ci: remove actionlint Go dependency

Author: jaromil

.github/workflows/test.yml

@@ -22,11 +22,6 @@ jobs:
       - uses: actions/setup-node@v7
         with:
           node-version: 22.12.0
-      - uses: actions/setup-go@v7
-        if: runner.os == 'Linux'
-        with:
-          go-version: 1.25.0
-          cache: false
       - uses: oven-sh/setup-bun@v2
         with:
           bun-version: 1.3.14
@@ -50,8 +45,19 @@ jobs:
           } >>"$GITHUB_PATH"
       - name: Validate GitHub Actions workflows
         if: runner.os == 'Linux'
+        env:
+          ACTIONLINT_VERSION: 1.7.12
+          ACTIONLINT_SHA256: 8aca8db96f1b94770f1b0d72b6dddcb1ebb8123cb3712530b08cc387b349a3d8
         run: |
-          go install github.com/rhysd/actionlint/cmd/actionlint@v1.7.12
-          "$(go env GOPATH)/bin/actionlint"
+          set -Eeuo pipefail
+          actionlint_dir="$(mktemp -d)"
+          trap 'rm -rf -- "$actionlint_dir"' EXIT
+          archive="$actionlint_dir/actionlint.tar.gz"
+          curl --fail --location --proto '=https' --retry 3 --tlsv1.2 \
+            --output "$archive" \
+            "https://github.com/rhysd/actionlint/releases/download/v${ACTIONLINT_VERSION}/actionlint_${ACTIONLINT_VERSION}_linux_amd64.tar.gz"
+          printf '%s  %s\n' "$ACTIONLINT_SHA256" "$archive" | sha256sum --check --strict
+          tar -xzf "$archive" -C "$actionlint_dir" actionlint
+          "$actionlint_dir/actionlint"
       - name: Run complete validation
         run: bash tests/ci.sh

tests/repository/test-release-workflow.sh

@@ -108,12 +108,9 @@ assert matrix_job["strategy"] == {
 matrix_steps = matrix_job["steps"]
 checkout = next(step for step in matrix_steps if step.get("uses") == "actions/checkout@v7")
 node = next(step for step in matrix_steps if step.get("uses") == "actions/setup-node@v7")
-go = next(step for step in matrix_steps if step.get("uses") == "actions/setup-go@v7")
 bun = next(step for step in matrix_steps if step.get("uses") == "oven-sh/setup-bun@v2")
 assert node["with"]["node-version"] == "22.12.0"
-assert go["if"] == "runner.os == 'Linux'"
-assert go["with"]["go-version"] == "1.25.0"
-assert go["with"]["cache"] is False
+assert not any(step.get("uses", "").startswith("actions/setup-go@") for step in matrix_steps)
 assert bun["with"]["bun-version"] == "1.3.14"
 codex = next(step for step in matrix_steps if step.get("name") == "Install current Codex CLI")
 assert codex["run"] == "npm install --global @openai/codex@latest"
@@ -126,7 +123,13 @@ assert any(
 )
 actionlint = next(step for step in matrix_steps if step.get("name") == "Validate GitHub Actions workflows")
 assert actionlint["if"] == "runner.os == 'Linux'"
-assert "actionlint@v1.7.12" in actionlint["run"]
+assert actionlint["env"] == {
+    "ACTIONLINT_VERSION": "1.7.12",
+    "ACTIONLINT_SHA256": "8aca8db96f1b94770f1b0d72b6dddcb1ebb8123cb3712530b08cc387b349a3d8",
+}
+assert "rhysd/actionlint/releases/download" in actionlint["run"]
+assert "sha256sum --check --strict" in actionlint["run"]
+assert "go install" not in actionlint["run"]
 validation = next(step for step in matrix_steps if step.get("name") == "Run complete validation")
 assert validation["run"] == "bash tests/ci.sh"
 assert "tests/run.sh" not in test_source