From 4b9775bde6df25ee09be564b06d03e6ec82b23ee Mon Sep 17 00:00:00 2001
From: Ashley Scopes <73482956+ascopes@users.noreply.github.com>
Date: Mon, 19 Jan 2026 07:59:29 +0000
Subject: [PATCH 1/2] Add CI/CD improvements

---
 .github/workflows/build.yml | 64 +++++++++++++++++++++++++++++++++++++
 1 file changed, 64 insertions(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 6fc350d9..95799891 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -13,10 +13,74 @@ on:
   workflow_dispatch: {}
 
 jobs:
+  validate:
+    name: Validate
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      ###
+      ### Lint scripts and configuration files.
+      ###
+
+      - name: Validate shell scripts
+        uses: ludeeus/action-shellcheck@master
+        if: ${{ ! cancelled() }}
+        with:
+          check_together: 'yes'
+          scandir: ./scripts
+
+      - name: Validate codecov.yml
+        shell: bash
+        if: ${{ ! cancelled() }}
+        run: curl -si --fail-with-body --data-binary @codecov.yml https://codecov.io/validate
+
+      ###
+      ### Lint GitHub Actions for issues.
+      ###
+
+      - name: Lint GitHub Actions
+        shell: bash
+        if: ${{ ! cancelled() }}
+        run: >-
+          docker run
+          --rm
+          --user "$(id -u "${USER}"):$(id -g "${USER}")"
+          --volume "$(pwd):/repo"
+          --workdir /repo
+          rhysd/actionlint:latest
+          -color
+          -verbose
+
+      ###
+      ### Lint Java, export information about current environment for
+      ### the next jobs to utilise.
+      ###
+
+      - name: Initialize Java
+        uses: actions/setup-java@v5
+        if: always()
+        with:
+          cache: maven
+          distribution: zulu
+          java-version: 25
+
+      - name: Validate license headers and code style
+        shell: bash
+        if: ${{ ! cancelled() }}
+        # Purposely compile here so errorprone can run when we turn it on
+        run: ./mvnw -B validate compile test-compile -DskipTests
+
   build:
     name: Build on JDK ${{ matrix.java-version }} (${{ matrix.os-name }})
     runs-on: ${{ matrix.os-name }}
 
+    needs:
+      - validate
+
     strategy:
       fail-fast: false
       matrix:

From af65c1debbcfe8c6ccb8e657fe7ecdee66af76fc Mon Sep 17 00:00:00 2001
From: Ash <73482956+ascopes@users.noreply.github.com>
Date: Mon, 19 Jan 2026 08:21:01 +0000
Subject: [PATCH 2/2] Disable shell script validation in build workflow

Comment out shell script validation step in CI.

Signed-off-by: Ash <73482956+ascopes@users.noreply.github.com>
---
 .github/workflows/build.yml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 95799891..d0ff072e 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -26,12 +26,12 @@ jobs:
       ### Lint scripts and configuration files.
       ###
 
-      - name: Validate shell scripts
-        uses: ludeeus/action-shellcheck@master
-        if: ${{ ! cancelled() }}
-        with:
-          check_together: 'yes'
-          scandir: ./scripts
+      #- name: Validate shell scripts
+      #  uses: ludeeus/action-shellcheck@master
+      #  if: ${{ ! cancelled() }}
+      #  with:
+      #    check_together: 'yes'
+      #    scandir: ./scripts
 
       - name: Validate codecov.yml
         shell: bash