Adding upstream version 2.6.3.

Signed-off-by: Daniel Baumann <daniel@debian.org>

.github/actions/core-test/Dockerfile

@@ -0,0 +1,13 @@
+FROM golang:bullseye
+
+SHELL [ "/bin/bash", "-x", "-e", "-c" ]
+
+ARG DEBIAN_FRONTEND=noninteraactive
+RUN apt-get update -y && \
+    apt-get install -qy --no-install-recommends \
+        cmake \
+        git \
+        make && \
+    git config --system --add safe.directory '*'
+
+CMD [ "make", "test-core", "test-skipped" ]

.github/actions/core-test/action.yml

@@ -0,0 +1,5 @@
+name: Core test
+description: Run the editorconfig-core-test suite
+runs:
+  using: docker
+  image: Dockerfile

.github/dependabot.yml

@@ -0,0 +1,11 @@
+version: 2
+updates:
+- package-ecosystem: gomod
+  directory: "/"
+  schedule:
+    interval: weekly
+  open-pull-requests-limit: 10
+- package-ecosystem: github-actions
+  directory: "/"
+  schedule:
+    interval: weekly

.github/workflows/golangci-lint.yml

@@ -0,0 +1,27 @@
+name: golangci-lint
+on:
+  push:
+    tags:
+      - v*
+    branches:
+      - master
+      - main
+  pull_request:
+jobs:
+  golangci:
+    name: lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: 1.23.x
+
+      - name: golangci-lint
+        uses: golangci/golangci-lint-action@2226d7cb06a077cd73e56eedd38eecad18e5d837  #v6.5.0
+        env:
+          GOTOOLCHAIN: local
+        with:
+          version: v1.64

.github/workflows/main.yml

@@ -0,0 +1,32 @@
+on: [push]
+name: test and build
+jobs:
+  editorconfig_lint:
+    runs-on: ubuntu-latest
+    steps:
+      - name: checkout
+        uses: actions/checkout@v4
+      - name: eclint-action
+        uses: greut/eclint-action@v0
+  go-test:
+    runs-on: ubuntu-latest
+    name: test
+    steps:
+      - name: checkout
+        uses: actions/checkout@v4
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: 1.22.x
+      - name: go test
+        run: go test -v ./...
+  core-test:
+    runs-on: ubuntu-latest
+    steps:
+      - name: checkout
+        uses: actions/checkout@v4
+        with:
+          submodules: true
+
+      - name: core test
+        uses: ./.github/actions/core-test

.github/workflows/semgrep.yml

@@ -0,0 +1,20 @@
+# Name of this GitHub Actions workflow.
+name: Semgrep
+
+on:
+  pull_request: {}
+
+jobs:
+  semgrep:
+    name: Scan
+    runs-on: ubuntu-latest
+    container:
+      image: returntocorp/semgrep
+    # Skip any PR created by dependabot to avoid permission issues
+    if: (github.actor != 'dependabot[bot]')
+    steps:
+      - uses: actions/checkout@v4
+
+      - run: semgrep ci
+        env:
+          SEMGREP_RULES: p/default p/golang p/secrets