ci(gh-actions): bash strict mode

Author: thomasleplus

.github/workflows/automerge.yml

@@ -15,6 +15,8 @@ jobs:
       - name: Enable auto-merge for Dependabot PRs
         shell: bash
         run: |
+          set -euo pipefail
+          IFS=$'\n\t'
           # Checking the PR title is a poor substitute for the actual PR changes
           # but as long as this is used only with dependabot PRs,
           # it should be safe to assume that the title is not misleading.

.github/workflows/jslint.yml

@@ -19,7 +19,14 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Install JSLint
         shell: bash
-        run: sudo npm install -g jslint
+        run: |
+          set -euo pipefail
+          IFS=$'\n\t'
+          sudo npm install -g jslint@0.12.1
+          sudo npm outdated --global
       - name: Run JSLint
         shell: bash
-        run: jslint --browser javascripts/*.js
+        run: |
+          set -euo pipefail
+          IFS=$'\n\t'
+          jslint --browser javascripts/*.js

.github/workflows/yamllint.yml

@@ -17,15 +17,9 @@ jobs:
     steps:
       - name: Check out
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
-      - name: Install YAMLLint
-        shell: bash
-        run: |
-          pip install yamllint==1.37.1
-          msg="$(pip list --outdated | grep -e yamllint || true)"
-          if [ -n "${msg}" ]; then
-            >&2 echo "ERROR: outdated: ${msg}"
-            exit 1
-          fi
       - name: Run YAMLLint
         shell: bash
-        run: "yamllint -d '{extends: default, rules: {line-length: disable}}' ."
+        run: |
+          set -euo pipefail
+          IFS=$'\n\t'
+          yamllint -d '{extends: default, rules: {line-length: disable}}' .