[pull] master from diygod:master

.devcontainer/devcontainer.json

@@ -16,9 +16,9 @@
                 "EditorConfig.EditorConfig",
                 "esbenp.prettier-vscode",
                 "deepscan.vscode-deepscan",
-                "rangav.vscode-thunder-client",
                 "SonarSource.sonarlint-vscode",
                 "unifiedjs.vscode-mdx",
+                "VASubasRaj.flashpost", // Thunder Client is paywalled in WSL/Codespaces/SSH > 2.30.0
                 "ZihanLi.at-helper"
             ]
         }

.dockerignore

@@ -25,12 +25,14 @@ test
 .(yarn|npm|nvm)rc
 *.md
 app.json
+eslint.config.mjs
 docker-compose*
 fly.toml
 jsconfig.json
 npm-debug.log
 process.json
 package-lock.json
+vitest.config.ts
 vercel.json
 
 # git but keep the git commit hash

.github/dependabot.yml

@@ -5,7 +5,7 @@ updates:
     schedule:
       interval: daily
       time: '08:00'
-    open-pull-requests-limit: 10
+    open-pull-requests-limit: 100
     labels:
       - dependencies
     ignore:
@@ -17,6 +17,6 @@ updates:
     schedule:
       interval: daily
       time: '08:00'
-    open-pull-requests-limit: 10
+    open-pull-requests-limit: 100
     labels:
       - dependencies

.github/workflows/build-assets.yml

@@ -8,14 +8,11 @@ on:
     paths:
       - 'lib/**/*.ts'
 
-permissions:
-  contents: read
-
 jobs:
   build:
     runs-on: ubuntu-latest
     name: Build assets
-    timeout-minutes: 60
+    timeout-minutes: 5
     permissions:
       contents: write
     steps:
@@ -43,19 +40,27 @@ jobs:
           keep_files: true
       - name: Build docs
         run: pnpm build:docs
+      - id: check-env
+        env:
+          DOCS_API_TOKEN: ${{ secrets.DOCS_API_TOKEN }}
+        if: ${{ env.DOCS_API_TOKEN != '' }}
+        run: echo "defined=true" >> $GITHUB_OUTPUT
       - name: Checkout docs
         uses: actions/checkout@v4
+        if: steps.check-env.outputs.defined == 'true'
         with:
           repository: 'RSSNext/rsshub-docs'
           token: ${{ secrets.DOCS_API_TOKEN }}
           path: rsshub-docs
       - name: Update docs
+        if: steps.check-env.outputs.defined == 'true'
         run: |
           cp -r ./assets/build/docs/en/* ./rsshub-docs/src/routes
           cp -r ./assets/build/docs/zh/* ./rsshub-docs/src/zh/routes
           cp ./lib/types.ts ./rsshub-docs/.vitepress/theme/types.ts
           cp ./scripts/workflow/data.ts ./rsshub-docs/.vitepress/config/data.ts
       - name: Commit docs
+        if: steps.check-env.outputs.defined == 'true'
         run: |
           cd rsshub-docs
           git config --local user.email "41898282+github-actions[bot]@users.noreply.github.com"

.github/workflows/comment-on-issue.yml

@@ -9,6 +9,8 @@ jobs:
     name: Call maintainers
     runs-on: ubuntu-latest
     timeout-minutes: 5
+    permissions:
+      issues: write
     if: github.event.sender.login != 'issuehunt-oss[bot]'
     steps:
       - uses: actions/checkout@v4

.github/workflows/dependabot-fork.yml

@@ -13,7 +13,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Comment Dependabot PR
-        uses: thollander/actions-comment-pull-request@v2
+        uses: thollander/actions-comment-pull-request@v3
         with:
           message: '@dependabot ignore this dependency'
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/docker-release.yml

@@ -29,10 +29,9 @@ jobs:
     runs-on: ubuntu-latest
     needs: check-env
     if: needs.check-env.outputs.check-docker == 'true'
-    timeout-minutes: 120
+    timeout-minutes: 60
     permissions:
       packages: write
-      contents: read
       id-token: write
     steps:
       - name: Checkout
@@ -76,7 +75,7 @@ jobs:
 
       - name: Build and push Docker image (ordinary version)
         id: build-and-push
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v6
         with:
           context: .
           push: true
@@ -107,7 +106,7 @@ jobs:
 
       - name: Build and push Docker image (Chromium-bundled version)
         id: build-and-push-chromium
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v6
         with:
           context: .
           build-args: PUPPETEER_SKIP_DOWNLOAD=0

.github/workflows/docker-test-cont.yml

@@ -9,6 +9,8 @@ jobs:
   testRoute:
     name: Route test
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     if: ${{ github.event.workflow_run.conclusion == 'success' }} # skip if unsuccessful
     steps:
       - uses: actions/checkout@v4
@@ -49,16 +51,19 @@ jobs:
 
       - name: Fetch Docker image
         if: (env.TEST_CONTINUE)
-        uses: dawidd6/action-download-artifact@v3
+        uses: dawidd6/action-download-artifact@v7
         with:
           workflow: ${{ github.event.workflow_run.workflow_id }}
           run_id: ${{ github.event.workflow_run.id }}
+          name: docker-image
+          path: ../artifacts-${{ github.run_id }}
 
       - name: Import Docker image and set up Docker container
         if: (env.TEST_CONTINUE)
+        working-directory: ../artifacts-${{ github.run_id }}
         run: |
           set -ex
-          zstd -d --stdout docker-image/rsshub.tar.zst | docker load
+          zstd -d --stdout rsshub.tar.zst | docker load
           docker run -d \
             --name rsshub \
             -e NODE_ENV=dev \

.github/workflows/docker-test.yml

@@ -13,19 +13,18 @@ on:
     types: [opened, reopened, synchronize, edited]
   # Please, always create a pull request instead of push to master.
 
-permissions:
-  contents: read
-  pull-requests: write
-
 concurrency:
   group: docker-test-${{ github.ref_name }}
   cancel-in-progress: true
 
 jobs:
   test:
     name: Docker build & tests
+    permissions:
+      pull-requests: write
+      attestations: write
     runs-on: ubuntu-latest
-    timeout-minutes: 15
+    timeout-minutes: 10
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -41,7 +40,7 @@ jobs:
           flavor: latest=true
 
       - name: Build Docker image
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v6
         with:
           context: .
           build-args: PUPPETEER_SKIP_DOWNLOAD=0  # also test bundling Chromium

.github/workflows/format.yml

@@ -5,9 +5,6 @@ on:
     branches:
       - master
 
-permissions:
-  contents: read
-
 jobs:
   format:
     permissions: