Install eustasy/.Normal 4.0beta16

Author: lewisgoddard

.github/actionlint.yaml

@@ -1,4 +1,4 @@
-# eustasy/.Normal 4.0beta13
+# eustasy/.Normal 4.0beta16
 # actionlint config, deployed to the repository root by install.sh.
 #
 # test-*/type-* workflows ship deactivated behind `if: false`, which is the

.github/dependabot.yml

@@ -1,4 +1,4 @@
-# eustasy/.Normal 4.0beta13
+# eustasy/.Normal 4.0beta16
 # To get started with Dependabot version updates, you'll need to specify which
 # package ecosystems to update and where the package manifests are located.
 # Please see the documentation for all configuration options:

.github/workflows/actions.yml

@@ -0,0 +1,32 @@
+# eustasy/.Normal 4.0beta16
+name: "Normal: Actions"
+on:
+  workflow_dispatch:
+  push:
+    branches: [main]
+    paths:
+      - ".github/workflows/**"
+      - ".github/actionlint.yaml"
+      - ".github/zizmor.yml"
+      - ".qlty/qlty.toml"
+  pull_request:
+    branches: [main]
+    paths:
+      - ".github/workflows/**"
+      - ".github/actionlint.yaml"
+      - ".github/zizmor.yml"
+      - ".qlty/qlty.toml"
+
+permissions:
+  contents: read
+
+jobs:
+  actions:
+    name: Lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          persist-credentials: false
+
+      - uses: eustasy/.normal/actions@v4

.github/workflows/css.yml

@@ -1,4 +1,4 @@
-# eustasy/.Normal 4.0beta13
+# eustasy/.Normal 4.0beta16
 name: "Normal: CSS/SCSS"
 on:
   workflow_dispatch:

.github/workflows/html.yml

@@ -1,4 +1,4 @@
-# eustasy/.Normal 4.0beta13
+# eustasy/.Normal 4.0beta16
 name: "Normal: HTML"
 on:
   workflow_dispatch:

.github/workflows/js.yml

@@ -1,4 +1,4 @@
-# eustasy/.Normal 4.0beta13
+# eustasy/.Normal 4.0beta16
 name: "Normal: JS / TS"
 on:
   workflow_dispatch:

.github/workflows/md.yml

@@ -1,4 +1,4 @@
-# eustasy/.Normal 4.0beta13
+# eustasy/.Normal 4.0beta16
 name: "Normal: Markdown"
 on:
   workflow_dispatch:

.github/workflows/security.yml

@@ -1,4 +1,4 @@
-# eustasy/.Normal 4.0beta13
+# eustasy/.Normal 4.0beta16
 name: "Normal: Security"
 on:
   workflow_dispatch:

.github/zizmor.yml

@@ -1,4 +1,4 @@
-# eustasy/.Normal 4.0beta13
+# eustasy/.Normal 4.0beta16
 # zizmor policy, deployed to the repository root by install.sh. zizmor discovers
 # .github/zizmor.yml automatically, so no --config flag or qlty.toml change is
 # needed.

.qlty/qlty.toml

@@ -185,9 +185,13 @@ file_patterns = [
 # 3. actionlint + zizmor already lint workflows with GitHub-aware rules, so
 #    yamllint's generic style checks (e.g. the YAML 1.1 truthy false-positive on
 #    `on:`) are just noise on the install.sh-deployed workflow + dependabot files.
+#    The zizmor and actionlint configs are deployed the same way and are read by
+#    those tools, not by a YAML style guide, so they are scoped out too.
 [[exclude]]
 plugins = ["yamllint"]
 file_patterns = [
   "**/.github/workflows/**",
   "**/.github/dependabot.yml",
+  "**/.github/zizmor.yml",
+  "**/.github/actionlint.yaml",
 ]