Update generated README

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

.actrc

@@ -0,0 +1,5 @@
+--container-architecture=linux/amd64
+--secret GITHUB_TOKEN=$(gh auth token)
+--var GITHUB_SHA=$(git rev-parse --short main)
+--var DOCKER_HOST=$(docker context inspect --format '{{.Endpoints.docker.Host}}')
+--action-offline-mode

.browserslistrc

@@ -0,0 +1,2 @@
+extends @ivuorinen/browserslist-config
+

.checkov.yaml

@@ -0,0 +1,2 @@
+skip-check:
+  - CKV2_GHA_1

.commitlintrc.json

@@ -0,0 +1,3 @@
+{
+  "extends": ["@ivuorinen/commitlint-config"]
+}

.editorconfig

@@ -42,4 +42,4 @@ tab_width = 4
 tab_width = 4
 
 [{*.md,.github/workflows/*.yml}]
-max_line_length = 300
+max_line_length = 1000

.envrc

@@ -0,0 +1 @@
+use asdf

.github/labels.yml

@@ -1,164 +1,164 @@
 ---
-- name: "breaking-change"
+- name: 'breaking-change'
   color: ee0701
-  description: "A breaking change for existing users."
-- name: "bugfix"
+  description: 'A breaking change for existing users.'
+- name: 'bugfix'
   color: ee0701
-  description: "Inconsistencies or issues which will cause a problem for users or implementors."
-- name: "documentation"
+  description: 'Inconsistencies or issues which will cause a problem for users or implementors.'
+- name: 'documentation'
   color: 0052cc
-  description: "Solely about the documentation of the project."
-- name: "enhancement"
+  description: 'Solely about the documentation of the project.'
+- name: 'enhancement'
   color: 1d76db
-  description: "Enhancement of the code, not introducing new features."
-- name: "refactor"
+  description: 'Enhancement of the code, not introducing new features.'
+- name: 'refactor'
   color: 1d76db
-  description: "Improvement of existing code, not introducing new features."
-- name: "performance"
+  description: 'Improvement of existing code, not introducing new features.'
+- name: 'performance'
   color: 1d76db
-  description: "Improving performance, not introducing new features."
-- name: "new-feature"
+  description: 'Improving performance, not introducing new features.'
+- name: 'new-feature'
   color: 0e8a16
-  description: "New features or options."
-- name: "maintenance"
+  description: 'New features or options.'
+- name: 'maintenance'
   color: 2af79e
-  description: "Generic maintenance tasks."
-- name: "ci"
+  description: 'Generic maintenance tasks.'
+- name: 'ci'
   color: 1d76db
-  description: "Work that improves the continue integration."
-- name: "dependencies"
+  description: 'Work that improves the continue integration.'
+- name: 'dependencies'
   color: 1d76db
-  description: "Upgrade or downgrade of project dependencies."
-- name: "translations"
+  description: 'Upgrade or downgrade of project dependencies.'
+- name: 'translations'
   color: d4c5f9
-  description: "Impacts translations."
+  description: 'Impacts translations.'
 
-- name: "in-progress"
+- name: 'in-progress'
   color: fbca04
-  description: "Issue is currently being resolved by a developer."
-- name: "stale"
+  description: 'Issue is currently being resolved by a developer.'
+- name: 'stale'
   color: fef2c0
-  description: "There has not been activity on this issue or PR for quite some time."
-- name: "no-stale"
+  description: 'There has not been activity on this issue or PR for quite some time.'
+- name: 'no-stale'
   color: fef2c0
-  description: "This issue or PR is exempted from the stable bot."
+  description: 'This issue or PR is exempted from the stable bot.'
 
-- name: "security"
+- name: 'security'
   color: ee0701
-  description: "Marks a security issue that needs to be resolved asap."
-- name: "incomplete"
+  description: 'Marks a security issue that needs to be resolved asap.'
+- name: 'incomplete'
   color: fef2c0
-  description: "Marks a PR or issue that is missing information."
-- name: "invalid"
+  description: 'Marks a PR or issue that is missing information.'
+- name: 'invalid'
   color: fef2c0
-  description: "Marks a PR or issue that is missing information."
+  description: 'Marks a PR or issue that is missing information.'
 
-- name: "beginner-friendly"
+- name: 'beginner-friendly'
   color: 0e8a16
-  description: "Good first issue for people wanting to contribute to the project."
-- name: "help-wanted"
+  description: 'Good first issue for people wanting to contribute to the project.'
+- name: 'help-wanted'
   color: 0e8a16
-  description: "We need some extra helping hands or expertise in order to resolve this."
+  description: 'We need some extra helping hands or expertise in order to resolve this.'
 
-- name: "hacktoberfest"
-  description: "Issues/PRs are participating in the Hacktoberfest."
+- name: 'hacktoberfest'
+  description: 'Issues/PRs are participating in the Hacktoberfest.'
   color: fbca04
-- name: "hacktoberfest-accepted"
-  description: "Issues/PRs are participating in the Hacktoberfest."
+- name: 'hacktoberfest-accepted'
+  description: 'Issues/PRs are participating in the Hacktoberfest.'
   color: fbca04
 
-- name: "priority-critical"
+- name: 'priority-critical'
   color: ee0701
-  description: "This should be dealt with ASAP. Not fixing this issue would be a serious error."
-- name: "priority-high"
+  description: 'This should be dealt with ASAP. Not fixing this issue would be a serious error.'
+- name: 'priority-high'
   color: b60205
-  description: "After critical issues are fixed, these should be dealt with before any further issues."
-- name: "priority-medium"
+  description: 'After critical issues are fixed, these should be dealt with before any further issues.'
+- name: 'priority-medium'
   color: 0e8a16
-  description: "This issue may be useful, and needs some attention."
-- name: "priority-low"
+  description: 'This issue may be useful, and needs some attention.'
+- name: 'priority-low'
   color: e4ea8a
-  description: "Nice addition, maybe... someday..."
+  description: 'Nice addition, maybe... someday...'
 
-- name: "major"
+- name: 'major'
   color: b60205
-  description: "This PR causes a major version bump in the version number."
-- name: "minor"
+  description: 'This PR causes a major version bump in the version number.'
+- name: 'minor'
   color: 0e8a16
-  description: "This PR causes a minor version bump in the version number."
+  description: 'This PR causes a minor version bump in the version number.'
 
 # Areas
 - name: area/ansible
-  color: "0e8a16"
+  color: '0e8a16'
 - name: area/docs
-  color: "0e8a16"
+  color: '0e8a16'
 - name: area/github
-  color: "0e8a16"
+  color: '0e8a16'
 - name: area/kubernetes
-  color: "0e8a16"
+  color: '0e8a16'
 - name: area/taskfile
-  color: "0e8a16"
+  color: '0e8a16'
 - name: area/terraform
-  color: "0e8a16"
+  color: '0e8a16'
 # Clusters
 - name: cluster/main
-  color: "ffc300"
+  color: 'ffc300'
 - name: cluster/storage
-  color: "ffc300"
+  color: 'ffc300'
 # Renovate Types
 - name: renovate/ansible
-  color: "027fa0"
+  color: '027fa0'
 - name: renovate/container
-  color: "027fa0"
+  color: '027fa0'
 - name: renovate/github-action
-  color: "027fa0"
+  color: '027fa0'
 - name: renovate/grafana-dashboard
-  color: "027fa0"
+  color: '027fa0'
 - name: renovate/github-release
-  color: "027fa0"
+  color: '027fa0'
 - name: renovate/helm
-  color: "027fa0"
+  color: '027fa0'
 - name: renovate/terraform
-  color: "027fa0"
+  color: '027fa0'
 # Semantic Types
 - name: type/digest
-  color: "ffeC19"
+  color: 'ffeC19'
 - name: type/patch
-  color: "ffeC19"
+  color: 'ffeC19'
 - name: type/minor
-  color: "ff9800"
+  color: 'ff9800'
 - name: type/major
-  color: "f6412d"
+  color: 'f6412d'
 # Uncategorized
 - name: community
-  color: "370fb2"
+  color: '370fb2'
 - name: hold
-  color: "ee0701"
+  color: 'ee0701'
 
 ## more info https://github.com/crazy-max/ghaction-github-labeler
 - # automerge
-  name: ":bell: automerge"
-  color: "8f4fbc"
-  description: ""
+  name: ':bell: automerge'
+  color: '8f4fbc'
+  description: ''
 - # bot
-  name: ":robot: bot"
-  color: "69cde9"
-  description: ""
+  name: ':robot: bot'
+  color: '69cde9'
+  description: ''
 - # bug
-  name: ":bug: bug"
-  color: "b60205"
-  description: ""
+  name: ':bug: bug'
+  color: 'b60205'
+  description: ''
 - # documentation
-  name: ":memo: documentation"
-  color: "c5def5"
-  description: ""
+  name: ':memo: documentation'
+  color: 'c5def5'
+  description: ''
 - # duplicate
-  name: ":busts_in_silhouette: duplicate"
-  color: "cccccc"
-  description: ""
+  name: ':busts_in_silhouette: duplicate'
+  color: 'cccccc'
+  description: ''
 - # enhancement
-  name: ":sparkles: enhancement"
-  color: "0054ca"
-  description: ""
+  name: ':sparkles: enhancement'
+  color: '0054ca'
+  description: ''
 - # feature request
-  name: ":bulb: feature request"
+  name: ':bulb: feature request'

.github/renovate.json

@@ -1,6 +1,4 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": [
-    "github>ivuorinen/renovate-config"
-  ]
+  "extends": ["github>ivuorinen/renovate-config"]
 }

.github/workflows/README.md

@@ -0,0 +1,40 @@
+# .github
+
+My Shared GitHub Actions & Configurations.
+
+## Actions
+
+Actions should be linked using the `uses` keyword.
+
+Read more from the Reusing workflows article [Calling a reusable workflow][reusable] and [jobs.<job_id>.steps[\*].uses][jobs] configuration documentation.
+
+```yml
+jobs:
+  CompressImages:
+    uses: ivuorinen/.github/workflows/compress-images.yml
+
+  ReusableMatrixJobForComposerInstall:
+    strategy:
+      matrix:
+        target: ['8.0', '8.1', '8.2', '8.3']
+    uses: ivuorinen/.github/workflows/composer-install.yml@main
+    with:
+      php-versions: ${{ matrix.target }}
+```
+
+## Misc configurations
+
+### Renovate config
+
+Go through [the onboarding process][onboarding] and save the following snippet as `.github/renovate.json`.
+
+```json
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["github>ivuorinen/renovate-config"]
+}
+```
+
+[reusable]: https://docs.github.com/en/actions/using-workflows/reusing-workflows#calling-a-reusable-workflow
+[jobs]: https://docs.github.com/en/actions/using-workflows/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsuses
+[onboarding]: https://docs.renovatebot.com/getting-started/installing-onboarding

.github/workflows/composer-install.yml

@@ -1,14 +1,14 @@
 ---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
 name: Run Composer Install
 
 on:
   workflow_dispatch:
+  workflow_call:
   pull_request:
     paths:
-      - "composer.json"
-      - "composer.lock"
-
-permissions: read-all
+      - 'composer.json'
+      - 'composer.lock'
 
 jobs:
   ComposerInstall:
@@ -20,15 +20,15 @@ jobs:
 
     strategy:
       matrix:
-        operating-system: ["ubuntu-latest"]
-        php: ["8.0", "8.1", "8.2", "8.3", "8.4"]
+        operating-system: ['ubuntu-latest']
+        php: ['8.0', '8.1', '8.2', '8.3', '8.4']
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Cache Composer packages
         id: composer-cache
-        uses: actions/cache@v4
+        uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4
         with:
           path: vendor
           key: ${{ runner.os }}-php-${{ matrix.php }}-${{ hashFiles('**/composer.json') }}
@@ -37,7 +37,7 @@ jobs:
             ${{ runner.os }}-php-
 
       - name: Composer (PHP ${{ matrix.php }})
-        uses: php-actions/composer@v6
+        uses: php-actions/composer@8a65f0d3c6a1d17ca4800491a40b5756a4c164f3 # v6
         with:
           php_version: ${{ matrix.php }}
           args: --no-progress --prefer-dist --optimize-autoloader

.github/workflows/compress-images.yml

@@ -1,14 +1,15 @@
 ---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+#
 # Compress images on demand (workflow_dispatch), and at 11pm every Sunday (schedule).
 # Open a Pull Request if any images can be compressed.
 name: Compress Images on Demand
 
 on:
   workflow_dispatch:
+  workflow_call:
   schedule:
-    - cron: "00 23 * * 0"
-
-permissions: read-all
+    - cron: '00 23 * * 0'
 
 jobs:
   CompressOnDemandOrSchedule:
@@ -23,18 +24,18 @@ jobs:
 
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Compress Images
         id: calibre
-        uses: calibreapp/image-actions@main
+        uses: calibreapp/image-actions@737ceeaeed61e17b8d358358a303f1b8d177b779 # 1.1.0
         with:
           githubToken: ${{ secrets.GITHUB_TOKEN }}
           compressOnly: true
 
       - name: Create New Pull Request If Needed
         if: steps.calibre.outputs.markdown != ''
-        uses: peter-evans/create-pull-request@v6
+        uses: peter-evans/create-pull-request@67ccf781d68cd99b580ae25a5c18a1cc84ffff1f # v7
         with:
           title: Compressed Images Nightly
           branch-suffix: timestamp

.github/workflows/dependency-review.yml

@@ -1,4 +1,6 @@
 ---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+#
 # Dependency Review Action
 #
 # This Action will scan dependency manifest files that change as part of a Pull Request,
@@ -8,11 +10,9 @@
 #
 # Source repository: https://github.com/actions/dependency-review-action
 # Public documentation: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement
-name: "Dependency Review"
+name: 'Dependency Review'
 
-on: [pull_request]
-
-permissions: read-all
+on: [pull_request, workflow_call]
 
 jobs:
   dependency-review:
@@ -20,8 +20,8 @@ jobs:
     permissions:
       contents: read
     steps:
-      - name: "Checkout Repository"
-        uses: actions/checkout@v4
+      - name: 'Checkout Repository'
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
-      - name: "Dependency Review"
-        uses: actions/dependency-review-action@v4
+      - name: 'Dependency Review'
+        uses: actions/dependency-review-action@3b139cfc5fae8b618d3eae3675e383bb1769c019 # v4

.github/workflows/labels.yaml

@@ -1,22 +1,23 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
 name: labels
 
 on:
   push:
     branches:
-      - "main"
+      - 'main'
     paths:
-      - ".github/labels.yml"
-      - ".github/workflows/labels.yml"
-
-permissions: read-all
+      - '.github/labels.yml'
+      - '.github/workflows/labels.yml'
+  workflow_call:
 
 jobs:
   labeler:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Run Labeler
-        uses: crazy-max/ghaction-github-labeler@v5
+        uses: crazy-max/ghaction-github-labeler@31674a3852a9074f2086abcf1c53839d466a47e7 # v5
         with:
           dry-run: ${{ github.event_name == 'pull_request' }}

.github/workflows/laravel-phpunit.yml

@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
 name: Laravel Setup and Composer test
 
 on:
@@ -6,8 +7,7 @@ on:
     branches: [main]
   pull_request:
     branches: [main]
-
-permissions: read-all
+  workflow_call:
 
 jobs:
   laravel-tests:
@@ -18,17 +18,17 @@ jobs:
       statuses: write
 
     steps:
-      - uses: shivammathur/setup-php@v2
+      - uses: shivammathur/setup-php@9e72090525849c5e82e596468b86eb55e9cc5401 # v2
         with:
-          php-version: "8.4"
+          php-version: '8.4'
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
-      - name: "Check file existence"
+      - name: 'Check file existence'
         id: check_files
-        uses: andstor/file-existence-action@v3
+        uses: andstor/file-existence-action@076e0072799f4942c8bc574a82233e1e4d13e9d6 # v3
         with:
-          files: "package.json, artisan"
+          files: 'package.json, artisan'
 
       - name: Copy .env
         if: steps.check_files.outputs.files_exists == 'true'

.github/workflows/pr-compress-images.yml

@@ -1,17 +1,17 @@
 ---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
 name: Compress Images
 
 on:
+  workflow_call:
   pull_request:
     # Run Image Actions when JPG, JPEG, PNG or WebP files are added or changed.
     # See https://help.github.com/en/actions/automating-your-workflow-with-github-actions/workflow-syntax-for-github-actions#onpushpull_requestpaths for reference.
     paths:
-      - "**.jpg"
-      - "**.jpeg"
-      - "**.png"
-      - "**.webp"
-
-permissions: read-all
+      - '**.jpg'
+      - '**.jpeg'
+      - '**.png'
+      - '**.webp'
 
 jobs:
   CompressInPR:
@@ -27,9 +27,9 @@ jobs:
 
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Compress Images
-        uses: calibreapp/image-actions@main
+        uses: calibreapp/image-actions@737ceeaeed61e17b8d358358a303f1b8d177b779 # 1.1.0
         with:
           githubToken: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/pr-lint.yml

@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
 #################################
 #################################
 ## Super Linter GitHub Actions ##
@@ -18,12 +19,9 @@ env:
 # Start the job on all push #
 #############################
 on:
-  push:
-    branches: [master, main]
   pull_request:
     branches: [master, main]
-
-permissions: read-all
+  workflow_call:
 
 ###############
 # Set the Job #
@@ -51,24 +49,44 @@ jobs:
       # Checkout the code base #
       ##########################
       - name: Checkout Code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           # Full git history is needed to get a proper
           # list of changed files within `super-linter`
           fetch-depth: 0
 
+      - name: Setup Node.js Environment
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4
+        with:
+          node-version-file: '.nvmrc'
+
+      - name: Cache Node Modules
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+        id: cache
+        with:
+          path: node_modules
+          key: node-modules-${{ hashFiles('**/package-lock.json') }}
+
+      - name: Install npm packages
+        run: npm install
+
       ################################
       # Run Linter against code base #
       ################################
       - name: Lint Code Base
-        uses: github/super-linter@v7
+        uses: super-linter/super-linter/slim@85f7611e0f7b53c8573cca84aa0ed4344f6f6a4d # v7
         env:
           VALIDATE_ALL_CODEBASE: false
+          LINTER_RULES_PATH: '${DEFAULT_WORKSPACE}'
+          VALIDATE_JSON: false # doesn't handle new config format
+          VALIDATE_NATURAL_LANGUAGE: false # doesn't seem to respect configs
           FIX_ANSIBLE: true
           FIX_ENV: true
-          FIX_JSON: true
+          FIX_JSON_PRETTIER: true
           FIX_JSONC_PRETTIER: true
           FIX_MARKDOWN: true
+          FIX_SHELL_SHFMT: true
+          FIX_TYPESCRIPT_PRETTIER: true
           # Change to 'master' if your main branch differs
           DEFAULT_BRANCH: ${{ env.MAIN_BRANCH }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/readme-scribe.yaml

@@ -1,12 +1,15 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
 name: readme-scribe
 
 on:
   workflow_dispatch:
+  workflow_call:
   schedule:
-    - cron: "0 0 */1 * *"
+    - cron: '0 0 */1 * *'
   push:
     branches:
-      - "main"
+      - 'main'
 
 permissions:
   contents: write
@@ -18,16 +21,16 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: muesli/readme-scribe@5a187a2a36ef894335f17a7d01c32b0e28c6d948
         with:
           template: templates/README.md.tpl
           writeTo: README.md
         env:
           GITHUB_TOKEN: ${{ secrets.GH_PAT }}
-      - uses: stefanzweifel/git-auto-commit-action@v5.0.1
+      - uses: stefanzweifel/git-auto-commit-action@b863ae1933cb653a53c021fe36dbb774e1fb9403 # v5.2.0
         with:
-          commit_message: "Update generated README"
+          commit_message: 'Update generated README'
           branch: main
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release-drafter.yml

@@ -1,11 +1,10 @@
 ---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
 name: Release Drafter
 
 on:
   workflow_call:
 
-permissions: read-all
-
 jobs:
   update_release_draft:
     name: ✏️ Draft release
@@ -15,6 +14,6 @@ jobs:
       statuses: write
     steps:
       - name: 🚀 Run Release Drafter
-        uses: release-drafter/release-drafter@v6.0.0
+        uses: release-drafter/release-drafter@b1476f6e6eb133afa41ed8589daba6dc69b4d3f5 # v6.1.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release-monthly.yaml

@@ -1,13 +1,12 @@
 ---
 # yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
-name: "Release"
+name: 'Release'
 
 on:
   workflow_dispatch:
+  workflow_call:
   schedule:
-    - cron: "0 0 1 * *" # 1st of every month at midnight
-
-permissions: read-all
+    - cron: '0 0 1 * *' # 1st of every month at midnight
 
 jobs:
   release:
@@ -17,12 +16,12 @@ jobs:
       contents: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Create Release
         shell: bash
         env:
-          GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
+          GITHUB_TOKEN: '${{ secrets.GITHUB_TOKEN }}'
         run: |
           # Retrieve previous release tag
           previous_tag="$(gh release list --limit 1 | awk '{ print $1 }')"

.github/workflows/reviewdog-linters.yml

@@ -1,9 +1,8 @@
 ---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
 name: Reviewdog Linters
 
-on: [push]
-
-permissions: read-all
+on: [pull_request, workflow_call]
 
 jobs:
   linters:
@@ -16,10 +15,10 @@ jobs:
       statuses: write
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: GitHub Actions
-        uses: reviewdog/action-actionlint@v1
+        uses: reviewdog/action-actionlint@abd537417cf4991e1ba8e21a67b1119f4f53b8e0 # v1
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           reporter: github-pr-review
@@ -31,13 +30,13 @@ jobs:
           reporter: github-pr-review
 
       - name: markdownlint
-        uses: reviewdog/action-markdownlint@v0
+        uses: reviewdog/action-markdownlint@f901468edf9a3634dd39b35ba26cad0aad1a0bfd # v0
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           reporter: github-pr-review
 
       - name: shfmt
-        uses: reviewdog/action-shfmt@v1
+        uses: reviewdog/action-shfmt@f59386f08bd9a24ac1a746e69f026ddc2ed06710 # v1
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           shfmt_flags: |
@@ -53,7 +52,7 @@ jobs:
             --func-next-line
 
       - name: yamllint
-        uses: reviewdog/action-yamllint@v1
+        uses: reviewdog/action-yamllint@1dca3ad811867be18fbe293a9818d715a6c2cd46 # v1
         with:
           github_token: ${{ secrets.github_token }}
           reporter: github-pr-review

.github/workflows/stale.yml

@@ -1,14 +1,13 @@
 ---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
 name: Stale
 
 on:
   schedule:
-    - cron: "0 8 * * *"
+    - cron: '0 8 * * *'
   workflow_call:
   workflow_dispatch:
 
-permissions: read-all
-
 jobs:
   stale:
     name: 🧹 Clean up stale issues and PRs
@@ -21,28 +20,20 @@ jobs:
 
     steps:
       - name: 🚀 Run stale
-        uses: actions/stale@v9.0.0
+        uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9.1.0
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           days-before-stale: 30
           days-before-close: 7
           remove-stale-when-updated: true
-          stale-issue-label: "stale"
-          exempt-issue-labels: "no-stale,help-wanted"
+          stale-issue-label: 'stale'
+          exempt-issue-labels: 'no-stale,help-wanted'
           stale-issue-message: >
-            There hasn't been any activity on this issue recently, so we
-            clean up some of the older and inactive issues.
+            This issue has now been marked as stale and will be closed if no further activity occurs. Thanks!
 
-            Please make sure to update to the latest version and
-            check if that solves the issue. Let us know if that works for you
-            by leaving a comment 👍
 
-            This issue has now been marked as stale and will be closed if no
-            further activity occurs. Thanks!
-          stale-pr-label: "stale"
-          exempt-pr-labels: "no-stale"
+          stale-pr-label: 'stale'
+          exempt-pr-labels: 'no-stale'
           stale-pr-message: >
-            There hasn't been any activity on this pull request recently. This
-            pull request has been automatically marked as stale because of that
-            and will be closed if no further activity occurs within 7 days.
-            Thank you for your contributions.
+            There hasn't been any activity on this pull request recently. This pull request has been automatically marked as stale because of that and will be closed if no further activity occurs within 7 days. Thank you for your contributions.
+

.github/workflows/sync-labels-to-own-projects.yml

@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
 name: Sync labels to other repositories
 
 on:
@@ -9,10 +10,9 @@ on:
       - .github/labels.yml
       - .github/workflows/sync-labels-to-own-projects.yml
   workflow_dispatch:
+  workflow_call:
   schedule:
-    - cron: "0 0 * * *" # Every day at midnight
-
-permissions: read-all
+    - cron: '0 0 * * *' # Every day at midnight
 
 jobs:
   sync-labels:
@@ -23,7 +23,7 @@ jobs:
     outputs:
       repos: ${{ steps.repos.outputs.REPOS }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Get Repositories
         id: repos
@@ -45,7 +45,7 @@ jobs:
             echo "$REPOS"
             echo "$EOF"
           } >> "$GITHUB_ENV"
-      - uses: micnncim/action-label-syncer@v1
+      - uses: micnncim/action-label-syncer@3abd5ab72fda571e69fffd97bd4e0033dd5f495c # v1
         with:
           prune: true
           repository: ${{ steps.repos.outputs.REPOS }}

.github/workflows/sync-labels.yml

@@ -9,12 +9,10 @@ on:
     paths:
       - .github/labels.yml
   schedule:
-    - cron: "34 5 * * *"
+    - cron: '34 5 * * *'
   workflow_call:
   workflow_dispatch:
 
-permissions: read-all
-
 jobs:
   labels:
     name: ♻️ Sync labels
@@ -28,7 +26,7 @@ jobs:
             "https://raw.githubusercontent.com/ivuorinen/ivuorinen/main/.github/labels.yml" \
             > labels.yml
       - name: 🚀 Run Label Syncer
-        uses: micnncim/action-label-syncer@v1.3.0
+        uses: micnncim/action-label-syncer@3abd5ab72fda571e69fffd97bd4e0033dd5f495c # v1.3.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:

.gitignore

@@ -4,3 +4,4 @@
 /.idea
 /*.iml
 
+node_modules

.markdownlint.json

@@ -0,0 +1,4 @@
+{
+  "extends": "@ivuorinen/markdownlint-config",
+  "max_line_length": 120
+}

.nvmrc

@@ -0,0 +1 @@
+22.15.0

.pre-commit-config.yaml

@@ -0,0 +1,29 @@
+repos:
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v4.6.0
+    hooks:
+      - id: trailing-whitespace
+      - id: check-case-conflict
+      - id: check-merge-conflict
+      - id: check-shebang-scripts-are-executable
+      - id: check-symlinks
+      - id: check-toml
+      - id: check-xml
+      - id: check-yaml
+        args: [--allow-multiple-documents]
+      - id: end-of-file-fixer
+      - id: mixed-line-ending
+        args: [--fix=auto]
+      - id: pretty-format-json
+        args: [--autofix, --no-sort-keys]
+
+  - repo: https://github.com/igorshubovych/markdownlint-cli
+    rev: v0.41.0
+    hooks:
+      - id: markdownlint
+        args: [-c, .markdownlint.json, --fix]
+
+  - repo: https://github.com/adrienverge/yamllint
+    rev: v1.35.1
+    hooks:
+      - id: yamllint

.prettierrc.json

@@ -0,0 +1 @@
+"@ivuorinen/prettier-config"

.releaserc.json

@@ -0,0 +1,3 @@
+{
+  "extends": ["@ivuorinen/semantic-release-config"]
+}

README.md

@@ -1,3 +1,4 @@
+
 ### Hi there 👋
 
 My name is Ismo Vuorinen, and I work as a software developer in Finland.
@@ -7,36 +8,45 @@ I'm also a huge fan of open-source, and I try to contribute back to the communit
 
 #### 👷 Check out what I'm currently working on
 
-- [ivuorinen/.github](https://github.com/ivuorinen/.github) - My GitHub Shared Configurations. (1 day ago)
+- [ville6000/toggl-cli](https://github.com/ville6000/toggl-cli) - A simple CLI interface for toggl.com (1 day ago)
 - [ivuorinen/cheatsheet-tldr](https://github.com/ivuorinen/cheatsheet-tldr) - tldr-pages/tldr pages for cheat/cheat (1 day ago)
-- [ivuorinen/starred](https://github.com/ivuorinen/starred) - Automatically updated list of my starred repos. (2 days ago)
-- [ivuorinen/dotfiles](https://github.com/ivuorinen/dotfiles) - These are my dotfiles. There are many like 'em, but these are mine. (3 days ago)
-- [ivuorinen/base-configs](https://github.com/ivuorinen/base-configs) - A collection of base configs for code quality and linting tools. Heavily based on `@demartini/base-configs` (4 days ago)
+- [ivuorinen/starred](https://github.com/ivuorinen/starred) - Automatically updated list of my starred repos. (1 day ago)
+- [ivuorinen/dotfiles](https://github.com/ivuorinen/dotfiles) - These are my dotfiles. There are many like 'em, but these are mine. (2 days ago)
+- [ivuorinen/sysvinit-service-generator](https://github.com/ivuorinen/sysvinit-service-generator) - Vue 3 app for creating sysvinit service scripts (3 days ago)
 
 #### 👨‍💻 Repositories I created recently
 
-- [ivuorinen/f2b](https://github.com/ivuorinen/f2b) - fail2ban shorthand wrapper for the usual actions one would take, written in bash
-- [ivuorinen/business-data-fetcher](https://github.com/ivuorinen/business-data-fetcher) - PHP composer package API client to Finnish Patent and Registration Office's (PRH) Business Information System (BIS).
-- [ivuorinen/renovate-config](https://github.com/ivuorinen/renovate-config)
-- [ivuorinen/docker-elk](https://github.com/ivuorinen/docker-elk) - Preconfigured Security, Tools, and Self-Monitoring
-- [ivuorinen/docker-xmrig](https://github.com/ivuorinen/docker-xmrig) - This is a simple miner that uses the xmrig miner to mine Monero.
+- [ivuorinen/go-test-sarif-action](https://github.com/ivuorinen/go-test-sarif-action) - [WIP] Convert `go test -json` output to SARIF
+- [ivuorinen/nvm-auto-use.fish](https://github.com/ivuorinen/nvm-auto-use.fish) - Work in progress implementation for nvm-auto-use for fish shell
+- [ivuorinen/nvm-auto-use](https://github.com/ivuorinen/nvm-auto-use) - Automatically install node version based on .nvmrc, and use it
+- [ivuorinen/actions](https://github.com/ivuorinen/actions) - ivuorinen's shared actions
+- [ivuorinen/uptime](https://github.com/ivuorinen/uptime) - Public uptime checker for some of my sites
 
 #### 🚀 Latest releases I've contributed to
 
-- [ivuorinen/dotfiles](https://github.com/ivuorinen/dotfiles) ([24.8.29](https://github.com/ivuorinen/dotfiles/releases/tag/24.8.29), 3 days ago) - These are my dotfiles. There are many like 'em, but these are mine.
-- [ivuorinen/base-configs](https://github.com/ivuorinen/base-configs) ([@ivuorinen/base-configs@2.0.2](https://github.com/ivuorinen/base-configs/releases/tag/%40ivuorinen/base-configs%402.0.2), 4 days ago) - A collection of base configs for code quality and linting tools. Heavily based on `@demartini/base-configs`
-- [ivuorinen/business-data-fetcher](https://github.com/ivuorinen/business-data-fetcher) ([v1.1.1](https://github.com/ivuorinen/business-data-fetcher/releases/tag/v1.1.1), 1 week ago) - PHP composer package API client to Finnish Patent and Registration Office's (PRH) Business Information System (BIS).
-- [ivuorinen/docker-xmrig](https://github.com/ivuorinen/docker-xmrig) ([6.22.0-2024-08-12](https://github.com/ivuorinen/docker-xmrig/releases/tag/6.22.0-2024-08-12), 2 weeks ago) - This is a simple miner that uses the xmrig miner to mine Monero.
-- [ivuorinen/.github](https://github.com/ivuorinen/.github) ([2024.8.0](https://github.com/ivuorinen/.github/releases/tag/2024.8.0), 1 month ago) - My GitHub Shared Configurations.
+- [mason-org/mason-registry](https://github.com/mason-org/mason-registry) ([2025-04-30-famous-ngine](https://github.com/mason-org/mason-registry/releases/tag/2025-04-30-famous-ngine), 1 day ago) - Core registry for mason.nvim.
+- [ville6000/toggl-cli](https://github.com/ville6000/toggl-cli) ([v0.4.0](https://github.com/ville6000/toggl-cli/releases/tag/v0.4.0), 1 day ago) - A simple CLI interface for toggl.com
+- [ivuorinen/dotfiles](https://github.com/ivuorinen/dotfiles) ([25.4.29](https://github.com/ivuorinen/dotfiles/releases/tag/25.4.29), 2 days ago) - These are my dotfiles. There are many like 'em, but these are mine.
+- [ivuorinen/actions](https://github.com/ivuorinen/actions) ([25.4.28](https://github.com/ivuorinen/actions/releases/tag/25.4.28), 3 days ago) - ivuorinen's shared actions
+- [ivuorinen/base-configs](https://github.com/ivuorinen/base-configs) ([@ivuorinen/stylelint-config@0.3.17](https://github.com/ivuorinen/base-configs/releases/tag/%40ivuorinen/stylelint-config%400.3.17), 1 week ago) - A collection of base configs for code quality and linting tools. Heavily based on `@demartini/base-configs`
 
 #### ⭐ Recent Stars
 
-- [antfu/eslint-config](https://github.com/antfu/eslint-config) - Anthony's ESLint config preset (4 days ago)
-- [micromatch/micromatch](https://github.com/micromatch/micromatch) - Highly optimized wildcard and glob matching library. Faster, drop-in replacement to minimatch and multimatch. Used by square, webpack, babel core, yarn, jest, ract-native, taro, bulma, browser-sync, stylelint, nyc, ava, and many others! Follow micromatch's author: https://github.com/jonschlinkert (1 week ago)
-- [MichaelAquilina/zsh-autoswitch-virtualenv](https://github.com/MichaelAquilina/zsh-autoswitch-virtualenv) -  🐍 ZSH plugin to automatically switch python virtualenvs (including pipenv and poetry) as you move between directories (1 week ago)
-- [CorentinTh/it-tools](https://github.com/CorentinTh/it-tools) - Collection of handy online tools for developers, with great UX.  (1 week ago)
-- [nette/php-generator](https://github.com/nette/php-generator) - 🐘 Generates neat PHP code for you. Supports new PHP 8.3 features. (1 week ago)
+- [marocchino/sticky-pull-request-comment](https://github.com/marocchino/sticky-pull-request-comment) - create comment on pull request, if exists update that comment. (2 days ago)
+- [x1xhlol/system-prompts-and-models-of-ai-tools](https://github.com/x1xhlol/system-prompts-and-models-of-ai-tools) - FULL v0, Cursor, Manus, Same.dev, Lovable, Devin, Replit Agent, Windsurf Agent & VSCode Agent (And other Open Sourced) System Prompts, Tools & AI Models. (1 week ago)
+- [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) - Official GitHub Action for golangci-lint from its authors (1 week ago)
+- [99designs/keyring](https://github.com/99designs/keyring) - Go library providing a uniform interface across a range of secure credential stores (1 week ago)
+- [ville6000/toggl-cli](https://github.com/ville6000/toggl-cli) - A simple CLI interface for toggl.com (1 week ago)
+
+
+
+<picture>
+  <source srcset="https://raw.githubusercontent.com/ivuorinen/github-stats/master/generated/overview.svg#gh-dark-mode-only" media="(prefers-color-scheme: dark)" />
+  <img src="https://raw.githubusercontent.com/ivuorinen/github-stats/master/generated/overview.svg#gh-light-mode-only" alt="Overview of my activity" />
+</picture>
+<picture>
+  <source srcset="https://raw.githubusercontent.com/ivuorinen/github-stats/master/generated/languages.svg#gh-dark-mode-only" media="(prefers-color-scheme: dark)" />
+  <img src="https://raw.githubusercontent.com/ivuorinen/github-stats/master/generated/languages.svg#gh-light-mode-only" alt="Languages I have been using" />
+</picture>
 
-![Overview of my activity](https://raw.githubusercontent.com/ivuorinen/github-stats/master/generated/overview.svg)
-![Languages I have been using](https://raw.githubusercontent.com/ivuorinen/github-stats/master/generated/languages.svg)
 

eslint.config.mjs

@@ -0,0 +1,12 @@
+import ivuorinenConfig from '@ivuorinen/eslint-config'
+
+export default [
+  ...ivuorinenConfig,
+
+  // your modifications
+  {
+    rules: {
+      // "no-unused-vars": "warn"
+    }
+  }
+]

package.json

@@ -0,0 +1,35 @@
+{
+  "name": "@ivuorinen/ivuorinen",
+  "version": "1.0.0",
+  "description": "My GitHub Profile Readme",
+  "private": true,
+  "main": "index.js",
+  "author": "Ismo Vuorinen",
+  "license": "MIT",
+  "scripts": {
+    "lint": "eslint .",
+    "textlint": "textlint -f pretty-error README.md",
+    "textlint:ci": "textlint -f checkstyle README.md",
+    "textlint:fix": "textlint --fix README.md",
+    "format": "prettier --write .",
+    "lint:fix": "eslint . --fix"
+  },
+  "devDependencies": {
+    "@ivuorinen/base-configs": "^2.0.2",
+    "eslint-plugin-prettier": "^5.2.1",
+    "textlint": "^14.2.0",
+    "textlint-filter-rule-comments": "^1.2.2",
+    "textlint-rule-no-todo": "^2.0.1"
+  },
+  "textlint": {
+    "plugins": {
+      "@textlint/markdown": true
+    },
+    "filters": {
+      "comments": true
+    },
+    "rules": {
+      "no-todo": true
+    }
+  }
+}

templates/README.md.tpl

@@ -1,3 +1,4 @@
+<!-- markdownlint-disable MD041 -->
 ### Hi there 👋
 
 My name is Ismo Vuorinen, and I work as a software developer in Finland.
@@ -25,6 +26,15 @@ I'm also a huge fan of open-source, and I try to contribute back to the communit
 - [{{.Repo.Name}}]({{.Repo.URL}}) - {{.Repo.Description}} ({{humanize .StarredAt}})
 {{- end}}
 
-![Overview of my activity](https://raw.githubusercontent.com/ivuorinen/github-stats/master/generated/overview.svg)
-![Languages I have been using](https://raw.githubusercontent.com/ivuorinen/github-stats/master/generated/languages.svg)
+<!-- textlint-disable -->
 
+<picture>
+  <source srcset="https://raw.githubusercontent.com/ivuorinen/github-stats/master/generated/overview.svg#gh-dark-mode-only" media="(prefers-color-scheme: dark)" />
+  <img src="https://raw.githubusercontent.com/ivuorinen/github-stats/master/generated/overview.svg#gh-light-mode-only" alt="Overview of my activity" />
+</picture>
+<picture>
+  <source srcset="https://raw.githubusercontent.com/ivuorinen/github-stats/master/generated/languages.svg#gh-dark-mode-only" media="(prefers-color-scheme: dark)" />
+  <img src="https://raw.githubusercontent.com/ivuorinen/github-stats/master/generated/languages.svg#gh-light-mode-only" alt="Languages I have been using" />
+</picture>
+
+<!-- textlint-enable -->