IBX-11778: Updated GHA workflows to latest action versions and runners - #44
Merged
Conversation
The reusable rector.yml workflow in ibexa/gh-workflows no longer declares the TRAVIS_GITHUB_TOKEN secret, and GitHub Actions rejects reusable-workflow calls that pass undeclared secrets, so the rector workflow failed in generated EE bundles. Replaced it with the AUTOMATION_CLIENT_ID/AUTOMATION_CLIENT_SECRET pair the workflow actually declares and uses. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Aligned all workflows (own CI and the three skeletons) with current ibexa/core conventions: actions/checkout v7, actions/setup-node v7, and ubuntu-26.04 runners (replacing v4-v6, ubuntu-24.04, and ubuntu-latest). The oss/ee frontend-ci workflows had been missed by IBX-11779 and were still on checkout/setup-node v4. Also added PHP 8.4 to the generator's own test matrix, matching the skeletons. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
The pr-assign workflow is obsolete; the bundle-generator skeletons act as the source of truth for workflows of newly generated packages, so it should no longer be shipped to them. Existing repositories still carrying it will be cleaned up in follow-ups. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
alongosz
commented
Jul 16, 2026
New Ibexa bundles no longer use a main branch, only version branches, so the ibexa-oss/ibexa-ee skeleton workflows should not trigger on push to main. The extension skeleton is meant for 3rd-party bundles and keeps the main trigger. The backend-ci workflows had already been correct; this fixes frontend-ci, rector, and browser-tests. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
alongosz
requested review from
Steveb-p,
ViniTou,
barw4,
bnowak,
ciastektk,
konradoboza,
mikadamczyk,
tbialcz and
wiewiurdp
July 16, 2026 14:18
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
bnowak
approved these changes
Jul 17, 2026
bnowak
left a comment
bnowak
left a comment
There was a problem hiding this comment.
Apart of this PR changes, could we please:
- update similar things (GHA workflow & ubuntu versions) in skeletons?
- update deptrac in skeletons to ^4.6?
as separate PR
konradoboza
approved these changes
Jul 17, 2026
ViniTou
approved these changes
Jul 17, 2026
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
The cs-fix jobs intentionally stay on a single PHP version, the lowest supported one (8.3), as code style needs to be checked only once. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Related PRs:
Description:
Aligned all GHA workflows (the generator's own CI and the three skeletons) with the current target conventions:
actions/checkoutv4/v6 → v7,actions/setup-nodev4/v5 → v7 (the oss/eefrontend-ci.yamlhad been missed by IBX-11779 and were still on v4),ubuntu-24.04/ubuntu-latesttoubuntu-26.04,composer.jsonrequires>=8.3; the skeletons already test 8.3 + 8.4),pr-assign.yamlfrom the oss/ee skeletons (repositories generated from these skeletons should no longer ship it; existing repositories will need follow-up cleanups),mainbranch push triggers from the oss/ee skeleton workflows (frontend-ci,rector,browser-tests) — new Ibexa bundles use only version branches; theextensionskeleton keepsmainas it targets 3rd-party bundles.Additionally, fixed the EE skeleton
rector.yaml: it passed aTRAVIS_GITHUB_TOKENsecret that the reusableibexa/gh-workflows/rector.ymlno longer declares — GitHub Actions rejects reusable-workflow calls passing undeclared secrets, so the Rector workflow failed in generated EE bundles. Replaced it with theAUTOMATION_CLIENT_ID/AUTOMATION_CLIENT_SECRETpair the workflow actually declares and uses.Verified: all touched YAML parses, no stale
checkout@v4–v6/setup-node@v4–v5/ubuntu-24.04/ubuntu-latest/TRAVIS_GITHUB_TOKENreferences remain, andcomposer phpstan/check-cs/testpass locally.🤖 Generated with Claude Code