Merge remote-tracking branch 'upstream/master'

Author: Really Him

.gitattributes

@@ -19,3 +19,13 @@ updates:
     commit-message:
       prefix: "ci(deps)"
       prefix-development: "ci(deps-dev)"
+
+  # Maintain dependencies for Devcontainers
+  - package-ecosystem: devcontainers
+    directory: "/"
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 10
+    commit-message:
+      prefix: "build(deps)"
+      prefix-development: "build(deps-dev)"

.github/dependabot.yml

@@ -24,6 +24,8 @@ permissions:
 
 jobs:
   CodeQL-Build:
+    if: github.repository == 'anuraghazra/github-readme-stats'
+
     # CodeQL runs on ubuntu-latest, windows-latest, and macos-latest
     runs-on: ubuntu-latest
 

.github/workflows/codeql-analysis.yml

@@ -13,7 +13,7 @@ jobs:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Deployment Prep
         run: python ./.github/workflows/deploy-prep.py
-      - uses: stefanzweifel/git-auto-commit-action@778341af668090896ca464160c2def5d1d1a3eb0 # v6.0.1
+      - uses: stefanzweifel/git-auto-commit-action@28e16e81777b558cc906c8750092100bbb34c5e3 # v7.0.0
         with:
           branch: vercel
           create_branch: true

.github/workflows/deploy-prep.yml

@@ -27,7 +27,7 @@ jobs:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@05b42c624433fc40578a4040d5cf5e36ddca8cde # v2.4.2
+        uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
         with:
           results_file: results.sarif
           results_format: sarif

.github/workflows/ossf-analysis.yml

@@ -40,7 +40,7 @@ jobs:
           node-version: ${{ matrix.node-version }}
           cache: npm
 
-      - uses: bahmutov/npm-install@3714964fb879ebbbc108e167f0f3a0c81ec075c9 # v1.10.10
+      - uses: bahmutov/npm-install@4488656f8e90d3c85e3a964db0018dd624f340e7 # v1.11.1
         with:
           useLockFile: false
 

.github/workflows/preview-theme.yml

@@ -45,7 +45,7 @@ jobs:
           node-version: ${{ matrix.node-version }}
           cache: npm
 
-      - uses: bahmutov/npm-install@3714964fb879ebbbc108e167f0f3a0c81ec075c9 # v1.10.10
+      - uses: bahmutov/npm-install@4488656f8e90d3c85e3a964db0018dd624f340e7 # v1.11.1
         with:
           useLockFile: false
 

.github/workflows/stale-theme-pr-closer.yml

@@ -1,9 +1,7 @@
 name: Theme Pull Requests Closer
 
 on:
-  pull_request:
-    types:
-      - labeled
+  - pull_request_target
 
 permissions:
   actions: read
@@ -21,8 +19,8 @@ permissions:
 
 jobs:
   close-prs:
+    if: github.repository == 'anuraghazra/github-readme-stats'
     runs-on: ubuntu-latest
-
     steps:
       - name: Check out the code
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
@@ -34,7 +32,7 @@ jobs:
 
       - name: Close Pull Requests
         run: |
-          comment_message="We are currently pausing addition of new themes. If this theme is exclusively for your personal use, then instead of adding it to our theme collection, you can use card customization options."
+          comment_message="We are currently pausing addition of new themes. If this theme is exclusively for your personal use, then instead of adding it to our theme collection, you can use card [customization options](https://github.com/anuraghazra/github-readme-stats?tab=readme-ov-file#customization)."
 
           for pr_number in $(gh pr list -l "themes" -q is:open --json number -q ".[].number"); do
             gh pr close $pr_number -c "$comment_message"

.github/workflows/theme-prs-closer.yml

@@ -1,3 +1,15 @@
+.devcontainer
+.github
+.husky
+.vscode
+benchmarks
+coverage
+scripts
+tests
 .env
-package-lock.json
-coverage
+**/*.md
+**/*.svg
+.eslintrc.json
+.prettierignore
+.pretterrc.json
+codecov.yml

.vercelignore

@@ -2,4 +2,7 @@
     "markdown.extension.toc.levels": "1..3",
     "editor.formatOnSave": true,
     "editor.defaultFormatter": "esbenp.prettier-vscode",
+    "[javascript]": {
+        "editor.tabSize": 2
+    }
 }