Apply latest heavy updates cleanly

Author: kascit

.github/workflows/bump-versions.yml

@@ -146,6 +146,14 @@ jobs:
           echo "Updated versions.env:" 
           cat "$file"
 
+      - name: Import GPG Key
+        uses: crazy-max/ghaction-import-gpg@v6
+        with:
+          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
+          passphrase: ${{ secrets.GPG_PASSPHRASE }}
+          git_user_signingkey: true
+          git_commit_gpgsign: true
+
       - name: Create pull request
         uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8
         with:

.github/workflows/codeql.yml

@@ -11,11 +11,6 @@ on:
       - "public/**"
   pull_request:
     branches: ["main"]
-    paths-ignore:
-      - "README.md"
-      - "LICENSE"
-      - "docs/**"
-      - "public/**"
   schedule:
     - cron: "20 4 * * 5"
   workflow_dispatch:
@@ -32,7 +27,7 @@ permissions:
 jobs:
   analyze:
     name: Analyze
-    if: github.event_name != 'pull_request' || github.actor != 'dependabot[bot]'
+    if: github.event_name != 'pull_request'
     runs-on: ubuntu-latest
     timeout-minutes: 20
     strategy:

templates/shortcodes/projects_grid.html

@@ -15,8 +15,13 @@
   {% set project_status = project.status | default(value="") %}
   <article class="project-card">
     {% if project.thumbnail_image %}
+    {% if project.thumbnail_image is starting_with("http://") or project.thumbnail_image is starting_with("https://") %}
+        {% set project_thumb_url = project.thumbnail_image %}
+    {% else %}
+        {% set project_thumb_url = get_url(path=project.thumbnail_image) | safe %}
+    {% endif %}
     <a href="/projects/{{ project.slug }}/" class="block aspect-video w-full overflow-hidden rounded-md mb-3 border border-base-content/10 bg-base-300/30">
-      <img src="{{ project.thumbnail_image }}" alt="{{ project.thumbnail_alt | default(value=project.title) }}" sizes="(min-width: 1024px) 50vw, 100vw" class="w-full h-full object-cover transition-transform duration-300 hover:scale-105" loading="lazy" width="800" height="450">
+      <img src="{{ project_thumb_url | safe }}" alt="{{ project.thumbnail_alt | default(value=project.title) }}" sizes="(min-width: 1024px) 50vw, 100vw" class="w-full h-full object-cover transition-transform duration-300 hover:scale-105" loading="lazy" width="800" height="450">
     </a>
     {% endif %}
     <div class="project-card-header">