guibranco
diff --git a/‎.eslintrc.json
+44-45 b/‎.eslintrc.json
+44-45
diff --git a/‎.github/dependabot.yml
+25 b/‎.github/dependabot.yml
+25
diff --git a/‎.github/labeler.yml
+87-24 b/‎.github/labeler.yml
+87-24
diff --git a/‎.github/workflows/codeql-analysis.yml
+41 b/‎.github/workflows/codeql-analysis.yml
+41
diff --git a/‎.github/workflows/deploy-prep.yml
+2-2 b/‎.github/workflows/deploy-prep.yml
+2-2
diff --git a/‎.github/workflows/e2e-test.yml
+2-2 b/‎.github/workflows/e2e-test.yml
+2-2
diff --git a/‎.github/workflows/empty-issues-closer.yaml renamed to ‎.github/workflows/empty-issues-closer.yml
+3-2 b/‎.github/workflows/empty-issues-closer.yaml renamed to ‎.github/workflows/empty-issues-closer.yml
+3-2
@@ -16,30 +16,30 @@
         // Possible Errors (overrides from recommended set)
 
         // "no-extra-parens": "error",
-        // "no-unexpected-multiline": "error",
+        "no-unexpected-multiline": "error",
 
         // All JSDoc comments must be valid
 
-        // "valid-jsdoc": [ "error", {
-        //     "requireReturn": false,
-        //     "requireReturnDescription": false,
-        //     "requireParamDescription": true,
-        //     "prefer": {
-        //         "return": "returns"
-        //     }
-        // }],
+        "valid-jsdoc": [ "error", {
+            "requireReturn": true,
+            "requireReturnDescription": true,
+            "requireParamDescription": true,
+            "prefer": {
+                "return": "returns"
+            }
+        }],
 
         // Best Practices
 
         // Allowed a getter without setter, but all setters require getters
 
-        // "accessor-pairs": [ "error", {
-        //     "getWithoutSet": false,
-        //     "setWithoutGet": true
-        // }],
-        // "block-scoped-var": "warn",
-        // "consistent-return": "error",
-        // "curly": "error",
+        "accessor-pairs": [ "error", {
+            "getWithoutSet": false,
+            "setWithoutGet": true
+        }],
+        "block-scoped-var": "warn",
+        "consistent-return": "error",
+        "curly": "error",
         // "default-case": "warn",
 
         // the dot goes with the property when doing multiline
@@ -48,8 +48,8 @@
         // "dot-notation": "warn",
         // "eqeqeq": [ "error", "smart" ],
         // "guard-for-in": "warn",
-        // "no-alert": "error",
-        // "no-caller": "error",
+        "no-alert": "error",
+        "no-caller": "error",
         // "no-case-declarations": "warn",
         // "no-div-regex": "warn",
         // "no-else-return": "warn",
@@ -94,12 +94,12 @@
 
         // Produce warnings when something is commented as TODO or FIXME
 
-        // "no-warning-comments": [ "warn", {
-        //     "terms": [ "TODO", "FIXME" ],
-        //     "location": "start"
-        // }],
-        // "no-with": "warn",
-        // "radix": "warn",
+        "no-warning-comments": [ "warn", {
+            "terms": [ "TODO", "FIXME" ],
+            "location": "start"
+        }],
+        "no-with": "warn",
+        "radix": "warn",
         // "vars-on-top": "error",
 
         // Enforces the style of wrapped functions
@@ -113,7 +113,7 @@
 
         // "init-declarations": [ "error", "always" ],
         // "no-catch-shadow": "warn",
-        // "no-delete-var": "error",
+        "no-delete-var": "error",
         // "no-label-var": "error",
         // "no-shadow-restricted-names": "error",
         // "no-shadow": "warn",
@@ -128,7 +128,7 @@
 
         // Disallow hoisting - let & const don't allow hoisting anyhow
 
-        // "no-use-before-define": "error",
+        "no-use-before-define": "error",
 
         // Node.js and CommonJS
 
@@ -150,15 +150,15 @@
         // "arrow-body-style": [ "error", "always" ],
         // "arrow-parens": [ "error", "always" ],
         // "arrow-spacing": [ "error", { "before": true, "after": true }],
-        // "constructor-super": "error",
+        "constructor-super": "error",
         // "generator-star-spacing": [ "error", "before" ],
         // "no-arrow-condition": "error",
-        // "no-class-assign": "error",
-        // "no-const-assign": "error",
-        // "no-dupe-class-members": "error",
-        // "no-this-before-super": "error",
+        "no-class-assign": "error",
+        "no-const-assign": "error",
+        "no-dupe-class-members": "error",
+        "no-this-before-super": "error",
         // "no-var": "warn",
-        "object-shorthand": [ "warn" ]
+        "object-shorthand": [ "warn" ],
         // "prefer-arrow-callback": "warn",
         // "prefer-spread": "warn",
         // "prefer-template": "warn",
@@ -193,38 +193,37 @@
         // "no-continue": "off",
         // "no-inline-comments": "off",
         // "no-lonely-if": "warn",
-        // "no-mixed-spaces-and-tabs": "warn",
-        // "no-multiple-empty-lines": "warn",
-        // "no-negated-condition": "off",
+        "no-mixed-spaces-and-tabs": "warn",
+        "no-multiple-empty-lines": "warn",
+        "no-negated-condition": "warn",
         // "no-nested-ternary": "warn",
         // "no-new-object": "warn",
         // "no-plusplus": "off",
         // "no-spaced-func": "warn",
         // "no-ternary": "off",
         // "no-trailing-spaces": "warn",
         // "no-underscore-dangle": "warn",
-        // "no-unneeded-ternary": "warn",
+        "no-unneeded-ternary": "warn",
         // "object-curly-spacing": [ "warn", "always" ],
         // "one-var": "off",
         // "operator-assignment": [ "warn", "never" ],
         // "operator-linebreak": [ "warn", "after" ],
         // "padded-blocks": [ "warn", "never" ],
         // "quote-props": [ "warn", "consistent-as-needed" ],
         // "quotes": [ "warn", "single" ],
-        // "require-jsdoc": [ "warn", {
-        //     "require": {
-        //         "FunctionDeclaration": true,
-        //         "MethodDefinition": true,
-        //         "ClassDeclaration": false
-        //     }
-        // }],
+        "require-jsdoc": [ "warn", {
+            "require": {
+                "FunctionDeclaration": true,
+                "MethodDefinition": true,
+                "ClassDeclaration": false
+            }
+        }],
         // "semi-spacing": [ "warn", { "before": false, "after": true }],
         // "semi": [ "error", "always" ],
         // "sort-vars": "off",
-        // "space-after-keywords": [ "warn", "always" ],
+        "keyword-spacing": ["error", { "before": true, "after": true }]
         // "space-before-blocks": [ "warn", "always" ],
         // "space-before-function-paren": [ "warn", "never" ],
-        // "space-before-keywords": [ "warn", "always" ],
         // "space-in-parens": [ "warn", "never" ],
         // "space-infix-ops": [ "warn", { "int32Hint": true } ],
         // "space-return-throw-case": "error",
 
@@ -0,0 +1,25 @@
+version: 2
+updates:
+  # Maintain dependencies for NPM
+  - package-ecosystem: npm
+    directory: "/"
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 10
+    commit-message:
+      prefix: "build(deps)"
+      prefix-development: "build(deps-dev)"
+    reviewers:
+      - "qwerty541"
+
+  # Maintain dependencies for GitHub Actions
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 10
+    commit-message:
+      prefix: "ci(deps)"
+      prefix-development: "ci(deps-dev)"
+    reviewers:
+      - "qwerty541"
@@ -1,32 +1,95 @@
-themes: themes/index.js
-doc-translation: docs/*
+themes:
+  - changed-files:
+      - any-glob-to-any-file:
+          - themes/index.js
+
+doc-translation:
+  - changed-files:
+      - any-glob-to-any-file:
+          - docs/*
+
 card-i18n:
-  - src/translations.js
-  - src/common/I18n.js
+  - changed-files:
+      - any-glob-to-any-file:
+          - src/translations.js
+          - src/common/I18n.js
+
 documentation:
-  - readme.md
-  - CONTRIBUTING.md
-  - CODE_OF_CONDUCT.md
+  - changed-files:
+      - any-glob-to-any-file:
+          - readme.md
+          - CONTRIBUTING.md
+          - CODE_OF_CONDUCT.md
+          - SECURITY.md
+
 dependencies:
-  - package.json
-  - package-lock.json
+  - changed-files:
+      - any-glob-to-any-file:
+          - package.json
+          - package-lock.json
+
 lang-card:
-  - api/top-langs.js
-  - src/cards/top-languages-card.js
-  - src/fetchers/top-languages-fetcher.js
+  - changed-files:
+      - any-glob-to-any-file:
+          - api/top-langs.js
+          - src/cards/top-languages-card.js
+          - src/fetchers/top-languages-fetcher.js
+          - tests/fetchTopLanguages.test.js
+          - tests/renderTopLanguagesCard.test.js
+          - tests/top-langs.test.js
+
 repo-card:
-  - api/pin.js
-  - src/cards/repo-card.js
-  - src/fetchers/repo-fetcher.js
+  - changed-files:
+      - any-glob-to-any-file:
+          - api/pin.js
+          - src/cards/repo-card.js
+          - src/fetchers/repo-fetcher.js
+          - tests/fetchRepo.test.js
+          - tests/renderRepoCard.test.js
+          - tests/pin.test.js
+
 stats-card:
-  - api/index.js
-  - src/cards/stats-card.js
-  - src/fetchers/stats-fetcher.js
+  - changed-files:
+      - any-glob-to-any-file:
+          - api/index.js
+          - src/cards/stats-card.js
+          - src/fetchers/stats-fetcher.js
+          - tests/fetchStats.test.js
+          - tests/renderStatsCard.test.js
+          - tests/api.test.js
+
 wakatime-card:
-  - api/wakatime.js
-  - src/cards/wakatime-card.js
-  - src/fetchers/wakatime-fetcher.js
-ranks: src/calculateRank.js
+  - changed-files:
+      - any-glob-to-any-file:
+          - api/wakatime.js
+          - src/cards/wakatime-card.js
+          - src/fetchers/wakatime-fetcher.js
+          - tests/fetchWakatime.test.js
+          - tests/renderWakatimeCard.test.js
+          - tests/wakatime.test.js
+
+gist-card:
+  - changed-files:
+      - any-glob-to-any-file:
+          - api/gist.js
+          - src/cards/gist-card.js
+          - src/fetchers/gist-fetcher.js
+          - tests/fetchGist.test.js
+          - tests/renderGistCard.test.js
+          - tests/gist.test.js
+
+ranks:
+  - changed-files:
+      - any-glob-to-any-file:
+          - src/calculateRank.js
+
 ci:
-  - .github/workflows/*
-  - scripts/*
+  - changed-files:
+      - any-glob-to-any-file:
+          - .github/workflows/*
+          - scripts/*
+
+infrastructure:
+  - changed-files:
+      - any-glob-to-any-file:
+          - .eslintrc.json
@@ -0,0 +1,41 @@
+name: "Static code analysis workflow (CodeQL)"
+
+on:
+  push:
+    branches:
+      - master
+  pull_request:
+    branches:
+      - master
+
+permissions:
+  actions: read
+  checks: read
+  contents: read
+  deployments: read
+  issues: read
+  discussions: read
+  packages: read
+  pages: read
+  pull-requests: read
+  repository-projects: read
+  security-events: write
+  statuses: read
+
+jobs:
+  CodeQL-Build:
+    # CodeQL runs on ubuntu-latest, windows-latest, and macos-latest
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+
+      # Initializes the CodeQL tools for scanning.
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@46a6823b81f2d7c67ddf123851eea88365bc8a67 # v2.13.5
+        with:
+          languages: javascript
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@46a6823b81f2d7c67ddf123851eea88365bc8a67 # v2.13.5
@@ -10,10 +10,10 @@ jobs:
     if: github.repository == 'anuraghazra/github-readme-stats'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       - name: Deployment Prep
         run: python ./.github/workflows/deploy-prep.py
-      - uses: stefanzweifel/git-auto-commit-action@v4
+      - uses: stefanzweifel/git-auto-commit-action@8621497c8c39c72f3e2a999a26b4ca1b5058a842 # v5.0.1
         with:
           branch: vercel
           create_branch: true
 
@@ -17,10 +17,10 @@ jobs:
         node-version: [18.x]
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
       - name: Setup Node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3
         with:
           node-version: ${{ matrix.node-version }}
           cache: npm
 
@@ -26,10 +26,11 @@ jobs:
     name: Close empty issues
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3 # NOTE: Retrieve issue templates.
+      # NOTE: Retrieve issue templates.
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
       - name: Run empty issues closer action
-        uses: rickstaa/empty-issues-closer-action@v1
+        uses: rickstaa/empty-issues-closer-action@e96914613221511279ca25f50fd4acc85e331d99 # v1.1.74
         env:
           github_token: ${{ secrets.GITHUB_TOKEN }}
         with: