chore: sync from template v1.3.0

---

name: Lint

name: Breakage

"on":

  pull_request:

jobs:

  test:

    name: lint

  breakage:

    name: Breakage

    runs-on: ubuntu-latest

    permissions:

      contents: read

---

name: Release

"on":

  push:

    branches:

      - main

jobs:

  release:

    name: "Release"

    runs-on: ubuntu-latest

    permissions:

      contents: write

      pull-requests: write

    concurrency:

      group: semantic-release

      cancel-in-progress: false

    steps:

      - name: Checkout

        uses: actions/checkout@v6

        with:

          fetch-depth: 0

          token: ${{ secrets.SEMANTIC_RELEASE_TOKEN || secrets.GITHUB_TOKEN }}

      - name: Semantic release

        run: |

          docker run --rm \

            --user 1001 \

            -v ${{ github.workspace }}:/workspace \

            -w /workspace \

            -e GITHUB_TOKEN=${{ secrets.SEMANTIC_RELEASE_TOKEN || secrets.GITHUB_TOKEN }} \

            -e CI=true \

            ghcr.io/disafronov/semantic-release:latest

---

name: Validate

"on":

  pull_request:

    branches:

      - main

jobs:

  validate:

    name: "Validate"

    runs-on: ubuntu-latest

    permissions:

      contents: read

    steps:

      - name: Checkout

        uses: actions/checkout@v6

        with:

          fetch-depth: 0

      - name: Semantic release dry run

        run: |

          docker run --rm \

            --user 1001 \

            -v ${{ github.workspace }}:/workspace \

            -w /workspace \

            ghcr.io/disafronov/semantic-release:latest \

            --dry-run