Merge branch 'main' of https://github.com/JustArchiNET/ArchiSteamFarm into net6.0

.github/CONTRIBUTING.md

@@ -35,7 +35,7 @@ It would also be cool if you could reproduce your issue on latest **[pre-release
 
 While everybody is able to create suggestions how to improve ASF, GitHub issues is not the proper place to discuss if your enhancement makes sense - by posting it you already **believe** that it makes sense, and you're **ready to convince us how**. If you have some idea but you're not sure if it's possible, makes sense, or fits ASF purpose - you have our support channels where we'll be happy to discuss given enhancement in calm atmosphere, evaluating possibilities and pros/cons. This is what we suggest to do in the first place, as in GitHub issue you're switching from **having an idea** into **having a valid enhancement with general concept, given purpose and fixed details - you're ready to defend your idea and convince us how it can be useful for ASF**. This is the general reason why many issues are rejected - because you're lacking details that would prove your suggestion being worthy.
 
-ASF has a strict scope - idling Steam cards from Steam games + basic bots management. ASF scope is very subjective and evaluated on practical/moral basis - how much this feature fits ASF, how much actual coding effort is required to make it happen, how useful/wanted this feature is by the community and likewise. In general we don't mind further enhancements to the program, as there is always a room for improvement, but at the same time we consider ASF to be feature-complete and vast majority of things that are suggested today are simply out of the scope of ASF as a program. This is why we've rejected **[a lot](https://github.com/JustArchiNET/ArchiSteamFarm/issues?q=label%3A"✨+Enhancement"+label%3A"👎+Not+going+to+happen")** of general enhancements, for various different reasons, mainly regarding the scope of the program. Some people may find it hard to understand why we're rather sceptical towards suggestions, while the answer for that isn't obvious at first.
+ASF has a strict scope - farming Steam cards from Steam games + basic bots management. ASF scope is very subjective and evaluated on practical/moral basis - how much this feature fits ASF, how much actual coding effort is required to make it happen, how useful/wanted this feature is by the community and likewise. In general we don't mind further enhancements to the program, as there is always a room for improvement, but at the same time we consider ASF to be feature-complete and vast majority of things that are suggested today are simply out of the scope of ASF as a program. This is why we've rejected **[a lot](https://github.com/JustArchiNET/ArchiSteamFarm/issues?q=label%3A"✨+Enhancement"+label%3A"👎+Not+going+to+happen")** of general enhancements, for various different reasons, mainly regarding the scope of the program. Some people may find it hard to understand why we're rather sceptical towards suggestions, while the answer for that isn't obvious at first.
 
 > In the lifetime of an Open Source project, only 10 percent of the time spent adding a feature will be spent coding it. The other 90 percent will be spent in support of that feature.
 

.github/SECURITY.md

@@ -8,6 +8,12 @@ We support **[the latest stable](https://github.com/JustArchiNET/ArchiSteamFarm/
 
 ---
 
+## Security advisories
+
+We announce security advisories for our program on **[GitHub](https://github.com/JustArchiNET/ArchiSteamFarm/security/advisories)**. Every entry includes detailed information about the security vulnerability it describes, especially affected versions, attack vectors, fixed versions as well as possible workarounds (if any).
+
+---
+
 ## Reporting a vulnerability
 
 We're doing our best to protect our community from all harm, therefore we take security vulnerabilities very seriously.

.github/workflows/ci.yml

@@ -40,7 +40,7 @@ jobs:
     - name: Upload latest strings for translation on Crowdin
       continue-on-error: true
       if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' && startsWith(matrix.os, 'ubuntu-') }}
-      uses: crowdin/github-action@1.1.0
+      uses: crowdin/github-action@1.3.0
       with:
         crowdin_branch_name: main
         config: '.github/crowdin.yml'

.github/workflows/docker-ci.yml

@@ -21,7 +21,7 @@ jobs:
         submodules: recursive
 
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v1.5.0
+      uses: docker/setup-buildx-action@v1.5.1
 
     - name: Build Docker image from ${{ matrix.file }}
       uses: docker/build-push-action@v2.6.1

.github/workflows/docker-publish-latest.yml

@@ -19,7 +19,7 @@ jobs:
         submodules: recursive
 
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v1.5.0
+      uses: docker/setup-buildx-action@v1.5.1
 
     - name: Login to ghcr.io
       uses: docker/login-action@v1.10.0

.github/workflows/docker-publish-main.yml

@@ -20,7 +20,7 @@ jobs:
         submodules: recursive
 
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v1.5.0
+      uses: docker/setup-buildx-action@v1.5.1
 
     - name: Login to ghcr.io
       uses: docker/login-action@v1.10.0

.github/workflows/docker-publish-released.yml

@@ -20,7 +20,7 @@ jobs:
         submodules: recursive
 
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v1.5.0
+      uses: docker/setup-buildx-action@v1.5.1
 
     - name: Login to ghcr.io
       uses: docker/login-action@v1.10.0

.github/workflows/lock-threads.yml

@@ -9,8 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Lock inactive threads
-        uses: dessant/lock-threads@v2.0.3
+        uses: dessant/lock-threads@v2.1.1
         with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
           issue-lock-inactive-days: 30
           pr-lock-inactive-days: 30

.github/workflows/publish.yml

@@ -37,7 +37,7 @@ jobs:
       run: dotnet --info
 
     - name: Setup Node.js with npm
-      uses: actions/setup-node@v2.2.0
+      uses: actions/setup-node@v2.3.0
       with:
         check-latest: true
         node-version: ${{ env.NODE_JS_VERSION }}

.github/workflows/translations.yml

@@ -13,6 +13,7 @@ jobs:
       uses: actions/checkout@v2.3.4
       with:
         submodules: recursive
+        token: ${{ secrets.ARCHIBOT_GITHUB_TOKEN }}
 
     - name: Reset wiki to follow origin
       shell: sh
@@ -25,7 +26,7 @@ jobs:
         git reset --hard origin/master
 
     - name: Download latest translations from Crowdin
-      uses: crowdin/github-action@1.1.0
+      uses: crowdin/github-action@1.3.0
       with:
         upload_sources: false
         download_translations: true
@@ -60,7 +61,7 @@ jobs:
     - name: Push changes to wiki
       uses: ad-m/github-push-action@v0.6.0
       with:
-        github_token: ${{ secrets.GITHUB_TOKEN }}
+        github_token: ${{ secrets.ARCHIBOT_GITHUB_TOKEN }}
         branch: master
         directory: wiki
         repository: ${{ github.repository }}.wiki
@@ -86,5 +87,5 @@ jobs:
     - name: Push changes to ASF
       uses: ad-m/github-push-action@v0.6.0
       with:
-        github_token: ${{ secrets.GITHUB_TOKEN }}
+        github_token: ${{ secrets.ARCHIBOT_GITHUB_TOKEN }}
         branch: ${{ github.ref }}