From 81647dab7d3e1dd8531056fb6cc815c5904391fc Mon Sep 17 00:00:00 2001
From: Andrew Longosz <alongosz@users.noreply.github.com>
Date: Sun, 6 Sep 2026 20:59:20 +0200
Subject: [PATCH] [GHA] Updated GitHub Actions workflows to latest versions and
 standards

- Standardized runner labels to ubuntu-26.04 in backend-ci.yaml
- Renamed the backend workflow from "CI" to "Backend CI" and added a
  bare workflow_dispatch trigger
- Dropped the stale "main" push-trigger branch from backend-ci.yaml
  and browser-tests.yaml
- Stated php-version explicitly in every composer-install action step
- Guarded the piped check-cs step with set -euo pipefail
---
 .github/workflows/backend-ci.yaml    | 18 ++++++++++++------
 .github/workflows/browser-tests.yaml |  1 -
 2 files changed, 12 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/backend-ci.yaml b/.github/workflows/backend-ci.yaml
index a7eb3e6..d14b165 100644
--- a/.github/workflows/backend-ci.yaml
+++ b/.github/workflows/backend-ci.yaml
@@ -1,16 +1,16 @@
-name: CI
+name: Backend CI
 
 on:
   push:
     branches:
-      - main
       - '[0-9]+.[0-9]+'
   pull_request: ~
+  workflow_dispatch: ~
 
 jobs:
   cs_fix:
     name: Run code style check
-    runs-on: "ubuntu-24.04"
+    runs-on: "ubuntu-26.04"
     strategy:
       matrix:
         php:
@@ -20,17 +20,21 @@ jobs:
 
       - uses: ibexa/gh-workflows/actions/composer-install@main
         with:
+          php-version: ${{ matrix.php }}
           gh-client-id: ${{ secrets.AUTOMATION_CLIENT_ID }}
           gh-client-secret: ${{ secrets.AUTOMATION_CLIENT_SECRET }}
           satis-network-key: ${{ secrets.SATIS_NETWORK_KEY }}
           satis-network-token: ${{ secrets.SATIS_NETWORK_TOKEN }}
 
       - name: Run code style check
-        run: composer run-script check-cs -- --format=checkstyle | cs2pr
+        shell: bash
+        run: |
+          set -euo pipefail
+          composer run-script check-cs -- --format=checkstyle | cs2pr
 
   phpstan:
     name: Run PHPStan analysis
-    runs-on: "ubuntu-24.04"
+    runs-on: "ubuntu-26.04"
     strategy:
       matrix:
         php:
@@ -42,6 +46,7 @@ jobs:
 
       - uses: ibexa/gh-workflows/actions/composer-install@main
         with:
+          php-version: ${{ matrix.php }}
           gh-client-id: ${{ secrets.AUTOMATION_CLIENT_ID }}
           gh-client-secret: ${{ secrets.AUTOMATION_CLIENT_SECRET }}
           satis-network-key: ${{ secrets.SATIS_NETWORK_KEY }}
@@ -52,7 +57,7 @@ jobs:
 
   tests:
     name: Tests
-    runs-on: "ubuntu-24.04"
+    runs-on: "ubuntu-26.04"
     timeout-minutes: 10
 
     strategy:
@@ -69,6 +74,7 @@ jobs:
 
       - uses: ibexa/gh-workflows/actions/composer-install@main
         with:
+          php-version: ${{ matrix.php }}
           gh-client-id: ${{ secrets.AUTOMATION_CLIENT_ID }}
           gh-client-secret: ${{ secrets.AUTOMATION_CLIENT_SECRET }}
           satis-network-key: ${{ secrets.SATIS_NETWORK_KEY }}
diff --git a/.github/workflows/browser-tests.yaml b/.github/workflows/browser-tests.yaml
index 1a74054..2d9e105 100644
--- a/.github/workflows/browser-tests.yaml
+++ b/.github/workflows/browser-tests.yaml
@@ -3,7 +3,6 @@ name: Browser tests
 on:
     push:
         branches:
-            - main
             - '[0-9]+.[0-9]+'
     pull_request: ~