fabasoad · fabasoad · Nov 23, 2025 · Nov 23, 2025
@@ -7,32 +7,32 @@ assignees: fabasoad
 
 ---
 
-#### Describe the bug
+## Describe the bug
 
 A clear and concise description of what the bug is.
 
-#### Steps to Reproduce
+## Steps to Reproduce
 
 1. Run '...'
 2. See error
 
-#### Expected behavior
+## Expected behavior
 
 A clear and concise description of what you expected to happen.
 
-#### Actual behavior
+## Actual behavior
 
 A clear and concise description of what is happening now.
 
-#### Screenshots
+## Screenshots
 
 If applicable, add screenshots to help explain your problem.
 
-#### Technical information (please complete the following information)
+## Technical information (please complete the following information)
 
 - OS: [e.g. Windows 10 Enterprise v.1909 (OS Build 18363.720)]
 - `io.fabasoad:pojo` version [e.g. 0.0.1]
 
-#### Additional context
+## Additional context
 
 Add any other context about the problem here.
@@ -7,19 +7,19 @@ assignees: fabasoad
 
 ---
 
-#### Is your feature request related to a problem? Please describe
+## Is your feature request related to a problem? Please describe
 
 A clear and concise description of what the problem is. Ex. I'm always frustrated
 when [...]
 
-#### Describe the solution you'd like
+## Describe the solution you'd like
 
 A clear and concise description of what you want to happen.
 
-#### Describe alternatives you've considered
+## Describe alternatives you've considered
 
 A clear and concise description of any alternative solutions or features you've considered.
 
-#### Additional context
+## Additional context
 
 Add any other context or screenshots about the feature request here.
@@ -11,5 +11,7 @@ jobs:
   pre-commit:
     name: Pre-commit
     uses: fabasoad/reusable-workflows/.github/workflows/wf-pre-commit.yml@main
+    permissions:
+      contents: read
     with:
       skip-hooks: "build, test"
@@ -10,5 +10,7 @@ jobs:
   github:
     name: GitHub
     uses: fabasoad/reusable-workflows/.github/workflows/wf-github-release.yml@main
+    permissions:
+      contents: write
     with:
       bump-tags: false
@@ -23,6 +23,6 @@ jobs:
       security-events: write
     uses: fabasoad/reusable-workflows/.github/workflows/wf-security-sast.yml@main
     with:
-      code-scanning: ${{ (inputs.security-type || 'all') == 'all' || inputs.security-type == 'code-scanning' }}
+      code-scanning: ${{ contains(fromJSON('["all", "code-scanning"]'), github.event.inputs.security-type || 'all') }}
       code-scanning-languages: "java"
-      sca: ${{ (inputs.security-type || 'all') == 'all' || inputs.security-type == 'sca' }}
+      sca: ${{ contains(fromJSON('["all", "sca"]'), github.event.inputs.security-type || 'all') }}
@@ -11,3 +11,7 @@ jobs:
   maintenance:
     name: Maintenance
     uses: fabasoad/reusable-workflows/.github/workflows/wf-sync-labels.yml@main
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
@@ -19,3 +19,5 @@ jobs:
   gradle:
     name: Gradle
     uses: fabasoad/reusable-workflows/.github/workflows/wf-java-unit-tests.yml@main
+    permissions:
+      contents: read
@@ -10,3 +10,6 @@ jobs:
   maintenance:
     name: Maintenance
     uses: fabasoad/reusable-workflows/.github/workflows/wf-update-license.yml@main
+    permissions:
+      contents: write
+      pull-requests: write
@@ -84,6 +84,13 @@ repos:
     rev: v1.37.1
     hooks:
       - id: yamllint
+  # GitHub Actions
+  - repo: https://github.com/rhysd/actionlint
+    rev: v1.7.9
+    hooks:
+      - id: actionlint
+        args: ["-pyflakes="]
+        stages: ["pre-commit"]
   # Other
   - repo: https://github.com/pre-commit/pre-commit-hooks
     rev: v6.0.0

@@ -1,6 +1,6 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-9.1.0-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-9.2.1-bin.zip
 networkTimeout=10000
 validateDistributionUrl=true
 zipStoreBase=GRADLE_USER_HOME