Add workflow rule to prohibit PRs against master

.github/workflows/depsreview.yaml

@@ -1,4 +1,4 @@
-name: "Dependency Review"
+name: "Review Dependencies"
 on: [pull_request]
 
 permissions:

.github/workflows/enforce-pullrequest-rules.yaml

@@ -0,0 +1,28 @@
+# This workflow enforces on every pull request:
+# - the update of our CHANGELOG.md file
+# - that the PR is not based against master
+
+name: "Enforce Pull-Request Rules"
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened, ready_for_review, labeled, unlabeled]
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - name: Enforce changelog
+        uses: dangoslen/changelog-enforcer@v3
+        with:
+          changeLogPath: "CHANGELOG.md"
+          skipLabels: "Skip Changelog"
+
+      - name: Enforce develop branch
+        if: ${{ github.base_ref == 'master' }}
+        run: |
+          echo "This PR is based against the master branch. Please don't do this. Switch the branch to 'develop'."
+          exit 1
+        env:
+          BASE_BRANCH: ${{ github.base_ref }}

CHANGELOG.md

@@ -63,6 +63,7 @@ Special thanks to @khassel, @rejas and @sdetweil for taking over most (if not al
 - Added Yr as a weather provider
 - Added config options "ignoreXOriginHeader" and "ignoreContentSecurityPolicy"
 - Added thai language
+- Added Enforce PR rules workflow
 
 ### Removed