ci: sort items on paths-ignore lists

Leave quotes only on paths with wildcards so that they are sorted before
normal paths, then sort everything.

Note that in the current workflow files, ignored directories always use
wildcards, so this also ensures that ignored directories (along with all
other paths with wildcards) are always listed before ignored files
(similarly to `--group-directories-first` in GNU `ls`).

This order is similar to the one on
.github/workflows/profile-checks.yml.

.github/workflows/build-extra.yml

@@ -4,7 +4,10 @@ on:
   push:
     branches: [ master ]
     paths-ignore:
+      - '.github/ISSUE_TEMPLATE/*'
+      - 'etc/**'
       - .git-blame-ignore-revs
+      - .github/pull_request_template.md
       - .gitignore
       - CONTRIBUTING.md
       - COPYING
@@ -12,14 +15,14 @@ on:
       - README.md
       - RELNOTES
       - SECURITY.md
-      - 'etc/**'
-      - 'src/firecfg/firecfg.config'
-      - '.github/ISSUE_TEMPLATE/*'
-      - '.github/pull_request_template.md'
+      - src/firecfg/firecfg.config
   pull_request:
     branches: [ master ]
     paths-ignore:
+      - '.github/ISSUE_TEMPLATE/*'
+      - 'etc/**'
       - .git-blame-ignore-revs
+      - .github/pull_request_template.md
       - .gitignore
       - CONTRIBUTING.md
       - COPYING
@@ -27,10 +30,7 @@ on:
       - README.md
       - RELNOTES
       - SECURITY.md
-      - 'etc/**'
-      - 'src/firecfg/firecfg.config'
-      - '.github/ISSUE_TEMPLATE/*'
-      - '.github/pull_request_template.md'
+      - src/firecfg/firecfg.config
 
 permissions:  # added using https://github.com/step-security/secure-workflows
   contents: read

.github/workflows/codeql-analysis.yml

@@ -9,6 +9,7 @@ on:
   push:
     branches: [ master ]
     paths-ignore:
+      - 'etc/**'
       - .git-blame-ignore-revs
       - .gitignore
       - CONTRIBUTING.md
@@ -17,11 +18,11 @@ on:
       - README.md
       - RELNOTES
       - SECURITY.md
-      - 'etc/**'
   pull_request:
     # The branches below must be a subset of the branches above
     branches: [ master ]
     paths-ignore:
+      - 'etc/**'
       - .git-blame-ignore-revs
       - .gitignore
       - CONTRIBUTING.md
@@ -30,7 +31,6 @@ on:
       - README.md
       - RELNOTES
       - SECURITY.md
-      - 'etc/**'
   schedule:
     - cron: '0 7 * * 2'
 

.github/workflows/profile-checks.yml

@@ -4,17 +4,17 @@ on:
   push:
     branches: [ master ]
     paths:
-      - 'etc/**'
       - 'ci/check/profiles/**'
-      - 'src/firecfg/firecfg.config'
-      - 'contrib/sort.py'
+      - 'etc/**'
+      - contrib/sort.py
+      - src/firecfg/firecfg.config
   pull_request:
     branches: [ master ]
     paths:
-      - 'etc/**'
       - 'ci/check/profiles/**'
-      - 'src/firecfg/firecfg.config'
-      - 'contrib/sort.py'
+      - 'etc/**'
+      - contrib/sort.py
+      - src/firecfg/firecfg.config
 
 permissions:  # added using https://github.com/step-security/secure-workflows
   contents: read