Merge branch 'anuraghazra-master2'

.eslintrc.json

@@ -48,8 +48,8 @@
         // "dot-notation": "warn",
         // "eqeqeq": [ "error", "smart" ],
         // "guard-for-in": "warn",
-        // "no-alert": "error",
-        // "no-caller": "error",
+        "no-alert": "error",
+        "no-caller": "error",
         // "no-case-declarations": "warn",
         // "no-div-regex": "warn",
         // "no-else-return": "warn",
@@ -98,8 +98,8 @@
             "terms": [ "TODO", "FIXME" ],
             "location": "start"
         }],
-        // "no-with": "warn",
-        // "radix": "warn",
+        "no-with": "warn",
+        "radix": "warn",
         // "vars-on-top": "error",
 
         // Enforces the style of wrapped functions
@@ -113,7 +113,7 @@
 
         // "init-declarations": [ "error", "always" ],
         // "no-catch-shadow": "warn",
-        // "no-delete-var": "error",
+        "no-delete-var": "error",
         // "no-label-var": "error",
         // "no-shadow-restricted-names": "error",
         // "no-shadow": "warn",
@@ -128,7 +128,7 @@
 
         // Disallow hoisting - let & const don't allow hoisting anyhow
 
-        // "no-use-before-define": "error",
+        "no-use-before-define": "error",
 
         // Node.js and CommonJS
 
@@ -150,13 +150,13 @@
         // "arrow-body-style": [ "error", "always" ],
         // "arrow-parens": [ "error", "always" ],
         // "arrow-spacing": [ "error", { "before": true, "after": true }],
-        // "constructor-super": "error",
+        "constructor-super": "error",
         // "generator-star-spacing": [ "error", "before" ],
         // "no-arrow-condition": "error",
-        // "no-class-assign": "error",
-        // "no-const-assign": "error",
-        // "no-dupe-class-members": "error",
-        // "no-this-before-super": "error",
+        "no-class-assign": "error",
+        "no-const-assign": "error",
+        "no-dupe-class-members": "error",
+        "no-this-before-super": "error",
         // "no-var": "warn",
         "object-shorthand": [ "warn" ],
         // "prefer-arrow-callback": "warn",
@@ -193,17 +193,17 @@
         // "no-continue": "off",
         // "no-inline-comments": "off",
         // "no-lonely-if": "warn",
-        // "no-mixed-spaces-and-tabs": "warn",
-        // "no-multiple-empty-lines": "warn",
-        // "no-negated-condition": "off",
+        "no-mixed-spaces-and-tabs": "warn",
+        "no-multiple-empty-lines": "warn",
+        "no-negated-condition": "warn",
         // "no-nested-ternary": "warn",
         // "no-new-object": "warn",
         // "no-plusplus": "off",
         // "no-spaced-func": "warn",
         // "no-ternary": "off",
         // "no-trailing-spaces": "warn",
         // "no-underscore-dangle": "warn",
-        // "no-unneeded-ternary": "warn",
+        "no-unneeded-ternary": "warn",
         // "object-curly-spacing": [ "warn", "always" ],
         // "one-var": "off",
         // "operator-assignment": [ "warn", "never" ],
@@ -217,14 +217,13 @@
                 "MethodDefinition": true,
                 "ClassDeclaration": false
             }
-        }]
+        }],
         // "semi-spacing": [ "warn", { "before": false, "after": true }],
         // "semi": [ "error", "always" ],
         // "sort-vars": "off",
-        // "space-after-keywords": [ "warn", "always" ],
+        "keyword-spacing": ["error", { "before": true, "after": true }]
         // "space-before-blocks": [ "warn", "always" ],
         // "space-before-function-paren": [ "warn", "never" ],
-        // "space-before-keywords": [ "warn", "always" ],
         // "space-in-parens": [ "warn", "never" ],
         // "space-infix-ops": [ "warn", { "int32Hint": true } ],
         // "space-return-throw-case": "error",

.github/dependabot.yml

@@ -6,10 +6,20 @@ updates:
     schedule:
       interval: weekly
     open-pull-requests-limit: 10
+    commit-message:
+      prefix: "build(deps)"
+      prefix-development: "build(deps-dev)"
+    reviewers:
+      - "qwerty541"
 
   # Maintain dependencies for GitHub Actions
   - package-ecosystem: github-actions
     directory: "/"
     schedule:
       interval: weekly
     open-pull-requests-limit: 10
+    commit-message:
+      prefix: "build(deps)"
+      prefix-development: "build(deps-dev)"
+    reviewers:
+      - "qwerty541"

.github/labeler.yml

@@ -1,51 +1,95 @@
-themes: themes/index.js
-doc-translation: docs/*
+themes:
+  - changed-files:
+      - any-glob-to-any-file:
+          - themes/index.js
+
+doc-translation:
+  - changed-files:
+      - any-glob-to-any-file:
+          - docs/*
+
 card-i18n:
-  - src/translations.js
-  - src/common/I18n.js
+  - changed-files:
+      - any-glob-to-any-file:
+          - src/translations.js
+          - src/common/I18n.js
+
 documentation:
-  - readme.md
-  - CONTRIBUTING.md
-  - CODE_OF_CONDUCT.md
-  - SECURITY.md
+  - changed-files:
+      - any-glob-to-any-file:
+          - readme.md
+          - CONTRIBUTING.md
+          - CODE_OF_CONDUCT.md
+          - SECURITY.md
+
 dependencies:
-  - package.json
-  - package-lock.json
+  - changed-files:
+      - any-glob-to-any-file:
+          - package.json
+          - package-lock.json
+
 lang-card:
-  - api/top-langs.js
-  - src/cards/top-languages-card.js
-  - src/fetchers/top-languages-fetcher.js
-  - tests/fetchTopLanguages.test.js
-  - tests/renderTopLanguagesCard.test.js
-  - tests/top-langs.test.js
+  - changed-files:
+      - any-glob-to-any-file:
+          - api/top-langs.js
+          - src/cards/top-languages-card.js
+          - src/fetchers/top-languages-fetcher.js
+          - tests/fetchTopLanguages.test.js
+          - tests/renderTopLanguagesCard.test.js
+          - tests/top-langs.test.js
+
 repo-card:
-  - api/pin.js
-  - src/cards/repo-card.js
-  - src/fetchers/repo-fetcher.js
-  - tests/fetchRepo.test.js
-  - tests/renderRepoCard.test.js
-  - tests/pin.test.js
+  - changed-files:
+      - any-glob-to-any-file:
+          - api/pin.js
+          - src/cards/repo-card.js
+          - src/fetchers/repo-fetcher.js
+          - tests/fetchRepo.test.js
+          - tests/renderRepoCard.test.js
+          - tests/pin.test.js
+
 stats-card:
-  - api/index.js
-  - src/cards/stats-card.js
-  - src/fetchers/stats-fetcher.js
-  - tests/fetchStats.test.js
-  - tests/renderStatsCard.test.js
-  - tests/api.test.js
+  - changed-files:
+      - any-glob-to-any-file:
+          - api/index.js
+          - src/cards/stats-card.js
+          - src/fetchers/stats-fetcher.js
+          - tests/fetchStats.test.js
+          - tests/renderStatsCard.test.js
+          - tests/api.test.js
+
 wakatime-card:
-  - api/wakatime.js
-  - src/cards/wakatime-card.js
-  - src/fetchers/wakatime-fetcher.js
-  - tests/fetchWakatime.test.js
-  - tests/renderWakatimeCard.test.js
+  - changed-files:
+      - any-glob-to-any-file:
+          - api/wakatime.js
+          - src/cards/wakatime-card.js
+          - src/fetchers/wakatime-fetcher.js
+          - tests/fetchWakatime.test.js
+          - tests/renderWakatimeCard.test.js
+          - tests/wakatime.test.js
+
 gist-card:
-  - api/gist.js
-  - src/cards/gist-card.js
-  - src/fetchers/gist-fetcher.js
-  - tests/fetchGist.test.js
-  - tests/renderGistCard.test.js
-  - tests/gist.test.js
-ranks: src/calculateRank.js
+  - changed-files:
+      - any-glob-to-any-file:
+          - api/gist.js
+          - src/cards/gist-card.js
+          - src/fetchers/gist-fetcher.js
+          - tests/fetchGist.test.js
+          - tests/renderGistCard.test.js
+          - tests/gist.test.js
+
+ranks:
+  - changed-files:
+      - any-glob-to-any-file:
+          - src/calculateRank.js
+
 ci:
-  - .github/workflows/*
-  - scripts/*
+  - changed-files:
+      - any-glob-to-any-file:
+          - .github/workflows/*
+          - scripts/*
+
+infrastructure:
+  - changed-files:
+      - any-glob-to-any-file:
+          - .eslintrc.json

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,41 @@
+name: "Static code analysis workflow (CodeQL)"
+
+on:
+  push:
+    branches:
+      - master
+  pull_request:
+    branches:
+      - master
+
+permissions:
+  actions: read
+  checks: read
+  contents: read
+  deployments: read
+  issues: read
+  discussions: read
+  packages: read
+  pages: read
+  pull-requests: read
+  repository-projects: read
+  security-events: write
+  statuses: read
+
+jobs:
+  CodeQL-Build:
+    # CodeQL runs on ubuntu-latest, windows-latest, and macos-latest
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+
+      # Initializes the CodeQL tools for scanning.
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@46a6823b81f2d7c67ddf123851eea88365bc8a67 # v2.13.5
+        with:
+          languages: javascript
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@46a6823b81f2d7c67ddf123851eea88365bc8a67 # v2.13.5

.github/workflows/deploy-prep.yml

@@ -10,10 +10,10 @@ jobs:
     if: github.repository == 'anuraghazra/github-readme-stats'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - name: Deployment Prep
         run: python ./.github/workflows/deploy-prep.py
-      - uses: stefanzweifel/git-auto-commit-action@3ea6ae190baf489ba007f7c92608f33ce20ef04a # v4.16.0
+      - uses: stefanzweifel/git-auto-commit-action@8756aa072ef5b4a080af5dc8fef36c5d586e521d # v5.0.0
         with:
           branch: vercel
           create_branch: true

.github/workflows/e2e-test.yml

@@ -17,10 +17,10 @@ jobs:
         node-version: [18.x]
 
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Setup Node
-        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1
+        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v4.0.1
         with:
           node-version: ${{ matrix.node-version }}
           cache: npm

.github/workflows/empty-issues-closer.yaml

@@ -27,10 +27,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # NOTE: Retrieve issue templates.
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Run empty issues closer action
-        uses: rickstaa/empty-issues-closer-action@2976d7763c8490535b108c414d8a147ffea86f28 # v1.1.20
+        uses: rickstaa/empty-issues-closer-action@14e27ff7da9bde71baf93f953750bc1334046ea9 # v1.1.58
         env:
           github_token: ${{ secrets.GITHUB_TOKEN }}
         with:

.github/workflows/generate-theme-doc.yml

@@ -29,10 +29,10 @@ jobs:
         node-version: [18.x]
 
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Setup Node
-        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1
+        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v4.0.1
         with:
           node-version: ${{ matrix.node-version }}
           cache: npm

.github/workflows/label-pr.yml

@@ -21,6 +21,7 @@ jobs:
     if: github.repository == 'anuraghazra/github-readme-stats'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/labeler@ac9175f8a1f3625fd0d4fb234536d26811351594 # v4.3.0
+      - uses: actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9 # v5.0.0
         with:
           repo-token: "${{ secrets.GITHUB_TOKEN }}"
+          sync-labels: true

.github/workflows/ossf-analysis.yml

@@ -21,12 +21,12 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@08b4669551908b1024bb425080c797723083c031 # v2.2.0
+        uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 # v2.3.1
         with:
           results_file: results.sarif
           results_format: sarif
@@ -35,14 +35,14 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
+        uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 # v4.0.0
         with:
           name: SARIF file
           path: results.sarif
           retention-days: 5
 
       # required for Code scanning alerts
       - name: "Upload SARIF results to code scanning"
-        uses: github/codeql-action/upload-sarif@00e563ead9f72a8461b24876bee2d0c2e8bd2ee8 # v2.21.5
+        uses: github/codeql-action/upload-sarif@fdcae64e1484d349b3366718cdfef3d404390e85 # v2.22.1
         with:
           sarif_file: results.sarif