SirnoChan · pull · Feb 7, 2025 · Feb 7, 2025 · Feb 7, 2025 · Feb 7, 2025
diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
@@ -3,12 +3,14 @@ name: auto-merge
 on:
   pull_request_target:
 
+permissions: {}
+
 jobs:
   auto-merge:
     runs-on: ubuntu-latest
     if: github.event.pull_request.user.login == 'dependabot[bot]'
     steps:
-      - uses: ahmadnassri/action-dependabot-auto-merge@v2
+      - uses: ahmadnassri/action-dependabot-auto-merge@45fc124d949b19b6b8bf6645b6c9d55f4f9ac61a # v2.6.6
         with:
           github-token: ${{ secrets.AUTOMERGE_TOKEN }}
           command: "squash and merge"

diff --git a/.github/workflows/markdown-lint-fix.yml b/.github/workflows/markdown-lint-fix.yml
@@ -5,6 +5,8 @@ on:
     - cron: "0 0 * * *"
   workflow_dispatch:
 
+permissions: {}
+
 jobs:
   fix:
     if: github.repository == 'mdn/translated-content'
@@ -61,7 +63,7 @@ jobs:
 
       - name: Create PR with only fixable issues
         if: success()
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@67ccf781d68cd99b580ae25a5c18a1cc84ffff1f # v7.0.6
         with:
           commit-message: "${{ matrix.lang }}: auto-fix Markdownlint issues"
           branch: markdownlint-auto-cleanup-${{ matrix.lang }}
@@ -76,7 +78,7 @@ jobs:
 
       - name: Create PR with notice on unfixed issues
         if: failure()
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@67ccf781d68cd99b580ae25a5c18a1cc84ffff1f # v7.0.6
         with:
           commit-message: "${{ matrix.lang }}: auto-fix Markdownlint issues"
           branch: markdownlint-auto-cleanup-${{ matrix.lang }}

diff --git a/.github/workflows/markdown-lint.yml b/.github/workflows/markdown-lint.yml
@@ -13,6 +13,8 @@ on:
       - .github/workflows/markdown-lint.yml
       - .github/workflows/markdownlint-problem-matcher.json
 
+permissions: {}
+
 jobs:
   docs:
     # do not run on forks

diff --git a/.github/workflows/pr-check-lint_content.yml b/.github/workflows/pr-check-lint_content.yml
@@ -136,7 +136,7 @@ jobs:
 
       - name: Setup reviewdog
         if: env.FILES_MODIFIED == 'true' || env.MD_LINT_FAILED == 'true'
-        uses: reviewdog/action-setup@v1
+        uses: reviewdog/action-setup@3f401fe1d58fe77e10d665ab713057375e39b887 # v1.3.0
         with:
           reviewdog_version: latest
 

diff --git a/.github/workflows/pr-check_json.yml b/.github/workflows/pr-check_json.yml
@@ -10,6 +10,8 @@ on:
       - "**/*.jsonc"
       - .github/workflows/pr-check_json.yml
 
+permissions: {}
+
 jobs:
   docs:
     # do not run on PRs in forks

diff --git a/.github/workflows/pr-check_redirects.yml b/.github/workflows/pr-check_redirects.yml
@@ -5,6 +5,8 @@ on:
     branches:
       - main
 
+permissions: {}
+
 jobs:
   check_redirects:
     # do not run on PRs in forks
@@ -17,7 +19,7 @@ jobs:
       # This is a "required" workflow so path filtering can not be used:
       # https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/collaborating-on-repositories-with-code-quality-features/troubleshooting-required-status-checks#handling-skipped-but-required-checks
       # We have to rely on a custom filtering mechanism to run the checks only if required files are modified.
-      - uses: dorny/paths-filter@v3
+      - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
         name: See if any file needs checking
         id: filter
         with:

diff --git a/.github/workflows/pr-check_yml.yml b/.github/workflows/pr-check_yml.yml
@@ -10,6 +10,8 @@ on:
       - "**/*.yml"
       - .github/workflows/pr-check_yml.yml
 
+permissions: {}
+
 jobs:
   docs:
     # do not run on PRs in forks

diff --git a/.github/workflows/pr-labeler.yml b/.github/workflows/pr-labeler.yml
@@ -2,6 +2,10 @@ name: "Pull Request Labeler"
 on:
   - pull_request_target
 
+permissions:
+  contents: read
+  pull-requests: write
+
 jobs:
   triage:
     # do not run on PRs in forks

diff --git a/.github/workflows/pr-rebase-needed.yml b/.github/workflows/pr-rebase-needed.yml
@@ -5,6 +5,9 @@ on:
   pull_request_target:
     types: [synchronize]
 
+permissions:
+  pull-requests: write
+
 jobs:
   label-rebase-needed:
     # do not run on PRs in forks

diff --git a/.github/workflows/pr-review-companion.yml b/.github/workflows/pr-review-companion.yml
@@ -17,6 +17,12 @@ on:
     types:
       - completed
 
+permissions:
+  # Required to download artifact.
+  actions: read
+  # Required to post comment.
+  pull-requests: write
+
 jobs:
   review:
     runs-on: ubuntu-latest
@@ -61,7 +67,7 @@ jobs:
 
       - name: Install Python poetry
         if: env.HAS_ARTIFACT
-        uses: snok/[email protected]
+        uses: snok/install-poetry@76e04a911780d5b312d89783f7b1cd627778900a # v1.4.1
         with:
           virtualenvs-create: true
           virtualenvs-in-project: true

diff --git a/.github/workflows/sync-translated-content.yml b/.github/workflows/sync-translated-content.yml
@@ -11,6 +11,9 @@ on:
     # * is a special character in YAML so you have to quote this string
     - cron: "0 1 * * *"
 
+permissions:
+  contents: read
+
 jobs:
   build:
     if: github.repository == 'mdn/translated-content'
@@ -90,7 +93,7 @@ jobs:
           } >> "$GITHUB_ENV"
 
       - name: Create PR with sync for ${{ matrix.lang }}
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@67ccf781d68cd99b580ae25a5c18a1cc84ffff1f # v7.0.6
         with:
           commit-message: "${{ matrix.lang }}: sync translated content"
           branch: content-sync-${{ matrix.lang }}

diff --git a/.github/workflows/system-file-changes.yml b/.github/workflows/system-file-changes.yml
@@ -11,6 +11,8 @@ on:
       - package.json
       - yarn.lock
 
+permissions: {}
+
 jobs:
   block:
     # This make sure it only runs on our origin repo

diff --git a/files/zh-cn/web/api/element/getelementsbyclassname/index.md b/files/zh-cn/web/api/element/getelementsbyclassname/index.md
@@ -45,9 +45,7 @@ document.getElementById("main").getElementsByClassName("test");
 var testElements = document.getElementsByClassName("test");
 var testDivs = Array.prototype.filter.call(
   testElements,
-  function (testElement) {
-    return testElement.nodeName === "div";
-  },
+  (testElement) => testElement.nodeName === "DIV",
 );
 ```
 

diff --git a/files/zh-cn/web/css/-moz-float-edge/index.md b/files/zh-cn/web/css/-moz-float-edge/index.md
@@ -1,5 +1,5 @@
 ---
-title: "-moz-float-edge"
+title: -moz-float-edge
 slug: Web/CSS/-moz-float-edge
 l10n:
   sourceCommit: 4767ebffd07b627275ae9cac6863b153e3e6746d

diff --git a/files/zh-cn/web/css/-moz-force-broken-image-icon/index.md b/files/zh-cn/web/css/-moz-force-broken-image-icon/index.md
@@ -1,5 +1,5 @@
 ---
-title: "-moz-force-broken-image-icon"
+title: -moz-force-broken-image-icon
 slug: Web/CSS/-moz-force-broken-image-icon
 l10n:
   sourceCommit: db9ccd6c2746b3f34b0951d8e59ea1c581312d9d

diff --git a/files/zh-cn/web/css/-moz-image-rect/index.md b/files/zh-cn/web/css/-moz-image-rect/index.md
@@ -1,5 +1,5 @@
 ---
-title: "-moz-image-rect"
+title: -moz-image-rect
 slug: Web/CSS/-moz-image-rect
 ---
 

diff --git a/files/zh-cn/web/css/-moz-user-input/index.md b/files/zh-cn/web/css/-moz-user-input/index.md
@@ -1,5 +1,5 @@
 ---
-title: "-moz-user-input"
+title: -moz-user-input
 slug: Web/CSS/-moz-user-input
 ---
 

diff --git a/files/zh-cn/web/css/-webkit-border-before/index.md b/files/zh-cn/web/css/-webkit-border-before/index.md
@@ -1,5 +1,5 @@
 ---
-title: "-webkit-border-before"
+title: -webkit-border-before
 slug: Web/CSS/-webkit-border-before
 ---
 

diff --git a/files/zh-cn/web/css/-webkit-box-reflect/index.md b/files/zh-cn/web/css/-webkit-box-reflect/index.md
@@ -1,5 +1,5 @@
 ---
-title: "-webkit-box-reflect"
+title: -webkit-box-reflect
 slug: Web/CSS/-webkit-box-reflect
 ---
 

diff --git a/files/zh-cn/web/css/-webkit-line-clamp/index.md b/files/zh-cn/web/css/-webkit-line-clamp/index.md
@@ -1,5 +1,5 @@
 ---
-title: "-webkit-line-clamp"
+title: -webkit-line-clamp
 slug: Web/CSS/-webkit-line-clamp
 ---
 

diff --git a/files/zh-cn/web/css/-webkit-tap-highlight-color/index.md b/files/zh-cn/web/css/-webkit-tap-highlight-color/index.md
@@ -1,5 +1,5 @@
 ---
-title: "-webkit-tap-highlight-color"
+title: -webkit-tap-highlight-color
 slug: Web/CSS/-webkit-tap-highlight-color
 ---
 

diff --git a/files/zh-cn/web/css/-webkit-text-fill-color/index.md b/files/zh-cn/web/css/-webkit-text-fill-color/index.md
@@ -1,5 +1,5 @@
 ---
-title: "-webkit-text-fill-color"
+title: -webkit-text-fill-color
 slug: Web/CSS/-webkit-text-fill-color
 ---
 

diff --git a/files/zh-cn/web/css/-webkit-text-stroke-color/index.md b/files/zh-cn/web/css/-webkit-text-stroke-color/index.md
@@ -1,5 +1,5 @@
 ---
-title: "-webkit-text-stroke-color"
+title: -webkit-text-stroke-color
 slug: Web/CSS/-webkit-text-stroke-color
 ---
 

diff --git a/files/zh-cn/web/css/-webkit-text-stroke-width/index.md b/files/zh-cn/web/css/-webkit-text-stroke-width/index.md
@@ -1,5 +1,5 @@
 ---
-title: "-webkit-text-stroke-width"
+title: -webkit-text-stroke-width
 slug: Web/CSS/-webkit-text-stroke-width
 ---
 

diff --git a/files/zh-cn/web/css/-webkit-text-stroke/index.md b/files/zh-cn/web/css/-webkit-text-stroke/index.md
@@ -1,5 +1,5 @@
 ---
-title: "-webkit-text-stroke"
+title: -webkit-text-stroke
 slug: Web/CSS/-webkit-text-stroke
 ---
 

diff --git a/files/zh-cn/web/css/-webkit-touch-callout/index.md b/files/zh-cn/web/css/-webkit-touch-callout/index.md
@@ -1,5 +1,5 @@
 ---
-title: "-webkit-touch-callout"
+title: -webkit-touch-callout
 slug: Web/CSS/-webkit-touch-callout
 ---
 

diff --git a/files/zh-cn/web/css/@media/-webkit-device-pixel-ratio/index.md b/files/zh-cn/web/css/@media/-webkit-device-pixel-ratio/index.md
@@ -1,5 +1,5 @@
 ---
-title: "-webkit-device-pixel-ratio"
+title: -webkit-device-pixel-ratio
 slug: Web/CSS/@media/-webkit-device-pixel-ratio
 ---
 

diff --git a/files/zh-cn/web/css/_colon_-moz-broken/index.md b/files/zh-cn/web/css/_colon_-moz-broken/index.md
@@ -1,5 +1,5 @@
 ---
-title: ":-moz-broken"
+title: :-moz-broken
 slug: Web/CSS/:-moz-broken
 ---
 

diff --git a/files/zh-cn/web/css/_colon_-moz-drag-over/index.md b/files/zh-cn/web/css/_colon_-moz-drag-over/index.md
@@ -1,5 +1,5 @@
 ---
-title: ":-moz-drag-over"
+title: :-moz-drag-over
 slug: Web/CSS/:-moz-drag-over
 ---
 

diff --git a/files/zh-cn/web/css/_colon_-moz-first-node/index.md b/files/zh-cn/web/css/_colon_-moz-first-node/index.md
@@ -1,5 +1,5 @@
 ---
-title: ":-moz-first-node"
+title: :-moz-first-node
 slug: Web/CSS/:-moz-first-node
 ---
 

diff --git a/files/zh-cn/web/css/_colon_-moz-only-whitespace/index.md b/files/zh-cn/web/css/_colon_-moz-only-whitespace/index.md
@@ -1,5 +1,5 @@
 ---
-title: ":blank"
+title: :blank
 slug: Web/CSS/:-moz-only-whitespace
 ---
 

diff --git a/files/zh-cn/web/css/_colon_-moz-window-inactive/index.md b/files/zh-cn/web/css/_colon_-moz-window-inactive/index.md
@@ -1,5 +1,5 @@
 ---
-title: ":-moz-window-inactive"
+title: :-moz-window-inactive
 slug: Web/CSS/:-moz-window-inactive
 ---
 

diff --git a/files/zh-cn/web/css/_colon_active/index.md b/files/zh-cn/web/css/_colon_active/index.md
@@ -1,5 +1,5 @@
 ---
-title: ":active"
+title: :active
 slug: Web/CSS/:active
 ---
 

diff --git a/files/zh-cn/web/css/_colon_any-link/index.md b/files/zh-cn/web/css/_colon_any-link/index.md
@@ -1,5 +1,5 @@
 ---
-title: ":any-link"
+title: :any-link
 slug: Web/CSS/:any-link
 ---
 

diff --git a/files/zh-cn/web/css/_colon_autofill/index.md b/files/zh-cn/web/css/_colon_autofill/index.md
@@ -1,5 +1,5 @@
 ---
-title: ":autofill"
+title: :autofill
 slug: Web/CSS/:autofill
 ---
 

diff --git a/files/zh-cn/web/css/_colon_blank/index.md b/files/zh-cn/web/css/_colon_blank/index.md
@@ -1,5 +1,5 @@
 ---
-title: ":blank"
+title: :blank
 slug: Web/CSS/:blank
 l10n:
   sourceCommit: 5fea7c9593f5e4b4ef13ec65064acf1eabf01e4e

diff --git a/files/zh-cn/web/css/_colon_checked/index.md b/files/zh-cn/web/css/_colon_checked/index.md
@@ -1,5 +1,5 @@
 ---
-title: ":checked"
+title: :checked
 slug: Web/CSS/:checked
 ---
 

diff --git a/files/zh-cn/web/css/_colon_default/index.md b/files/zh-cn/web/css/_colon_default/index.md
@@ -1,5 +1,5 @@
 ---
-title: ":default"
+title: :default
 slug: Web/CSS/:default
 ---
 

diff --git a/files/zh-cn/web/css/_colon_defined/index.md b/files/zh-cn/web/css/_colon_defined/index.md
@@ -1,5 +1,5 @@
 ---
-title: ":defined"
+title: :defined
 slug: Web/CSS/:defined
 ---
 

diff --git a/files/zh-cn/web/css/_colon_dir/index.md b/files/zh-cn/web/css/_colon_dir/index.md
@@ -1,5 +1,5 @@
 ---
-title: ":dir()"
+title: :dir()
 slug: Web/CSS/:dir
 ---
 

diff --git a/files/zh-cn/web/css/_colon_disabled/index.md b/files/zh-cn/web/css/_colon_disabled/index.md
@@ -1,5 +1,5 @@
 ---
-title: ":disabled"
+title: :disabled
 slug: Web/CSS/:disabled
 ---
 

diff --git a/files/zh-cn/web/css/_colon_empty/index.md b/files/zh-cn/web/css/_colon_empty/index.md
@@ -1,5 +1,5 @@
 ---
-title: ":empty"
+title: :empty
 slug: Web/CSS/:empty
 ---
 

diff --git a/files/zh-cn/web/css/_colon_enabled/index.md b/files/zh-cn/web/css/_colon_enabled/index.md
@@ -1,5 +1,5 @@
 ---
-title: ":enabled"
+title: :enabled
 slug: Web/CSS/:enabled
 ---
 

diff --git a/files/zh-cn/web/css/_colon_first-child/index.md b/files/zh-cn/web/css/_colon_first-child/index.md
@@ -1,5 +1,5 @@
 ---
-title: ":first-child"
+title: :first-child
 slug: Web/CSS/:first-child
 ---