fix(ci): provision tools for self-hosted checks

[somethingwithproof]

Summary

• refresh the Terraform toolchain and run it on GitHub-hosted runners
• install yamllint explicitly and run it directly instead of relying on the action entrypoint finding yamllint

Validation

• parsed .github/workflows/ci.yaml with Python YAML loader
• pre-commit hooks passed during commit

Summary by CodeRabbit

• Chores
  • Updated continuous integration checks to use a Python-based YAML linting setup.
  • Standardized YAML validation for Argo CD configuration files.
  • Added consistent formatting rules, including line-length warnings and parser-friendly output.
  • Improved the reliability and consistency of automated configuration checks.

Toolchain upgrade

• upgrade Terraform from 1.6.0 to 1.15.8 to use the currently supported CLI on the refreshed runner; validated with terraform fmt, init -backend=false, and validate in terraform/environments/dev

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 9fff1a14-b6fa-41aa-b744-0250932f7db8

📥 Commits

Reviewing files that changed from the base of the PR and between 1a97638 and 77044d1.

📒 Files selected for processing (1)

• .github/workflows/ci.yaml

---

📝 Walkthrough

Walkthrough

The yaml-lint CI job now provisions Python 3.12, installs yamllint 1.35.1, and runs it directly against argocd/ with inline rules.

Changes

CI YAML lint migration

Layer / File(s)	Summary
YAML lint workflow execution .github/workflows/ci.yaml	Replaces the ibiqlik/action-yamllint step with Python setup, pinned yamllint installation, inline rules, and parser-friendly output.

Estimated code review effort: 2 (Simple) | ~10 minutes

Poem

I’m a bunny in the CI lane,
Python hops into the train.
YAML rules now check the stream,
Linting keeps the workflow clean.
Thump, thump—green is the dream!

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title matches the CI-focused change to provision missing tools for self-hosted checks.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/ci-toolchain-setup

Warning

Review ran into problems

🔥 Problems

Git: Failed to clone repository. Please run the @coderabbitai full review command to re-trigger a full review. If the issue persists, set path_filters to include or exclude specific files.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[Copilot]

Pull request overview

This PR updates the CI workflow to better support self-hosted runners by provisioning runtime dependencies needed by the Terraform and YAML linting steps.

Changes:

• Add a Node.js setup step (Node 24) before running hashicorp/setup-terraform on the self-hosted runner.
• Replace the ibiqlik/action-yamllint action with an explicit Python-based yamllint install and direct invocation.
• Update the configured Terraform version used by CI.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In @.github/workflows/ci.yaml:
- Around line 68-69: Update the CI yamllint installation step to pin yamllint to
version 1.35.1, matching .pre-commit-config.yaml, and change the pre-commit
yamllint hook flag from -c to -d so the inline configuration is interpreted
correctly.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 2641ca7e-cedf-4594-a1c5-3dc5f553beee

📥 Commits

Reviewing files that changed from the base of the PR and between fb94032 and bb6bdc6.

📒 Files selected for processing (1)

• .github/workflows/ci.yaml

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 1 comment.

[somethingwithproof]

@copilot Fix the code for all comments in this review thread.

When a review comment includes a suggested change, apply the suggestion exactly.

Do not make changes beyond what is described in the linked review thread.

[Copilot]

@copilot Fix the code for all comments in this review thread.

When a review comment includes a...

I checked the linked review thread (pullrequestreview-4734249011). The only code-related item there is already addressed by commit 1a97638, and no additional code changes are needed for that thread.