From c6b48f2ea33769311a8263f9c87322337b376985 Mon Sep 17 00:00:00 2001
From: Andrew Longosz <alongosz@users.noreply.github.com>
Date: Sat, 5 Sep 2026 20:15:01 +0200
Subject: [PATCH 1/2] [GHA] Updated GitHub Actions workflows to latest versions
 and standards

- Renamed ci.yaml to backend-ci.yaml, renamed the workflow from 'CI'
  to 'Backend CI' and added a bare workflow_dispatch trigger
- Bumped actions/checkout to v7
- Replaced the direct ramsey/composer-install@v1 step with the standard
  ibexa/gh-workflows/actions/composer-install@main composite action,
  passing the PHP version explicitly; dropped the now-redundant
  setup-php step (its extensions, coverage and cs2pr tool match the
  action defaults) and the dependency-versions input (action default)
- Standardized the runner label to ubuntu-26.04
- Swapped the stale 'master' push-trigger entry for 'main', the branch
  this repository develops on
- Added a pipefail guard to the code style check step so cs2pr no
  longer masks check-cs failures

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 .../workflows/{ci.yaml => backend-ci.yaml}    | 28 +++++++++----------
 1 file changed, 14 insertions(+), 14 deletions(-)
 rename .github/workflows/{ci.yaml => backend-ci.yaml} (58%)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/backend-ci.yaml
similarity index 58%
rename from .github/workflows/ci.yaml
rename to .github/workflows/backend-ci.yaml
index 997c2e1..27381df 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/backend-ci.yaml
@@ -1,16 +1,17 @@
-name: CI
+name: Backend CI
 
 on:
   push:
     branches:
       - '[0-9]+.[0-9]+'
-      - master
+      - main
   pull_request: ~
+  workflow_dispatch: ~
 
 jobs:
   tests:
     name: Tests
-    runs-on: "ubuntu-20.04"
+    runs-on: "ubuntu-26.04"
     timeout-minutes: 5
     continue-on-error: ${{ matrix.experimental }}
 
@@ -30,23 +31,22 @@ jobs:
             experimental: true
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v7
 
-      - name: Setup PHP Action
-        uses: shivammathur/setup-php@v2
+      - uses: ibexa/gh-workflows/actions/composer-install@main
         with:
           php-version: ${{ matrix.php }}
-          coverage: none
-          extensions: pdo_sqlite, gd
-          tools: cs2pr
-
-      - uses: "ramsey/composer-install@v1"
-        with:
-          dependency-versions: "highest"
+          gh-client-id: ${{ secrets.AUTOMATION_CLIENT_ID }}
+          gh-client-secret: ${{ secrets.AUTOMATION_CLIENT_SECRET }}
+          satis-network-key: ${{ secrets.SATIS_NETWORK_KEY }}
+          satis-network-token: ${{ secrets.SATIS_NETWORK_TOKEN }}
           composer-options: "--prefer-dist --no-progress --no-suggest ${{ matrix.composer_options }}"
 
       - name: Run PHPStan analysis
         run: composer run-script phpstan
 
       - name: Run code style check
-        run: composer run-script check-cs -- --format=checkstyle | cs2pr
+        shell: bash
+        run: |
+          set -euo pipefail
+          composer run-script check-cs -- --format=checkstyle | cs2pr

From 4b27dd0ede6058abcfd76fa4615bde8b15bbf0c3 Mon Sep 17 00:00:00 2001
From: Andrew Longosz <alongosz@users.noreply.github.com>
Date: Sat, 5 Sep 2026 20:15:01 +0200
Subject: [PATCH 2/2] [GHA] Added missing workflows from bundle-generator
 skeleton

- .github/workflows/pr-check.yaml
- .github/workflows/release.yaml
- .github/workflows/reviewers.yaml

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 .github/workflows/pr-check.yaml  | 12 ++++++++++++
 .github/workflows/release.yaml   | 13 +++++++++++++
 .github/workflows/reviewers.yaml | 15 +++++++++++++++
 3 files changed, 40 insertions(+)
 create mode 100644 .github/workflows/pr-check.yaml
 create mode 100644 .github/workflows/release.yaml
 create mode 100644 .github/workflows/reviewers.yaml

diff --git a/.github/workflows/pr-check.yaml b/.github/workflows/pr-check.yaml
new file mode 100644
index 0000000..d3413dc
--- /dev/null
+++ b/.github/workflows/pr-check.yaml
@@ -0,0 +1,12 @@
+name: PR check
+on:
+    pull_request:
+        types:
+            - opened
+            - synchronize
+            - reopened
+            - edited
+
+jobs:
+    test-base-branch:
+        uses: ibexa/gh-workflows/.github/workflows/pr-check.yml@main
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
new file mode 100644
index 0000000..beedd0c
--- /dev/null
+++ b/.github/workflows/release.yaml
@@ -0,0 +1,13 @@
+name: Call Automatic Changelog Generator for tag Workflow
+
+on:
+    push:
+        tags:
+            - 'v*'
+            - '!v*-alpha*'
+
+jobs:
+    create_release_for_tag:
+        uses: ibexa/gh-workflows/.github/workflows/release_bundle.yml@main
+        secrets:
+            JIRA_TOKEN: ${{ secrets.JIRA_TOKEN }}
diff --git a/.github/workflows/reviewers.yaml b/.github/workflows/reviewers.yaml
new file mode 100644
index 0000000..0c55d2d
--- /dev/null
+++ b/.github/workflows/reviewers.yaml
@@ -0,0 +1,15 @@
+name: On PR Review Requested
+
+on:
+    pull_request:
+        types: [review_requested]
+
+jobs:
+    call-expand-team-reviewers:
+        if: ${{ github.event.requested_team }}
+        uses: ibexa/gh-workflows/.github/workflows/expand-team-reviewers.yml@main
+        with:
+            requested_team: ${{ github.event.requested_team.slug }}
+            pull_request_number: ${{ github.event.pull_request.number }}
+            repository: ${{ github.repository }}
+        secrets: inherit