From e58e7ae5e3975f513a5b7c4b765b2fb1a5789db0 Mon Sep 17 00:00:00 2001
From: kascit <dhanurrelhan2005@gmail.com>
Date: Mon, 11 May 2026 17:57:58 +0530
Subject: [PATCH] Apply latest heavy updates cleanly

---
 .github/workflows/bump-versions.yml     | 10 +++++++++-
 .github/workflows/codeql.yml            |  6 ------
 templates/shortcodes/projects_grid.html |  7 ++++++-
 3 files changed, 15 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/bump-versions.yml b/.github/workflows/bump-versions.yml
index e666cb1..d4c68f4 100644
--- a/.github/workflows/bump-versions.yml
+++ b/.github/workflows/bump-versions.yml
@@ -143,9 +143,17 @@ jobs:
           sed -i -E "s/^ESLINT_VERSION=.*/ESLINT_VERSION=${{ steps.latest.outputs.eslint }}/" "$file"
           sed -i -E "s/^STYLELINT_VERSION=.*/STYLELINT_VERSION=${{ steps.latest.outputs.stylelint }}/" "$file"
 
-          echo "Updated versions.env:" 
+          echo "Updated versions.env:"
           cat "$file"
 
+      - name: Import GPG Key
+        uses: crazy-max/ghaction-import-gpg@v6
+        with:
+          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
+          passphrase: ${{ secrets.GPG_PASSPHRASE }}
+          git_user_signingkey: true
+          git_commit_gpgsign: true
+
       - name: Create pull request
         uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8
         with:
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 526050f..47a1873 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -11,11 +11,6 @@ on:
       - "public/**"
   pull_request:
     branches: ["main"]
-    paths-ignore:
-      - "README.md"
-      - "LICENSE"
-      - "docs/**"
-      - "public/**"
   schedule:
     - cron: "20 4 * * 5"
   workflow_dispatch:
@@ -32,7 +27,6 @@ permissions:
 jobs:
   analyze:
     name: Analyze
-    if: github.event_name != 'pull_request' || github.actor != 'dependabot[bot]'
     runs-on: ubuntu-latest
     timeout-minutes: 20
     strategy:
diff --git a/templates/shortcodes/projects_grid.html b/templates/shortcodes/projects_grid.html
index 0f2ff1e..d0d3c27 100644
--- a/templates/shortcodes/projects_grid.html
+++ b/templates/shortcodes/projects_grid.html
@@ -15,8 +15,13 @@
   {% set project_status = project.status | default(value="") %}
   <article class="project-card">
     {% if project.thumbnail_image %}
+    {% if project.thumbnail_image is starting_with("http://") or project.thumbnail_image is starting_with("https://") %}
+        {% set project_thumb_url = project.thumbnail_image %}
+    {% else %}
+        {% set project_thumb_url = get_url(path=project.thumbnail_image) | safe %}
+    {% endif %}
     <a href="/projects/{{ project.slug }}/" class="block aspect-video w-full overflow-hidden rounded-md mb-3 border border-base-content/10 bg-base-300/30">
-      <img src="{{ project.thumbnail_image }}" alt="{{ project.thumbnail_alt | default(value=project.title) }}" sizes="(min-width: 1024px) 50vw, 100vw" class="w-full h-full object-cover transition-transform duration-300 hover:scale-105" loading="lazy" width="800" height="450">
+      <img src="{{ project_thumb_url | safe }}" alt="{{ project.thumbnail_alt | default(value=project.title) }}" sizes="(min-width: 1024px) 50vw, 100vw" class="w-full h-full object-cover transition-transform duration-300 hover:scale-105" loading="lazy" width="800" height="450">
     </a>
     {% endif %}
     <div class="project-card-header">