feat(gh): add default github repo files (#15)

Author: ruzickap

.github/CODEOWNERS

@@ -1,6 +1,14 @@
-# Users referenced in this file will automatically be requested as reviewers for
-# PRs that modify the given paths
-# See https://help.github.com/articles/about-code-owners/, https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners
+# GitHub CODEOWNERS file
+# Documentation:
+# - https://help.github.com/articles/about-code-owners/
+# - https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners
 
-# All code
+# Syntax:
+# pattern    @user-or-team
+# The last matching pattern takes precedence.
+
+###############################
+# Repository Default Owners
+###############################
+# These owners will be the default owners for everything in the repo
 * @ruzickap

.github/renovate.json5

@@ -25,8 +25,10 @@
     enabled: true,
     schedule: ["before 6am on Sunday"],
   },
+  // Package update rules
   packageRules: [
     {
+      description: "Disable auto-merge for major updates",
       matchUpdateTypes: ["major"],
       automerge: false,
     },
@@ -45,6 +47,7 @@
   ],
   prBodyTemplate: "{{{table}}}{{{notes}}}{{{changelogs}}}",
   rebaseWhen: "behind-base-branch",
+  // Custom version extraction
   regexManagers: [
     {
       extractVersionTemplate: "{{#if extractVersion}}{{{extractVersion}}}{{else}}^v?(?<version>.+)${{/if}}",

.github/workflows/mega-linter.yml

@@ -30,13 +30,11 @@ jobs:
       - name: Extract commands from markdown files
         run: |
           set -euxo pipefail
+          eval "$(/home/linuxbrew/.linuxbrew/bin/brew shellenv)"
+          brew install mdq
           echo '#!/usr/bin/env bash' > README.sh
-          find . -name '*.md' -print0 | while IFS= read -r -d '' FILE; do
-            # Extract: ```bash ... ```
-            sed -n "/^\`\`\`\(bash\|shell\)$/,/^\`\`\`$/p" "${FILE}" | sed '/^```*/d' >> README.sh
-            # Extract:   ```bash ... ```
-            sed -n "/^  \`\`\`\(bash\|shell\)$/,/^  \`\`\`$/p" "${FILE}" | sed '/^  ```*/d; s/^  //' >> README.sh
-          done
+          readarray -d '' MD_FILES < <(find . -type f -name "*.md" -print0)
+          mdq '```/^bash$|^shell$|^sh$/' --br -o plain "${MD_FILES[@]}" >> README.sh || true
           chmod a+x README.sh
 
       - name: 💡 MegaLinter

.github/workflows/renovate.yml

@@ -68,6 +68,6 @@ jobs:
           private-key: ${{ secrets.MY_RENOVATE_GITHUB_PRIVATE_KEY }}
 
       - name: 💡 Self-hosted Renovate
-        uses: renovatebot/github-action@02f4fdeb479bbb229caa7ad82cb5e691c07e80b3 # v41.0.14
+        uses: renovatebot/github-action@19ba43e1bc58ed95c0ba205dee8b1bc0f27b630d # v42.0.0
         with:
           token: ${{ steps.app-token.outputs.token }}

.mega-linter.yml

@@ -8,7 +8,6 @@ BASH_SHFMT_ARGUMENTS: --case-indent --indent 2 --space-redirects
 
 DISABLE_LINTERS:
   - MARKDOWN_MARKDOWN_LINK_CHECK # Using lychee instead
-  - REPOSITORY_DEVSKIM # Ignore duplicate code
   - SPELL_CSPELL
   - TERRAFORM_TERRASCAN # Hard to configure - no documentation of the config file
 
@@ -21,6 +20,8 @@ FILTER_REGEX_EXCLUDE: CHANGELOG.md
 
 FORMATTERS_DISABLE_ERRORS: false
 
+JSON_JSONLINT_ARGUMENTS: --comments
+
 JSON_JSONLINT_FILTER_REGEX_EXCLUDE: .devcontainer/devcontainer.json
 
 MARKDOWN_MARKDOWNLINT_CONFIG_FILE: .markdownlint.yml
@@ -42,6 +43,13 @@ REPOSITORY_KICS_ARGUMENTS: --fail-on high
 
 REPOSITORY_TRIVY_ARGUMENTS: --severity HIGH,CRITICAL --ignore-unfixed
 
+SPELL_LYCHEE_ARGUMENTS:
+  - --accept
+  - "429"
+
+SPELL_LYCHEE_UNSECURED_ENV_VARIABLES:
+  - GITHUB_TOKEN
+
 TERRAFORM_TFLINT_UNSECURED_ENV_VARIABLES:
   - GITHUB_TOKEN