ci: declare shell: bash as the workflow default so every run step gets pipefail

.github/workflows/bump_toolchain_nightly-testing.yml

@@ -7,6 +7,11 @@ on:
     # This should be 3 hours after lean4 starts building its nightly.
   workflow_dispatch:
 
+# Runs every step under `bash --noprofile --norc -eo pipefail`
+defaults:
+  run:
+    shell: bash
+
 jobs:
   update-toolchain:
     if: github.repository == 'leanprover/cslib'

.github/workflows/lean_action_ci.yml

@@ -9,6 +9,11 @@ on:
   merge_group:
   workflow_dispatch:
 
+# Runs every step under `bash --noprofile --norc -eo pipefail`
+defaults:
+  run:
+    shell: bash
+
 jobs:
   ci-checks:
     runs-on: ubuntu-latest
@@ -19,17 +24,13 @@ jobs:
           build-args: "--wfail --iofail"
           test-args: "--wfail --iofail"
       - name: "lake exe mk_all --check"
-        run: |
-          set -e
-          lake exe mk_all --check
+        run: lake exe mk_all --check
       #- name: "lake shake"
       #  run: |
       #    set -e
       #    lake shake --add-public --keep-implied --keep-prefix Cslib
       - name: "checkInitImports"
-        run: |
-          set -e
-          lake exe checkInitImports
+        run: lake exe checkInitImports
       - uses: leanprover-community/lint-style-action@e6128ab22cb03b509075ae46c33727e3952ffab7 # 2026-05-12
         with:
           mode: check

.github/workflows/merge_main_into_nightly-testing.yml

@@ -8,6 +8,11 @@ on:
     - cron: '30 */3 * * *'  # At minute 30 past every 3rd hour.
   workflow_dispatch:
 
+# Runs every step under `bash --noprofile --norc -eo pipefail`
+defaults:
+  run:
+    shell: bash
+
 jobs:
   merge-to-nightly-testing:
     if: github.repository == 'leanprover/cslib'

.github/workflows/report_failures_nightly-testing.yml

@@ -6,6 +6,11 @@ on:
     types:
       - completed
 
+# Runs every step under `bash --noprofile --norc -eo pipefail`
+defaults:
+  run:
+    shell: bash
+
 jobs:
   handle_failure:
 

.github/workflows/shellcheck.yml

@@ -11,6 +11,11 @@ on:
       - 'scripts/**/*.sh'
   workflow_dispatch:
 
+# Runs every step under `bash --noprofile --norc -eo pipefail`
+defaults:
+  run:
+    shell: bash
+
 jobs:
   shellcheck:
     name: Check shell scripts

.github/workflows/weekly-lints.yml

@@ -8,6 +8,11 @@ on:
 env:
   CSLIB: cslib
 
+# Runs every step under `bash --noprofile --norc -eo pipefail`
+defaults:
+  run:
+    shell: bash
+
 jobs:
   weekly-lints:
     name: Weekly Linting