Update generated README

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

.actrc

@@ -0,0 +1,5 @@
+--container-architecture=linux/amd64
+--secret GITHUB_TOKEN=$(gh auth token)
+--var GITHUB_SHA=$(git rev-parse --short main)
+--var DOCKER_HOST=$(docker context inspect --format '{{.Endpoints.docker.Host}}')
+--action-offline-mode

.browserslistrc

@@ -0,0 +1,2 @@
+extends @ivuorinen/browserslist-config
+

.checkov.yaml

@@ -0,0 +1,2 @@
+skip-check:
+  - CKV2_GHA_1

.commitlintrc.json

@@ -0,0 +1,3 @@
+{
+  "extends": ["@ivuorinen/commitlint-config"]
+}

.editorconfig

@@ -42,4 +42,4 @@ tab_width = 4
 tab_width = 4
 
 [{*.md,.github/workflows/*.yml}]
-max_line_length = 300
+max_line_length = 1000

.envrc

@@ -0,0 +1 @@
+use asdf

.github/labels.yml

@@ -1,164 +1,164 @@
 ---
-- name: "breaking-change"
+- name: 'breaking-change'
   color: ee0701
-  description: "A breaking change for existing users."
-- name: "bugfix"
+  description: 'A breaking change for existing users.'
+- name: 'bugfix'
   color: ee0701
-  description: "Inconsistencies or issues which will cause a problem for users or implementors."
-- name: "documentation"
+  description: 'Inconsistencies or issues which will cause a problem for users or implementors.'
+- name: 'documentation'
   color: 0052cc
-  description: "Solely about the documentation of the project."
-- name: "enhancement"
+  description: 'Solely about the documentation of the project.'
+- name: 'enhancement'
   color: 1d76db
-  description: "Enhancement of the code, not introducing new features."
-- name: "refactor"
+  description: 'Enhancement of the code, not introducing new features.'
+- name: 'refactor'
   color: 1d76db
-  description: "Improvement of existing code, not introducing new features."
-- name: "performance"
+  description: 'Improvement of existing code, not introducing new features.'
+- name: 'performance'
   color: 1d76db
-  description: "Improving performance, not introducing new features."
-- name: "new-feature"
+  description: 'Improving performance, not introducing new features.'
+- name: 'new-feature'
   color: 0e8a16
-  description: "New features or options."
-- name: "maintenance"
+  description: 'New features or options.'
+- name: 'maintenance'
   color: 2af79e
-  description: "Generic maintenance tasks."
-- name: "ci"
+  description: 'Generic maintenance tasks.'
+- name: 'ci'
   color: 1d76db
-  description: "Work that improves the continue integration."
-- name: "dependencies"
+  description: 'Work that improves the continue integration.'
+- name: 'dependencies'
   color: 1d76db
-  description: "Upgrade or downgrade of project dependencies."
-- name: "translations"
+  description: 'Upgrade or downgrade of project dependencies.'
+- name: 'translations'
   color: d4c5f9
-  description: "Impacts translations."
+  description: 'Impacts translations.'
 
-- name: "in-progress"
+- name: 'in-progress'
   color: fbca04
-  description: "Issue is currently being resolved by a developer."
-- name: "stale"
+  description: 'Issue is currently being resolved by a developer.'
+- name: 'stale'
   color: fef2c0
-  description: "There has not been activity on this issue or PR for quite some time."
-- name: "no-stale"
+  description: 'There has not been activity on this issue or PR for quite some time.'
+- name: 'no-stale'
   color: fef2c0
-  description: "This issue or PR is exempted from the stable bot."
+  description: 'This issue or PR is exempted from the stable bot.'
 
-- name: "security"
+- name: 'security'
   color: ee0701
-  description: "Marks a security issue that needs to be resolved asap."
-- name: "incomplete"
+  description: 'Marks a security issue that needs to be resolved asap.'
+- name: 'incomplete'
   color: fef2c0
-  description: "Marks a PR or issue that is missing information."
-- name: "invalid"
+  description: 'Marks a PR or issue that is missing information.'
+- name: 'invalid'
   color: fef2c0
-  description: "Marks a PR or issue that is missing information."
+  description: 'Marks a PR or issue that is missing information.'
 
-- name: "beginner-friendly"
+- name: 'beginner-friendly'
   color: 0e8a16
-  description: "Good first issue for people wanting to contribute to the project."
-- name: "help-wanted"
+  description: 'Good first issue for people wanting to contribute to the project.'
+- name: 'help-wanted'
   color: 0e8a16
-  description: "We need some extra helping hands or expertise in order to resolve this."
+  description: 'We need some extra helping hands or expertise in order to resolve this.'
 
-- name: "hacktoberfest"
-  description: "Issues/PRs are participating in the Hacktoberfest."
+- name: 'hacktoberfest'
+  description: 'Issues/PRs are participating in the Hacktoberfest.'
   color: fbca04
-- name: "hacktoberfest-accepted"
-  description: "Issues/PRs are participating in the Hacktoberfest."
+- name: 'hacktoberfest-accepted'
+  description: 'Issues/PRs are participating in the Hacktoberfest.'
   color: fbca04
 
-- name: "priority-critical"
+- name: 'priority-critical'
   color: ee0701
-  description: "This should be dealt with ASAP. Not fixing this issue would be a serious error."
-- name: "priority-high"
+  description: 'This should be dealt with ASAP. Not fixing this issue would be a serious error.'
+- name: 'priority-high'
   color: b60205
-  description: "After critical issues are fixed, these should be dealt with before any further issues."
-- name: "priority-medium"
+  description: 'After critical issues are fixed, these should be dealt with before any further issues.'
+- name: 'priority-medium'
   color: 0e8a16
-  description: "This issue may be useful, and needs some attention."
-- name: "priority-low"
+  description: 'This issue may be useful, and needs some attention.'
+- name: 'priority-low'
   color: e4ea8a
-  description: "Nice addition, maybe... someday..."
+  description: 'Nice addition, maybe... someday...'
 
-- name: "major"
+- name: 'major'
   color: b60205
-  description: "This PR causes a major version bump in the version number."
-- name: "minor"
+  description: 'This PR causes a major version bump in the version number.'
+- name: 'minor'
   color: 0e8a16
-  description: "This PR causes a minor version bump in the version number."
+  description: 'This PR causes a minor version bump in the version number.'
 
 # Areas
 - name: area/ansible
-  color: "0e8a16"
+  color: '0e8a16'
 - name: area/docs
-  color: "0e8a16"
+  color: '0e8a16'
 - name: area/github
-  color: "0e8a16"
+  color: '0e8a16'
 - name: area/kubernetes
-  color: "0e8a16"
+  color: '0e8a16'
 - name: area/taskfile
-  color: "0e8a16"
+  color: '0e8a16'
 - name: area/terraform
-  color: "0e8a16"
+  color: '0e8a16'
 # Clusters
 - name: cluster/main
-  color: "ffc300"
+  color: 'ffc300'
 - name: cluster/storage
-  color: "ffc300"
+  color: 'ffc300'
 # Renovate Types
 - name: renovate/ansible
-  color: "027fa0"
+  color: '027fa0'
 - name: renovate/container
-  color: "027fa0"
+  color: '027fa0'
 - name: renovate/github-action
-  color: "027fa0"
+  color: '027fa0'
 - name: renovate/grafana-dashboard
-  color: "027fa0"
+  color: '027fa0'
 - name: renovate/github-release
-  color: "027fa0"
+  color: '027fa0'
 - name: renovate/helm
-  color: "027fa0"
+  color: '027fa0'
 - name: renovate/terraform
-  color: "027fa0"
+  color: '027fa0'
 # Semantic Types
 - name: type/digest
-  color: "ffeC19"
+  color: 'ffeC19'
 - name: type/patch
-  color: "ffeC19"
+  color: 'ffeC19'
 - name: type/minor
-  color: "ff9800"
+  color: 'ff9800'
 - name: type/major
-  color: "f6412d"
+  color: 'f6412d'
 # Uncategorized
 - name: community
-  color: "370fb2"
+  color: '370fb2'
 - name: hold
-  color: "ee0701"
+  color: 'ee0701'
 
 ## more info https://github.com/crazy-max/ghaction-github-labeler
 - # automerge
-  name: ":bell: automerge"
-  color: "8f4fbc"
-  description: ""
+  name: ':bell: automerge'
+  color: '8f4fbc'
+  description: ''
 - # bot
-  name: ":robot: bot"
-  color: "69cde9"
-  description: ""
+  name: ':robot: bot'
+  color: '69cde9'
+  description: ''
 - # bug
-  name: ":bug: bug"
-  color: "b60205"
-  description: ""
+  name: ':bug: bug'
+  color: 'b60205'
+  description: ''
 - # documentation
-  name: ":memo: documentation"
-  color: "c5def5"
-  description: ""
+  name: ':memo: documentation'
+  color: 'c5def5'
+  description: ''
 - # duplicate
-  name: ":busts_in_silhouette: duplicate"
-  color: "cccccc"
-  description: ""
+  name: ':busts_in_silhouette: duplicate'
+  color: 'cccccc'
+  description: ''
 - # enhancement
-  name: ":sparkles: enhancement"
-  color: "0054ca"
-  description: ""
+  name: ':sparkles: enhancement'
+  color: '0054ca'
+  description: ''
 - # feature request
-  name: ":bulb: feature request"
+  name: ':bulb: feature request'

.github/renovate.json

@@ -1,6 +1,4 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": [
-    "github>ivuorinen/renovate-config"
-  ]
+  "extends": ["github>ivuorinen/renovate-config"]
 }

.github/workflows/README.md

@@ -0,0 +1,40 @@
+# .github
+
+My Shared GitHub Actions & Configurations.
+
+## Actions
+
+Actions should be linked using the `uses` keyword.
+
+Read more from the Reusing workflows article [Calling a reusable workflow][reusable] and [jobs.<job_id>.steps[\*].uses][jobs] configuration documentation.
+
+```yml
+jobs:
+  CompressImages:
+    uses: ivuorinen/.github/workflows/compress-images.yml
+
+  ReusableMatrixJobForComposerInstall:
+    strategy:
+      matrix:
+        target: ['8.0', '8.1', '8.2', '8.3']
+    uses: ivuorinen/.github/workflows/composer-install.yml@main
+    with:
+      php-versions: ${{ matrix.target }}
+```
+
+## Misc configurations
+
+### Renovate config
+
+Go through [the onboarding process][onboarding] and save the following snippet as `.github/renovate.json`.
+
+```json
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["github>ivuorinen/renovate-config"]
+}
+```
+
+[reusable]: https://docs.github.com/en/actions/using-workflows/reusing-workflows#calling-a-reusable-workflow
+[jobs]: https://docs.github.com/en/actions/using-workflows/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsuses
+[onboarding]: https://docs.renovatebot.com/getting-started/installing-onboarding

.github/workflows/composer-install.yml

@@ -1,14 +1,14 @@
 ---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
 name: Run Composer Install
 
 on:
   workflow_dispatch:
+  workflow_call:
   pull_request:
     paths:
-      - "composer.json"
-      - "composer.lock"
-
-permissions: read-all
+      - 'composer.json'
+      - 'composer.lock'
 
 jobs:
   ComposerInstall:
@@ -20,15 +20,15 @@ jobs:
 
     strategy:
       matrix:
-        operating-system: ["ubuntu-latest"]
-        php: ["8.0", "8.1", "8.2", "8.3", "8.4"]
+        operating-system: ['ubuntu-latest']
+        php: ['8.0', '8.1', '8.2', '8.3', '8.4']
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
       - name: Cache Composer packages
         id: composer-cache
-        uses: actions/cache@v4
+        uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4
         with:
           path: vendor
           key: ${{ runner.os }}-php-${{ matrix.php }}-${{ hashFiles('**/composer.json') }}
@@ -37,7 +37,7 @@ jobs:
             ${{ runner.os }}-php-
 
       - name: Composer (PHP ${{ matrix.php }})
-        uses: php-actions/composer@v6
+        uses: php-actions/composer@8a65f0d3c6a1d17ca4800491a40b5756a4c164f3 # v6
         with:
           php_version: ${{ matrix.php }}
           args: --no-progress --prefer-dist --optimize-autoloader

.github/workflows/compress-images.yml

@@ -1,14 +1,15 @@
 ---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+#
 # Compress images on demand (workflow_dispatch), and at 11pm every Sunday (schedule).
 # Open a Pull Request if any images can be compressed.
 name: Compress Images on Demand
 
 on:
   workflow_dispatch:
+  workflow_call:
   schedule:
-    - cron: "00 23 * * 0"
-
-permissions: read-all
+    - cron: '00 23 * * 0'
 
 jobs:
   CompressOnDemandOrSchedule:
@@ -23,18 +24,18 @@ jobs:
 
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
       - name: Compress Images
         id: calibre
-        uses: calibreapp/image-actions@main
+        uses: calibreapp/image-actions@f32575787d333b0579f0b7d506ff03be63a669d1 # 1.4.1
         with:
           githubToken: ${{ secrets.GITHUB_TOKEN }}
           compressOnly: true
 
       - name: Create New Pull Request If Needed
         if: steps.calibre.outputs.markdown != ''
-        uses: peter-evans/create-pull-request@v6
+        uses: peter-evans/create-pull-request@67ccf781d68cd99b580ae25a5c18a1cc84ffff1f # v7
         with:
           title: Compressed Images Nightly
           branch-suffix: timestamp

.github/workflows/dependency-review.yml

@@ -1,4 +1,6 @@
 ---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+#
 # Dependency Review Action
 #
 # This Action will scan dependency manifest files that change as part of a Pull Request,
@@ -8,11 +10,9 @@
 #
 # Source repository: https://github.com/actions/dependency-review-action
 # Public documentation: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement
-name: "Dependency Review"
+name: 'Dependency Review'
 
-on: [pull_request]
-
-permissions: read-all
+on: [pull_request, workflow_call]
 
 jobs:
   dependency-review:
@@ -20,8 +20,8 @@ jobs:
     permissions:
       contents: read
     steps:
-      - name: "Checkout Repository"
-        uses: actions/checkout@v4
+      - name: 'Checkout Repository'
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
-      - name: "Dependency Review"
-        uses: actions/dependency-review-action@v4
+      - name: 'Dependency Review'
+        uses: actions/dependency-review-action@3b139cfc5fae8b618d3eae3675e383bb1769c019 # v4

.github/workflows/labels.yaml

@@ -1,22 +1,23 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
 name: labels
 
 on:
   push:
     branches:
-      - "main"
+      - 'main'
     paths:
-      - ".github/labels.yml"
-      - ".github/workflows/labels.yml"
-
-permissions: read-all
+      - '.github/labels.yml'
+      - '.github/workflows/labels.yml'
+  workflow_call:
 
 jobs:
   labeler:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
       - name: Run Labeler
-        uses: crazy-max/ghaction-github-labeler@v5
+        uses: crazy-max/ghaction-github-labeler@31674a3852a9074f2086abcf1c53839d466a47e7 # v5
         with:
           dry-run: ${{ github.event_name == 'pull_request' }}

.github/workflows/laravel-phpunit.yml

@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
 name: Laravel Setup and Composer test
 
 on:
@@ -6,8 +7,7 @@ on:
     branches: [main]
   pull_request:
     branches: [main]
-
-permissions: read-all
+  workflow_call:
 
 jobs:
   laravel-tests:
@@ -18,17 +18,17 @@ jobs:
       statuses: write
 
     steps:
-      - uses: shivammathur/setup-php@v2
+      - uses: shivammathur/setup-php@9e72090525849c5e82e596468b86eb55e9cc5401 # v2
         with:
-          php-version: "8.4"
+          php-version: '8.4'
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
-      - name: "Check file existence"
+      - name: 'Check file existence'
         id: check_files
-        uses: andstor/file-existence-action@v3
+        uses: andstor/file-existence-action@076e0072799f4942c8bc574a82233e1e4d13e9d6 # v3
         with:
-          files: "package.json, artisan"
+          files: 'package.json, artisan'
 
       - name: Copy .env
         if: steps.check_files.outputs.files_exists == 'true'

.github/workflows/pr-compress-images.yml

@@ -1,17 +1,17 @@
 ---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
 name: Compress Images
 
 on:
+  workflow_call:
   pull_request:
     # Run Image Actions when JPG, JPEG, PNG or WebP files are added or changed.
     # See https://help.github.com/en/actions/automating-your-workflow-with-github-actions/workflow-syntax-for-github-actions#onpushpull_requestpaths for reference.
     paths:
-      - "**.jpg"
-      - "**.jpeg"
-      - "**.png"
-      - "**.webp"
-
-permissions: read-all
+      - '**.jpg'
+      - '**.jpeg'
+      - '**.png'
+      - '**.webp'
 
 jobs:
   CompressInPR:
@@ -27,9 +27,9 @@ jobs:
 
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
       - name: Compress Images
-        uses: calibreapp/image-actions@main
+        uses: calibreapp/image-actions@f32575787d333b0579f0b7d506ff03be63a669d1 # 1.4.1
         with:
           githubToken: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/pr-lint.yml

@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
 #################################
 #################################
 ## Super Linter GitHub Actions ##
@@ -18,12 +19,9 @@ env:
 # Start the job on all push #
 #############################
 on:
-  push:
-    branches: [master, main]
   pull_request:
     branches: [master, main]
-
-permissions: read-all
+  workflow_call:
 
 ###############
 # Set the Job #
@@ -51,24 +49,44 @@ jobs:
       # Checkout the code base #
       ##########################
       - name: Checkout Code
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           # Full git history is needed to get a proper
           # list of changed files within `super-linter`
           fetch-depth: 0
 
+      - name: Setup Node.js Environment
+        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
+        with:
+          node-version-file: '.nvmrc'
+
+      - name: Cache Node Modules
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+        id: cache
+        with:
+          path: node_modules
+          key: node-modules-${{ hashFiles('**/package-lock.json') }}
+
+      - name: Install npm packages
+        run: npm install
+
       ################################
       # Run Linter against code base #
       ################################
       - name: Lint Code Base
-        uses: github/super-linter@v7
+        uses: super-linter/super-linter/slim@5119dcd8011e92182ce8219d9e9efc82f16fddb6 # v8
         env:
           VALIDATE_ALL_CODEBASE: false
+          LINTER_RULES_PATH: '${DEFAULT_WORKSPACE}'
+          VALIDATE_JSON: false # doesn't handle new config format
+          VALIDATE_NATURAL_LANGUAGE: false # doesn't seem to respect configs
           FIX_ANSIBLE: true
           FIX_ENV: true
-          FIX_JSON: true
+          FIX_JSON_PRETTIER: true
           FIX_JSONC_PRETTIER: true
           FIX_MARKDOWN: true
+          FIX_SHELL_SHFMT: true
+          FIX_TYPESCRIPT_PRETTIER: true
           # Change to 'master' if your main branch differs
           DEFAULT_BRANCH: ${{ env.MAIN_BRANCH }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/readme-scribe.yaml

@@ -1,12 +1,15 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
 name: readme-scribe
 
 on:
   workflow_dispatch:
+  workflow_call:
   schedule:
-    - cron: "0 0 */1 * *"
+    - cron: '0 0 */1 * *'
   push:
     branches:
-      - "main"
+      - 'main'
 
 permissions:
   contents: write
@@ -18,16 +21,16 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
       - uses: muesli/readme-scribe@5a187a2a36ef894335f17a7d01c32b0e28c6d948
         with:
           template: templates/README.md.tpl
           writeTo: README.md
         env:
           GITHUB_TOKEN: ${{ secrets.GH_PAT }}
-      - uses: stefanzweifel/git-auto-commit-action@v5.0.1
+      - uses: stefanzweifel/git-auto-commit-action@778341af668090896ca464160c2def5d1d1a3eb0 # v6.0.1
         with:
-          commit_message: "Update generated README"
+          commit_message: 'Update generated README'
           branch: main
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release-drafter.yml

@@ -1,11 +1,10 @@
 ---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
 name: Release Drafter
 
 on:
   workflow_call:
 
-permissions: read-all
-
 jobs:
   update_release_draft:
     name: ✏️ Draft release
@@ -15,6 +14,6 @@ jobs:
       statuses: write
     steps:
       - name: 🚀 Run Release Drafter
-        uses: release-drafter/release-drafter@v6.0.0
+        uses: release-drafter/release-drafter@b1476f6e6eb133afa41ed8589daba6dc69b4d3f5 # v6.1.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release-monthly.yaml

@@ -1,13 +1,12 @@
 ---
 # yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
-name: "Release"
+name: 'Release'
 
 on:
   workflow_dispatch:
+  workflow_call:
   schedule:
-    - cron: "0 0 1 * *" # 1st of every month at midnight
-
-permissions: read-all
+    - cron: '0 0 1 * *' # 1st of every month at midnight
 
 jobs:
   release:
@@ -17,12 +16,12 @@ jobs:
       contents: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
       - name: Create Release
         shell: bash
         env:
-          GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
+          GITHUB_TOKEN: '${{ secrets.GITHUB_TOKEN }}'
         run: |
           # Retrieve previous release tag
           previous_tag="$(gh release list --limit 1 | awk '{ print $1 }')"

.github/workflows/reviewdog-linters.yml

@@ -1,9 +1,8 @@
 ---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
 name: Reviewdog Linters
 
-on: [push]
-
-permissions: read-all
+on: [pull_request, workflow_call]
 
 jobs:
   linters:
@@ -16,10 +15,10 @@ jobs:
       statuses: write
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
       - name: GitHub Actions
-        uses: reviewdog/action-actionlint@v1
+        uses: reviewdog/action-actionlint@abd537417cf4991e1ba8e21a67b1119f4f53b8e0 # v1
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           reporter: github-pr-review
@@ -31,13 +30,13 @@ jobs:
           reporter: github-pr-review
 
       - name: markdownlint
-        uses: reviewdog/action-markdownlint@v0
+        uses: reviewdog/action-markdownlint@f901468edf9a3634dd39b35ba26cad0aad1a0bfd # v0
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           reporter: github-pr-review
 
       - name: shfmt
-        uses: reviewdog/action-shfmt@v1
+        uses: reviewdog/action-shfmt@f59386f08bd9a24ac1a746e69f026ddc2ed06710 # v1
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           shfmt_flags: |
@@ -53,7 +52,7 @@ jobs:
             --func-next-line
 
       - name: yamllint
-        uses: reviewdog/action-yamllint@v1
+        uses: reviewdog/action-yamllint@1dca3ad811867be18fbe293a9818d715a6c2cd46 # v1
         with:
           github_token: ${{ secrets.github_token }}
           reporter: github-pr-review

.github/workflows/stale.yml

@@ -1,14 +1,13 @@
 ---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
 name: Stale
 
 on:
   schedule:
-    - cron: "0 8 * * *"
+    - cron: '0 8 * * *'
   workflow_call:
   workflow_dispatch:
 
-permissions: read-all
-
 jobs:
   stale:
     name: 🧹 Clean up stale issues and PRs
@@ -21,28 +20,20 @@ jobs:
 
     steps:
       - name: 🚀 Run stale
-        uses: actions/stale@v9.0.0
+        uses: actions/stale@3a9db7e6a41a89f618792c92c0e97cc736e1b13f # v10.0.0
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           days-before-stale: 30
           days-before-close: 7
           remove-stale-when-updated: true
-          stale-issue-label: "stale"
-          exempt-issue-labels: "no-stale,help-wanted"
+          stale-issue-label: 'stale'
+          exempt-issue-labels: 'no-stale,help-wanted'
           stale-issue-message: >
-            There hasn't been any activity on this issue recently, so we
-            clean up some of the older and inactive issues.
+            This issue has now been marked as stale and will be closed if no further activity occurs. Thanks!
 
-            Please make sure to update to the latest version and
-            check if that solves the issue. Let us know if that works for you
-            by leaving a comment 👍
 
-            This issue has now been marked as stale and will be closed if no
-            further activity occurs. Thanks!
-          stale-pr-label: "stale"
-          exempt-pr-labels: "no-stale"
+          stale-pr-label: 'stale'
+          exempt-pr-labels: 'no-stale'
           stale-pr-message: >
-            There hasn't been any activity on this pull request recently. This
-            pull request has been automatically marked as stale because of that
-            and will be closed if no further activity occurs within 7 days.
-            Thank you for your contributions.
+            There hasn't been any activity on this pull request recently. This pull request has been automatically marked as stale because of that and will be closed if no further activity occurs within 7 days. Thank you for your contributions.
+

.github/workflows/sync-labels-to-own-projects.yml

@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
 name: Sync labels to other repositories
 
 on:
@@ -9,10 +10,9 @@ on:
       - .github/labels.yml
       - .github/workflows/sync-labels-to-own-projects.yml
   workflow_dispatch:
+  workflow_call:
   schedule:
-    - cron: "0 0 * * *" # Every day at midnight
-
-permissions: read-all
+    - cron: '0 0 * * *' # Every day at midnight
 
 jobs:
   sync-labels:
@@ -23,7 +23,7 @@ jobs:
     outputs:
       repos: ${{ steps.repos.outputs.REPOS }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
       - name: Get Repositories
         id: repos
@@ -45,7 +45,7 @@ jobs:
             echo "$REPOS"
             echo "$EOF"
           } >> "$GITHUB_ENV"
-      - uses: micnncim/action-label-syncer@v1
+      - uses: micnncim/action-label-syncer@3abd5ab72fda571e69fffd97bd4e0033dd5f495c # v1
         with:
           prune: true
           repository: ${{ steps.repos.outputs.REPOS }}

.github/workflows/sync-labels.yml

@@ -9,12 +9,10 @@ on:
     paths:
       - .github/labels.yml
   schedule:
-    - cron: "34 5 * * *"
+    - cron: '34 5 * * *'
   workflow_call:
   workflow_dispatch:
 
-permissions: read-all
-
 jobs:
   labels:
     name: ♻️ Sync labels
@@ -28,7 +26,7 @@ jobs:
             "https://raw.githubusercontent.com/ivuorinen/ivuorinen/main/.github/labels.yml" \
             > labels.yml
       - name: 🚀 Run Label Syncer
-        uses: micnncim/action-label-syncer@v1.3.0
+        uses: micnncim/action-label-syncer@3abd5ab72fda571e69fffd97bd4e0033dd5f495c # v1.3.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:

.gitignore

@@ -4,3 +4,4 @@
 /.idea
 /*.iml
 
+node_modules

.markdownlint.json

@@ -0,0 +1,4 @@
+{
+  "extends": "@ivuorinen/markdownlint-config",
+  "max_line_length": 120
+}

.nvmrc

@@ -0,0 +1 @@
+22.18.0

.pre-commit-config.yaml

@@ -0,0 +1,29 @@
+repos:
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v6.0.0
+    hooks:
+      - id: trailing-whitespace
+      - id: check-case-conflict
+      - id: check-merge-conflict
+      - id: check-shebang-scripts-are-executable
+      - id: check-symlinks
+      - id: check-toml
+      - id: check-xml
+      - id: check-yaml
+        args: [--allow-multiple-documents]
+      - id: end-of-file-fixer
+      - id: mixed-line-ending
+        args: [--fix=auto]
+      - id: pretty-format-json
+        args: [--autofix, --no-sort-keys]
+
+  - repo: https://github.com/igorshubovych/markdownlint-cli
+    rev: v0.45.0
+    hooks:
+      - id: markdownlint
+        args: [-c, .markdownlint.json, --fix]
+
+  - repo: https://github.com/adrienverge/yamllint
+    rev: v1.37.1
+    hooks:
+      - id: yamllint

.prettierrc.json

@@ -0,0 +1 @@
+"@ivuorinen/prettier-config"

.releaserc.json

@@ -0,0 +1,3 @@
+{
+  "extends": ["@ivuorinen/semantic-release-config"]
+}

README.md

@@ -1,3 +1,4 @@
+
 ### Hi there 👋
 
 My name is Ismo Vuorinen, and I work as a software developer in Finland.
@@ -7,36 +8,45 @@ I'm also a huge fan of open-source, and I try to contribute back to the communit
 
 #### 👷 Check out what I'm currently working on
 
-- [ivuorinen/.github](https://github.com/ivuorinen/.github) - My GitHub Shared Configurations. (1 day ago)
+- [ivuorinen/dotfiles](https://github.com/ivuorinen/dotfiles) - These are my dotfiles. There are many like 'em, but these are mine. (1 day ago)
 - [ivuorinen/cheatsheet-tldr](https://github.com/ivuorinen/cheatsheet-tldr) - tldr-pages/tldr pages for cheat/cheat (1 day ago)
-- [ivuorinen/starred](https://github.com/ivuorinen/starred) - Automatically updated list of my starred repos. (2 days ago)
-- [ivuorinen/dotfiles](https://github.com/ivuorinen/dotfiles) - These are my dotfiles. There are many like 'em, but these are mine. (3 days ago)
-- [ivuorinen/base-configs](https://github.com/ivuorinen/base-configs) - A collection of base configs for code quality and linting tools. Heavily based on `@demartini/base-configs` (4 days ago)
+- [ivuorinen/starred](https://github.com/ivuorinen/starred) - Automatically updated list of my starred repos. (1 day ago)
+- [ivuorinen/gh-codeql-report](https://github.com/ivuorinen/gh-codeql-report) - Collect repository CodeQL findings as a LLM-friendly report for easier fixing. (1 day ago)
+- [ivuorinen/homebrew-tap](https://github.com/ivuorinen/homebrew-tap) - brew tap ivuorinen/tap (6 days ago)
 
 #### 👨‍💻 Repositories I created recently
 
-- [ivuorinen/f2b](https://github.com/ivuorinen/f2b) - fail2ban shorthand wrapper for the usual actions one would take, written in bash
-- [ivuorinen/business-data-fetcher](https://github.com/ivuorinen/business-data-fetcher) - PHP composer package API client to Finnish Patent and Registration Office's (PRH) Business Information System (BIS).
-- [ivuorinen/renovate-config](https://github.com/ivuorinen/renovate-config)
-- [ivuorinen/docker-elk](https://github.com/ivuorinen/docker-elk) - Preconfigured Security, Tools, and Self-Monitoring
-- [ivuorinen/docker-xmrig](https://github.com/ivuorinen/docker-xmrig) - This is a simple miner that uses the xmrig miner to mine Monero.
+- [ivuorinen/gh-codeql-report](https://github.com/ivuorinen/gh-codeql-report) - Collect repository CodeQL findings as a LLM-friendly report for easier fixing.
+- [ivuorinen/homebrew-tap](https://github.com/ivuorinen/homebrew-tap) - brew tap ivuorinen/tap
+- [ivuorinen/tree-sitter-shellspec](https://github.com/ivuorinen/tree-sitter-shellspec) - Tree-Sitter Definitions for ShellSpec BDD testing framework
+- [ivuorinen/shellspec-zed](https://github.com/ivuorinen/shellspec-zed) - Language support for ShellSpec BDD testing framework
+- [ivuorinen/nvim-shellspec](https://github.com/ivuorinen/nvim-shellspec) - vim and neovim shellspec language support and basic formatter
 
 #### 🚀 Latest releases I've contributed to
 
-- [ivuorinen/dotfiles](https://github.com/ivuorinen/dotfiles) ([24.8.29](https://github.com/ivuorinen/dotfiles/releases/tag/24.8.29), 3 days ago) - These are my dotfiles. There are many like 'em, but these are mine.
-- [ivuorinen/base-configs](https://github.com/ivuorinen/base-configs) ([@ivuorinen/base-configs@2.0.2](https://github.com/ivuorinen/base-configs/releases/tag/%40ivuorinen/base-configs%402.0.2), 4 days ago) - A collection of base configs for code quality and linting tools. Heavily based on `@demartini/base-configs`
-- [ivuorinen/business-data-fetcher](https://github.com/ivuorinen/business-data-fetcher) ([v1.1.1](https://github.com/ivuorinen/business-data-fetcher/releases/tag/v1.1.1), 1 week ago) - PHP composer package API client to Finnish Patent and Registration Office's (PRH) Business Information System (BIS).
-- [ivuorinen/docker-xmrig](https://github.com/ivuorinen/docker-xmrig) ([6.22.0-2024-08-12](https://github.com/ivuorinen/docker-xmrig/releases/tag/6.22.0-2024-08-12), 2 weeks ago) - This is a simple miner that uses the xmrig miner to mine Monero.
-- [ivuorinen/.github](https://github.com/ivuorinen/.github) ([2024.8.0](https://github.com/ivuorinen/.github/releases/tag/2024.8.0), 1 month ago) - My GitHub Shared Configurations.
+- [ivuorinen/actions](https://github.com/ivuorinen/actions) ([25.9.30](https://github.com/ivuorinen/actions/releases/tag/25.9.30), 1 day ago) - ivuorinen's shared actions
+- [ivuorinen/dotfiles](https://github.com/ivuorinen/dotfiles) ([25.9.30](https://github.com/ivuorinen/dotfiles/releases/tag/25.9.30), 1 day ago) - These are my dotfiles. There are many like 'em, but these are mine.
+- [ivuorinen/gh-codeql-report](https://github.com/ivuorinen/gh-codeql-report) ([v1.0.1](https://github.com/ivuorinen/gh-codeql-report/releases/tag/v1.0.1), 1 day ago) - Collect repository CodeQL findings as a LLM-friendly report for easier fixing.
+- [mason-org/mason-registry](https://github.com/mason-org/mason-registry) ([2025-09-30-polish-robin](https://github.com/mason-org/mason-registry/releases/tag/2025-09-30-polish-robin), 1 day ago) - Core registry for mason.nvim.
+- [ivuorinen/nvim-shellspec](https://github.com/ivuorinen/nvim-shellspec) ([2.0.1](https://github.com/ivuorinen/nvim-shellspec/releases/tag/2.0.1), 3 weeks ago) - vim and neovim shellspec language support and basic formatter
 
 #### ⭐ Recent Stars
 
-- [antfu/eslint-config](https://github.com/antfu/eslint-config) - Anthony's ESLint config preset (4 days ago)
-- [micromatch/micromatch](https://github.com/micromatch/micromatch) - Highly optimized wildcard and glob matching library. Faster, drop-in replacement to minimatch and multimatch. Used by square, webpack, babel core, yarn, jest, ract-native, taro, bulma, browser-sync, stylelint, nyc, ava, and many others! Follow micromatch's author: https://github.com/jonschlinkert (1 week ago)
-- [MichaelAquilina/zsh-autoswitch-virtualenv](https://github.com/MichaelAquilina/zsh-autoswitch-virtualenv) -  🐍 ZSH plugin to automatically switch python virtualenvs (including pipenv and poetry) as you move between directories (1 week ago)
-- [CorentinTh/it-tools](https://github.com/CorentinTh/it-tools) - Collection of handy online tools for developers, with great UX.  (1 week ago)
-- [nette/php-generator](https://github.com/nette/php-generator) - 🐘 Generates neat PHP code for you. Supports new PHP 8.3 features. (1 week ago)
+- [Wilfred/difftastic](https://github.com/Wilfred/difftastic) - a structural diff that understands syntax 🟥🟩 (1 day ago)
+- [anthropics/claude-code](https://github.com/anthropics/claude-code) - Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands. (2 days ago)
+- [operacle/checkcle](https://github.com/operacle/checkcle) - CheckCle is a self-hosted, open-source monitoring platform for seamless, real-time full-stack systems, applications, and infrastructure. It provides real-time uptime monitoring, distributed checks, incident tracking, and alerts. All deployable anywhere. (2 days ago)
+- [MirrowApp/mirrow](https://github.com/MirrowApp/mirrow) - SVGs. One file. Zero fuss.  (2 days ago)
+- [openai/codex](https://github.com/openai/codex) - Lightweight coding agent that runs in your terminal (2 days ago)
+
+
+
+<picture>
+  <source srcset="https://raw.githubusercontent.com/ivuorinen/github-stats/master/generated/overview.svg#gh-dark-mode-only" media="(prefers-color-scheme: dark)" />
+  <img src="https://raw.githubusercontent.com/ivuorinen/github-stats/master/generated/overview.svg#gh-light-mode-only" alt="Overview of my activity" />
+</picture>
+<picture>
+  <source srcset="https://raw.githubusercontent.com/ivuorinen/github-stats/master/generated/languages.svg#gh-dark-mode-only" media="(prefers-color-scheme: dark)" />
+  <img src="https://raw.githubusercontent.com/ivuorinen/github-stats/master/generated/languages.svg#gh-light-mode-only" alt="Languages I have been using" />
+</picture>
 
-![Overview of my activity](https://raw.githubusercontent.com/ivuorinen/github-stats/master/generated/overview.svg)
-![Languages I have been using](https://raw.githubusercontent.com/ivuorinen/github-stats/master/generated/languages.svg)
 

eslint.config.mjs

@@ -0,0 +1,12 @@
+import ivuorinenConfig from '@ivuorinen/eslint-config'
+
+export default [
+  ...ivuorinenConfig,
+
+  // your modifications
+  {
+    rules: {
+      // "no-unused-vars": "warn"
+    }
+  }
+]

package.json

@@ -0,0 +1,35 @@
+{
+  "name": "@ivuorinen/ivuorinen",
+  "version": "1.0.0",
+  "description": "My GitHub Profile Readme",
+  "private": true,
+  "main": "index.js",
+  "author": "Ismo Vuorinen",
+  "license": "MIT",
+  "scripts": {
+    "lint": "eslint .",
+    "textlint": "textlint -f pretty-error README.md",
+    "textlint:ci": "textlint -f checkstyle README.md",
+    "textlint:fix": "textlint --fix README.md",
+    "format": "prettier --write .",
+    "lint:fix": "eslint . --fix"
+  },
+  "devDependencies": {
+    "@ivuorinen/base-configs": "^2.0.2",
+    "eslint-plugin-prettier": "^5.2.1",
+    "textlint": "^15.0.0",
+    "textlint-filter-rule-comments": "^1.2.2",
+    "textlint-rule-no-todo": "^2.0.1"
+  },
+  "textlint": {
+    "plugins": {
+      "@textlint/markdown": true
+    },
+    "filters": {
+      "comments": true
+    },
+    "rules": {
+      "no-todo": true
+    }
+  }
+}

templates/README.md.tpl

@@ -1,3 +1,4 @@
+<!-- markdownlint-disable MD041 -->
 ### Hi there 👋
 
 My name is Ismo Vuorinen, and I work as a software developer in Finland.
@@ -25,6 +26,15 @@ I'm also a huge fan of open-source, and I try to contribute back to the communit
 - [{{.Repo.Name}}]({{.Repo.URL}}) - {{.Repo.Description}} ({{humanize .StarredAt}})
 {{- end}}
 
-![Overview of my activity](https://raw.githubusercontent.com/ivuorinen/github-stats/master/generated/overview.svg)
-![Languages I have been using](https://raw.githubusercontent.com/ivuorinen/github-stats/master/generated/languages.svg)
+<!-- textlint-disable -->
 
+<picture>
+  <source srcset="https://raw.githubusercontent.com/ivuorinen/github-stats/master/generated/overview.svg#gh-dark-mode-only" media="(prefers-color-scheme: dark)" />
+  <img src="https://raw.githubusercontent.com/ivuorinen/github-stats/master/generated/overview.svg#gh-light-mode-only" alt="Overview of my activity" />
+</picture>
+<picture>
+  <source srcset="https://raw.githubusercontent.com/ivuorinen/github-stats/master/generated/languages.svg#gh-dark-mode-only" media="(prefers-color-scheme: dark)" />
+  <img src="https://raw.githubusercontent.com/ivuorinen/github-stats/master/generated/languages.svg#gh-light-mode-only" alt="Languages I have been using" />
+</picture>
+
+<!-- textlint-enable -->