Merge branch 'main' into dependabot/bundler/dependencies-bf1352d8fa

Author: ahpook

.github/workflows/collections-renames.yml

@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     if: github.repository_owner == 'github'
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v6.0.3
 
       - name: Setup Ruby
         uses: ruby/setup-ruby@afeafc3d1ab54a631816aba4c914a0081c12ff2f # v1.310.0

.github/workflows/jekyll_build.yml

@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: 📂 checkout
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v6.0.3
 
       - name: 💎 setup ruby
         uses: ruby/setup-ruby@afeafc3d1ab54a631816aba4c914a0081c12ff2f # v1.310.0

.github/workflows/lint.yml

@@ -1,65 +1,64 @@
-# name: Lint
-# 
-# on:
-#   pull_request_target:
-#   workflow_dispatch:
-#   merge_group:
-# 
-# jobs:
-#   lint:
-#     runs-on: ubuntu-latest
-#     permissions:
-#       contents: read
-#     steps:
-#       - uses: actions/checkout@v6.0.2
-#         with:
-#           ref: ${{ github.event.pull_request.head.sha || github.ref }}
-#           repository: ${{ github.event.pull_request.head.repo.full_name || github.repository }}
-# 
-#       - name: Setup Ruby
-#         uses: ruby/setup-ruby@v1.306.0
-#         with:
-#           bundler-cache: false
-# 
-#       - name: Install dependencies
-#         run: bundle install
-# 
-#       - name: Run RuboCop
-#         run: |
-#           bundle exec rubocop
-# 
-#   autocorrect:
-#     if: github.event.pull_request.head.repo.full_name == github.repository
-#     runs-on: ubuntu-latest
-#     permissions:
-#       contents: write
-#     steps:
-#       - uses: actions/checkout@v6.0.2
-#         with:
-#           ref: ${{ github.event.pull_request.head.ref || github.ref }}
-# 
-#       - name: Setup Ruby
-#         uses: ruby/setup-ruby@v1.306.0
-#         with:
-#           bundler-cache: true
-# 
-#       - name: Run RuboCop with auto-correct
-#         run: |
-#           bundle exec rubocop -A
-# 
-#       - name: Check for changes
-#         run: |
-#           git config --global user.name "github-actions[bot]"
-#           git config --global user.email "github-actions[bot]@users.noreply.github.com"
-#           if git status --porcelain | grep .; then
-#             echo "changes=true" >> $GITHUB_ENV
-#           else
-#             echo "changes=false" >> $GITHUB_ENV
-#           fi
-# 
-#       - name: Commit and push changes
-#         if: env.changes == 'true'
-#         run: |
-#           git add .
-#           git commit -m "chore: auto-corrected with RuboCop"
-#           git push
+name: Lint
+
+on:
+  # Use `pull_request` (not `pull_request_target`): this workflow checks out and
+  # runs untrusted PR code, so it must not run with access to repository secrets.
+  pull_request:
+  workflow_dispatch:
+  merge_group:
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@v6.0.2
+
+      - name: Setup Ruby
+        uses: ruby/setup-ruby@afeafc3d1ab54a631816aba4c914a0081c12ff2f # v1.310.0
+        with:
+          bundler-cache: false
+
+      - name: Install dependencies
+        run: bundle install
+
+      - name: Run RuboCop
+        run: |
+          bundle exec rubocop
+
+  autocorrect:
+    if: github.event.pull_request.head.repo.full_name == github.repository
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v6.0.2
+        with:
+          ref: ${{ github.event.pull_request.head.ref || github.ref }}
+
+      - name: Setup Ruby
+        uses: ruby/setup-ruby@afeafc3d1ab54a631816aba4c914a0081c12ff2f # v1.310.0
+        with:
+          bundler-cache: true
+
+      - name: Run RuboCop with auto-correct
+        run: |
+          bundle exec rubocop -A
+
+      - name: Check for changes
+        run: |
+          git config --global user.name "github-actions[bot]"
+          git config --global user.email "github-actions[bot]@users.noreply.github.com"
+          if git status --porcelain | grep .; then
+            echo "changes=true" >> $GITHUB_ENV
+          else
+            echo "changes=false" >> $GITHUB_ENV
+          fi
+
+      - name: Commit and push changes
+        if: env.changes == 'true'
+        run: |
+          git add .
+          git commit -m "chore: auto-corrected with RuboCop"
+          git push

.github/workflows/test.yml

@@ -33,7 +33,7 @@ jobs:
           - test_type: all
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v6.0.3
         with:
           fetch-depth: 0
 

collections/made-in-brazil/index.md

@@ -39,6 +39,7 @@ items:
   - frontendbr/vagas
   - getfloresta/Floresta
   - danielnichiata96/abnt-citation
+  - hoffresearch/nest
 
 display_name: Made in Brazil
 created_by: caarlos0

topics/sovereign-ai/index.md

@@ -0,0 +1,10 @@
+---
+aliases: sovereign-artificial-intelligence
+display_name: Sovereign AI
+related: artificial-intelligence, machine-learning, llm, privacy, self-hosted, edge-computing, freedom
+short_description: AI systems whose models, data, and compute are owned and controlled by their operator rather than rented from external providers.
+topic: sovereign-ai
+---
+Sovereign AI describes artificial intelligence systems whose models, training data, and compute are owned and governed by the organization, nation, or individual that operates them, rather than rented from a third-party cloud or foreign provider. It emphasizes data control, local or on-device inference, open model weights, and computational independence.
+
+Projects in this space include self-hosted and local-first assistants, on-device inference runtimes, privacy-preserving and federated training, and tooling for regulatory compliance such as the EU AI Act. The shared goal is to reduce external dependencies and keep sensitive data and decision-making under the operator's own control.