprevious
 uninstalls
 unknwn
 Unknwnbase
-UNMARSHALING
 unparsable
 Unregisters
 unvirtualized
@@ -603,12 +478,10 @@ upgradecode
 URLZONE
 USEDEFAULT
 userfilesetting
-userprofile
 uswgp
 uwp
 VALUENAMECASE
 vclib
-versioned
 VERSIONINFO
 vns
 vsconfig
@@ -617,14 +490,12 @@ waitable
 wcex
 WDAG
 webpages
-Webserver
-website
+websites
 wesome
 wfsopen
 wgetenv
 Whatif
 WIC
-wildcards
 WINAPI
 wincodec
 windir
@@ -634,21 +505,18 @@ wingetconfigroot
 wingetcreate
 wingetdev
 wingetutil
-winreg
 winrtact
 winstring
+winui
 withstarts
-Wnd
 WNDCLASS
 WNDCLASSEX
-workaround
 WPARAM
 Wpp
 wpr
 wprp
 wputenv
 wsb
-wsl
 wsv
 wto
 wwinmain
@@ -662,7 +530,6 @@ XPLATSTR
 XRESOURCEZORO
 xsi
 yamato
-yamlcreateps
 yao
 Zanollo
 ZIPHASH
diff --git a/.github/actions/spelling/line_forbidden.patterns b/.github/actions/spelling/line_forbidden.patterns
index 58bbc703048..28cad312a2b 100644
--- a/.github/actions/spelling/line_forbidden.patterns
+++ b/.github/actions/spelling/line_forbidden.patterns
@@ -15,11 +15,15 @@
 \b84600\b(?:.*\bday\b)
 
 # Should probably be `2006-01-02` (yyyy-mm-dd)
-\b2006-01-02\b
+# Assuming that the time is being passed to https://go.dev/src/time/format.go
+\b2006-02-01\b
 
 # Should probably be `YYYYMMDD`
 \b[Yy]{4}[Dd]{2}[Mm]{2}(?!.*[Yy]{4}[Dd]{2}[Mm]{2}).*$
 
+# Should be `a priori` or `and prior`
+(?i)(?<!posteriori)\sand priori\s
+
 # Should only be one of `a`, `an`, or `the`
 \b(?:(?:an?|the)\s+){2,}\b
 
@@ -32,6 +36,9 @@
 # Should be `briefcase`
 \bbrief-case\b
 
+# Should be `can, not only ..., ... also...`
+\bcan not only.*can also\b
+
 # Should be `cannot` (or `can't`)
 # See https://www.grammarly.com/blog/cannot-or-can-not/
 # > Don't use `can not` when you mean `cannot`. The only time you're likely to see `can not` written as separate words is when the word `can` happens to precede some other phrase that happens to start with `not`.
@@ -41,11 +48,26 @@
 # - if you encounter such a case, add a pattern for that case to patterns.txt.
 \b[Cc]an not\b
 
+# Do not use `(click) here` links
+# For more information, see:
+# * https://www.w3.org/QA/Tips/noClickHere
+# * https://webaim.org/techniques/hypertext/link_text
+# * https://granicus.com/blog/why-click-here-links-are-bad/
+# * https://heyoka.medium.com/dont-use-click-here-f32f445d1021
+(?:>|\[)(?:(?:click |)here|link|(?:read |)more)(?:</|\]\()(?!value>)
+
+# Should be `equals` to `is equal to`
+\bequals to\b
+
 # Should be `GitHub`
-(?<![&*.]|// |\btype )\bGithub\b(?![{)])
+(?<![&*.]|// |\b(?:from|import|type) )\bGithub\b(?![{()])
 
 # Should be `GitLab`
-(?<![&*.]|// |\btype )\bGitlab\b(?![{)])
+(?<![&*.]|// |\b(?:from|import|type) )\bGitlab\b(?![{()])
+
+# Should probably be `https://`...
+# Markdown generally doesn't assume that links are to urls
+\]\(www\.\w
 
 # Should be `JavaScript`
 \bJavascript\b
@@ -80,6 +102,15 @@
 # Should be `greater than`
 \bgreater then\b
 
+# Should be `has`
+\b[Ii]t only have\b
+
+# Should be `here-in`, `the`, `them`, `this`, `these` or reworded in some other way
+\bthe here(?:\.|,| (?!and|defined))
+
+# Should be `greater than`
+#\bhigher than\b
+
 # Should be `ID`
 #\bId\b
 
@@ -106,11 +137,23 @@
 # Should be `log in`
 \blogin to the
 
+# Should be `long-standing`
+\blong standing\b
+
+# Should probably be a person named `Nick` or the abbreviation `NIC`
+\bNic\b
+
+# Should be `not supposed`
+\bsupposed not\b
+
+# Should probably be `much more`
+\bmore much\b
+
 # Should be `perform its`
 \bperform it's\b
 
 # Should be `opt-in`
-#(?<!\sfor)\sopt in\s
+#(?<!\scan|for)(?<!\sif)\sopt in\s
 
 # Should be `less than`
 \bless then\b
@@ -122,7 +165,13 @@
 \bmute point\b
 
 # Should be `one of`
-\bon of\b
+(?<!-)\bon of\b
+
+# Should be `on the other hand`
+\b(?i)on another hand\b
+
+# Most people only have two hands. Reword.
+\b(?i)on the third hand\b
 
 # Should be `otherwise`
 \bother[- ]wise\b
@@ -163,6 +212,9 @@
 # Should be `prepopulate`
 [Pp]re[- ]populate
 
+# Should be `prerequisite`
+[Pp]re[- ]requisite
+
 # Should be `recently changed` or `recent changes`
 [Rr]ecent changed
 
@@ -172,11 +224,32 @@
 # Should be `reentrant`
 [Rr]e[- ]entrant
 
+# Should be `strong suit`
+\b(?:my|his|her|their) strong suite\b
+
 # Should be `understand`
 \bunder stand\b
 
 # Should be `URI` or `uri` unless it refers to a person named `Uri`
-#\bUri\b(?![(])
+#(?<!\.)\bUri\b(?![(])
+
+# Should be `it uses is`
+/\bis uses is\b/
+
+# Should be `uses it as`
+(?:^|\. |and )uses is as (?!an?\b|follows|livestock|[^.]+\s+as\b)
+
+# Should be `was`
+\bhas been(?= removed in v?\d)
+
+# Should be `where`
+\bwere they are\b
+
+# should be `vCenter`
+\bV[Cc]enter\b
+
+# Should be `VM`
+\bVm\b
 
 # Should be `workarounds`
 #\bwork[- ]arounds\b
@@ -187,11 +260,22 @@
 # Should be `worst`
 (?i)worse-case
 
+# Should be `you are not` or reworded
+\byour not\b
+
 # Should be `(coarse|fine)-grained`
 \b(?:coarse|fine) grained\b
 
+# Homoglyph (Cyrillic) should be `A`/`B`/`C`/`E`/`H`/`I`/`I`/`J`/`K`/`M`/`O`/`P`/`S`/`T`/`Y`
+# It's possible that your content is intentionally mixing Cyrllic and Latin scripts, but if it isn't, you definitely want to correct this.
+(?<=[A-Z]{2})[АВСЕНІӀЈКМОРЅТУ]|[АВСЕНІӀЈКМОРЅТУ](?=[A-Z]+(?:\b|[a-z]+)|[a-z]+(?:[^a-z]|$))
+
+# Homoglyph (Cyrillic) should be `a`/`b`/`e`
+# It's possible that your content is intentionally mixing Cyrllic and Latin scripts, but if it isn't, you definitely want to correct this.
+[аве](?=[A-Za-z]{2,})|(?<=[A-Za-z]{2})[аве]|(?<=[A-Za-z])[аве](?=[A-Za-z])
+
 # Should be `neither/nor` -- or reword
-#\bnot\b[^.?!"/(]+\bnor\b
+#(?!<do )\bnot\b([^.?!"/(](?!neither|,.*?,))+\bnor\b
 
 # Should be `neither/nor` (plus rewording the beginning)
 # This is probably a double negative...
diff --git a/.github/actions/spelling/patterns.txt b/.github/actions/spelling/patterns.txt
index 04978c43aca..2cec1a91b81 100644
--- a/.github/actions/spelling/patterns.txt
+++ b/.github/actions/spelling/patterns.txt
@@ -1,65 +1,34 @@
 # See https://github.com/check-spelling/check-spelling/wiki/Configuration-Examples:-patterns
 
-# hit-count: 7 file-count: 1
-# regex choice
-\(\?:[^)]+\|[^)]+\)
+REQUIRE(?:[_A-Z]*)\(.*\)
 
-\[[A-Z][a-z]\][a-z]+
-
-Regex::Expression \w+\{\s*R".*"
+\bR(?:"\(.*\)"|".*?")
 
 "ContinuationToken"\s*:\s*"[^"]+"
-WinGetDevCLI_8wekyb3d8bbwe
+
 8wekyb3d8bbwe
 _tisf_sqliteReturnValue
-microsoft\.com/[^])">]*
-S[Hh][Aa]256: [0-9A-Fa-f]{64}
-SHA256::ConvertToBytes\("[0-9A-Fa-f]{64}"
-# data urls
-data:[a-zA-Z=;,/0-9+-]+
-# uuid:
-\b[0-9a-fA-F]{8}-(?:[0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}\b
-# hex digits including css/html color classes:
-(?:[\\0][xX]|\\u|[uU]\+|#|\%23)[0-9a-fA-FgGrR]{2,}[uU]?[lL]{0,2}\b
-"[0-9a-f]{32}"
-"[0-9a-f]{64}"
-# sha-1
-\b[0-9a-f]{40}\b
+
 El proyecto .* diferentes
+
 # Package family names and package full names
 \b[-_~.A-Za-z0-9]+_[a-z0-9]{13}\b
+
 # Locales for name normalization
 \b\p{Lu}{2,3}(?:-(?:CANS|CYRL|LATN|MONG))?-\p{Lu}{2}(?![A-Z])(?:-VALENCIA)?\b
+
 # Azure pipeline tasks
 - task: .*
 
-# Slash-prefixed patterns
-\\native(?![a-z])
-\\Release
-/NPH(?![a-z])
-/td(?![a-z])
-
-# .gitignore
-^\[[\w/[\]*.]*$
-
-# URLs -- Added here instead of allow.txt to facilitate wildcarding them as more are added
-http://rfc3161.gtm.corp.microsoft.com/TSS/HttpTspServer
-
 # schema regex
 "pattern": .*$
 
-# doc/ManifestSpecv1.0.md
+# doc/.../manifest.md
 ^ShortDescription: Le nouveau.*$
 
 # Ignore test patterns
 GetRestAPIBaseUri\(".*"\) == L".*"
 
-# fabricbot.json
-"(?:id|user)": "[-A-Za-z0-9_]*"
-
-# URL escaped characters
-\%[0-9A-F]{2}
-
 # some forms of `any more` are correct
 \battempt any more\b
 
@@ -67,102 +36,92 @@ GetRestAPIBaseUri\(".*"\) == L".*"
 9nblggh4nns1
 
 # Automatically suggested patterns
-# hit-count: 407 file-count: 78
+
+# hit-count: 3076 file-count: 503
 # IServiceProvider / isAThing
-(?:\b|_)(?:[IT]|isA)(?=(?:[A-Z][a-z]{2,})+(?:[A-Z]|\b))
+(?:\b|_)(?:(?:ns|)I|isA|T)(?=(?:[A-Z][a-z]{2,})+(?:[A-Z\d]|\b))
 
-# hit-count: 13 file-count: 9
-# GitHub SHAs (markdown)
-(?:\[`?[0-9a-f]+`?\]\(https:/|)/(?:www\.|)github\.com(?:/[^/\s"]+){2,}(?:/[^/\s")]+)(?:[0-9a-f]+(?:[-0-9a-zA-Z/#.]*|)\b|)
+# hit-count: 1396 file-count: 96
+# uuid:
+\b[0-9a-fA-F]{8}-(?:[0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}\b
 
-# Compiler flags
-(?:^|[\t ,"'`=(])-[D](?!ata|ebug|ependency|epth|esktop|estination|ev|irectory|ownload)
-(?:^|[\t ,"'`=(])-[W](?!ait|arning|in|orking)
-(?:^|[\t ,"'`=(])-[l](?!og)
-(?:^|[\t ,"'`=(])-[f](?!eatures|ile|ind)
- -T(?=h[a-z]{2,})
+# hit-count: 366 file-count: 148
+# hex runs
+\b[0-9a-fA-F]{16,}\b
 
-# Automatically suggested patterns
-# hit-count: 30 file-count: 4
+# hit-count: 337 file-count: 135
+# microsoft
+\b(?:https?://|)(?:(?:(?:blogs|download\.visualstudio|docs|msdn2?|research)\.|)microsoft|blogs\.msdn)\.co(?:m|\.\w\w)/[-_a-zA-Z0-9()=./%]*
+
+# hit-count: 296 file-count: 23
 # version suffix <word>v#
 (?:(?<=[A-Z]{2})V|(?<=[a-z]{2}|[A-Z]{2})v)\d+(?:\b|(?=[a-zA-Z_]))
 
-# hit-count: 8 file-count: 4
-# libraries
-\b(?i)lib(?!elous|erty|rar(?:i(?:an|es)|y))(?=[a-z])
-
-# hit-count: 4 file-count: 4
-# Non-English
-[a-zA-Z]*[ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖØÙÚÛÜÝßàáâãäåæçèéêëìíîïðñòóôõöøùúûüýÿĀāŁłŃńŅņŒœŚśŠšŜŝŸŽžź][a-zA-Z]{3}[a-zA-ZÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖØÙÚÛÜÝßàáâãäåæçèéêëìíîïðñòóôõöøùúûüýÿĀāŁłŃńŅņŒœŚśŠšŜŝŸŽžź]*
-
-# hit-count: 3 file-count: 3
-# tar arguments
-\b(?:\\n|)g?tar(?:\.exe|)(?:(?:\s+--[-a-zA-Z]+|\s+-[a-zA-Z]+|\s[ABGJMOPRSUWZacdfh-pr-xz]+\b)(?:=[^ ]*|))+
-
-# hit-count: 3 file-count: 3
-# Python string prefix / binary prefix
-# Note that there's a high false positive rate, remove the `?=` and search for the regex to see if the matches seem like reasonable strings
-(?<!['"])\b(?:B|BR|Br|F|FR|Fr|R|RB|RF|Rb|Rf|U|UR|Ur|b|bR|br|f|fR|fr|r|rB|rF|rb|rf|u|uR|ur)['"](?=[A-Z]{3,}|[A-Z][a-z]{2,}|[a-z]{3,})
+# hit-count: 171 file-count: 25
+# hex digits including css/html color classes:
+(?:[\\0][xX]|\\u|[uU]\+|#x?|%23)[0-9_a-fA-FgGrR]*?[a-fA-FgGrR]{2,}[0-9_a-fA-FgGrR]*(?:[uUlL]{0,3}|[iu]\d+)\b
 
-# hit-count: 3 file-count: 2
-# mailto urls
-mailto:[-a-zA-Z=;:/?%&0-9+@.]{3,}
+# hit-count: 157 file-count: 75
+# GitHub SHAs (markdown)
+(?:\[`?[0-9a-f]+`?\]\(https:/|)/(?:www\.|)github\.com(?:/[^/\s"]+){2,}(?:/[^/\s")]+)(?:[0-9a-f]+(?:[-0-9a-zA-Z/#.]*|)\b|)
 
-# hit-count: 2 file-count: 1
-# data url
-data:[-a-zA-Z=;:/0-9+]*,\S*
+# hit-count: 46 file-count: 17
+# base64 encoded pkcs
+\bMII[-a-zA-Z=;:/0-9+]+
 
-# hit-count: 2 file-count: 1
-# stackexchange -- https://stackexchange.com/feeds/sites
-\b(?:askubuntu|serverfault|stack(?:exchange|overflow)|superuser).com/(?:questions/\w+/[-\w]+|a/)
+# hit-count: 35 file-count: 7
+# libraries
+(?:\b|_)lib(?:re(?=office)|)(?!era[lt]|ero|erty|rar(?:i(?:an|es)|y))(?=[a-z])
 
-# hit-count: 1 file-count: 1
-# Google Groups
-\bgroups\.google\.com/(?:(?:forum/#!|d/)(?:msg|topics?|searchin)|a)/[^/\s"]+/[-a-zA-Z0-9$]+(?:/[-a-zA-Z0-9]+)*
+# hit-count: 14 file-count: 7
+# w3
+\bw3\.org/[-0-9a-zA-Z/#.]+
 
-# hit-count: 1 file-count: 1
-# githubusercontent
-/[-a-z0-9]+\.githubusercontent\.com/[-a-zA-Z0-9?&=_\/.]*
+# hit-count: 13 file-count: 6
+# Alternatively, if you're using check-spelling v0.0.25+, and you would like to _check_ the Non-English content for spelling errors, you can. For information on how to do so, see:
+# https://docs.check-spelling.dev/Feature:-Configurable-word-characters.html#unicode
+[a-zA-Z]*[ÀÁÂÃÄÅÆČÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖØÙÚÛÜÝßàáâãäåæčçèéêëìíîïðñòóôõöøùúûüýÿĀāŁłŃńŅņŒœŚśŠšŜŝŸŽžź][a-zA-Z]{3}[a-zA-ZÀÁÂÃÄÅÆČÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖØÙÚÛÜÝßàáâãäåæčçèéêëìíîïðñòóôõöøùúûüýÿĀāŁłŃńŅņŒœŚśŠšŜŝŸŽžź]*|[a-zA-Z]{3,}[ÀÁÂÃÄÅÆČÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖØÙÚÛÜÝßàáâãäåæčçèéêëìíîïðñòóôõöøùúûüýÿĀāŁłŃńŅņŒœŚśŠšŜŝŸŽžź]|[ÀÁÂÃÄÅÆČÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖØÙÚÛÜÝßàáâãäåæčçèéêëìíîïðñòóôõöøùúûüýÿĀāŁłŃńŅņŒœŚśŠšŜŝŸŽžź][a-zA-Z]{3,}
 
-# hit-count: 1 file-count: 1
-# Wikipedia
-\ben\.wikipedia\.org/wiki/[-\w%.#]+
+# hit-count: 10 file-count: 3
+# URL escaped characters
+%[0-9A-F][A-F](?=[A-Za-z])
 
-# hit-count: 1 file-count: 1
-# GitHub actions
-\buses:\s+[-\w.]+/[-\w./]+@[-\w.]+
+# hit-count: 7 file-count: 3
+# Contributor
+\[[^\]]+\]\(https://github\.com/[^/\s"]+/?\)
 
-# hit-count: 4 file-count: 2
-# w3
-\bw3\.org/[-0-9a-zA-Z/#.]+
+# hit-count: 6 file-count: 4
+# Markdown anchor links
+\(#\S*?[a-zA-Z]\S*?\)
 
-# hit-count: 2 file-count: 2
-# hex runs
-\b[0-9a-fA-F]{16,}\b
+# hit-count: 4 file-count: 4
+# python
+\b(?i)py(?!gments|gmy|lon|ramid|ro|th)(?=[a-z]{2,})
 
-# hit-count: 1 file-count: 1
-# Contributor
-\[[^\]]+\]\(https://github\.com/[^/\s"]+\)
+# hit-count: 3 file-count: 3
+# mailto urls
+mailto:[-a-zA-Z=;:/?%&0-9+@._]{3,}
 
-# hit-count: 1 file-count: 1
-# GHSA
-GHSA(?:-[0-9a-z]{4}){3}
+# hit-count: 3 file-count: 3
+# githubusercontent
+/[-a-z0-9]+\.githubusercontent\.com/[-a-zA-Z0-9?&=_\/.]*
 
 # hit-count: 1 file-count: 1
 # hex in url queries
 =[0-9a-fA-F]*?(?:[A-F]{3,}|[a-f]{3,})[0-9a-fA-F]*?&
 
-# hit-count: 1 file-count: 1
-# hex digits including css/html color classes:
-(?:[\\0][xX]|\\u|[uU]\+|#x?|\%23)[0-9a-fA-FgGrR_]{2,}(?:[uUlL]{0,3}|u\d+)\b
-
 E2E
 
 # first-letter-bracketed-remainder
 \b\w\[[A-Za-z]{3,}\]
 
-# test
-ReplaceWhileCopying\(L.*\)
+# Questionably acceptable forms of `in to`
+# Personally, I prefer `log into`, but people object
+# https://www.tprteaching.com/log-into-log-in-to-login/
+\b(?:(?:[Ll]og(?:g(?=[a-z])|)|[Ss]ign)(?:ed|ing)?) in to\b
+
+# to opt in
+\bto opt in\b
 
 # acceptable duplicates
 # ls directory listings
@@ -171,15 +130,15 @@ ReplaceWhileCopying\(L.*\)
 \bmount\s+-t\s+(\w+)\s+\g{-1}\b
 # C types and repeated CSS values
 \s(Architecture|auto|buffalo|center|div|inherit|long|LONG|none|normal|solid|thin|transparent|very)(?: \g{-1})+\s
-# C struct
-\bstruct\s+(\w+)\s+\g{-1}\b
+# C enum and struct
+\b(?:enum|struct)\s+(\w+)\s+\g{-1}\b
 # go templates
 \s(\w+)\s+\g{-1}\s+\`(?:graphql|inject|json|yaml):
 # doxygen / javadoc / .net
 (?:[\\@](?:brief|defgroup|groupname|link|t?param|return|retval)|(?:public|private|\[Parameter(?:\(.+\)|)\])(?:\s+(?:static|override|readonly|required|virtual))*)(?:\s+\{\w+\}|)\s+(\w+)\s+\g{-1}\s
 
 # macOS file path
-/MacOS
+(?:Contents\W+|(?!iOS)/)MacOS\b
 
 # Python package registry has incorrect spelling for macOS / Mac OS X
 "Operating System :: MacOS :: MacOS X"
diff --git a/.github/actions/spelling/reject.txt b/.github/actions/spelling/reject.txt
index 465ea35e43c..5cc86ef80c9 100644
--- a/.github/actions/spelling/reject.txt
+++ b/.github/actions/spelling/reject.txt
@@ -3,6 +3,7 @@
 benefitting
 occurences?
 ^dependan.*
+^diables?$
 ^oer$
 Sorce
 ^[Ss]pae.*
diff --git a/.github/workflows/spelling3.yml b/.github/workflows/spelling3.yml
index 004901df847..9c4953c95fb 100644
--- a/.github/workflows/spelling3.yml
+++ b/.github/workflows/spelling3.yml
@@ -91,26 +91,43 @@ jobs:
     steps:
       - name: check-spelling
         id: spelling
-        uses: check-spelling/check-spelling@v0.0.22
+        uses: check-spelling/check-spelling@prerelease
         with:
           suppress_push_for_open_pull_request: ${{ github.actor != 'dependabot[bot]' && 1 }}
           checkout: true
           check_file_names: 1
           post_comment: 0
           use_magic_file: 1
-          warnings: bad-regex,binary-file,deprecated-feature,ignored-expect-variant,large-file,limited-references,no-newline-at-eof,noisy-file,non-alpha-in-dictionary,token-is-substring,unexpected-line-ending,whitespace-in-dictionary,minified-file,unsupported-configuration,no-files-to-check
-          extra_dictionary_limit: 10
+          warnings: bad-regex,binary-file,deprecated-feature,ignored-expect-variant,large-file,limited-references,no-newline-at-eof,noisy-file,non-alpha-in-dictionary,token-is-substring,unexpected-line-ending,whitespace-in-dictionary,minified-file,unsupported-configuration,no-files-to-check,unclosed-block-ignore-begin,unclosed-block-ignore-end
+          use_sarif: ${{ (!github.event.pull_request || (github.event.pull_request.head.repo.full_name == github.repository)) && 1 }}
+          check_extra_dictionaries: ""
+          dictionary_source_prefixes: >
+            {
+            "cspell": "https://raw.githubusercontent.com/check-spelling/cspell-dicts/v20241114/dictionaries/"
+            }
           extra_dictionaries: |
-            cspell:cpp/src/compiler-msvc.txt
-            cspell:cpp/src/stdlib-c.txt
-            cspell:cpp/src/stdlib-cpp.txt
+            cspell:software-terms/softwareTerms.txt
+            cspell:cpp/stdlib-cpp.txt
             cspell:filetypes/filetypes.txt
-            cspell:fullstack/dict/fullstack.txt
-            cspell:powershell/dict/powershell.txt
-            cspell:software-terms/dict/softwareTerms.txt
+            cspell:cpp/stdlib-c.txt
+            cspell:php/php.txt
+            cspell:python/python/python-lib.txt
+            cspell:dotnet/dotnet.txt
+            cspell:golang/go.txt
+            cspell:cpp/compiler-msvc.txt
+            cspell:dart/dart.txt
+            cspell:html/html.txt
+            cspell:powershell/powershell.txt
+            cspell:aws/aws.txt
+            cspell:python/common/extra.txt
+            cspell:node/node.txt
+            cspell:npm/npm.txt
+            cspell:fullstack/fullstack.txt
+            cspell:java/java.txt
             cspell:csharp/csharp.txt
-            cspell:dotnet/dict/dotnet.txt
-          check_extra_dictionaries: ''
+            cspell:cpp/ecosystem.txt
+            cspell:typescript/typescript.txt
+            cspell:cpp/lang-keywords.txt
 
   comment-pr:
     name: Report (PR)
@@ -124,7 +141,7 @@ jobs:
     if: (success() || failure()) && needs.spelling.outputs.followup && contains(github.event_name, 'pull_request')
     steps:
       - name: comment
-        uses: check-spelling/check-spelling@v0.0.22
+        uses: check-spelling/check-spelling@prerelease
         with:
           checkout: true
           task: ${{ needs.spelling.outputs.followup }}