ci: Add action to validate changelog diffs after merging

[Mrtenz]

Explanation

This fixes an issue in changelogs where changelog entries may be incorrectly moved after merging into the main branch. Given the following (partial) changelog for example:

## [Unreleased]

### Changed

- Changelog entry A ([#1234](...))
- Changelog entry B ([#5678](...))
- Changelog entry C ([#1337](...))

After a release, this changelog may look like this:

  ## [Unreleased]

+ ## [1.0.0]

  ### Changed

  - Changelog entry A ([#1234](...))
  - Changelog entry B ([#5678](...))
  - Changelog entry C ([#1337](...))

But if another PR based on the original changelog also adds an entry to the unreleased section like this:

  ## [Unreleased]

  ### Changed

  - Changelog entry A ([#1234](...))
  - Changelog entry B ([#5678](...))
  - Changelog entry C ([#1337](...))
+ - Changelog entry D ([#0000](...))

The final changelog will look like this, since Git can merge the entry based on the other entries around it:

## [Unreleased]

## [1.0.0]

### Changed

- Changelog entry A ([#1234](...))
- Changelog entry B ([#5678](...))
- Changelog entry C ([#1337](...))
- Changelog entry D ([#0000](...))

Here it appears that the release included "entry D", but in reality that was meant to be under the unreleased section.

To address this issue, I've added a simple workflow that checks for changelog diffs. It uses a minimal algorithm to parse the markdown files, find entries that are included in unreleased originally, and checks if they still are after merging. If not, the workflow will fail and show an error such as this:

Checking changelog file: packages/some-package/CHANGELOG.md
The following lines added in the PR are missing from the "Unreleased" section after merge:

• Changelog entry D (#0000)

Please update your pull request and ensure that new changelog entries remain in the "Unreleased" section.

Long term we should solve this problem by using changesets instead, in which case the unreleased changes will never be merged or conflict with each other, but until we figure out how to implement those in our release workflows, we can use this workflow.

References

Checklist

• I've updated the test suite for new or updated code as appropriate
• I've updated documentation (JSDoc, Markdown, etc.) for new or updated code as appropriate
• I've communicated my changes to consumers by updating changelogs for packages I've changed
• I've introduced breaking changes in this PR and have prepared draft pull requests for clients and consumer packages to resolve them

---

Note

Adds a CI action and job that verify PR-added changelog entries remain in the Unreleased section after merge (including merge queue).

• CI:
  • New composite action ./.github/actions/check-merge-queue-changelogs:
    • Determines PR number/branch (supports pull_request and merge_group).
    • Computes merge-base with base branch and diffs CHANGELOG.md files.
    • Runs check-changelog-diff.cjs to ensure PR-added lines stay in [Unreleased] after merge.
  • Workflow update ./.github/workflows/lint-build-test.yml:
    • Adds validate-changelog-diffs job (PRs and merge groups) that uses the new action.

^{Written by Cursor Bugbot for commit 04224ca. This will update automatically on new commits. Configure here.}

[Mrtenz]

This is a plain JS file so we can just call node check-changelog-diff.cjs without installing dependencies etc.