Add action lint ci

.github/actionlint.yml

@@ -0,0 +1,4 @@
+paths:
+  .github/workflows/*.lock.yml:
+    ignore:
+      - ".+"

.github/matchers/actionlint.json

@@ -0,0 +1,17 @@
+{
+  "problemMatcher": [
+    {
+      "owner": "actionlint",
+      "pattern": [
+        {
+          "regexp": "^(?:\\x1b\\[\\d+m)?(.+?)(?:\\x1b\\[\\d+m)*:(?:\\x1b\\[\\d+m)*(\\d+)(?:\\x1b\\[\\d+m)*:(?:\\x1b\\[\\d+m)*(\\d+)(?:\\x1b\\[\\d+m)*: (?:\\x1b\\[\\d+m)*(.+?)(?:\\x1b\\[\\d+m)* \\[(.+?)\\]$",
+          "file": 1,
+          "line": 2,
+          "column": 3,
+          "message": 4,
+          "code": 5
+        }
+      ]
+    }
+  ]
+}

.github/workflows/consistency.yml

@@ -101,6 +101,16 @@ jobs:
       - run: pnpm run lint
         name: Lint
 
+      # cspell:ignore rhysd
+      # Content copied from https://raw.githubusercontent.com/rhysd/actionlint/2ab3a12c7848f6c15faca9a92612ef4261d0e370/.github/actionlint-matcher.json
+      - name: Add ActionLint Problem Matcher
+        run: echo "::add-matcher::.github/matchers/actionlint.json"
+
+      - name: Lint GitHub Actions workflows
+        uses: docker://rhysd/actionlint:1.7.11
+        with:
+          args: -color -verbose
+
   # Check catalog is in sync with core
   version-consistency:
     name: Versions consistency

.github/workflows/doc-update.md

@@ -46,7 +46,7 @@ steps:
       wget -q "https://archive.apache.org/dist/maven/maven-3/${MAVEN_VERSION}/binaries/apache-maven-${MAVEN_VERSION}-bin.tar.gz"
       tar -xzf "apache-maven-${MAVEN_VERSION}-bin.tar.gz" -C "$HOME"
       rm -f "apache-maven-${MAVEN_VERSION}-bin.tar.gz"
-      echo "$HOME/apache-maven-${MAVEN_VERSION}/bin" >> $GITHUB_PATH
+      echo "$HOME/apache-maven-${MAVEN_VERSION}/bin" >> "$GITHUB_PATH"
 
   - name: Install repo dependencies
     run: pnpm install
@@ -69,7 +69,7 @@ steps:
       npx tsx eng/scripts/doc-updater/src/precompute.ts \
         --config "$CONFIG_INPUT" \
         --output /tmp/gh-aw/agent/context.json \
-        $REBUILD_FLAG
+        ${REBUILD_FLAG:+"$REBUILD_FLAG"}
 
 tools:
   edit:

.github/workflows/merge-release-in-main.yml

@@ -25,10 +25,13 @@ jobs:
 
       - name: Generate branch name
         id: branchname
+        env:
+          REF_NAME: ${{ github.ref_name }}
         run: |
-          echo "::set-output name=branchname::backmerge/${{ github.ref_name }}-$(date +'%Y-%m-%d')"
+          echo "branchname=backmerge/${REF_NAME}-$(date +'%Y-%m-%d')" >> "$GITHUB_OUTPUT"
       - name: Create branch
+        env:
+          BRANCH: ${{ steps.branchname.outputs.branchname }}
         run: |
-          branch="${{ steps.branchname.outputs.branchname }}"
-          git checkout -b $branch
-          git push --set-upstream origin $branch --force
+          git checkout -b "$BRANCH"
+          git push --set-upstream origin "$BRANCH"