Sync from develop to main

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -42,14 +42,21 @@ body:
 
   - type: dropdown
     attributes:
-      label: OS version
+      label: Platform
+      description: Where does the issue occur?
       options:
-        - Windows 11
-        - Windows 10
-        - Windows Other
-        - Linux Debian
-        - Linux Arch
-        - Linux Other
+        - Web — Chrome (Blink)
+        - Web — Firefox (Gecko)
+        - Web — Safari (WebKit)
+        - Web — Other
+        - Desktop — macOS
+        - Desktop — Windows
+        - Desktop — Linux
+        - Desktop — Other
+        - Mobile — iOS
+        - Mobile — Android
+        - Mobile — Other
+        - Other
     validations:
       required: true
 

.github/ISSUE_TEMPLATE/config.yml

@@ -1,5 +1,5 @@
 blank_issues_enabled: false
 contact_links:
   - name: Contact the developer
-    url: https://SegoCode.github.io/SegoCode/
+     url: https://SegoCode.github.io/SegoCode/
     about: To discuss any type of related topic

.github/workflows/generate-tag.yml

@@ -1,98 +1,63 @@
 name: Generate tag
 
-on: 
+on:
   pull_request:
     types: [closed]
 
+concurrency:
+  group: generate-tag
+
 jobs:
   create_tag:
-    if: github.event.pull_request.merged == true && contains(github.event.pull_request.labels.*.name, 'auto-tag')
+    if: github.event.pull_request.merged == true && github.event.pull_request.base.ref == 'main' && contains(github.event.pull_request.labels.*.name, 'auto-tag')
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    outputs:
+      new_version: ${{ steps.determine_version.outputs.new_version }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
-          fetch-depth: 0  # Fetch all history for tag retrieval
+          fetch-depth: 0
 
       - name: Set up git
         run: |
-          git config --global user.name "github-actions"
-          git config --global user.email "github-actions@github.com"
-
-      - name: Fetch all tags
-        run: git fetch --tags
-
-      - name: Get latest tag
-        id: get_latest_tag
-        run: |
-          # Get the latest tag
-          latest_tag=$(git describe --tags `git rev-list --tags --max-count=1` 2>/dev/null || echo "")
-          echo "latest_tag=$latest_tag" >> $GITHUB_ENV
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
 
       - name: Determine new version
         id: determine_version
         run: |
-          latest_tag=${{ env.latest_tag }}
+          latest_tag=$(git tag --list --sort=-version:refname | grep -m1 -E '^[0-9]+\.[0-9]+$' || true)
           if [ -z "$latest_tag" ]; then
-            # Initialize the version to 1.0 if no tags exist
             new_version="1.0"
           else
-            # Extract the major and minor version and increment the minor version
-            major_version=$(echo $latest_tag | cut -d. -f1)
-            minor_version=$(echo $latest_tag | cut -d. -f2)
-            new_minor_version=$((minor_version + 1))
-            new_version="$major_version.$new_minor_version"
-
-            # Check if the new version tag already exists
-            while git rev-parse "refs/tags/$new_version" >/dev/null 2>&1; do
-              new_minor_version=$((new_minor_version + 1))
-              new_version="$major_version.$new_minor_version"
-            done
+            IFS=. read -r major minor <<< "$latest_tag"
+            if [[ "${{ contains(github.event.pull_request.labels.*.name, 'semver:major') }}" == "true" ]]; then
+              new_version="$((major + 1)).0"
+            else
+              new_version="$major.$((minor + 1))"
+            fi
           fi
-          echo "new_version=$new_version" >> $GITHUB_ENV
-
-      - name: Checkout main branch
-        run: |
-          git checkout main
+          echo "new_version=$new_version" >> "$GITHUB_OUTPUT"
 
       - name: Create new tag
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          new_version=${{ env.new_version }}
-          git tag -a $new_version -m "Automatically generated version $new_version"
-          git push origin $new_version
+          new_version="${{ steps.determine_version.outputs.new_version }}"
+          git tag -a "$new_version" -m "Release $new_version" "${{ github.event.pull_request.merge_commit_sha }}"
+          git push origin "$new_version"
 
   create_issue:
     needs: create_tag
     runs-on: ubuntu-latest
+    permissions:
+      issues: write
     steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0  # Fetch all history for tag retrieval
-
-      - name: Set up git
-        run: |
-          git config --global user.name "github-actions"
-          git config --global user.email "github-actions@github.com"
-
-      - name: Fetch all tags
-        run: git fetch --tags
-
-      - name: Get the latest tag
-        id: get_latest_tag
-        run: |
-          # Get the latest tag
-          latest_tag=$(git describe --tags `git rev-list --tags --max-count=1` 2>/dev/null || echo "")
-          echo "latest_tag=$latest_tag" >> $GITHUB_ENV
-
       - name: Create issue for new tag
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          latest_tag: ${{ env.latest_tag }}
+          GH_TOKEN: ${{ github.token }}
         run: |
-          repository=${{ github.repository }}
-          issue_title="The tag \`${{ env.latest_tag }}\` was created"
-          issue_body=$'The **${{ env.latest_tag }}** tag for the **main branch** has been created. Please consider creating a release of this tag, if a release isn\'t needed, you can close this issue.\n\n[Click here to create a release of **${{ env.latest_tag }}** tag](../releases/new?tag=${{ env.latest_tag }})'
-          gh issue create --title "$issue_title" --body "$issue_body" --label "auto-tag"
+          issue_title="The tag \`${{ needs.create_tag.outputs.new_version }}\` was created"
+          issue_body=$'The **${{ needs.create_tag.outputs.new_version }}** tag for the **main branch** has been created.\nPlease consider creating a release of this tag, if a release isn\'t needed, you can close this issue.\n\n[Click here to create a release of **${{ needs.create_tag.outputs.new_version }}** tag](../releases/new?tag=${{ needs.create_tag.outputs.new_version }})'
+          gh issue create --repo "${{ github.repository }}" --title "$issue_title" --body "$issue_body" --label auto-tag

.github/workflows/gitleaks.yml

@@ -1,46 +1,42 @@
 name: Gitleaks
 on:
+  push:
   pull_request:
   workflow_dispatch:
-  schedule:
-    # Run at 00:00 UTC on the first day of each month
-    - cron: '0 0 1 * *'
 
 jobs:
   scan:
     name: Gitleaks Scan
     runs-on: ubuntu-latest
-    # Only run scheduled jobs on main branch
-    if: github.event_name != 'schedule' || github.ref == 'refs/heads/main'
+    permissions:
+      contents: read
+      issues: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
       - name: Run Gitleaks
         id: gitleaks
-        uses: gitleaks/gitleaks-action@v2
+        uses: gitleaks/gitleaks-action@v3
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ github.token }}
         continue-on-error: true
 
       - name: Create issue if leaks found
         if: steps.gitleaks.outcome == 'failure' && (github.ref == 'refs/heads/main' || github.event_name == 'workflow_dispatch')
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ github.token }}
         run: |
           echo "Creating detailed security issue report..."
 
-          # Get current timestamp
           TIMESTAMP=$(date -u +"%Y-%m-%d %H:%M:%S UTC")
 
-          # Create an enriched issue body
           ISSUE_BODY="## 🚨 Security Alert: Potential Secrets Detected
 
           **Detection Time:** ${TIMESTAMP}
           **Branch:** ${GITHUB_REF#refs/heads/}
-          **Triggered by:** ${{ github.event_name == 'workflow_dispatch' && 'Manual workflow run' || (github.event_name == 'schedule' && 'Monthly scheduled scan' || 'Automated scan') }}
           **Detected by:** Gitleaks Security Scanner
 
           ### Details
@@ -55,13 +51,14 @@ jobs:
           3. Remove the secrets from the codebase
           4. Consider using GitHub Secrets or environment variables instead
 
-          ### Contact
-          Please reach out to the security team for assistance if needed.
-
           ---
           *This issue was automatically generated by the Gitleaks security scanning workflow.*"
 
           gh issue create \
-            --repo ${{ github.repository }} \
-            --title "Security Alert: Potential secrets detected in ${{ github.event_name == 'pull_request' && format('PR #{0}', github.event.pull_request.number) || 'main branch' }}" \
+            --repo "${{ github.repository }}" \
+            --title "Security Alert: Potential secrets detected in main branch" \
             --body "${ISSUE_BODY}"
+
+      - name: Fail if leaks were found
+        if: steps.gitleaks.outcome == 'failure'
+        run: exit 1

.github/workflows/greetings.yml

@@ -9,8 +9,8 @@ jobs:
       issues: write
       pull-requests: write
     steps:
-    - uses: actions/first-interaction@v1
+    - uses: actions/first-interaction@v3.1.0
       with:
-        repo-token: ${{ secrets.GITHUB_TOKEN }}
-        issue-message: "Thank you for your first issue. To better understand your request or the problem you've encountered, please provide as many details as possible. If the behavior changes or if you have new information about your request, don't hesitate to add it. It will be reviewed ASAP."
-        pr-message: "Thank you for your first pull request to the repository! We're grateful for your contribution and will review it ASAP."
+        repo_token: ${{ secrets.GITHUB_TOKEN }}
+        issue_message: "Thank you for your first issue. To better understand your request or the problem you've encountered, please provide as many details as possible. If the behavior changes or if you have new information about your request, don't hesitate to add it. It will be reviewed ASAP."
+        pr_message: "Thank you for your first pull request to the repository! We're grateful for your contribution and will review it ASAP."

.github/workflows/java-verify.yml

@@ -0,0 +1,33 @@
+name: Java verify
+
+on:
+  pull_request:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: java-verify-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  verify:
+    name: Compile and test
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: code
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v5
+
+      - name: Set up Java
+        uses: actions/setup-java@v5
+        with:
+          distribution: temurin
+          java-version: '21'
+          cache: maven
+          cache-dependency-path: code/pom.xml
+
+      - name: Verify Maven project
+        run: mvn --batch-mode --no-transfer-progress verify