@@ -13,8 +13,7 @@ runs:
         SEGMENT_DOWNLOAD_TIMEOUT_MINS: '1'
       with:
         path: node_modules
-        # The postinstall script applies patches/ during npm ci, so patch changes must miss the cache.
-        key: ${{ runner.os }}-node_modules-${{ hashFiles('package*.json', 'patches/**') }}-${{ hashFiles('.github/actions/node-npm-setup/action.yml') }}
+        key: ${{ runner.os }}-node_modules-${{ hashFiles('package*.json') }}-${{ hashFiles('.github/actions/node-npm-setup/action.yml') }}
 
     # The npm download cache only helps npm ci, so skip its 153 MB restore when node_modules hits.
     - name: Setup Node.js
 
@@ -1,5 +1,5 @@
 ---
-applyTo: "src/**,.github/**,config/**,.devcontainer/**,**Dockerfile,package*.json"
+applyTo: "src/**,.github/**,config/**,.devcontainer/**,**Dockerfile,.dockerignore,package*.json"
 ---
 
 # Copilot code instructions for docs.github.com
 
@@ -34,13 +34,23 @@ jobs:
         run: npm run lint-content -- --paths content data --output-file /tmp/lint-results.json
 
       - name: Open issue in docs-content
-        if: ${{ always() && steps.linting-content-data.outcome == 'failure' }}
+        if: ${{ always() && steps.linting-content-data.outcome != 'skipped' }}
         env:
           GITHUB_TOKEN: ${{ secrets.DOCS_BOT_PAT_BASE }}
           REPORT_AUTHOR: docs-bot
           REPORT_LABEL: broken content markdown report
           REPORT_REPOSITORY: github/docs-content
-        run: npm run lint-report -- --path /tmp/lint-results.json
+          LINT_OUTCOME: ${{ steps.linting-content-data.outcome }}
+        # The linter exits 0 with warnings only, and writes no results file when the content is clean.
+        run: |
+          if [ -f /tmp/lint-results.json ]; then
+            npm run lint-report -- --path /tmp/lint-results.json
+          elif [ "$LINT_OUTCOME" != success ]; then
+            echo "Content linter failed without writing /tmp/lint-results.json"
+            exit 1
+          else
+            echo "No lint results to report"
+          fi
 
       - uses: ./.github/actions/create-workflow-failure-issue
         id: create-failure-issue
 
@@ -23,6 +23,7 @@ on:
       - 'config/**'
       - '.devcontainer/**'
       - '**Dockerfile'
+      - '.dockerignore'
       - 'package*.json'
       - .github/workflows/reviewers-docs-engineering.yml
 
@@ -85,7 +86,7 @@ jobs:
             exit 0
           fi
           lockfile=$(echo "$changed" | grep -c '^package-lock\.json$' || true)
-          other_eng=$(echo "$changed" | grep -cE '(\.tsx?$|\.scss$|^src/|^package\.json$|^\.github/|^config/|^\.devcontainer/|Dockerfile)' || true)
+          other_eng=$(echo "$changed" | grep -cE '(\.tsx?$|\.scss$|^src/|^package\.json$|^\.github/|^config/|^\.devcontainer/|Dockerfile|^\.dockerignore$)' || true)
           if [ "$lockfile" -gt 0 ] && [ "$other_eng" -eq 0 ]; then
             echo "lockfile_only=true" >> "$GITHUB_OUTPUT"
           else
 
@@ -43,7 +43,6 @@ FROM base AS all_deps
 USER node:node
 WORKDIR $APP_HOME
 COPY --chown=node:node package.json package-lock.json ./
-COPY --chown=node:node patches patches/
 RUN npm ci --registry https://registry.npmjs.org/
 
 FROM all_deps AS prod_deps
 
@@ -107,6 +107,8 @@ You can use the view to answer questions such as:
 
 For information about {% data variables.product.prodname_copilot_short %} allowances and how {% data variables.product.prodname_ai_credits_short %} are pooled across your enterprise, see [AUTOTITLE](/copilot/concepts/billing-and-usage/organizations-and-enterprises/billing).
 
+App attribution is not available in the **AI usage** view. To identify usage from a {% data variables.product.prodname_github_app %} installed on an organization, download an AI usage report. Use the “List app installations for an organization” REST API endpoint and match `app_client_id` in the report to `client_id` in the response. The response’s `app_slug` identifies the app, and `id` identifies the installation. See [AUTOTITLE](/rest/orgs/orgs#list-app-installations-for-an-organization). For report field definitions, see [AUTOTITLE](/billing/reference/billing-reports#usage-report-fields).
+
 For information about {% data variables.product.prodname_AS %} AI-credit billing, see [AUTOTITLE](/billing/concepts/product-billing/github-advanced-security#how-ai-feature-usage-is-billed).
 
 {% endif %}
 
@@ -68,6 +68,9 @@ The usage reports contain the following fields.
 | `net_amount`             | The billable amount of usage after applying the `discount_amount`. This is the amount that your account will be billed. `gross_amount - discount_amount = net_amount` |
 | `username`               | The user associated with the usage, if applicable. <br><br> Not included in the `Summarized usage report`. |
 | `organization`           | The organization associated with the usage, if applicable. |
+| {% ifversion copilot %} |
+| `app_client_id` | The client ID of the {% data variables.product.prodname_github_app %} associated with usage billed directly to an organization. Use this field with `organization` to identify an app installation. The field is empty for usage attributed to a user, {% data variables.product.prodname_actions %}, other {% data variables.product.company_short %}-owned apps, and usage from before app attribution was available. <br><br>Only available in the `AI usage report` |
+| {% endif %} |
 | `repository`             | The repository associated with the usage, if applicable. |
 | `workflow_path`          | The path of the {% data variables.product.prodname_actions %} workflow that generated the usage, if applicable. <br><br>Only available in the `Detailed usage report` |
 | `cost_center_name`       | The cost center associated with the usage, if applicable. |
 
@@ -29,6 +29,14 @@ The cost of an interaction depends on two things: the model and the number of to
 
 Code completions and {% data variables.copilot.next_edit_suggestions %} are **not** billed in {% data variables.product.prodname_ai_credits_short %}. They remain unlimited for all paid plans.
 
+## How is {% data variables.product.prodname_github_app %} usage billed?
+
+A {% data variables.product.prodname_github_app %} installed on an organization can use an installation access token to make {% data variables.product.prodname_copilot_short %} requests without a user signing in. The organization that owns the installation pays for the usage, and the organization’s model policies and spending controls apply.
+
+You cannot create a budget for an individual app or installation. This authentication method does not require the **Allow use of Copilot CLI billed to the organization** policy, which applies to a different authentication path.
+
+For information about approving access, identifying app usage, and blocking an app, see [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-organization/manage-app-copilot-access).
+
 ## How do {% data variables.product.prodname_ai_credits_short %} work?
 
 Each assigned {% data variables.product.prodname_copilot_short %} license comes with a monthly amount of **included {% data variables.product.prodname_ai_credits_short %}**: