ci: add changelog and enforce new entries on every PR

Author: miparnisari

.github/workflows/keep-a-changelog.yaml.yml

@@ -0,0 +1,27 @@
+name: "Update unreleased section in CHANGELOG"
+on:
+  pull_request:
+    types: [ "opened", "synchronize", "reopened", "ready_for_review", "labeled", "unlabeled" ]
+
+permissions:
+  contents: "read"
+
+jobs:
+  changelog:
+    runs-on: "depot-ubuntu-24.04-small"
+    steps:
+      - uses: "dangoslen/changelog-enforcer@ea6a56764870c323a4563f450c0a50c5f2d72cd6"
+        with:
+          skipLabels: 'Skip-Changelog,dependencies,tests'
+      - uses: "actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493" # v4.2.2
+      - uses: "actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f" # v6.1.0
+      - run: "npx [email protected]"
+      - run: |
+          files=$(git status --porcelain)
+          if [[ -n ${files}  ]]; then
+            >&2 echo "If your PR has a change that users might care about, please edit the CHANGELOD.md and run \`npx keep-a-changelog\`. Otherwise, add the Skip-Changelog label to the PR."
+            >&2 echo ""
+            >&2 echo "${files}"
+            >&2 echo ""
+            exit 1
+          fi

.github/workflows/lint.yaml

@@ -12,6 +12,7 @@ on: # yamllint disable-line rule:truthy
       - "checks_requested"
 permissions:
   contents: "read"
+  pull-requests: "read"
 jobs:
   go-license-check:
     name: "License Check"
@@ -54,4 +55,7 @@ jobs:
     if: "github.event_name == 'pull_request' && (github.event.action == 'opened' || github.event.action == 'synchronize' || github.event.action == 'reopened' || github.event.action == 'edited')"
     steps:
       - uses: "actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493" # v4.2.2
+        # validates the commits
       - uses: "webiny/[email protected]"
+        # validates the PR titles
+      - uses: "amannn/action-semantic-pull-request@v6"