Merge branch 'main' into update-collections-${PR_ID}

Author: ahpook

.github/workflows/collections-renames.yml

@@ -19,7 +19,7 @@ jobs:
       - uses: actions/checkout@v6.0.2
 
       - name: Setup Ruby
-        uses: ruby/setup-ruby@3ff19f5e2baf30647122352b96108b1fbe250c64 # v1.299.0
+        uses: ruby/setup-ruby@4c56a21280b36d862b5fc31348f463d60bdc55d5 # v1.301.0
         with:
           bundler-cache: true
 

.github/workflows/jekyll_build.yml

@@ -24,7 +24,7 @@ jobs:
         uses: actions/checkout@v6.0.2
 
       - name: 💎 setup ruby
-        uses: ruby/setup-ruby@3ff19f5e2baf30647122352b96108b1fbe250c64 # v1.299.0
+        uses: ruby/setup-ruby@4c56a21280b36d862b5fc31348f463d60bdc55d5 # v1.301.0
         with:
           bundler-cache: true
           cache-version: 0
@@ -37,7 +37,7 @@ jobs:
         uses: actions/jekyll-build-pages@44a6e6beabd48582f863aeeb6cb2151cc1716697 # v1.0.13
 
       - name: ⚡️ upload artifact
-        uses: actions/upload-pages-artifact@v4.0.0
+        uses: actions/upload-pages-artifact@v5.0.0
 
   deploy:
     needs: build

.github/workflows/lint.yml

@@ -17,7 +17,7 @@ jobs:
           repository: ${{ github.event.pull_request.head.repo.full_name || github.repository }}
 
       - name: Setup Ruby
-        uses: ruby/setup-ruby@v1.299.0
+        uses: ruby/setup-ruby@v1.301.0
         with:
           bundler-cache: false
 
@@ -39,7 +39,7 @@ jobs:
           ref: ${{ github.event.pull_request.head.ref || github.ref }}
 
       - name: Setup Ruby
-        uses: ruby/setup-ruby@v1.299.0
+        uses: ruby/setup-ruby@v1.301.0
         with:
           bundler-cache: true
 

.github/workflows/test.yml

@@ -54,7 +54,7 @@ jobs:
 
       - name: Setup Ruby
         if: ${{ steps.topics.outputs.changed || steps.collections.outputs.changed || steps.all.outputs.changed }}
-        uses: ruby/setup-ruby@3ff19f5e2baf30647122352b96108b1fbe250c64 # v1.299.0
+        uses: ruby/setup-ruby@4c56a21280b36d862b5fc31348f463d60bdc55d5 # v1.301.0
         with:
           bundler-cache: true
 

.github/workflows/topic-commenter.yml

@@ -18,7 +18,7 @@ jobs:
 
     steps:
       - name: Comment on PR with topic info
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:

Gemfile

@@ -3,11 +3,11 @@ source "https://rubygems.org"
 gem "faraday", "2.14.1"
 gem "faraday-retry", "2.4.0"
 gem "github-pages", "~> 232", group: :jekyll_plugins
-gem "json", "2.19.3"
+gem "json", "2.19.4"
 gem "language_server-protocol", "3.17.0.5"
 gem "nokogiri", "~> 1.19.2"
-gem "rake", "13.3.1"
-gem "rubocop", "1.86.0"
+gem "rake", "13.4.2"
+gem "rubocop", "1.86.1"
 
 group :test do
   gem "fastimage"

Gemfile.lock

@@ -236,7 +236,7 @@ GEM
       gemoji (>= 3, < 5)
       html-pipeline (~> 2.2)
       jekyll (>= 3.0, < 5.0)
-    json (2.19.3)
+    json (2.19.4)
     kramdown (2.4.0)
       rexml
     kramdown-parser-gfm (1.1.0)
@@ -256,7 +256,7 @@ GEM
       jekyll (>= 3.5, < 5.0)
       jekyll-feed (~> 0.9)
       jekyll-seo-tag (~> 2.1)
-    minitest (6.0.3)
+    minitest (6.0.4)
       drb (~> 2.0)
       prism (~> 1.5)
     multi_xml (0.8.1)
@@ -285,7 +285,7 @@ GEM
     octokit (4.25.1)
       faraday (>= 1, < 3)
       sawyer (~> 0.9)
-    parallel (1.27.0)
+    parallel (2.0.1)
     parser (3.3.11.1)
       ast (~> 2.4.1)
       racc
@@ -299,20 +299,20 @@ GEM
     public_suffix (5.1.1)
     racc (1.8.1)
     rainbow (3.1.1)
-    rake (13.3.1)
+    rake (13.4.2)
     rb-fsevent (0.11.2)
     rb-inotify (0.11.1)
       ffi (~> 1.0)
-    regexp_parser (2.11.3)
+    regexp_parser (2.12.0)
     reline (0.6.3)
       io-console (~> 0.5)
     rexml (3.4.2)
     rouge (3.30.0)
-    rubocop (1.86.0)
+    rubocop (1.86.1)
       json (~> 2.3)
       language_server-protocol (~> 3.17.0.2)
       lint_roller (~> 1.1.0)
-      parallel (~> 1.10)
+      parallel (>= 1.10)
       parser (>= 3.3.0.2)
       rainbow (>= 2.2.2, < 4.0)
       regexp_parser (>= 2.9.3, < 3.0)
@@ -372,14 +372,14 @@ DEPENDENCIES
   fastimage
   github-pages (~> 232)
   httparty
-  json (= 2.19.3)
+  json (= 2.19.4)
   language_server-protocol (= 3.17.0.5)
   minitest
   nokogiri (~> 1.19.2)
   octokit
   pry
-  rake (= 13.3.1)
-  rubocop (= 1.86.0)
+  rake (= 13.4.2)
+  rubocop (= 1.86.1)
   rubocop-performance
   safe_yaml
   webrick

collections/government/index.md

@@ -18,7 +18,6 @@ items:
  - NatLabRockies/api-umbrella
  - usds/playbook
  - republique-et-canton-de-geneve/chvote-1-0
- - https://www.youtube.com/embed/uNa9GOtM6NE
  - gchq/CyberChef
  - HSEIreland/covid-tracker-app
  - nic-delhi/AarogyaSetu_Android

topics/grapheneos/grapheneos.png

@@ -0,0 +1,14 @@
+---
+aliases: androidhardening, android-hardening, androidhardening-project, android-hardening-project, copperhead, copperhead-os, copperheados, graphene-os
+created_by: Daniel Micay
+display_name: GrapheneOS
+github_url: https://github.com/GrapheneOS
+logo: grapheneos.png
+related: android, security, privacy, hardening
+released: 2014
+short_description: GrapheneOS is a private and secure mobile operating system with Android app compatibility.
+topic: grapheneos
+url: https://grapheneos.org/
+wikipedia_url: https://en.wikipedia.org/wiki/GrapheneOS
+---
+GrapheneOS is a free and open source privacy and security focused based on the Android Open Source Project (AOSP). It deploys a hardened kernel, [hardened memory allocator](https://github.com/GrapheneOS/hardened_malloc), [C library](https://github.com/GrapheneOS/platform_bionic), [SELinux policies](https://github.com/GrapheneOS/platform_system_sepolicy), [WebView, and Chromium-based browser (Vanadium)](https://github.com/GrapheneOS/Vanadium).