[pull] master from diygod:master

.github/VOUCHED.td

@@ -0,0 +1,17 @@
+# Vouched contributors for this project.
+#
+# See https://github.com/mitchellh/vouch for details.
+#
+# Syntax:
+#   - One handle per line (without @), sorted alphabetically.
+#   - Optional platform prefix: platform:username (e.g., github:user).
+#   - Denounce with minus prefix: -username or -platform:username.
+#   - Optional details after a space following the handle.
+-betterandbetterii impersonate as dvorak0, goestav, Kjasn, Loongphy, TonyRL, ttttmr and xbot. https://github.com/DIYgod/RSSHub/commit/9e6f84df79bc9efcfabb0ca0768d7fded6775a1a.
+diygod
+henryqw
+hyoban
+neverbehave
+pseudoyu
+tonyrl
+zhenlonghe

.github/dependabot.yml

@@ -45,6 +45,10 @@ updates:
           typescript-eslint:
               patterns:
                   - '@typescript-eslint/*'
+          vitest:
+              patterns:
+                  - 'vitest'
+                  - '@vitest/coverage-v8'
 
     - package-ecosystem: 'nix'
       directory: '/'

.github/workflows/build-assets.yml

@@ -20,9 +20,9 @@ jobs:
             - name: Checkout
               uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
             - name: Install pnpm
-              uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0
+              uses: pnpm/action-setup@8912a9102ac27614460f54aedde9e1e7f9aec20d # v6.0.5
             - name: Use Node.js Active LTS
-              uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+              uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
               with:
                   node-version: lts/*
                   cache: 'pnpm'

.github/workflows/comment-on-issue.yml

@@ -14,15 +14,15 @@ jobs:
         if: github.event.sender.login != 'issuehunt-oss[bot]'
         steps:
             - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-            - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0
-            - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+            - uses: pnpm/action-setup@8912a9102ac27614460f54aedde9e1e7f9aec20d # v6.0.5
+            - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
               with:
                   node-version: lts/*
                   cache: 'pnpm'
             - name: Install dependencies (pnpm) # import remark-parse and unified
               run: pnpm i
             - name: Generate feedback
-              uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+              uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
               with:
                   github-token: ${{ secrets.GITHUB_TOKEN }}
                   script: |

.github/workflows/docker-release.yml

@@ -107,7 +107,7 @@ jobs:
 
             - name: Build and push Docker image (ordinary version)
               id: build-and-push
-              uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
+              uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
               with:
                   context: .
                   tags: ${{ steps.image-name-ordinary.outputs.tags }}
@@ -132,7 +132,7 @@ jobs:
                   touch "${{ runner.temp }}/digests/ordinary/${digest#sha256:}"
 
             - name: Upload digest (ordinary version)
-              uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+              uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
               with:
                   name: digests-ordinary-${{ env.PLATFORM_PAIR }}
                   path: ${{ runner.temp }}/digests/ordinary/*
@@ -160,10 +160,10 @@ jobs:
 
             - name: Build and push Docker image (Chromium-bundled version)
               id: build-and-push-chromium
-              uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
+              uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
               with:
                   context: .
-                  build-args: PUPPETEER_SKIP_DOWNLOAD=0
+                  build-args: PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=0
                   tags: ${{ steps.image-name-chromium-bundled.outputs.tags }}
                   labels: ${{ steps.meta-chromium-bundled.outputs.labels }}
                   platforms: ${{ matrix.platform }}
@@ -187,7 +187,7 @@ jobs:
                   touch "${{ runner.temp }}/digests/chromium/${digest#sha256:}"
 
             - name: Upload digest (Chromium-bundled version)
-              uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+              uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
               with:
                   name: digests-chromium-${{ env.PLATFORM_PAIR }}
                   path: ${{ runner.temp }}/digests/chromium/*

.github/workflows/docker-test-cont.yml

@@ -23,17 +23,13 @@ jobs:
                   GH_TOKEN: ${{ github.token }}
                   # Best practice for scripts is to reference via ENV at runtime. Avoid using the expression syntax in the script content directly:
                   PR_TARGET_REPO: ${{ github.repository }}
-                  # If the PR is from a fork, prefix it with `<owner-login>:`, otherwise only the PR branch name is relevant:
-                  PR_BRANCH: |-
-                      ${{
-                        (github.event.workflow_run.head_repository.owner.login != github.event.workflow_run.repository.owner.login)
-                          && format('{0}:{1}', github.event.workflow_run.head_repository.owner.login, github.event.workflow_run.head_branch)
-                          || github.event.workflow_run.head_branch
-                      }}
+                  # The REST API `head` filter requires `<owner>:<branch>` format
+                  PR_BRANCH: ${{ format('{0}:{1}', github.event.workflow_run.head_repository.owner.login, github.event.workflow_run.head_branch) }}
               # Query the PR number by repo + branch, then assign to step output:
               run: |
-                  gh pr view --repo "${PR_TARGET_REPO}" "${PR_BRANCH}" \
-                    --json 'number' --jq '"number=\(.number)"' \
+                  gh api "repos/${PR_TARGET_REPO}/pulls" \
+                    --method GET -f head="${PR_BRANCH}" -f state=all \
+                    --jq '.[0] | "number=\(.number)"' \
                     >> "${GITHUB_OUTPUT}"
 
             - name: Fetch PR data via GitHub API
@@ -46,9 +42,9 @@ jobs:
               env:
                   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-            - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0
+            - uses: pnpm/action-setup@8912a9102ac27614460f54aedde9e1e7f9aec20d # v6.0.5
 
-            - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+            - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
               with:
                   node-version: lts/*
                   cache: 'pnpm'
@@ -58,7 +54,7 @@ jobs:
 
             - name: Fetch affected routes
               id: fetch-route
-              uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+              uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
               env:
                   PULL_REQUEST: ${{ steps.pr-data.outputs.data }}
               with:
@@ -74,7 +70,7 @@ jobs:
 
             - name: Fetch Docker image
               if: (env.TEST_CONTINUE)
-              uses: dawidd6/action-download-artifact@8305c0f1062bb0d184d09ef4493ecb9288447732 # v20
+              uses: dawidd6/action-download-artifact@b6e2e70617bc3265edd6dab6c906732b2f1ae151 # v21
               with:
                   workflow: ${{ github.event.workflow_run.workflow_id }}
                   run_id: ${{ github.event.workflow_run.id }}
@@ -127,7 +123,7 @@ jobs:
               if: (env.TEST_CONTINUE)
               id: generate-feedback
               timeout-minutes: 10
-              uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+              uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
               env:
                   TEST_BASEURL: http://localhost:1200
                   TEST_ROUTES: ${{ steps.fetch-route.outputs.result }}
@@ -171,17 +167,13 @@ jobs:
                   GH_TOKEN: ${{ github.token }}
                   # Best practice for scripts is to reference via ENV at runtime. Avoid using the expression syntax in the script content directly:
                   PR_TARGET_REPO: ${{ github.repository }}
-                  # If the PR is from a fork, prefix it with `<owner-login>:`, otherwise only the PR branch name is relevant:
-                  PR_BRANCH: |-
-                      ${{
-                        (github.event.workflow_run.head_repository.owner.login != github.event.workflow_run.repository.owner.login)
-                          && format('{0}:{1}', github.event.workflow_run.head_repository.owner.login, github.event.workflow_run.head_branch)
-                          || github.event.workflow_run.head_branch
-                      }}
+                  # The REST API `head` filter requires `<owner>:<branch>` format
+                  PR_BRANCH: ${{ format('{0}:{1}', github.event.workflow_run.head_repository.owner.login, github.event.workflow_run.head_branch) }}
               # Query the PR number by repo + branch, then assign to step output:
               run: |
-                  gh pr view --repo "${PR_TARGET_REPO}" "${PR_BRANCH}" \
-                    --json 'number' --jq '"number=\(.number)"' \
+                  gh api "repos/${PR_TARGET_REPO}/pulls" \
+                    --method GET -f head="${PR_BRANCH}" -f state=all \
+                    --jq '.[0] | "number=\(.number)\nauthor_association=\(.author_association)"' \
                     >> "${GITHUB_OUTPUT}"
 
             - name: Pull Request Labeler
@@ -191,3 +183,11 @@ jobs:
                   token: ${{ secrets.GITHUB_TOKEN }}
                   issue-number: ${{ steps.source-run-info.outputs.number }}
                   labels: 'auto: DO NOT merge'
+
+            - name: Close broken PR
+              if: ${{ steps.source-run-info.outputs.author_association != 'OWNER' && steps.source-run-info.outputs.author_association != 'COLLABORATOR' && steps.source-run-info.outputs.author_association != 'MEMBER' }}
+              uses: actions-cool/issues-helper@200c78641dbf33838311e5a1e0c31bbdb92d7cf0 # v3.8.0
+              with:
+                  actions: 'close-issue'
+                  token: ${{ secrets.GITHUB_TOKEN }}
+                  issue-number: ${{ steps.source-run-info.outputs.number }}

.github/workflows/docker-test.yml

@@ -40,10 +40,10 @@ jobs:
                   flavor: latest=true
 
             - name: Build Docker image
-              uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
+              uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
               with:
                   context: .
-                  build-args: PUPPETEER_SKIP_DOWNLOAD=0 # also test bundling Chromium
+                  build-args: PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=0 # also test bundling Chromium
                   load: true
                   tags: ${{ steps.meta.outputs.tags }}
                   labels: ${{ steps.meta.outputs.labels }}
@@ -69,7 +69,7 @@ jobs:
               run: docker save rsshub:latest | zstdmt -o rsshub.tar.zst
 
             - name: Upload Docker image
-              uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+              uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
               with:
                   name: docker-image
                   path: rsshub.tar.zst

.github/workflows/format.yml

@@ -15,12 +15,13 @@ jobs:
 
         steps:
             - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-            - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0
-            - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+            - uses: pnpm/action-setup@8912a9102ac27614460f54aedde9e1e7f9aec20d # v6.0.5
+            - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
               with:
                   node-version: lts/*
                   cache: 'pnpm'
             - run: pnpm i
+            - run: npm run format:description
             - run: npm run format
             - name: Commit files
               run: |

.github/workflows/issue-command.yml

@@ -36,6 +36,49 @@ jobs:
                   token: ${{ secrets.GITHUB_TOKEN }}
                   trigger: '/wip'
 
+    vouch-manage:
+        name: Vouch Manage
+        if: ${{ startsWith(github.event.comment.body, 'vouch') || startsWith(github.event.comment.body, 'unvouch') || startsWith(github.event.comment.body, 'denounce') }}
+        runs-on: ubuntu-slim
+        timeout-minutes: 5
+        permissions:
+            contents: write
+            issues: write
+            pull-requests: write
+        concurrency:
+            group: vouch-manage
+            cancel-in-progress: false
+        steps:
+            - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+            - id: vouch
+              uses: mitchellh/vouch/action/manage-by-issue@c6d80ead49839655b61b422700b7a3bc9d0804a9 # v1.4.2
+              with:
+                  issue-id: ${{ github.event.issue.number }}
+                  comment-id: ${{ github.event.comment.id }}
+                  roles: admin,maintain,write
+              env:
+                  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+            - name: Close PR if denounced
+              if: ${{ github.event.issue.pull_request && steps.vouch.outputs.status == 'denounced' }}
+              uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+              with:
+                  script: |
+                      const prNumber = context.payload.issue.number;
+                      await github.rest.issues.createComment({
+                          owner: context.repo.owner,
+                          repo: context.repo.repo,
+                          issue_number: prNumber,
+                          body: 'This pull request has been automatically closed.',
+                      });
+                      await github.rest.pulls.update({
+                          owner: context.repo.owner,
+                          repo: context.repo.repo,
+                          pull_number: prNumber,
+                          state: 'closed',
+                      });
+
     test-on-demand:
         name: Test route on demand
         if: startsWith(github.event.comment.body, '/test')
@@ -68,20 +111,20 @@ jobs:
                   ref: ${{ fromJson(steps.pr-data.outputs.data).head.ref }}
 
             - name: Install pnpm
-              uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0
+              uses: pnpm/action-setup@8912a9102ac27614460f54aedde9e1e7f9aec20d # v6.0.5
 
             - name: Use Node.js Active LTS
-              uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+              uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
               with:
                   node-version: lts/*
                   cache: 'pnpm'
 
             - name: Install dependencies (pnpm)
-              run: pnpm i && pnpm rb && pnpx rebrowser-puppeteer browsers install chrome
+              run: pnpm i && pnpm rb && pnpm exec playwright install chromium
 
             - name: Fetch affected routes
               id: fetch-route
-              uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+              uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
               env:
                   EVENT: ${{ toJson(github.event) }}
               with:
@@ -109,7 +152,7 @@ jobs:
 
             - name: Generate feedback
               if: env.TEST_CONTINUE
-              uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+              uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
               env:
                   TEST_BASEURL: http://localhost:1200
                   TEST_ROUTES: ${{ steps.fetch-route.outputs.result }}
@@ -129,7 +172,7 @@ jobs:
               run: cat ${{ github.workspace }}/logs/combined.log
 
             - name: Upload Artifact
-              uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+              uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
               with:
                   name: logs
                   path: logs

.github/workflows/lint.yml

@@ -21,16 +21,16 @@ jobs:
             security-events: write
         steps:
             - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-            - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0
-            - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+            - uses: pnpm/action-setup@8912a9102ac27614460f54aedde9e1e7f9aec20d # v6.0.5
+            - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
               with:
                   node-version: lts/*
                   cache: 'pnpm'
             - run: pnpm i
             - name: Install oxlint to SARIF converter
               run: pnpm i -g oxlint-json-to-sarif
             - name: Lint
-              run: pnpm exec oxlint --type-aware
+              run: pnpm exec oxlint --type-aware --config=.oxlintrc.ci.json
                   --format=json | oxlint-json-to-sarif > oxlint-results.sarif
               continue-on-error: true
             - name: Upload analysis results to GitHub
@@ -39,7 +39,7 @@ jobs:
                   sarif_file: oxlint-results.sarif
                   wait-for-processing: true
             - name: Upload Artifact
-              uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+              uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
               with:
                   path: oxlint-results.sarif
 
@@ -65,6 +65,26 @@ jobs:
         runs-on: ubuntu-slim
         timeout-minutes: 5
         steps:
-            - uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6.0.1
+            - uses: actions/labeler@f27b608878404679385c85cfa523b85ccb86e213 # v6.1.0
               with:
                   repo-token: ${{ secrets.GITHUB_TOKEN }}
+
+    vouch-check-pr:
+        name: Vouch check PR
+        if: ${{ github.event_name == 'pull_request_target' && github.event.action == 'opened' && github.repository == 'DIYgod/RSSHub' }}
+        permissions:
+            contents: read
+            issues: write
+            pull-requests: write
+        runs-on: ubuntu-slim
+        timeout-minutes: 5
+        steps:
+            - name: Checkout
+              uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+            - name: Check if PR author is denounced
+              uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+              with:
+                  script: |
+                      const { default: checkPr } = await import('${{ github.workspace }}/scripts/workflow/vouch/check-pr.mjs')
+                      await checkPr({ github, context, core })