feat(github-action)!: Update github/super-linter ( v5 → v6 ) (#16)

.github/workflows/build-and-deploy.yml

@@ -8,22 +8,24 @@ on:
   # Allows you to run this workflow manually from the Actions tab
   workflow_dispatch:
 
-# Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
-permissions:
-  contents: read
-  pages: write
-  id-token: write
-
 # Allow only one concurrent deployment, skipping runs queued between the run in-progress and latest queued.
 # However, do NOT cancel in-progress runs as we want to allow these production deployments to complete.
 concurrency:
-  group: "pages"
+  group: 'pages'
   cancel-in-progress: false
 
+permissions: read-all
+
 jobs:
   build-and-deploy:
     runs-on: ubuntu-latest
 
+    # Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
+    permissions:
+      contents: read
+      pages: write
+      id-token: write
+
     environment:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}

.github/workflows/compress-images.yml

@@ -5,7 +5,10 @@ name: Compress Images on Demand
 on:
   workflow_dispatch:
   schedule:
-    - cron: "00 23 * * 0"
+    - cron: '00 23 * * 0'
+
+permissions: read-all
+
 jobs:
   CompressOnDemandOrSchedule:
     name: calibreapp/image-actions

.github/workflows/dependency-review.yml

@@ -8,19 +8,18 @@
 #
 # Source repository: https://github.com/actions/dependency-review-action
 # Public documentation: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement
-name: "Dependency Review"
+name: 'Dependency Review'
 
 on: [pull_request]
 
-permissions:
-  contents: read
+permissions: read-all
 
 jobs:
   dependency-review:
     runs-on: ubuntu-latest
     steps:
-      - name: "Checkout Repository"
+      - name: 'Checkout Repository'
         uses: actions/checkout@v4
 
-      - name: "Dependency Review"
+      - name: 'Dependency Review'
         uses: actions/dependency-review-action@v4

.github/workflows/pr-build.yml

@@ -5,11 +5,12 @@ name: Build
 
 on:
   pull_request:
-    branches: ["main"]
+    branches: ['main']
+
+permissions: read-all
 
 jobs:
   build:
-
     runs-on: ubuntu-latest
 
     strategy:

.github/workflows/pr-compress-images.yml

@@ -5,10 +5,13 @@ on:
     # Run Image Actions when JPG, JPEG, PNG or WebP files are added or changed.
     # See https://help.github.com/en/actions/automating-your-workflow-with-github-actions/workflow-syntax-for-github-actions#onpushpull_requestpaths for reference.
     paths:
-      - "**.jpg"
-      - "**.jpeg"
-      - "**.png"
-      - "**.webp"
+      - '**.jpg'
+      - '**.jpeg'
+      - '**.png'
+      - '**.webp'
+
+permissions: read-all
+
 jobs:
   CompressInPR:
     # Only run on Pull Requests within the same repository, and not from forks.

.github/workflows/pr-lint.yml

@@ -19,11 +19,12 @@ env:
 #############################
 on:
   push:
-    branches-ignore: [master, main]
-    # Remove the line above to run when pushing to master
+    branches: [master, main]
   pull_request:
     branches: [master, main]
 
+permissions: read-all
+
 ###############
 # Set the Job #
 ###############
@@ -60,9 +61,11 @@ jobs:
       # Run Linter against code base #
       ################################
       - name: Lint Code Base
-        uses: github/super-linter@v5
+        uses: github/super-linter@v6
         env:
           VALIDATE_ALL_CODEBASE: false
+          FIX_JAVASCRIPT_STANDARD: true
+          VALIDATE_TYPESCRIPT_STANDARD: false
           # Change to 'master' if your main branch differs
           DEFAULT_BRANCH: ${{ env.MAIN_BRANCH }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release-drafter.yml

@@ -5,6 +5,8 @@ name: Release Drafter
 on:
   workflow_call:
 
+permissions: read-all
+
 jobs:
   update_release_draft:
     name: ✏️ Draft release

.github/workflows/stale.yml

@@ -4,20 +4,20 @@ name: Stale
 # yamllint disable-line rule:truthy
 on:
   schedule:
-    - cron: "0 8 * * *"
+    - cron: '0 8 * * *'
   workflow_call:
   workflow_dispatch:
 
-
-permissions:
-  contents: write # only for delete-branch option
-  issues: write
-  pull-requests: write
+permissions: read-all
 
 jobs:
   stale:
     name: 🧹 Clean up stale issues and PRs
     runs-on: ubuntu-latest
+    permissions:
+      contents: write # only for delete-branch option
+      issues: write
+      pull-requests: write
     steps:
       - name: 🚀 Run stale
         uses: actions/stale@v9.0.0
@@ -26,8 +26,8 @@ jobs:
           days-before-stale: 30
           days-before-close: 7
           remove-stale-when-updated: true
-          stale-issue-label: "stale"
-          exempt-issue-labels: "no-stale,help-wanted"
+          stale-issue-label: 'stale'
+          exempt-issue-labels: 'no-stale,help-wanted'
           stale-issue-message: >
             There hasn't been any activity on this issue recently, so we
             clean up some of the older and inactive issues.
@@ -38,8 +38,8 @@ jobs:
 
             This issue has now been marked as stale and will be closed if no
             further activity occurs. Thanks!
-          stale-pr-label: "stale"
-          exempt-pr-labels: "no-stale"
+          stale-pr-label: 'stale'
+          exempt-pr-labels: 'no-stale'
           stale-pr-message: >
             There hasn't been any activity on this pull request recently. This
             pull request has been automatically marked as stale because of that