From a08e29f9d851b60941aee460688920a7ae41ede2 Mon Sep 17 00:00:00 2001
From: Andrew Longosz <alongosz@users.noreply.github.com>
Date: Sun, 13 Sep 2026 20:03:11 +0200
Subject: [PATCH] IBX-11778: Updated GitHub Actions workflows to org standard
 (#12)

For more details see https://ibexa.atlassian.net/browse/IBX-11778 and https://github.com/ibexa/phpstan/pull/12

Key changes:

* Renamed the CI workflow to "Backend CI" and added a bare workflow_dispatch trigger (IBX-12062)

* Bumped actions/checkout to v7

* Standardized all runner labels to ubuntu-26.04

* Dropped the non-existent main branch from the push triggers of backend-ci

* Passed the PHP version to the shared composer-install action explicitly (IBX-11907)

* Guarded the code style check with set -euo pipefail so cs2pr no longer masks check-cs failures (IBX-11853)

* Added the missing skeleton workflows: reviewers.yaml, release.yaml

---------

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
---
 .github/workflows/backend-ci.yaml | 19 ++++++++++++-------
 .github/workflows/release.yaml    | 13 +++++++++++++
 .github/workflows/reviewers.yaml  | 15 +++++++++++++++
 3 files changed, 40 insertions(+), 7 deletions(-)
 create mode 100644 .github/workflows/release.yaml
 create mode 100644 .github/workflows/reviewers.yaml

diff --git a/.github/workflows/backend-ci.yaml b/.github/workflows/backend-ci.yaml
index fafd9f1..9bb3419 100644
--- a/.github/workflows/backend-ci.yaml
+++ b/.github/workflows/backend-ci.yaml
@@ -1,36 +1,40 @@
-name: Backend build
+name: Backend CI
 
 on:
     push:
         branches:
-            - main
             - '[0-9]+.[0-9]+'
     pull_request: ~
+    workflow_dispatch: ~
 
 jobs:
     cs-fix:
         name: Run code style check
-        runs-on: "ubuntu-22.04"
+        runs-on: "ubuntu-26.04"
         strategy:
             matrix:
                 php:
                     - '8.3'
         steps:
-            -   uses: actions/checkout@v4
+            -   uses: actions/checkout@v7
 
             -   uses: ibexa/gh-workflows/actions/composer-install@main
                 with:
+                    php-version: ${{ matrix.php }}
                     gh-client-id: ${{ secrets.AUTOMATION_CLIENT_ID }}
                     gh-client-secret: ${{ secrets.AUTOMATION_CLIENT_SECRET }}
                     satis-network-key: ${{ secrets.SATIS_NETWORK_KEY }}
                     satis-network-token: ${{ secrets.SATIS_NETWORK_TOKEN }}
 
             -   name: Run code style check
-                run: composer run-script check-cs -- --format=checkstyle | cs2pr
+                shell: bash
+                run: |
+                    set -euo pipefail
+                    composer run-script check-cs -- --format=checkstyle | cs2pr
 
     tests:
         name: Tests
-        runs-on: "ubuntu-22.04"
+        runs-on: "ubuntu-26.04"
         timeout-minutes: 10
 
         strategy:
@@ -42,10 +46,11 @@ jobs:
                     - '8.4'
 
         steps:
-            -   uses: actions/checkout@v4
+            -   uses: actions/checkout@v7
 
             -   uses: ibexa/gh-workflows/actions/composer-install@main
                 with:
+                    php-version: ${{ matrix.php }}
                     gh-client-id: ${{ secrets.AUTOMATION_CLIENT_ID }}
                     gh-client-secret: ${{ secrets.AUTOMATION_CLIENT_SECRET }}
                     satis-network-key: ${{ secrets.SATIS_NETWORK_KEY }}
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
new file mode 100644
index 0000000..beedd0c
--- /dev/null
+++ b/.github/workflows/release.yaml
@@ -0,0 +1,13 @@
+name: Call Automatic Changelog Generator for tag Workflow
+
+on:
+    push:
+        tags:
+            - 'v*'
+            - '!v*-alpha*'
+
+jobs:
+    create_release_for_tag:
+        uses: ibexa/gh-workflows/.github/workflows/release_bundle.yml@main
+        secrets:
+            JIRA_TOKEN: ${{ secrets.JIRA_TOKEN }}
diff --git a/.github/workflows/reviewers.yaml b/.github/workflows/reviewers.yaml
new file mode 100644
index 0000000..0c55d2d
--- /dev/null
+++ b/.github/workflows/reviewers.yaml
@@ -0,0 +1,15 @@
+name: On PR Review Requested
+
+on:
+    pull_request:
+        types: [review_requested]
+
+jobs:
+    call-expand-team-reviewers:
+        if: ${{ github.event.requested_team }}
+        uses: ibexa/gh-workflows/.github/workflows/expand-team-reviewers.yml@main
+        with:
+            requested_team: ${{ github.event.requested_team.slug }}
+            pull_request_number: ${{ github.event.pull_request.number }}
+            repository: ${{ github.repository }}
+        secrets: inherit