more yamllint stuff

and other updates

.github/FUNDING.yml

@@ -1,5 +1,4 @@
 ---
-
 github: cooljeanius
 ko_fi: ericgallager
 liberapay: egallager

.github/dependabot.yml

@@ -1,13 +1,12 @@
 ---
-
 # To get started with Dependabot version updates, you'll need to specify which
 # package ecosystems to update and where the package manifests are located.
 # Please see the documentation for all configuration options:
 # https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
 
 version: 2
 updates:
-  - package-ecosystem: "github-actions"  # See documentation for possible values
+  - package-ecosystem: "github-actions"  # See docs for possible values
     directory: "/"  # Location of package manifests
     schedule:
       interval: "weekly"

.github/workflows/codeql.yml

@@ -1,6 +1,5 @@
 ---
-
-# osxbom/.github/workflows/codeql.yml: GitHub Actions codeql workflow for osxbom
+# osxbom/.github/workflows/codeql.yml: GH Actions CodeQL workflow for osxbom
 # For most projects, this workflow file will not need changing; you simply need
 # to commit it to your repository.
 #

.github/workflows/flawfinder.yml

@@ -1,5 +1,4 @@
 ---
-
 # This workflow uses actions that are not certified by GitHub.
 # They are provided by a third-party and are governed by
 # separate terms of service, privacy policy, and support
@@ -11,7 +10,7 @@ on:
   push:
     branches: ["master"]
   pull_request:
-    # The branches below must be a subset of the branches above
+    # The branches below must be a subset of the branches above:
     branches: ["master"]
   schedule:
     - cron: '29 17 * * 1'

.github/workflows/osxbom.yml

@@ -1,5 +1,4 @@
 ---
-
 name: cooljeanius/osxbom
 on:
   push:
@@ -21,12 +20,12 @@ jobs:
       - run: "./configure CC=${{ matrix.compiler }} && make"
       - run: "make check && make distcheck"
       - name: Upload a Build Artifact
-        uses: actions/upload-artifact@v4.4.3
+        uses: actions/upload-artifact@v4
         with:
           name: osxbom-gzipped_tarfile-${{ matrix.compiler }}-${{ matrix.os }}
           path: osxbom-0.0.*.tar.gz
       - name: Upload another Build Artifact
-        uses: actions/upload-artifact@v4.4.3
+        uses: actions/upload-artifact@v4
         with:
           name: osxbom-zipfile-${{ matrix.compiler }}-${{ matrix.os }}
           path: osxbom-0.0.*.zip

.travis.yml

@@ -1,5 +1,4 @@
 ---
-
 language: cpp
 os:
   - linux

.yamllint.yml

@@ -0,0 +1,12 @@
+---
+# https://yamllint.readthedocs.io/en/stable/configuration.html
+extends: default
+
+rules:
+  float-values: enable
+  # 1 long line in the repo:
+  line-length:
+    max: 81
+    level: warning
+  octal-values: enable
+  truthy: disable

Makefile.am

@@ -29,7 +29,7 @@ clean-local:
 	@RM_PROG@ -f $(NAME) $(NAME).o
 .PHONY: clean-local
 
-DISTCLEANFILES = *~ autoscan.log gdb.log .DS_Store out.txt @MAINT@ lsbom.8
+DISTCLEANFILES = *~ build-aux/*~ autoscan.log gdb.log .DS_Store out.txt @MAINT@ lsbom.8
 
 distclean-local: clean-local
 	@RM_PROG@ -fv @PACKAGE_TARNAME@-@[email protected]
@@ -50,6 +50,7 @@ EXTRA_DIST += osxbom.xcodeproj/project.pbxproj osxbom.1 lsbom.8
 check-local: ./$(NAME) ${srcdir}/test.bom
 	./$(NAME) >/dev/null
 	./$(NAME) ${srcdir}/test.bom | tee out.txt
+	if test -x "$(YAMLLINT)"; then $(YAMLLINT) .; fi
 .PHONY: check-local
 
 EXTRA_DIST += en.lproj/lsbom.strings expected_results_for_test_bom.txt