From 7cb3bbb31ded1429179d56b1df79349f0be38bc6 Mon Sep 17 00:00:00 2001
From: John Bampton <jbampton@gmail.com>
Date: Mon, 20 Apr 2026 14:34:15 +1000
Subject: [PATCH] Workflow and pre-commit clean ups

---
 .github/dependabot.yml                | 1 +
 .github/labeler.yml                   | 1 +
 .github/linters/.markdown-lint.yml    | 1 +
 .github/linters/.yaml-lint.yml        | 1 -
 .github/workflows/codeql-analysis.yml | 4 ++++
 .github/workflows/fetch-daily.yml     | 4 ++++
 .github/workflows/pre-commit.yml      | 1 +
 .github/workflows/render-on-push.yml  | 4 ++++
 .github/workflows/super-linter.yml    | 1 +
 .pre-commit-config.yaml               | 5 +++--
 10 files changed, 20 insertions(+), 3 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index cd19e025..35517124 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,3 +1,4 @@
+---
 version: 2
 updates:
   - package-ecosystem: 'github-actions'
diff --git a/.github/labeler.yml b/.github/labeler.yml
index 000c2233..529f025d 100644
--- a/.github/labeler.yml
+++ b/.github/labeler.yml
@@ -1,3 +1,4 @@
+---
 css:
   - '**/*.css'
 html:
diff --git a/.github/linters/.markdown-lint.yml b/.github/linters/.markdown-lint.yml
index 60223831..40955ad8 100644
--- a/.github/linters/.markdown-lint.yml
+++ b/.github/linters/.markdown-lint.yml
@@ -1,3 +1,4 @@
+---
 # MD013/line-length
 MD013: false
 
diff --git a/.github/linters/.yaml-lint.yml b/.github/linters/.yaml-lint.yml
index 842c22fc..22c0455f 100644
--- a/.github/linters/.yaml-lint.yml
+++ b/.github/linters/.yaml-lint.yml
@@ -4,6 +4,5 @@ extends: default
 rules:
   comments:
     min-spaces-from-content: 1
-  document-start: disable
   line-length: disable
   truthy: disable
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index c13a9635..5c395f70 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -1,3 +1,4 @@
+---
 # For most projects, this workflow file will not need changing; you simply need
 # to commit it to your repository.
 #
@@ -20,6 +21,9 @@ on:
   schedule:
     - cron: '26 19 * * 1'
 
+permissions:
+  contents: read
+
 jobs:
   analyze:
     name: Analyze
diff --git a/.github/workflows/fetch-daily.yml b/.github/workflows/fetch-daily.yml
index 93b5630b..c7967c2c 100644
--- a/.github/workflows/fetch-daily.yml
+++ b/.github/workflows/fetch-daily.yml
@@ -1,3 +1,4 @@
+---
 name: Fetch GitHub Users Daily
 
 on:
@@ -5,6 +6,9 @@ on:
     - cron: '0 2 * * *'
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   fetch-users:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index fa072e7c..1e262c21 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -1,3 +1,4 @@
+---
 name: pre-commit
 
 on: [pull_request]
diff --git a/.github/workflows/render-on-push.yml b/.github/workflows/render-on-push.yml
index 281276a9..b0896a4b 100644
--- a/.github/workflows/render-on-push.yml
+++ b/.github/workflows/render-on-push.yml
@@ -1,3 +1,4 @@
+---
 name: Render HTML on Changes
 
 on:
@@ -13,6 +14,9 @@ on:
     types: [closed]
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   render-html:
     if: ${{ github.event_name != 'pull_request' || (github.event.pull_request && github.event.pull_request.merged == true) }}
diff --git a/.github/workflows/super-linter.yml b/.github/workflows/super-linter.yml
index c0e6591d..9df9004a 100644
--- a/.github/workflows/super-linter.yml
+++ b/.github/workflows/super-linter.yml
@@ -1,3 +1,4 @@
+---
 name: Lint Code
 on:
   push:
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 2a5c8316..f881e29f 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -1,7 +1,8 @@
+---
 default_stages: [pre-commit, pre-push]
 default_language_version:
   python: python3
-  node: 24.12.0
+  node: 24.15.0
 repos:
   - repo: meta
     hooks:
@@ -16,7 +17,7 @@ repos:
         entry: prettier --write '**/*.yaml' '**/*.yml'
         files: \.ya?ml$
         language: node
-        additional_dependencies: ['prettier@3.7.4']
+        additional_dependencies: ['prettier@3.8.3']
   - repo: https://github.com/pycqa/isort
     rev: 8.0.1
     hooks: