ci: validate against schema

.github/workflows/validate-json.yaml

@@ -0,0 +1,18 @@
+name: validate-json
+
+on:
+  pull_request:
+    branches:
+      - main
+
+jobs:
+  validate:
+    name: validate against schema
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v7
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
+      - run: |
+          shopt -s globstar
+          uvx check-jsonschema --schemafile schema.json version.json versions/**/*.json

bump.py

@@ -38,10 +38,10 @@ def write_output(key: str, value: str):
 version_root = ROOT / "versions" / INPUT_PRODUCT / str(parsed_new_version.major)
 version_root.mkdir(parents=True, exist_ok=True)
 version_file = version_root / f"{version_family}.json"
-version_file.write_text(dumps(data))
+version_file.write_text(dumps(data) + "\n")
 version_file.copy(ROOT / "versions" / INPUT_PRODUCT / "latest.json")
 # Legacy version file
 if INPUT_PRODUCT == "authentik":
-    (ROOT / "version.json").write_text(dumps(data))
+    (ROOT / "version.json").write_text(dumps(data) + "\n")
 
 write_output("changelog_url", INPUT_CHANGELOG_URL)

versions/authentik/latest.json

@@ -0,0 +1 @@
+{"$schema": "https://version.goauthentik.io/schema.json", "stable": {"version": "2026.8.3", "changelog": "See https://docs.goauthentik.io/releases/2026.8/#fixed-in-202683", "changelog_url": "https://docs.goauthentik.io/releases/2026.8/#fixed-in-202683", "reason": "bugfix"}}