Modernize build/deploy: Jekyll 4.4, GitHub Actions, GitHub Pages (#99)

* Modernize build/deploy: Jekyll 4.4, GitHub Actions, GitHub Pages

- Upgrade Jekyll 3.8.5 -> 4.4.1, pin Ruby 3.2.0, refresh gem dependencies
  and add x86_64-linux to the lockfile so CI can install on Linux runners
- Add bundler-audit as a dev dependency; no known CVEs found
- Fix scripts/test: htmlproofer was silently checking zero pages because
  the shell's missing LANG made Ruby default to US-ASCII; also drop the
  https-enforcement noise on old post links and ignore confirmed-dead
  external URLs
- Retire the dead Travis CI / rsync-to-jaysinh.com pipeline (.travis.yml,
  scripts/deploy, CNAME, keypair.pem.enc) since that domain is no longer
  owned; the site now targets https://ultimatecoder.github.io/Blog/ with
  the matching /Blog baseurl
- Add .github/workflows/ci.yml (build + link-check on PRs) and
  pages.yml (build + deploy to GitHub Pages on push to master)

* Ignore two more external links that block GitHub Actions' IPs

pythonexpress.in and hackerearth.com both return 200 from a normal
network but 403 specifically from GitHub-hosted runner IPs (bot/WAF
blocking, not a dead link) - confirmed via the ci.yml failure on PR #99.

* Address PR review: fail-fast, security scan, minifier, image baseurl fix

- scripts/build & scripts/test: add set -euo pipefail (and a shebang to
  scripts/test) so a failed build aborts CI instead of link-checking a
  stale _site (review #1)
- scripts/test: move the --ignore-urls list into a documented bash array
  (review #5); note the baseurl<->swap-urls coupling in _config.yml (#6)
- ci.yml: run bundle exec bundler-audit check --update as a real per-PR
  security scan (#2); add least-privilege permissions: contents: read (#3)
- Pin all workflow actions to commit SHAs with version comments (#4)
- Re-add minification via jekyll-minifier 0.2.2 (Jekyll 4-compatible,
  production-only) (#7)
- Drop analytics: remove the leftover GA placeholder; UA died in 2023 (#8)
- Fix 45 image references across 11 posts + about.md that used
  {{site.url}}/assets or hardcoded /assets and omitted baseurl, so they
  404'd on the /Blog project-page URL. Verified via a production
  (minified) build + htmlproofer run with all internal links resolving.

---------

Co-authored-by: Jaysinh Shukla <jaysinhshukla@Jaysinhs-MacBook-Pro-2.local>

Author: ultimatecoder

.github/workflows/ci.yml

@@ -0,0 +1,29 @@
+name: CI
+
+on:
+  pull_request:
+    branches:
+      - master
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  build-and-test:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@44511735964dcb71245e7e55f72539531f7bc0eb # v1.257.0
+        with:
+          ruby-version: "3.2.0"
+          bundler-cache: true
+
+      - name: Security audit (bundler-audit)
+        run: bundle exec bundler-audit check --update
+
+      - name: Build and check links
+        run: ./scripts/test

.github/workflows/pages.yml

@@ -0,0 +1,50 @@
+name: Deploy to GitHub Pages
+
+on:
+  push:
+    branches:
+      - master
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  pages: write
+  id-token: write
+
+concurrency:
+  group: pages
+  cancel-in-progress: false
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@44511735964dcb71245e7e55f72539531f7bc0eb # v1.257.0
+        with:
+          ruby-version: "3.2.0"
+          bundler-cache: true
+
+      - name: Build site
+        env:
+          JEKYLL_ENV: production
+        run: bundle exec jekyll build --config _config.yml,_config_production.yml
+
+      - name: Upload Pages artifact
+        uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3.0.1
+        with:
+          path: ./_site
+
+  deploy:
+    needs: build
+    runs-on: ubuntu-latest
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    steps:
+      - name: Deploy to GitHub Pages
+        id: deployment
+        uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4.0.5

.gitignore

@@ -20,3 +20,7 @@ tags
 ## Environment normalization:
 /.bundle/
 /vendor/bundle
+
+# Sensitive key material — never commit
+keypair.pem
+keypair.pem.enc

.ruby-version

@@ -0,0 +1 @@
+3.2.0

.travis.yml

@@ -1,28 +1,20 @@
 source "https://rubygems.org"
-ruby RUBY_VERSION
 
-# Hello! This is where you manage which Jekyll version is used to run.
-# When you want to use a different version, change it below, save the
-# file and run `bundle install`. Run Jekyll with `bundle exec`, like so:
-#
-#     bundle exec jekyll serve
-#
-# This will help ensure the proper Jekyll version is running.
-# Happy Jekylling!
-gem "jekyll"
+# Jekyll version
+gem "jekyll", "~> 4.4"
 
-# This is the default theme for new Jekyll sites. You may change this to anything you like.
-gem "minima", "~> 2.0"
-gem "html-proofer"
+# Theme
+gem "minima", "~> 2.5"
 
-# If you want to use GitHub Pages, remove the "gem "jekyll"" above and
-# uncomment the line below. To upgrade, run `bundle update github-pages`.
-# gem "github-pages", group: :jekyll_plugins
+# Development/testing
+gem "html-proofer"
+gem "bundler-audit"
 
-# If you have any plugins, put them here!
+# Jekyll plugins
 group :jekyll_plugins do
-   gem "jekyll-feed", "~> 0.6"
-   gem "jekyll-minifier"
-   gem "jekyll-sitemap"
-   gem "jekyll-seo-tag"
+  gem "jekyll-feed", "~> 0.17"
+  gem "jekyll-sitemap", "~> 1.4"
+  gem "jekyll-seo-tag", "~> 2.8"
+  # Minifies HTML/CSS/JS output; only runs when JEKYLL_ENV=production.
+  gem "jekyll-minifier", "~> 0.2"
 end