From 64c53c35395095014369b172eb5fbafba130a05b Mon Sep 17 00:00:00 2001
From: Andrew Longosz <alongosz@users.noreply.github.com>
Date: Sun, 6 Sep 2026 13:39:29 +0200
Subject: [PATCH] [GHA] Updated GitHub Actions workflows to latest versions and
 standards

- Renamed the CI workflow to Backend CI and added a bare
  workflow_dispatch trigger
- Updated actions/checkout to v7
- Replaced direct ramsey/composer-install steps (and the now-redundant
  setup-php steps, whose settings match the action defaults) with the
  ibexa/gh-workflows/actions/composer-install@main composite action,
  passing php-version explicitly
- Standardized runners to ubuntu-26.04
- Dropped non-existent main branch from push triggers
- Guarded the code style check against masked pipe failures with
  set -euo pipefail (IBX-11853)
- Removed the deprecated pr-assign.yaml workflow

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
---
 .github/workflows/backend-ci.yaml | 45 ++++++++++++++-----------------
 .github/workflows/pr-assign.yaml  | 10 -------
 2 files changed, 20 insertions(+), 35 deletions(-)
 delete mode 100644 .github/workflows/pr-assign.yaml

diff --git a/.github/workflows/backend-ci.yaml b/.github/workflows/backend-ci.yaml
index 45e0521..07448c2 100644
--- a/.github/workflows/backend-ci.yaml
+++ b/.github/workflows/backend-ci.yaml
@@ -1,41 +1,40 @@
-name: CI
+name: Backend CI
 
 on:
     push:
         branches:
-            - main
             - '[0-9]+.[0-9]+'
     pull_request: ~
+    workflow_dispatch: ~
 
 jobs:
     cs-fix:
         name: Run code style check
-        runs-on: "ubuntu-24.04"
+        runs-on: "ubuntu-26.04"
         strategy:
             matrix:
                 php:
                     - '8.1'
         steps:
-            - uses: actions/checkout@v2
+            - uses: actions/checkout@v7
 
-            - name: Setup PHP Action
-              uses: shivammathur/setup-php@v2
+            - uses: ibexa/gh-workflows/actions/composer-install@main
               with:
                   php-version: ${{ matrix.php }}
-                  coverage: none
-                  extensions: 'pdo_sqlite, gd'
-                  tools: cs2pr
-
-            - uses: "ramsey/composer-install@v1"
-              with:
-                  dependency-versions: "highest"
+                  gh-client-id: ${{ secrets.AUTOMATION_CLIENT_ID }}
+                  gh-client-secret: ${{ secrets.AUTOMATION_CLIENT_SECRET }}
+                  satis-network-key: ${{ secrets.SATIS_NETWORK_KEY }}
+                  satis-network-token: ${{ secrets.SATIS_NETWORK_TOKEN }}
 
             - name: Run code style check
-              run: composer run-script check-cs -- --format=checkstyle | cs2pr
+              shell: bash
+              run: |
+                  set -euo pipefail
+                  composer run-script check-cs -- --format=checkstyle | cs2pr
 
     tests:
         name: Unit tests
-        runs-on: "ubuntu-24.04"
+        runs-on: "ubuntu-26.04"
         timeout-minutes: 15
 
         strategy:
@@ -47,19 +46,15 @@ jobs:
                     - '8.4'
 
         steps:
-            - uses: actions/checkout@v2
+            - uses: actions/checkout@v7
 
-            - name: Setup PHP Action
-              uses: shivammathur/setup-php@v2
+            - uses: ibexa/gh-workflows/actions/composer-install@main
               with:
                   php-version: ${{ matrix.php }}
-                  coverage: none
-                  extensions: pdo_sqlite, gd
-                  tools: cs2pr
-
-            - uses: "ramsey/composer-install@v1"
-              with:
-                  dependency-versions: "highest"
+                  gh-client-id: ${{ secrets.AUTOMATION_CLIENT_ID }}
+                  gh-client-secret: ${{ secrets.AUTOMATION_CLIENT_SECRET }}
+                  satis-network-key: ${{ secrets.SATIS_NETWORK_KEY }}
+                  satis-network-token: ${{ secrets.SATIS_NETWORK_TOKEN }}
 
             - name: Setup problem matchers for PHPUnit
               run: echo "::add-matcher::${{ runner.tool_cache }}/phpunit.json"
diff --git a/.github/workflows/pr-assign.yaml b/.github/workflows/pr-assign.yaml
deleted file mode 100644
index 302423e..0000000
--- a/.github/workflows/pr-assign.yaml
+++ /dev/null
@@ -1,10 +0,0 @@
-name: Assign Pull Request to maintainers
-
-on:
-    pull_request_target:
-
-jobs:
-    assign:
-        uses: ibexa/gh-workflows/.github/workflows/pr-assign.yml@main
-        secrets:
-            robot-token: ${{ secrets.EZROBOT_PAT }}