Add WebExt Lint as CI job

[rugk]

Inspired by https://github.com/rugk/awesome-emoji-picker/blob/main/.github/workflows/webext-lint.yml

As far as I see you don't run that anywhere else, so may this be a good idea?

Same as ajayyy/DeArrow#187

• I agree to license my contribution under LGPL-3.0 or my contribution is from another project with a license compatible with LGPL-3.0

To test this pull request, follow the instructions in the wiki.

---

[ajayyy]

Warnings will need to be dealt with before merging.

[mchangrh]

the v1 tag also seems to be built in 2019 which iirc is at least one breaking GHA version behind - should probably convert to locked commit

[rugk]

Well dependabot can handle GitHub Actions and upgrade them (though I don't know if it automatically does as by your config)… then you can easily use version numbers instead of commits.

[mchangrh]

dependabot hasn't triggered for our actions before and I don't trust it..., either way the tag is outdated and we've already set a precedence of locking by commit

[rugk]

dependabot hasn't triggered for our actions before and I don't trust it...

Well that is because you have not enabled it (respectively only for security updates), see ajayyy/DeArrow#179. With a YAML configuration you can exactly control what is updated and e.g. also only enable it for GitHub Actions. See https://docs.github.com/en/code-security/dependabot/dependabot-security-updates/configuring-dependabot-security-updates#overriding-the-default-behavior-with-a-configuration-file for an example.
If enabled, it is quite reliable in my experience, I mean it may take some time, but at least you notice updates.

[rugk]

Suggested change

	uses: kewisch/action-web-ext@v1
	uses: kewisch/action-web-ext@cb8a694

Like this or what do you want here?