chore(deps): update myoung34/github-runner docker digest to d58a27e #24

	name: CI

	# Lightweight PR validation that gates Renovate patch automerge.
	# Catches regressions in dependency updates that touch:
	# - docker-compose.yml (image digest bumps, env interpolation)
	# - shell scripts (install.sh, runner-entrypoint.sh, mint-runner-token.sh,
	# iptables-rules.sh)
	#
	# The full hardware-in-the-loop test lives in test-runner.yml (workflow_dispatch
	# only); this CI keeps PR feedback fast and unblocks Renovate auto-merges.

	on:
	pull_request:
	branches: [main]
	push:
	branches: [main]
	workflow_dispatch:

	concurrency:
	group: ci-${{ github.ref }}
	cancel-in-progress: true

	permissions:
	contents: read

	jobs:
	shellcheck:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
	- name: ShellCheck (error severity)
	run: \|
	shellcheck --severity=error \
	install.sh \
	runner-entrypoint.sh \
	mint-runner-token.sh \
	iptables-rules.sh

	compose-config:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
	- name: Stub .env (compose interpolation requires ROKU_DEVICE_IP)
	run: \|
	# RFC 5737 documentation IP; never resolves to a real host
	echo 'ROKU_DEVICE_IP=192.0.2.1' > .env
	- name: docker compose config
	run: docker compose --env-file .env -f docker-compose.yml config --quiet

	install-script-syntax:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
	- name: bash -n install.sh
	run: bash -n install.sh
	- name: install.sh --help exits 0
	run: bash install.sh --help

Navigation Menu