modified: .github/workflows/code.yml

Author: ss-o

.github/workflows/code.yml

@@ -13,16 +13,19 @@ on:
     - cron: "30 4 * * 4"
   workflow_dispatch: {}
 
+permissions: read-all
+
 jobs:
   generate:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     concurrency:
       group: ${{ github.workflow }}-${{ github.ref }}
       cancel-in-progress: true
-    environment: code
+    permissions:
+      contents: write
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+      - uses: actions/checkout@v4
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           submodules: recursive

.github/workflows/push-code.yml

@@ -7,20 +7,25 @@ on:
       - "📖 Code"
     types:
       - completed
+
+permissions: read-all
+
 jobs:
   deploy:
     runs-on: ubuntu-latest
     concurrency:
       group: ${{ github.workflow }}-${{ github.ref }}
+    permissions:
+      contents: write
     steps:
       - name: ⤵️ Check out code from GitHub
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+        uses: actions/checkout@v4
       - name: ♻️ Prepare
         run: |
           command mkdir -p gh-pages/code gh-pages/zsh
           command cp -vrf code/zsdoc/html gh-pages/code/
       - name: 🚀 Deploy to GitHub Pages
-        uses: peaceiris/actions-gh-pages@v3
+        uses: peaceiris/actions-gh-pages@v4
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           publish_branch: gh-pages

.github/workflows/stale.yml

@@ -6,10 +6,14 @@ on:
     - cron: "0 8 * * *"
   workflow_dispatch:
 
+permissions: read-all
+
 jobs:
   stale:
     name: 🧹 Clean up stale issues and PRs
     runs-on: ubuntu-latest
+    permissions:
+      issues: write
     steps:
       - name: 🚀 Run stale
         uses: actions/stale@v9
@@ -22,7 +26,7 @@ jobs:
           exempt-issue-labels: "no-stale 🔒,help-wanted 👥"
           stale-issue-message: >
             There hasn't been any activity on this issue recently, and in order to prioritize active issues, it will be
-            marked as stale. Please make sure to update to the latest version and check if that solves the issue. Let us
+             marked as stale. Please make sure to update to the latest version and check if that solves the issue. Let us
             know if that works for you by leaving a 👍 Because this issue is marked as stale, it will be closed and
             locked in 7 days if no further activity occurs. Thank you for your contributions!
 

.github/workflows/sync-labels.yml

@@ -2,6 +2,8 @@
 *logs
 *actions
 *notifications
+*tools
 plugins
 user_trunk.yaml
 user.yaml
+tmp

.github/workflows/trunk-check.yml

@@ -0,0 +1,7 @@
+rules:
+  quoted-strings:
+    required: only-when-needed
+    extra-allowed: ["{|}"]
+  key-duplicates: {}
+  octal-values:
+    forbid-implicit-octal: true

.trunk/.gitignore

@@ -1,17 +1,18 @@
 version: 0.1
 runtimes:
   enabled:
-    - [email protected]
-    - [email protected]
+    - [email protected]
+    - [email protected]
+    - [email protected]
 cli:
-  version: 1.1.0
+  version: 1.22.11
   options:
     - commands: [check, fmt]
     - args: -y
 plugins:
   sources:
     - id: trunk
-      ref: v0.0.6
+      ref: v1.6.7
       uri: https://github.com/trunk-io/plugins
 repo:
   repo:
@@ -27,12 +28,16 @@ actions:
     - trunk-fmt-pre-commit
     - trunk-cache-prune
 lint:
+  disabled:
+    - yamllint
   enabled:
+    - [email protected]
+    - [email protected]
     - git-diff-check
-    - actionlint@1.6.22
-    - gitleaks@8.15.1
-    - markdownlint@0.32.2
-    - prettier@2.7.1
+    - actionlint@1.7.7
+    - gitleaks@8.24.2
+    - markdownlint@0.44.0
+    - prettier@3.5.3
   ignore:
     - linters: [markdownlint, prettier]
       paths: