o-l-a-v · o-l-a-v · Sep 8, 2025 · Sep 8, 2025 · Sep 8, 2025 · Sep 8, 2025
diff --git a/.github/workflows/pr-any-dependency-review.yaml b/.github/workflows/pr-any-dependency-review.yaml
@@ -1,6 +1,6 @@
 name: Dependency Review
 
-run-name: '${{ github.workflow }} - [${{ github.event.pull_request.title }} #${{ github.event.pull_request.number }}] by @${{ github.actor }}'
+run-name: "${{ github.workflow }} - [${{ github.event.pull_request.title }} #${{ github.event.pull_request.number }}] by @${{ github.actor }}"
 
 on:
   pull_request:
@@ -12,7 +12,7 @@ jobs:
       contents: read
     steps:
       - name: 🛎️ GitHub checkout branch "${{ github.head_ref || github.ref_name }}"
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           persist-credentials: false
       - name: 🔬 Dependency review

diff --git a/.github/workflows/pr-any-ensure-editorconfig.yaml b/.github/workflows/pr-any-ensure-editorconfig.yaml
@@ -0,0 +1,69 @@
+name: Ensure changed files follows EditorConfig settings
+
+run-name: "${{ github.workflow }} - [${{ github.event.pull_request.title }} #${{ github.event.pull_request.number }}] by @${{ github.actor }}"
+
+on:
+  pull_request:
+    paths:
+      - "**.json"
+      - "**.jsonc"
+      - "**.md"
+      - "**.ps1"
+      - "**.yaml"
+      - "**.yml"
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  changes:
+    name: Find relevant changed files
+    outputs:
+      changed: ${{ steps.filter.outputs.changed }}
+      files: ${{ steps.filter.outputs.changed_files }}
+    permissions:
+      contents: read
+      pull-requests: read
+    runs-on: ubuntu-latest
+    steps:
+      - name: 🛎️ GitHub checkout branch "${{ github.head_ref || github.ref_name }}"
+        uses: actions/checkout@v5
+        with:
+          persist-credentials: false
+      - name: 🔍 Get changed files
+        id: filter
+        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
+        with:
+          filters: |
+            changed:
+              - added|modified: '**.json'
+              - added|modified: '**.jsonc'
+              - added|modified: '**.md'
+              - added|modified: '**.ps1'
+              - added|modified: '**.yaml'
+              - added|modified: '**.yml'
+          list-files: escape
+      - name: 🪲 Debug
+        run: echo ${{ steps.filter.outputs.changed_files }}
+  editorconfig-checker:
+    name: Run EditorConfig-Checker on relevant changed files
+    needs: changes
+    if: ${{ needs.changes.outputs.changed == 'true' }}
+    permissions:
+      contents: read
+      pull-requests: read
+    runs-on: ubuntu-latest
+    steps:
+      - name: 🪲 Debug
+        run: echo ${{ needs.changes.outputs.files }}
+      - name: 🛎️ GitHub checkout branch "${{ github.head_ref || github.ref_name }}"
+        uses: actions/checkout@v5
+        with:
+          persist-credentials: false
+      - name: ⬇️ Install EditorConfig-Checker
+        run: go install github.com/editorconfig-checker/editorconfig-checker/v3/cmd/editorconfig-checker@latest
+      - name: 🔍 Run EditorConfig-Checker
+        run: |
+          /home/runner/go/bin/editorconfig-checker -format github-actions \
+          ${{ needs.changes.outputs.files }}
diff --git a/.github/workflows/pr-any-lint-markdown.yaml b/.github/workflows/pr-any-lint-markdown.yaml
@@ -1,11 +1,11 @@
 name: Lint Markdown with mardownlint-cli2
 
-run-name: '${{ github.workflow }} - [${{ github.event.pull_request.title }} #${{ github.event.pull_request.number }}] by @${{ github.actor }}'
+run-name: "${{ github.workflow }} - [${{ github.event.pull_request.title }} #${{ github.event.pull_request.number }}] by @${{ github.actor }}"
 
 on:
   pull_request:
     paths:
-      - '**.md'
+      - "**.md"
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: 🛎️ GitHub checkout branch "${{ github.head_ref || github.ref_name }}"
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           persist-credentials: false
       - name: 🔍 Get changed files
@@ -33,6 +33,6 @@ jobs:
           list-files: escape
       - name: 🔍 Lint with markdownlint-cli2
         if: steps.filter.outputs.markdown == 'true'
-        uses: DavidAnson/markdownlint-cli2-action@05f32210e84442804257b2a6f20b273450ec8265 # v19.1.0
+        uses: DavidAnson/markdownlint-cli2-action@992badcdf24e3b8eb7e87ff9287fe931bcb00c6e # v20.0.0
         with:
           globs: ${{ steps.filter.outputs.markdown_files }}
diff --git a/.github/workflows/pr-any-lint-powershell.yaml b/.github/workflows/pr-any-lint-powershell.yaml
@@ -1,11 +1,11 @@
 name: Lint PowerShell with PSScriptAnalyzer
 
-run-name: '${{ github.workflow }} - [${{ github.event.pull_request.title }} #${{ github.event.pull_request.number }}] by @${{ github.actor }}'
+run-name: "${{ github.workflow }} - [${{ github.event.pull_request.title }} #${{ github.event.pull_request.number }}] by @${{ github.actor }}"
 
 on:
   pull_request:
     paths:
-      - '**.ps1'
+      - "**.ps1"
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: 🛎️ GitHub checkout branch "${{ github.head_ref || github.ref_name }}"
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           persist-credentials: false
       - name: 🔍 Get changed files

diff --git a/.github/workflows/pr-any-lint-workflows.yaml b/.github/workflows/pr-any-lint-workflows.yaml
@@ -1,6 +1,6 @@
 name: Lint GitHub workflows with zizmor
 
-run-name: '${{ github.workflow }} - [${{ github.event.pull_request.title }} #${{ github.event.pull_request.number }}] by @${{ github.actor }}'
+run-name: "${{ github.workflow }} - [${{ github.event.pull_request.title }} #${{ github.event.pull_request.number }}] by @${{ github.actor }}"
 
 on:
   pull_request:
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: 🛎️ GitHub checkout branch "${{ github.head_ref || github.ref_name }}"
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           persist-credentials: false
       - name: 🔍 Get changed files
@@ -33,7 +33,7 @@ jobs:
           list-files: escape
       - name: ⬇️ Install the latest version of uv
         if: steps.filter.outputs.workflows == 'true'
-        uses: astral-sh/setup-uv@6b9c6063abd6010835644d4c2e1bef4cf5cd0fca # v6.0.1
+        uses: astral-sh/setup-uv@557e51de59eb14aaaba2ed9621916900a91d50c6 # v6.6.0
       - name: 🔍 Run zizmor
         if: steps.filter.outputs.workflows == 'true'
         run: |

diff --git a/README.md b/README.md
@@ -2,7 +2,7 @@
 
 > [!WARNING]
 >
-> * I haven't been working with Intune for years now, so I don't know  whether all this still works.
+> * I haven't been working with Intune for years now, so I don't know whether all this still works.
 > * Feel free to open an issue or create a PR if you find any problems. 🙂
 > * Files and info in this repo is provided as is. I'm not responsible for what you decide to push to your clients.
 > * If logic in this repo breaks, I do not commit to fix it in a timely manner.
@@ -120,7 +120,7 @@ Make everything and app that
 #### Network bandwidth
 
 > [!TIP]
-> There are tools that can download WinGet packages, package them to `.intunewin` and upload them to Intune, which could help offloading WAN using caching and peer to peer sharing. See [resources](#upload-winget-apps-to-intune-win32) for examples on such tools.
+> There are tools that can download WinGet packages, package them to `.intunewin` and upload them to Intune, which could help offloading WAN using caching and peer to peer sharing. See [resources](#upload-winget-apps-to-intune-as-win32-package) for examples on such tools.
 
 Running WinGet directly on the client does not support local caching or peer to peer, like uploading packages to Intune as Win32 apps does.
 
@@ -240,9 +240,7 @@ Some issues I've either experienced or I think is worth knowing about:
 
 ### Similar or relatable projects
 
-* Install WinGet on servers: <https://github.com/asheroto/winget-install>
 * <https://github.com/Romanitho/Winget-Install>
-* <https://github.com/Romanitho/Winget-autoupdate>
 
 ### PowerShell modules
 
@@ -252,13 +250,23 @@ Some issues I've either experienced or I think is worth knowing about:
 
 ### Client GUIs
 
-* <https://github.com/marticliment/UniGetUI>
+* UniGetUI: <https://github.com/marticliment/UniGetUI>
+* Winget-AutoUpdate: <https://github.com/Romanitho/Winget-autoupdate>
+
+### Install WinGet itself
+
+* Install WinGet on servers: <https://github.com/asheroto/winget-install>
 
-### Upload WinGet apps to Intune Win32
+### Download a WinGet app and make it into a Win32 package
 
-* <https://github.com/FlorianSLZ/Intune-Win32-Deployer>
 * <https://github.com/Romanitho/WingetIntunePackager>
-* <https://github.com/svrooij/WingetIntune>, <https://wintuner.app/>
+
+### Upload WinGet apps to Intune as Win32 package
+
+* <https://github.com/FlorianSLZ/IntuneWin32Deployer>
+  * From WinGet and Chocolatey → Intune Win32 package.
+* <https://github.com/svrooij/WinTuner>, <https://wintuner.app/>
+  * From WinGet → Intune Win32 package.
 
 ### Commercial products