Merge branch 'main' into feat-update-sentry

Author: PKief

.devcontainer/devcontainer.json

@@ -0,0 +1,32 @@
+{
+  "name": "vscode-material-icon-theme",
+
+  // Use Microsoft's Ubuntu Base image for the dev container
+  "image": "mcr.microsoft.com/devcontainers/base:ubuntu",
+  "features": {
+    "ghcr.io/michidk/devcontainers-features/bun:1": {}
+  },
+
+  "privileged": true,
+
+  "onCreateCommand": {
+    // Install dependencies in the dev container
+    "install-bun-packages": "bun install"
+  },
+
+  "customizations": {
+    "vscode": {
+      "settings": {
+        // Define suggested settings for the dev container
+        "resmon.show.battery": false,
+        "resmon.show.cpufreq": false
+      },
+      "extensions": [
+        "biomejs.biome",
+        "jock.svg",
+        "EditorConfig.EditorConfig",
+        "oven.bun-vscode"
+      ]
+    }
+  }
+}

.eslintignore

@@ -4,4 +4,4 @@
 
 ## Contribution Guidelines
 
-[ ] By creating this pull request, I acknowledge that I have read the [Contribution Guidelines](../../CONTRIBUTING.md) for this project.
+- [ ] By creating this pull request, I acknowledge that I have read the [Contribution Guidelines](../../CONTRIBUTING.md) for this project.

.eslintrc.json

@@ -0,0 +1,18 @@
+---
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+
+version: 2
+updates:
+  - package-ecosystem: 'github-actions' # See documentation for possible values
+    directory: '/' # Location of package manifests
+    schedule:
+      interval: 'weekly'
+    assignees:
+      - 'PKief'
+    groups:
+      github-actions:
+        patterns:
+          - 'actions/*'

.github/PULL_REQUEST_TEMPLATE/pull_request_template.md

@@ -1,50 +1,33 @@
 name: Build + Test
 
-on: [push, pull_request]
+on:
+  push:
+  pull_request:
+
+permissions:
+  contents: read
 
 jobs:
-  test:
-    runs-on: ${{ matrix.os }}
-    strategy:
-      matrix:
-        os: [windows-latest, ubuntu-latest]
-        node-version: [16.x]
+  build:
+    runs-on: [ubuntu-latest]
 
-    name: ${{ matrix.os }} (Node.js ${{ matrix.node-version }})
+    name: Build Material Icon Theme
 
     steps:
       - name: Checkout 🛎
-        uses: actions/checkout@v4
-
-      - name: Setup Node.js ${{ matrix.node-version }} ⚙
-        uses: actions/setup-node@v3
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
         with:
-          node-version: ${{ matrix.node-version }}
-
-      - name: Run display server 🖥
-        run: /usr/bin/Xvfb :99 -screen 0 1024x768x24 > /dev/null 2>&1 & echo "Started xvfb"
-        shell: bash
-        if: ${{ success() && matrix.os == 'ubuntu-latest' }}
+          persist-credentials: false
 
-      - name: Install node_modules 📦
-        run: npm ci
-
-      - name: Cache node_modules 💾
-        uses: actions/cache@v3
-        env:
-          cache-name: cache-node-modules
+      - name: Setup Platform 🛠
+        uses: oven-sh/setup-bun@123c6c4e2fea3eb7bffaa91a85eb6b3d505bf7af # v2
         with:
-          # npm cache files are stored in `~/.npm` on Linux/macOS
-          path: ~/.npm
-          key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ hashFiles('**/package-lock.json') }}
-          restore-keys: |
-            ${{ runner.os }}-build-${{ env.cache-name }}-
-            ${{ runner.os }}-build-
-            ${{ runner.os }}-
+          bun-version: 1.1.13
+
+      - name: Install dependencies 📦
+        run: bun install --frozen-lockfile
 
       - name: Test + Build 🚀
         run: |
-          npm test
-          npm run vscode:prepublish
-        env:
-          DISPLAY: ':99.0'
+          bun test
+          bun run vscode:prepublish

.github/dependabot.yml

@@ -5,18 +5,23 @@ on:
     paths:
       - 'icons/*.svg'
 
+permissions:
+  contents: read
+
 jobs:
   color-check:
     name: SVG Color Check
     runs-on: ubuntu-latest
     env:
       TARGET_BRANCH: ${{ github.event.pull_request.base.ref }}
+
     steps:
       - name: Checkout 🛎️
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
         with:
           fetch-depth: 0
-          
+          persist-credentials: false
+
       - name: Check colors 🎨
         run: |
           svgFiles=$(git diff origin/${{ env.TARGET_BRANCH }} --diff-filter=ACMRTUX  --name-only | grep '.svg$')

.github/workflows/build.yml

@@ -5,26 +5,35 @@ on:
     paths:
       - 'icons/*.svg'
 
+permissions:
+  contents: read
+
 jobs:
   icon-review:
     name: Icon Review
     runs-on: ubuntu-latest
     env:
       TARGET_BRANCH: ${{ github.event.pull_request.base.ref }}
+
+    permissions:
+      pull-requests: write
+
     steps:
       - name: Checkout Fork 🛎️
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
         with:
           ref: ${{ github.event.pull_request.head.ref }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           fetch-depth: 0
           path: fork
+          persist-credentials: false
 
       - name: Checkout Original 🛎️
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
         with:
           fetch-depth: 0
           path: main
+          persist-credentials: false
 
       - name: Review SVG files 🔍
         run: |
@@ -46,12 +55,12 @@ jobs:
         shell: bash
 
       - name: Post review in PR ✍️
-        uses: actions/github-script@v7
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
         with:
           script: |
             const image_url = "${{ env.image_url }}";
             console.log('URL: '+image_url);
-            const commentBody = '## Preview \n\nThank you for creating a pull request. This preview shows you how your changes will look on the different themes: \n\n ![Generated Preview](' + image_url + ') \n\n You can find more information how to contribute in the [contribution guidelines](https://github.com/PKief/vscode-material-icon-theme/blob/main/CONTRIBUTING.md).';
+            const commentBody = '## Preview \n\nThank you for creating a pull request. This preview shows you how your changes will look on the different themes: \n\n ![Generated Preview](' + image_url + ') \n\n You can find more information how to contribute in the [contribution guidelines](https://github.com/material-extensions/vscode-material-icon-theme/blob/main/CONTRIBUTING.md).';
 
             github.rest.issues.createComment({
               issue_number: context.issue.number,

.github/workflows/color-check.yml

@@ -5,22 +5,29 @@ on:
     types:
       - closed
 
+permissions:
+  contents: read
+
 jobs:
   thank_you:
     runs-on: ubuntu-latest
     if: github.event.pull_request.merged == true
+
+    permissions:
+      pull-requests: write
+
     steps:
       - name: Post Thank You Comment 🙏
-        uses: actions/github-script@v7
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
         with:
           script: |
             github.rest.issues.createComment({
               issue_number: context.issue.number,
               owner: context.repo.owner,
               repo: context.repo.repo,
-              body: `## Merge Successful 
-              
-              Thanks for your contribution! 🎉 
-              
+              body: `## Merge Successful
+
+              Thanks for your contribution! 🎉
+
               The changes will be part of the upcoming update on the marketplace.`
             })