Nomad changes

.github/workflows/ci-lint.yaml

@@ -0,0 +1,107 @@
+name: CI Lint
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  workflow_dispatch:
+
+concurrency:
+  group: ci-lint-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  lint:
+    name: Lint
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
+    runs-on: ubuntu-24.04-arm
+    timeout-minutes: 60
+    env:
+      CARGO_TERM_COLOR: always
+      FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true"
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          submodules: recursive
+
+      - name: Setup Rust
+        uses: kreuzberg-dev/actions/setup-rust@v1
+        with:
+          cache-key-prefix: lint
+
+      - name: Setup Python
+        uses: kreuzberg-dev/actions/setup-python-env@v1
+        with:
+          python-version: "3.13"
+          cache-prefix: lint-py
+          install-command: "uv sync --group dev --no-install-project --no-install-workspace --frozen"
+
+      - name: Setup Node
+        uses: kreuzberg-dev/actions/setup-node-workspace@v1
+
+      - name: Setup Go
+        uses: actions/setup-go@v6
+        with:
+          go-version: "1.26"
+
+      - name: Setup Java
+        uses: actions/setup-java@v5
+        with:
+          distribution: temurin
+          java-version: "25"
+
+      - name: Setup Elixir
+        uses: kreuzberg-dev/actions/setup-elixir@v1
+
+      - name: Setup Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: "3.4"
+          bundler-cache: true
+          working-directory: packages/ruby
+
+      - name: Setup PHP
+        uses: kreuzberg-dev/actions/setup-php@v1
+
+      - name: Setup .NET
+        uses: actions/setup-dotnet@v5
+        with:
+          dotnet-version: "10.0.x"
+
+      - name: Setup R
+        uses: kreuzberg-dev/actions/setup-r@v1
+        with:
+          r-version: "release"
+          install-deps: "false"
+
+      - name: Install Task
+        uses: kreuzberg-dev/actions/install-task@v1
+
+      - name: Setup Helm
+        uses: azure/setup-helm@v5
+
+      - name: Setup kubeconform
+        uses: bmuschko/setup-kubeconform@v1
+
+      - name: Install alef CLI
+        uses: kreuzberg-dev/actions/install-alef@v1
+
+      - name: Run all prek hooks
+        uses: j178/prek-action@v2
+        with:
+          cache: false
+          extra-args: --all-files
+
+      - name: Validate C header
+        shell: bash
+        run: |
+          HEADER="crates/kreuzberg-ffi/include/kreuzberg.h"
+          if [ ! -f "$HEADER" ]; then
+            echo "::error::C header not found at $HEADER — run 'task alef:generate'"
+            exit 1
+          fi
+          echo "C header verified at $HEADER"