ci(gh-actions): bash strict mode

Author: thomasleplus

.github/workflows/automerge.yml

@@ -15,6 +15,8 @@ jobs:
       - name: Enable auto-merge for Dependabot PRs
         shell: bash
         run: |
+          set -euo pipefail
+          IFS=$'\n\t'
           # Checking the PR title is a poor substitute for the actual PR changes
           # but as long as this is used only with dependabot PRs,
           # it should be safe to assume that the title is not misleading.

.github/workflows/perlcritic.yml

@@ -17,14 +17,25 @@ jobs:
     steps:
       - name: Set REPOSITORY
         shell: bash
-        run: echo "REPOSITORY=${GITHUB_REPOSITORY#*/}" >> "${GITHUB_ENV}"
+        run: |
+          set -euo pipefail
+          IFS=$'\n\t'	
+          echo "REPOSITORY=${GITHUB_REPOSITORY#*/}" >> "${GITHUB_ENV}"
       - name: Check out
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Install PerlCritic
         shell: bash
         run: |
-          sudo apt update -y
-          sudo apt install libperl-critic-perl
+          set -euo pipefail
+          IFS=$'\n\t'
+          sudo apt-get update
+          sudo apt-get install --no-install-recommends -y libperl-critic-perl=1.152-1
+          if sudo apt-get upgrade -s | tee -a /dev/stderr | grep -q -e '^Inst libperl-critic-perl '; then
+            exit 1
+          fi
       - name: Run PerlCritic
         shell: bash
-        run: perlcritic ${REPOSITORY}
+        run: |
+          set -euo pipefail
+          IFS=$'\n\t'
+          perlcritic ${REPOSITORY}

.github/workflows/yamllint.yml

@@ -17,15 +17,9 @@ jobs:
     steps:
       - name: Check out
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
-      - name: Install YAMLLint
-        shell: bash
-        run: |
-          pip install yamllint==1.37.1
-          msg="$(pip list --outdated | grep -e yamllint || true)"
-          if [ -n "${msg}" ]; then
-            >&2 echo "ERROR: outdated: ${msg}"
-            exit 1
-          fi
       - name: Run YAMLLint
         shell: bash
-        run: "yamllint -d '{extends: default, rules: {line-length: disable}}' ."
+        run: |
+          set -euo pipefail
+          IFS=$'\n\t'
+          yamllint -d '{extends: default, rules: {line-length: disable}}' .