From 0bc24c13e76d072317761945891ab2e20827fe09 Mon Sep 17 00:00:00 2001
From: Mobsuccess Bot <tech@mobsuccess.com>
Date: Thu, 30 Jul 2026 13:59:10 +0000
Subject: [PATCH] chore(gha): update yamllint.yml GitHub workflow

---
 .github/workflows/yamllint.yml | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/yamllint.yml b/.github/workflows/yamllint.yml
index 6fc9e17..7078546 100644
--- a/.github/workflows/yamllint.yml
+++ b/.github/workflows/yamllint.yml
@@ -16,9 +16,16 @@ on:
 jobs:
   validate-yaml:
     name: Validate YAML files
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
+      - name: Install yamllint
+        # ubuntu-slim is a bare ubuntu:24.04 image, so yamllint is not
+        # preinstalled. Pinned to the version ubuntu-latest ships, so the rule
+        # set does not move under the fleet. --user targets ~/.local, which is
+        # writable by the runner user and already on PATH; the job does not run
+        # as root and cannot write to system site-packages.
+        run: pip install --user --break-system-packages --quiet yamllint==1.38.0
       - name: Validate YAML files
         run: |
           if [ -f .yamllint.yml ]; then
@@ -32,7 +39,7 @@ jobs:
   notify:
     needs: [validate-yaml]
     if: failure()
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-slim
     steps:
       - name: Notify
         uses: mobsuccess-devops/github-actions-notify@master