GitHub Actions Improvements

.github/workflows/azure-static-web-apps-deploy.yml

@@ -23,14 +23,13 @@
       - name: Setup Hugo
         uses: peaceiris/actions-hugo@v3
         with:
-          hugo-version: "0.122.0"
           extended: true
 
       - run: npm i
       - run: hugo --minify
 
       - name: Build And Deploy
         id: builddeploy
         uses: Azure/static-web-apps-deploy@v1
         with:
           azure_static_web_apps_api_token: ${{ secrets.AZURE_STATIC_WEB_APPS_API_TOKEN_LIVELY_ROCK_075179F10 }}
@@ -49,7 +48,7 @@
     name: Close Pull Request Job
     steps:
       - name: Close Pull Request
         id: closepullrequest
         uses: Azure/static-web-apps-deploy@v1
         with:
           azure_static_web_apps_api_token: ${{ secrets.AZURE_STATIC_WEB_APPS_API_TOKEN_LIVELY_ROCK_075179F10 }}

.github/workflows/codeql-analysis.yml

@@ -6,8 +6,9 @@ on:
       - "dependabot/**"
   pull_request:
     branches: [main]
+  workflow_dispatch:
 
-permissions:  # added using https://github.com/step-security/secure-workflows
+permissions:
   contents: read
 
 jobs:
@@ -32,6 +33,9 @@ jobs:
         uses: github/codeql-action/init@v3
         with:
           languages: ${{ matrix.language }}
+          queries: +security-and-quality
 
       - name: Perform CodeQL Analysis
         uses: github/codeql-action/analyze@v3
+        with:
+          category: "/language:${{matrix.language}}"

.github/workflows/dependency-review.yml

@@ -10,6 +10,8 @@ jobs:
     steps:
       - name: "Checkout Repository"
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: "Dependency Review"
         uses: actions/dependency-review-action@v4

.github/workflows/spellcheck.yml

@@ -16,6 +16,8 @@ jobs:
     if: ${{ github.actor != 'dependabot[bot]' }}
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: streetsidesoftware/cspell-action@v6
         with:
           check_dot_files: false

.github/workflows/whitesource-scan.yml

@@ -3,6 +3,7 @@ name: WhiteSource Scan
 on:
   schedule:
     - cron: '0 0 1 * *'
+  workflow_dispatch:
 
 permissions:  # added using https://github.com/step-security/secure-workflows
   contents: read

package.json

@@ -39,15 +39,15 @@
     "eslint": "8.57.0",
     "eslint-config-prettier": "9.1.0",
     "htmlhint": "1.1.4",
-    "hugo-bin": "0.121.1",
+    "hugo-bin": "0.122.0",
     "jquery": "3.7.1",
     "npm-run-all": "4.1.5",
     "popper.js": "1.16.1",
     "postcss": "8.4.38",
     "postcss-cli": "11.0.0",
     "prettier": "3.2.5",
     "stylelint": "16.3.1",
-    "stylelint-config-standard-scss": "13.0.0"
+    "stylelint-config-standard-scss": "13.1.0"
   },
   "hugo-bin": {
     "buildTags": "extended"