From ef4b7c469670fabd9ffe24f2e4cebed06c4a287f Mon Sep 17 00:00:00 2001
From: Andrew Longosz <alongosz@users.noreply.github.com>
Date: Sun, 6 Sep 2026 14:43:59 +0200
Subject: [PATCH] [GHA] Updated GitHub Actions workflows to latest versions and
 standards

- Renamed the CI workflow to Backend CI and added a bare
  workflow_dispatch trigger (IBX-12062 PoC follow-up, without the
  Slack notification parts)
- Updated actions/checkout and actions/setup-node to v7
- Standardized runners to ubuntu-26.04
- Dropped non-existent main branch from push triggers
- Removed the deprecated pr-assign.yaml workflow
- Passed the PHP version to the composer-install action explicitly;
  the implicit matrix.php fallback inside the action is kept only for
  backwards compatibility (IBX-11907, gh-workflows#115)
- Guarded the code style check against masked pipe failures: without
  pipefail the check-cs exit code is swallowed by the pipe into cs2pr,
  letting style violations pass CI (IBX-11853, bundle-generator#45)
---
 .github/workflows/backend-ci.yaml    | 24 +++++++++++++++---------
 .github/workflows/browser-tests.yaml |  1 -
 .github/workflows/frontend-ci.yaml   |  7 +++----
 .github/workflows/pr-assign.yaml     | 10 ----------
 4 files changed, 18 insertions(+), 24 deletions(-)
 delete mode 100644 .github/workflows/pr-assign.yaml

diff --git a/.github/workflows/backend-ci.yaml b/.github/workflows/backend-ci.yaml
index 54f8bbd..2ddd0d8 100644
--- a/.github/workflows/backend-ci.yaml
+++ b/.github/workflows/backend-ci.yaml
@@ -1,36 +1,40 @@
-name: CI
+name: Backend CI
 
 on:
   push:
     branches:
-      - main
       - '[0-9]+.[0-9]+'
   pull_request: ~
+  workflow_dispatch: ~
 
 jobs:
   cs-fix:
     name: Run code style check
-    runs-on: "ubuntu-24.04"
+    runs-on: "ubuntu-26.04"
     strategy:
       matrix:
         php:
           - '8.1'
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: ibexa/gh-workflows/actions/composer-install@main
         with:
+          php-version: ${{ matrix.php }}
           gh-client-id: ${{ secrets.AUTOMATION_CLIENT_ID }}
           gh-client-secret: ${{ secrets.AUTOMATION_CLIENT_SECRET }}
           satis-network-key: ${{ secrets.SATIS_NETWORK_KEY }}
           satis-network-token: ${{ secrets.SATIS_NETWORK_TOKEN }}
 
       - name: Run code style check
-        run: composer run-script check-cs -- --format=checkstyle | cs2pr
+        shell: bash
+        run: |
+          set -euo pipefail
+          composer run-script check-cs -- --format=checkstyle | cs2pr
 
   tests:
     name: Tests
-    runs-on: "ubuntu-24.04"
+    runs-on: "ubuntu-26.04"
     timeout-minutes: 10
 
     strategy:
@@ -42,10 +46,11 @@ jobs:
           - '8.4'
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: ibexa/gh-workflows/actions/composer-install@main
         with:
+          php-version: ${{ matrix.php }}
           gh-client-id: ${{ secrets.AUTOMATION_CLIENT_ID }}
           gh-client-secret: ${{ secrets.AUTOMATION_CLIENT_SECRET }}
           satis-network-key: ${{ secrets.SATIS_NETWORK_KEY }}
@@ -63,7 +68,7 @@ jobs:
   integration-tests:
     name: Tests
     needs: tests
-    runs-on: "ubuntu-24.04"
+    runs-on: "ubuntu-26.04"
     timeout-minutes: 10
 
     strategy:
@@ -75,10 +80,11 @@ jobs:
           - '8.4'
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: ibexa/gh-workflows/actions/composer-install@main
         with:
+          php-version: ${{ matrix.php }}
           gh-client-id: ${{ secrets.AUTOMATION_CLIENT_ID }}
           gh-client-secret: ${{ secrets.AUTOMATION_CLIENT_SECRET }}
           satis-network-key: ${{ secrets.SATIS_NETWORK_KEY }}
diff --git a/.github/workflows/browser-tests.yaml b/.github/workflows/browser-tests.yaml
index 724635a..95cf6f1 100644
--- a/.github/workflows/browser-tests.yaml
+++ b/.github/workflows/browser-tests.yaml
@@ -3,7 +3,6 @@ name: Browser tests
 on:
     push:
         branches:
-            - main
             - '[0-9]+.[0-9]+'
     pull_request: ~
 
diff --git a/.github/workflows/frontend-ci.yaml b/.github/workflows/frontend-ci.yaml
index 9306cbb..be3a66f 100644
--- a/.github/workflows/frontend-ci.yaml
+++ b/.github/workflows/frontend-ci.yaml
@@ -3,19 +3,18 @@ name: Frontend build
 on:
     push:
         branches:
-            - main
             - '[0-9]+.[0-9]+'
     pull_request: ~
 
 jobs:
     frontend-test:
         name: Frontend build test
-        runs-on: 'ubuntu-24.04'
+        runs-on: 'ubuntu-26.04'
         timeout-minutes: 5
 
         steps:
-            - uses: actions/checkout@v5
-            - uses: actions/setup-node@v2
+            - uses: actions/checkout@v7
+            - uses: actions/setup-node@v7
               with:
                   node-version: '18'
             - run: yarn install
diff --git a/.github/workflows/pr-assign.yaml b/.github/workflows/pr-assign.yaml
deleted file mode 100644
index 302423e..0000000
--- a/.github/workflows/pr-assign.yaml
+++ /dev/null
@@ -1,10 +0,0 @@
-name: Assign Pull Request to maintainers
-
-on:
-    pull_request_target:
-
-jobs:
-    assign:
-        uses: ibexa/gh-workflows/.github/workflows/pr-assign.yml@main
-        secrets:
-            robot-token: ${{ secrets.EZROBOT_PAT }}