fixup! fixup! tools: add workflow to ensure `README` lists are in syn… #13

	# We need a separate workflow file so failures on the README are not reported on
	# all PRs, only on the ones that update the README.
	name: Linters (README.md)

	on:
	# We need `pull_request_target` to access the secrets
	pull_request_target:
	types: [opened, synchronize, reopened, ready_for_review]
	paths: [README.md]
	push:
	branches:
	- main
	- v[0-9]+.x-staging
	- v[0-9]+.x

	concurrency:
	group: ${{ github.workflow }}-${{ github.head_ref \|\| github.run_id }}
	cancel-in-progress: true

	env:
	PYTHON_VERSION: '3.12'
	NODE_VERSION: lts/*

	permissions:
	contents: read

	jobs:
	lint-readme-lists:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
	with:
	persist-credentials: false
	ref: ${{ github.event.repository.default_branch }}
	- name: Get team members
	id: team_members
	run: \|
	get_list_members() {
	TEAM="$1"
	QUOTE='"'
	gh api "/orgs/nodejs/teams/$TEAM/members" -X GET -f per_page=100 --jq "map(.login) \| ${QUOTE}${TEAM}=\(tojson)${QUOTE}"
	}

	get_list_members "collaborators" >> "$GITHUB_OUTPUT"
	get_list_members "issue-triage" >> "$GITHUB_OUTPUT"
	get_list_members "tsc" >> "$GITHUB_OUTPUT"
	env:
	GITHUB_TOKEN: ${{ secrets.GH_USER_TOKEN }}
	- name: Get modified README
	if: github.event_name != 'push'
	run: curl "https://raw.githubusercontent.com/$GITHUB_REPOSITORY/pull/${PULL_ID}.diff" \| git apply --include=README.md
	env:
	PULL_ID: ${{ github.event.pull_request.number }}
	- run: tools/lint-readme-lists.mjs "$TEAMS"
	env:
	TEAMS: ${{ tojson(steps.team_members.outputs) }}

Provide feedback