feat: add additional linters

.github/actions/bundle-gh-page/action.yml

@@ -1,3 +1,4 @@
+---
 name: 'Bundle GitHub Page'
 description: 'This action bundles the current gh-page branch with the out folder'
 inputs:

.github/actions/download-tar-artifact/action.yml

@@ -1,3 +1,4 @@
+---
 name: 'Download Tar Artifact'
 description: 'Downloads an artifact and unzips it'
 inputs:

.github/actions/npm-cache/action.yml

@@ -1,3 +1,4 @@
+---
 name: 'NPM Cache Action'
 description: 'Initialize NPM Cache'
 inputs:

.github/actions/upload-tar-artifact/action.yml

@@ -1,3 +1,4 @@
+---
 name: 'Upload Tar Artifact'
 description: 'Upload an artifact and zips it as {name}.tar.gz'
 inputs:

.github/dependabot.yml

@@ -1,3 +1,4 @@
+---
 version: 2
 updates:
   - package-ecosystem: 'github-actions'

.github/labeler.yml

@@ -1,3 +1,4 @@
+---
 # Add 'repo' label to any root file changes
 repo:
   - '*'

.github/workflows/00-init.yml

@@ -1,3 +1,4 @@
+---
 name: Init Workflow
 
 on:

.github/workflows/01-build-all.yml

@@ -1,3 +1,4 @@
+---
 name: Build Pages
 
 on:

.github/workflows/01-build-showcases.yml

@@ -1,3 +1,4 @@
+---
 name: Build Showcases
 
 on:

.github/workflows/01-build-stencil-targets.yml

@@ -1,3 +1,4 @@
+---
 name: Build Stencil Targets
 
 on:

.github/workflows/01-build-storybook.yml

@@ -1,3 +1,4 @@
+---
 name: Build Storybook
 
 on:

.github/workflows/01-test.yml

@@ -1,3 +1,4 @@
+---
 name: 🔬 Run unit/snapshot tests
 
 on:

.github/workflows/01-validate.yml

@@ -1,3 +1,4 @@
+---
 name: 🔬 Validate repo
 
 on:
@@ -19,3 +20,5 @@ jobs:
           node ./scripts/cypress-component-check.js
           node ./scripts/angular-module-component-check.js
           npm run lint:eslint
+          npm run lint:stylelint
+          npm run lint:markdownlint

.github/workflows/02-cypress.yml

@@ -1,3 +1,4 @@
+---
 name: Run Cypress on repo
 
 on:

.github/workflows/03-deploy-gh-pages.yml

@@ -1,3 +1,4 @@
+---
 name: Deploy to gh-pages
 
 on:

.github/workflows/03-npm-publish.yml

@@ -1,3 +1,4 @@
+---
 name: Publish NPM Repo
 
 on:

.github/workflows/auto-merge.yml → .github/workflows/99-auto-merge.yml

@@ -1,25 +1,24 @@
+---
 name: Dependabot auto-merge
-on: pull_request
-
-permissions:
-  pull-requests: write
+on:
+  workflow_call:
 
 jobs:
   dependabot:
     runs-on: ubuntu-latest
     if: ${{ github.actor == 'dependabot[bot]' }}
     steps:
-      - name: Dependabot metadata
+      - name: ⬇ Dependabot metadata
         id: metadata
         uses: dependabot/fetch-metadata@v1.3.3
         with:
           github-token: '${{ secrets.GITHUB_TOKEN }}'
-      - name: Approve a PR
+      - name: ✔ Approve a PR
         run: gh pr review --approve "$PR_URL"
         env:
           PR_URL: ${{github.event.pull_request.html_url}}
           GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
-      - name: Enable auto-merge for Dependabot PRs
+      - name: 🤖 Enable auto-merge for Dependabot PRs
         if: ${{steps.metadata.outputs.update-type == 'version-update:semver-patch'}}
         run: gh pr merge --auto --merge "$PR_URL"
         env:

.github/workflows/99-codeql-analysis.yml

@@ -0,0 +1,28 @@
+---
+name: 'CodeQL'
+on:
+  workflow_call:
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        language: ['javascript']
+
+    steps:
+      - name: ⬇ Checkout repo
+        uses: actions/checkout@v3
+
+      - name: 🔄 Initialize CodeQL
+        uses: github/codeql-action/init@v2
+        with:
+          languages: ${{ matrix.language }}
+
+      - name: 🔨 Autobuild
+        uses: github/codeql-action/autobuild@v2
+
+      - name: 🔎 Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v2

.github/workflows/dependency-review.yml → .github/workflows/99-dependency-review.yml

@@ -1,14 +1,13 @@
+---
 name: 'Dependency Review'
-on: [pull_request]
-
-permissions:
-  contents: read
+on:
+  workflow_call:
 
 jobs:
   dependency-review:
     runs-on: ubuntu-latest
     steps:
-      - name: 'Checkout Repository'
+      - name: ⬇ Checkout repo
         uses: actions/checkout@v3
-      - name: 'Dependency Review'
+      - name: 🔎 Dependency Review
         uses: actions/dependency-review-action@v2

.github/workflows/labeler.yml → .github/workflows/99-labeler.yml

@@ -1,14 +1,14 @@
+---
 name: 'Pull Request Labeler'
-on: [pull_request]
+on:
+  workflow_call:
 
 jobs:
   triage:
-    permissions:
-      contents: read
-      pull-requests: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/labeler@v4
+      - name: 🏷️ Labeler
+        uses: actions/labeler@v4
         with:
           repo-token: '${{ secrets.GITHUB_TOKEN }}'
           sync-labels: true

.github/workflows/cleanup.yml

@@ -1,10 +1,10 @@
+---
 name: Cleans all preview pages for gh-pages
 
 on:
   push:
     branches:
       - main
-      - develop
 
 jobs:
   clean:

.github/workflows/default.yml

@@ -1,4 +1,5 @@
-name: Test and deploy to GitHub Pages
+---
+name: Default On-Push
 
 on: [push]
 

.github/workflows/pull-request.yml

@@ -0,0 +1,25 @@
+---
+name: Default On-Pull-Request
+
+on:
+  pull_request:
+    branches: ['main']
+
+permissions:
+  pull-requests: write
+  contents: read
+  actions: read
+  security-events: write
+
+jobs:
+  dependabot:
+    uses: ./.github/workflows/99-auto-merge.yml
+
+  codeql:
+    uses: ./.github/workflows/99-codeql-analysis.yml
+
+  dependency-review:
+    uses: ./.github/workflows/99-dependency-review.yml
+
+  labeler:
+    uses: ./.github/workflows/99-labeler.yml

.husky/pre-commit

@@ -5,4 +5,7 @@ npx --yes pretty-quick --staged
 node ./scripts/cypress-component-check.js
 node ./scripts/angular-module-component-check.js
 npm run lint:eslint
+npm run lint:stylelint
+npm run lint:markdownlint
 npx validate-branch-name
+

.markdown-lint.yml

@@ -0,0 +1,37 @@
+---
+###########################
+###########################
+## Markdown Linter rules ##
+###########################
+###########################
+
+# Linter rules doc:
+# - https://github.com/DavidAnson/markdownlint
+#
+# Note:
+# To comment out a single error:
+#   <!-- markdownlint-disable -->
+#   any violations you want
+#   <!-- markdownlint-restore -->
+#
+
+###############
+# Rules by id #
+###############
+MD004: false # Unordered list style
+MD007:
+  indent: 2 # Unordered list indentation
+MD013:
+  line_length: 500 # Line length 80 is far to short
+MD024: false #/no-duplicate-heading/no-duplicate-header
+MD026:
+  punctuation: '.,;:!。，；:' # List of not allowed
+MD029: false # Ordered list item prefix
+MD033: false # Allow inline HTML
+MD036: false # Emphasis used instead of a heading
+MD049: false # emphasis-style Emphasis style should be consistent
+
+#################
+# Rules by tags #
+#################
+blank_lines: false # Error on blank lines

.markdownlintignore

@@ -0,0 +1,2 @@
+**/node_modules/**
+packages/db-ui-elements-stencil/src/components/**

.stylelintrc.json

@@ -0,0 +1,12 @@
+{
+  "extends": [
+    "stylelint-config-standard-scss",
+    "stylelint-config-prettier-scss"
+  ],
+  "rules": {
+    "at-rule-no-unknown": null,
+    "scss/at-rule-no-unknown": true,
+    "scss/at-extend-no-missing-placeholder": null,
+    "scss/at-mixin-argumentless-call-parentheses": null
+  }
+}

.yamllint

@@ -0,0 +1,6 @@
+extends: default
+
+rules:
+  line-length:
+    max: 120
+    level: warning

.yamllint.yaml

@@ -1,3 +1,4 @@
+---
 extends: default
 
 ignore: |

CONTRIBUTING.md

@@ -1,3 +1,5 @@
+# Contributing
+
 Thanks for your interest in our project. Contributions are welcome. Feel free to [open an issue](https://github.com/db-ui/elements/issues/new) with questions or reporting ideas and bugs, or [open pull requests](https://github.com/db-ui/elements/compare) to contribute code.
 
 We are committed to fostering a welcoming, respectful, and harassment-free environment. Be kind!

README.md

@@ -63,8 +63,11 @@ If you miss a component than [contribute](CONTRIBUTING.md), please.
 
 ## Deutsche Bahn brand
 
-As we'd like to perfectly support our users and customers on their digital journey, the usage of Deutsche Bahn brand and trademarks are bound to clear guidelines and restrictions even when being used with the code that we're providing with this product; Deutsche Bahn fully reserves all rights and ownership regarding the Deutsche Bahn brand, even though that we're providing the code of DB UI products free to use and release it under the Apache 2.0 license.
-Please have a look at our brand portal at <https://marketingportal.extranet.deutschebahn.com/> for any further questions and whom to contact on any brand issues. As these assets and visual guidelines are retrieved from our Deutsche Bahn Marketingportal, you'll agree with the ["Allgemeine Nutzungsbedingungen für das DB-Marketingportal" (german)](https://marketingportal.extranet.deutschebahn.com/de/nutzungsbedingungen) in case of using them.
+As we'd like to perfectly support our users and customers on their digital journey, the usage of Deutsche Bahn brand and trademarks are bound to clear guidelines and restrictions even when being used with the code that we're providing with this product.
+Deutsche Bahn fully reserves all rights and ownership regarding the Deutsche Bahn brand, even though that we're providing the code of DB UI products free to use and release it under the Apache 2.0 license.
+Please have a look at our brand portal at <https://marketingportal.extranet.deutschebahn.com/> for any further questions and whom to contact on any brand issues.
+
+As these assets and visual guidelines are retrieved from our Deutsche Bahn Marketingportal, you'll agree with the ["Allgemeine Nutzungsbedingungen für das DB-Marketingportal" (german)](https://marketingportal.extranet.deutschebahn.com/de/nutzungsbedingungen) in case of using them.
 
 For any usage outside of Deutsche Bahn websites and applications you must remove or replace any Deutsche Bahn brand and design assets as well as protected characteristics and trademarks. We're even also planning to provide a neutral theme that would make it much easier for you to use our product without the trademarks by Deutsche Bahn.
 

doc/adr/README.md

@@ -1,4 +1,4 @@
-## Internal ADRs
+# Internal ADRs
 
 We've removed totally internal ADRs e.g. regarding tool setups etc. that we either don't want to publish or that are obsolete after publishing to GitHub.