Added actionlint to validate workflows

.github/workflows/build.yaml

@@ -1,4 +1,4 @@
-name: build
+name: Build
 on:
   workflow_dispatch:
   workflow_call:
@@ -16,14 +16,14 @@ permissions:
 jobs:
   build:
     name: Build
-    runs-on: macos-latest
+    runs-on: macos-latest # we also build on iOS for multiplatform
     steps:
       - name: Checkout
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Setup host
-        uses: ./.github/workflows/setup-host
+        uses: ./.github/actions/setup-host
       - name: Test & Build
         run: ./gradlew -s build
       - name: Publish Test Report
@@ -33,7 +33,18 @@ jobs:
           report_paths: '**/build/test-results/*/TEST-*.xml'
       - name: Coverage report
         uses: codecov/codecov-action@v3
-        with:
-          fail_ci_if_error: true
       - name: Simulate Publish
         run: ./gradlew -p plugins publish -sm
+
+  actionlint:
+    name: Validate Workflows
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Download actionlint
+        shell: bash
+        run: bash <(curl https://raw.githubusercontent.com/rhysd/actionlint/main/scripts/download-actionlint.bash)
+      - name: Check workflow files
+        shell: bash
+        run: ./actionlint -color -format '{{range $err := .}}::error file={{$err.Filepath}},line={{$err.Line}},col={{$err.Column}}::{{$err.Message}}%0A```%0A{{replace $err.Snippet "\\n" "%0A"}}%0A```\n{{end}}' -ignore 'SC2016:'

.github/workflows/dependabot_automerge.yml

@@ -1,6 +1,6 @@
 # https://docs.github.com/en/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions#enable-auto-merge-on-a-pull-request
 name: Dependabot auto-merge
-on: 
+on:
   pull_request:
     types: [ opened, synchronize, reopened, labeled ]
 
@@ -14,7 +14,6 @@ jobs:
     if: ${{ contains(github.event.pull_request.labels.*.name, 'dependencies') }}
     steps:
       - name: Enable auto-merge for Dependabot PRs
-        run: gh pr merge --auto --rebase "$PR_URL"
+        run: gh pr merge --auto --rebase ${{ github.event.pull_request.html_url }}
         env:
-          PR_URL: ${{github.event.pull_request.html_url}}
-          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
+          GITHUB_TOKEN: ${{ github.token }}

.github/workflows/release.yaml

@@ -1,4 +1,4 @@
-name: release
+name: Release
 on:
   release:
     types: [published]
@@ -18,7 +18,7 @@ jobs:
         with:
           fetch-depth: 0
       - name: Setup host
-        uses: ./.github/workflows/setup-host
+        uses: ./.github/actions/setup-host
       - name: Publish
         env:
           ORG_GRADLE_PROJECT_signingKey: ${{ secrets.SIGNING_KEY }}

.github/workflows/update-gradle-wrapper.yml

@@ -13,7 +13,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
       - name: Setup host
-        uses: ./.github/workflows/setup-host
+        uses: ./.github/actions/setup-host
       - name: Update Gradle Wrapper
         uses: gradle-update/update-gradle-wrapper-action@v1
         with: