exclude_paths ignored and galaxy.yml errors which are not?

[juju4]

I have multiple roles with their CI failing for a few days with error related to galaxy but not galaxy.
Most of my ansible repos have .github/workflows/galaxy.yml which is a galaxy release push workflow and not a galaxy meta file.
file is in .ansible-lint exclude_paths but even if read, it seems not applied anymore
strangely, ansible-lint version is pinned in my CI and I did not change version recently but it still happens

What happens? How to restore expected behavior?

Example: https://github.com/juju4/ansible-harden-nginx/actions/runs/13092780953/job/36531398619#step:10:103

INFO     Excluded: .ansible/roles/juju4.harden_nginx/.ansible/roles/juju4.harden_nginx/.ansible/roles/juju4.harden_nginx/.git
INFO     Excluded: .ansible/roles/juju4.harden_nginx/.ansible/roles/juju4.harden_nginx/.git
INFO     Excluded: .ansible/roles/juju4.harden_nginx/.git
INFO     Excluded: .git
INFO     Excluded: .github/workflows/galaxy.yml
INFO     Collection paths was patch to include extra directories /home/runner/.ansible/collections,/usr/share/ansible/collections,/opt/hostedtoolcache/Python/3.13.1/x64/lib/python3.13/site-packages
[...]
INFO     Executing syntax check on playbook test/integration/default-multisites/default.yml (0.53s)
WARNING  Listing 4 violation(s) that are fatal
galaxy[no-changelog]: No changelog found. Please add a changelog file. Refer to the galaxy.md file for more info.
.github/workflows/galaxy.yml:1

galaxy[tags]: galaxy.yaml must have one of the required tags: ['application', 'cloud', 'database', 'eda', 'infrastructure', 'linux', 'monitoring', 'networking', 'security', 'storage', 'tools', 'windows']
.github/workflows/galaxy.yml:1

schema[galaxy]: $ Additional properties are not allowed ('jobs', 'permissions', 'true' were unexpected). See https://docs.ansible.com/ansible/latest/dev_guide/collections_galaxy_meta.html
.github/workflows/galaxy.yml:1  Returned errors will not include exact line numbers, but they will mention
the schema name being used as a tag, like ``schema[playbook]``,
``schema[tasks]``.

This rule is not skippable and stops further processing of the file.

If incorrect schema was picked, you might want to either:

* move the file to standard location, so its file is detected correctly.
* use ``kinds:`` option in linter config to help it pick correct file type.


galaxy[version-missing]: galaxy.yaml should have version tag.
.github/workflows/galaxy.yml:2

INFO     GitHub Actions environment detected, adding annotations output...
Error: No changelog found. Please add a changelog file. Refer to the galaxy.md file for more info.
Error: galaxy.yaml must have one of the required tags: ['application', 'cloud', 'database', 'eda', 'infrastructure', 'linux', 'monitoring', 'networking', 'security', 'storage', 'tools', 'windows']
Error: $ Additional properties are not allowed ('jobs', 'permissions', 'true' were unexpected). See https://docs.ansible.com/ansible/latest/dev_guide/collections_galaxy_meta.html
Error: galaxy.yaml should have version tag.
Read documentation for instructions on how to ignore specific rule violations.

                   Rule Violation Summary                   
 count tag                     profile rule associated tags 
     1 schema[galaxy]          basic   core                 
     1 galaxy[no-changelog]    shared  metadata             
     1 galaxy[tags]            shared  metadata             
     1 galaxy[version-missing] shared  metadata             

Failed: 4 failure(s), 0 warning(s) on 117 files. Last profile that met the validation criteria was 'min'.

Thanks

[shmpwk]

@juju4 Which ansible-link version do you use?

[juju4]

This run was with ansible-lint-24.7.0 as per https://github.com/juju4/ansible-harden-nginx/actions/runs/13092780953/job/36531398619#step:6:161 (which had no error before with same version).
also observed it locally with 25.1.2 but for some reasons, not widespread
There is this:

WARNING  Ignored exception from GalaxyRule.matchyaml while processing .github/workflows/galaxy.yml (galaxy): 'NoneType' object is not iterable

but .ansible-lint is basic and unchanged for a while

---
warn_list:
  - experimental
exclude_paths:
  - .github/workflows/galaxy.yml

it also fails with ".github/workflows" or ".github/workflows/" but works with ".github" or ".github/" in some cases (ok locally, nok github CI)
Again, unclear what is the breaking change with some of those repositories pinned...

In verbose mode, I have
https://github.com/juju4/ansible-semaphoreui/actions/runs/13219438255/job/36902648652#step:11:112

INFO     Excluded: .github/workflows/galaxy.yml
[...]
DEBUG    Examining .github/workflows/galaxy.yml of type galaxy

somewhat contradictory...

[juju4]

still happening, surprisingly not everywhere but meeting it more often

[konstruktoid]

#4517