Merge pull request #2266 from webknjaz/maintenance/gha-pre-commit-actionlint

🧪 Integrate actionlint @ pre-commit framework

Author: webknjaz

.github/workflows/ci.yml

@@ -7,6 +7,7 @@ on:
     branches:
       - main
     tags:
+      - v*
   workflow_call:
     inputs:
       cpython-pip-version:
@@ -83,11 +84,11 @@ jobs:
           || ''
         }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
       - name: Set up Python ${{ matrix.python-version }} from GitHub
         id: python-install
         if: "!endsWith(matrix.python-version, '-dev')"
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
       - name: Set up Python ${{ matrix.python-version }} from deadsnakes
@@ -103,7 +104,7 @@ jobs:
         run: |
           echo "dir=$(pip cache dir)" >> $GITHUB_OUTPUT
       - name: Pip cache
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: ${{ steps.pip-cache.outputs.dir }}
           key: >-
@@ -158,7 +159,7 @@ jobs:
       - name: Upload coverage to Codecov
         if: >-
           !inputs.cpython-pip-version
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@v5
         with:
           files: ./coverage.xml
           flags: >-
@@ -190,9 +191,9 @@ jobs:
     env:
       TOXENV: pip${{ matrix.pip-version }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
       - name: Get pip cache dir
@@ -201,7 +202,7 @@ jobs:
         run: |
           echo "dir=$(pip cache dir)" >> $GITHUB_OUTPUT
       - name: Pip cache
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: ${{ steps.pip-cache.outputs.dir }}
           key: >-

.github/workflows/reusable-qa.yml

@@ -22,17 +22,17 @@ jobs:
       TOXENV: ${{ matrix.toxenv }}
       TOX_PARALLEL_NO_SPINNER: 1
     steps:
-      - uses: actions/checkout@main
+      - uses: actions/checkout@v5
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
       - name: Get pip cache dir
         id: pip-cache
         run: |
           echo "dir=$(pip cache dir)" >> $GITHUB_OUTPUT
       - name: Pip cache
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: ${{ steps.pip-cache.outputs.dir }}
           key: >-
@@ -45,7 +45,7 @@ jobs:
       - name: Prepare cache key
         id: cache-key
         run: echo "sha-256=$(python -VV | sha256sum | cut -d' ' -f1)" >> $GITHUB_OUTPUT
-      - uses: actions/cache@v3
+      - uses: actions/cache@v4
         with:
           path: ~/.cache/pre-commit
           key: pre-commit|${{ steps.cache-key.outputs.sha-256 }}|${{ hashFiles('.pre-commit-config.yaml') }}

.pre-commit-config.yaml

@@ -84,3 +84,10 @@ repos:
       types_or:
       - file
       - symlink
+
+  - repo: https://github.com/rhysd/actionlint.git
+    rev: v1.7.8
+    hooks:
+      - id: actionlint
+
+...

changelog.d/2266.contrib.md

@@ -0,0 +1,7 @@
+The linting suite now runs [`actionlint`] -- by {user}`webknjaz`.
+
+This tool checks typical problems with GitHub Actions workflow
+definitions and has a registry of widely-used GitHub Action
+arguments that it validates.
+
+[`actionlint`]: https://rhysd.github.io/actionlint/