chore: consolidate caller workflows into 4 grouped files

.github/workflows/auto-merge-deps.yml

@@ -1,8 +1,10 @@
 name: Auto-merge dependency PRs
+
 on:
-  pull_request_target:
-    types: [opened, synchronize, reopened]
+  pull_request:
+
 permissions: {}
+
 jobs:
   auto-merge:
     uses: netresearch/typo3-ci-workflows/.github/workflows/auto-merge-deps.yml@main

.github/workflows/ci.yml

@@ -1,19 +1,78 @@
 name: CI
+
 on:
   push:
   pull_request:
+  schedule:
+    - cron: '0 6 * * 1'
+
 permissions: {}
+
 jobs:
   ci:
     uses: netresearch/typo3-ci-workflows/.github/workflows/ci.yml@main
     permissions:
       contents: read
     with:
-      php-versions: '["8.2", "8.3", "8.4", "8.5"]'
-      typo3-versions: '["^13.4", "^14.0"]'
-      typo3-packages: '["typo3/cms-core", "typo3/cms-backend"]'
-      php-extensions: intl, mbstring, xml, sodium, json
-      run-functional-tests: true
-      upload-coverage: true
+        php-versions: '["8.2","8.3","8.4","8.5"]'
+        typo3-versions: '["^13.4","^14.0"]'
+        run-functional-tests: true
+        upload-coverage: true
+        php-extensions: intl, mbstring, xml, sodium, json
     secrets:
       CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+
+  security:
+    uses: netresearch/typo3-ci-workflows/.github/workflows/security.yml@main
+    permissions:
+      contents: read
+      security-events: write
+    secrets:
+      GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }}
+
+  fuzz:
+    uses: netresearch/typo3-ci-workflows/.github/workflows/fuzz.yml@main
+    permissions:
+      contents: read
+
+  license-check:
+    uses: netresearch/typo3-ci-workflows/.github/workflows/license-check.yml@main
+    permissions:
+      contents: read
+
+  codeql:
+    uses: netresearch/typo3-ci-workflows/.github/workflows/codeql.yml@main
+    permissions:
+      contents: read
+      security-events: write
+      actions: read
+
+  scorecard:
+    if: github.event_name == 'schedule' || (github.event_name == 'push' && github.ref_name == github.event.repository.default_branch)
+    uses: netresearch/typo3-ci-workflows/.github/workflows/scorecard.yml@main
+    permissions:
+      contents: read
+      security-events: write
+      id-token: write
+      actions: read
+
+  dependency-review:
+    if: github.event_name == 'pull_request'
+    uses: netresearch/typo3-ci-workflows/.github/workflows/dependency-review.yml@main
+    permissions:
+      contents: read
+      pull-requests: write
+
+  pr-quality:
+    if: github.event_name == 'pull_request'
+    uses: netresearch/typo3-ci-workflows/.github/workflows/pr-quality.yml@main
+    permissions:
+      contents: read
+      pull-requests: write
+
+  labeler:
+    if: github.event_name == 'pull_request'
+    uses: netresearch/typo3-ci-workflows/.github/workflows/labeler.yml@main
+    permissions:
+      contents: read
+      pull-requests: write

.github/workflows/community.yml

@@ -0,0 +1,34 @@
+name: Community
+
+on:
+  schedule:
+    - cron: '0 0 * * *'
+  issues:
+    types: [opened]
+  pull_request_target:
+    types: [opened]
+  workflow_dispatch:
+
+permissions: {}
+
+jobs:
+  stale:
+    if: github.event_name == 'schedule' || github.event_name == 'workflow_dispatch'
+    uses: netresearch/typo3-ci-workflows/.github/workflows/stale.yml@main
+    permissions:
+      issues: write
+      pull-requests: write
+
+  lock:
+    if: github.event_name == 'schedule' || github.event_name == 'workflow_dispatch'
+    uses: netresearch/typo3-ci-workflows/.github/workflows/lock.yml@main
+    permissions:
+      issues: write
+      pull-requests: write
+
+  greetings:
+    if: github.event_name == 'issues' || github.event_name == 'pull_request_target'
+    uses: netresearch/typo3-ci-workflows/.github/workflows/greetings.yml@main
+    permissions:
+      issues: write
+      pull-requests: write