meta: bump step-security/harden-runner from 2.7.1 to 2.9.0 #13

	name: First commit message adheres to guidelines

	on: [pull_request]

	env:
	NODE_VERSION: lts/*

	permissions:
	contents: read

	jobs:
	lint-commit-message:
	runs-on: ubuntu-latest
	steps:
	- name: Compute number of commits in the PR
	id: nb-of-commits
	run: \|
	echo "plusOne=$((${{ github.event.pull_request.commits }} + 1))" >> $GITHUB_OUTPUT
	echo "minusOne=$((${{ github.event.pull_request.commits }} - 1))" >> $GITHUB_OUTPUT
	- uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
	with:
	fetch-depth: ${{ steps.nb-of-commits.outputs.plusOne }}
	persist-credentials: false
	- run: git reset HEAD^2
	- name: Install Node.js
	uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
	with:
	node-version: ${{ env.NODE_VERSION }}
	- name: Validate commit message
	run: \|
	echo "::add-matcher::.github/workflows/commit-lint-problem-matcher.json"
	git rev-parse HEAD~${{ steps.nb-of-commits.outputs.minusOne }} \| xargs npx -q core-validate-commit --no-validate-metadata --tap

Provide feedback