diff --git a/.github/workflows/osv-scanner.yml b/.github/workflows/osv-scanner.yml
deleted file mode 100644
index 9f094cd..0000000
--- a/.github/workflows/osv-scanner.yml
+++ /dev/null
@@ -1,42 +0,0 @@
----
-# This workflow uses actions that are not certified by GitHub. They are provided
-# by a third-party and are governed by separate terms of service, privacy
-# policy, and support documentation.
-
-name: OSV Scanner
-on:
-  workflow_dispatch:
-  push:
-    branches:
-      - main
-  pull_request:
-    branches:
-      - main
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
-
-permissions: read-all
-
-jobs:
-  osv_scanner_job:
-    runs-on: ubuntu-latest
-    name: Scan for vulns
-    steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
-        with:
-          disable-sudo: false
-          egress-policy: block
-          allowed-endpoints: >
-            api.github.com:443
-            github.com:443
-            objects.githubusercontent.com:443
-            osv-vulnerabilities.storage.googleapis.com:443
-
-      - name: Checkout Source
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-
-      - name: Check dependencies for security vulnerabilities
-        uses: g-rath/check-with-osv-detector@0e8c0f954d8618a3a4671eca1918b30b2d085af3 # main
diff --git a/scripts/generate-contributors.sh b/scripts/generate-contributors.sh
new file mode 100755
index 0000000..6747b35
--- /dev/null
+++ b/scripts/generate-contributors.sh
@@ -0,0 +1,21 @@
+#!/usr/bin/env bash
+set -e
+
+# see also ".mailmap" for how email addresses and names are deduplicated
+OUT="${1:-.}"
+{
+    # editorconfig-checker-disable
+    cat <<- 'EOF'
+	# File @generated by scripts/generate-contributors.sh. DO NOT EDIT.
+	# This file lists all contributors to the repository.
+	# See scripts/generate-contributors.sh to make modifications.
+	EOF
+    # editorconfig-checker-enable
+
+    echo
+
+    # shellcheck disable=2312
+    git log --format='%aN <%aE>' | LC_ALL=C.UTF-8 sort -uf
+
+} > "${OUT}/CONTRIBUTORS"
+cat "${OUT}/CONTRIBUTORS"
diff --git a/themes/dst2024 b/themes/dst2024
index 8febc15..d95676b 160000
--- a/themes/dst2024
+++ b/themes/dst2024
@@ -1 +1 @@
-Subproject commit 8febc1523f58dff2ff55c23540d9f372b9e6f160
+Subproject commit d95676bbb0de89c9c4351076abceb6c0ad0b5e65