chore(deps): bump super-linter/super-linter from 7 to 8 (#53)

* chore(deps): bump super-linter/super-linter from 7 to 8

Bumps [super-linter/super-linter](https://github.com/super-linter/super-linter) from 7 to 8.
- [Release notes](https://github.com/super-linter/super-linter/releases)
- [Changelog](https://github.com/super-linter/super-linter/blob/main/CHANGELOG.md)
- [Commits](super-linter/super-linter@v7...v8)

---
updated-dependencies:
- dependency-name: super-linter/super-linter
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore: superlinter fixes

* chore: configure zizmor

* chore: fix zizmor config file

* chore: rename zizmore config file

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: DJ Mountney <dj@currents.dev>

Author: dependabot[bot]

.github/dependabot.yml

@@ -4,6 +4,9 @@ updates:
     directory: /
     schedule:
       interval: weekly
+      day: monday
+    cooldown:
+      default-days: 14 # 2 weeks
     groups:
       actions-minor:
         update-types:
@@ -14,6 +17,9 @@ updates:
     directory: /
     schedule:
       interval: weekly
+      day: monday
+    cooldown:
+      default-days: 14 # 2 weeks
     groups:
       npm-development:
         dependency-type: development

.github/linters/zizmor.yaml

@@ -0,0 +1,3 @@
+rules:
+  unpinned-uses:
+    disable: true

.github/workflows/codeql-analysis.yml

@@ -31,6 +31,8 @@ jobs:
       - name: Checkout
         id: checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Initialize CodeQL
         id: initialize

.github/workflows/linter.yml

@@ -24,6 +24,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          persist-credentials: false
 
       - name: Setup Node.js
         id: setup-node
@@ -40,7 +41,7 @@ jobs:
         run: npm run lint
       - name: Lint Codebase
         id: super-linter
-        uses: super-linter/super-linter/slim@v7
+        uses: super-linter/super-linter/slim@v8
         env:
           DEFAULT_BRANCH: main
           FILTER_REGEX_EXCLUDE: dist/**/*
@@ -50,3 +51,6 @@ jobs:
           VALIDATE_JAVASCRIPT_STANDARD: false
           VALIDATE_JSCPD: false
           VALIDATE_TYPESCRIPT_STANDARD: false
+          VALIDATE_BIOME_FORMAT: false
+          VALIDATE_BIOME_LINT: false
+          VALIDATE_TRIVY: false

.github/workflows/test.yml

@@ -24,16 +24,21 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
           node-version: '18'
 
       - name: Print inputs for debugging (Sharding)
+        env:
+          RECORD_KEY: ${{ env.CURRENTS_RECORD_KEY }}
+          SHARD: ${{ matrix.shard }}
         run: |
-          echo "Key: ${{ env.CURRENTS_RECORD_KEY }}"
-          echo "Matrix Index: ${{ matrix.shard }}"
+          echo "Key: $RECORD_KEY"
+          echo "Matrix Index: $SHARD"
       - name: Run My Action (Sharding)
         id: sharding_action
         uses: ./
@@ -44,8 +49,10 @@ jobs:
           matrix-total: 2
 
       - name: Verify Action Output (Sharding)
+        env:
+          EXTRA_FLAGS: ${{ steps.sharding_action.outputs.extra-pw-flags }}
         run: |
-          echo "Extra Playwright Flags: ${{ steps.sharding_action.outputs.extra-pw-flags }}"
+          echo "Extra Playwright Flags: $EXTRA_FLAGS"
 
   test-action-or8n:
     strategy:
@@ -61,16 +68,21 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
           node-version: '18'
 
       - name: Print inputs for debugging (Or8n)
+        env:
+          API_KEY: ${{ env.CURRENTS_API_KEY }}
+          PROJECT_ID: ${{ env.CURRENTS_PROJECT_ID }}
         run: |
-          echo "API Key: ${{ env.CURRENTS_API_KEY }}"
-          echo "Project ID: ${{ env.CURRENTS_PROJECT_ID }}"
+          echo "API Key: $API_KEY"
+          echo "Project ID: $PROJECT_ID"
 
       - name: Run My Action (Or8n)
         id: or8n_action
@@ -82,5 +94,7 @@ jobs:
           pw-output-dir: basic/test-results
 
       - name: Verify Action Output (Or8n)
+        env:
+          EXTRA_FLAGS: ${{ steps.or8n_action.outputs.extra-pw-flags }}
         run: |
-          echo "Extra Playwright Flags: ${{ steps.or8n_action.outputs.extra-pw-flags }}"
+          echo "Extra Playwright Flags: $EXTRA_FLAGS"

.github/workflows/unit-tests.yml

@@ -18,6 +18,8 @@ jobs:
       cancel-in-progress: true
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: actions/setup-node@v4
         with:
           node-version: 18

script/release

@@ -93,11 +93,11 @@ fi
 
 # 8. Point separate major release tag (e.g. v1, v2) to the new release
 if [ $is_major_release = 'yes' ]; then
-	# Create a new major verison tag and point it to this release
+	# Create a new major version tag and point it to this release
 	git tag "$new_major_release_tag" --annotate --message "$new_major_release_tag Release"
 	echo -e "New major version tag: ${BOLD_GREEN}$new_major_release_tag${OFF}"
 else
-	# Update the major verison tag to point it to this release
+	# Update the major version tag to point it to this release
 	git tag "$latest_major_release_tag" --force --annotate --message "Sync $latest_major_release_tag tag with $new_tag"
 	echo -e "Synced ${BOLD_GREEN}$latest_major_release_tag${OFF} with ${BOLD_GREEN}$new_tag${OFF}"
 fi