ci: Add Github Actions lint check (#2196)

We already use this in the tooling repositories and in `apify/workflows`, and I find it pretty useful in all repositories that
define GitHub Actions, as it helps reduce the risk of merging invalid workflows.

Author: vdusek

.github/workflows/actions-checks.yaml

@@ -0,0 +1,17 @@
+name: Actions lint check
+
+on:
+  pull_request:
+  push:
+    branches:
+      - master
+
+jobs:
+  actions_lint_check:
+    name: Actions lint check
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+      - name: Run actionlint
+        uses: rhysd/actionlint@v1.7.10

.github/workflows/docs.yaml

@@ -24,7 +24,6 @@ jobs:
                     node-version: 24
                     cache: 'npm'
                     cache-dependency-path: 'package-lock.json'
-                    always-auth: 'true'
 
             -   name: Enable corepack
                 run: |

.github/workflows/lychee.yml

@@ -17,7 +17,6 @@ jobs:
                     node-version: 24
                     cache: 'npm'
                     cache-dependency-path: 'package-lock.json'
-                    always-auth: 'true'
 
             -   name: Enable corepack
                 run: |

.github/workflows/publish-to-npm.yaml

@@ -56,7 +56,6 @@ jobs:
                     cache: 'npm'
                     registry-url: 'https://registry.npmjs.org'
                     cache-dependency-path: 'package-lock.json'
-                    always-auth: 'true'
 
             -   name: Enable corepack
                 run: |
@@ -69,23 +68,22 @@ jobs:
 
             -   name: Bump the theme version
                 run: |
-                    cd $GITHUB_WORKSPACE/apify-docs-theme
+                    cd "$GITHUB_WORKSPACE/apify-docs-theme"
                     npm version patch --legacy-peer-deps
 
             -   name: Deploy theme to npm
                 run: |
-                    cd $GITHUB_WORKSPACE/apify-docs-theme
+                    cd "$GITHUB_WORKSPACE/apify-docs-theme"
                     npm publish
 
             -   name: Wait until the new theme version is available on npm
                 run: |
-                    cd $GITHUB_WORKSPACE/apify-docs-theme
-                    PACKAGE_JSON=$(cat package.json);
-                    PACKAGE_NAME=$(jq -r .name <(echo $PACKAGE_JSON));
-                    PACKAGE_VER=$(jq -r .version <(echo $PACKAGE_JSON));
-                    for i in $(seq 1 10); do
+                    cd "$GITHUB_WORKSPACE/apify-docs-theme"
+                    PACKAGE_NAME=$(jq -r .name package.json);
+                    PACKAGE_VER=$(jq -r .version package.json);
+                    for _ in $(seq 1 10); do
                         EXIT_CODE=0;
-                        npm show $PACKAGE_NAME@$PACKAGE_VER || EXIT_CODE=1;
+                        npm show "$PACKAGE_NAME@$PACKAGE_VER" || EXIT_CODE=1;
                         if [[ $EXIT_CODE -eq 1 ]]; then
                             echo "The new package version ($PACKAGE_VER) is not yet available, waiting 30 seconds...";
                             sleep 30;
@@ -94,7 +92,7 @@ jobs:
                         echo "The new package version ($PACKAGE_VER) is live, proceeding!";
                         break;
                     done;
-                    npm show $PACKAGE_NAME@$PACKAGE_VER # fails if the package is not available, succeeds if it is
+                    npm show "$PACKAGE_NAME@$PACKAGE_VER" # fails if the package is not available, succeeds if it is
 
             -   name: Commit the new theme version
                 uses: stefanzweifel/git-auto-commit-action@v7

.github/workflows/test.yaml

@@ -19,7 +19,6 @@ jobs:
                     node-version: 24
                     cache: 'npm'
                     cache-dependency-path: 'package-lock.json'
-                    always-auth: 'true'
 
             -   name: Enable corepack
                 run: |
@@ -48,19 +47,20 @@ jobs:
 
             -   name: Start Nginx with project config
                 run: |
+                    PWD_PATH="$(pwd)"
                     cat > default.conf <<EOF
                     worker_processes auto;
-                    error_log $(pwd)/logs/error.log;
-                    pid $(pwd)/logs/nginx.pid;
+                    error_log ${PWD_PATH}/logs/error.log;
+                    pid ${PWD_PATH}/logs/nginx.pid;
                     events {}
                     http {
-                        access_log $(pwd)/logs/access.log;
-                        include $(pwd)/nginx.conf;
+                        access_log ${PWD_PATH}/logs/access.log;
+                        include ${PWD_PATH}/nginx.conf;
                     }
                     EOF
                     sed -i 's|https://apify.github.io/apify-docs|http://localhost:3000|g' default.conf
-                    mkdir -p $(pwd)/logs
-                    nginx -c $(pwd)/default.conf
+                    mkdir -p "${PWD_PATH}/logs"
+                    nginx -c "${PWD_PATH}/default.conf"
                     sleep 1
 
             -   name: Run header assertions
@@ -137,7 +137,7 @@ jobs:
 
             -   name: Stop Nginx
                 if: always()
-                run: nginx -c $(pwd)/default.conf -s stop
+                run: nginx -c "$(pwd)/default.conf" -s stop
 
     lint_content:
         name: Lint markdown content