GitHub Actions: Use typisttech/.github v3 (#20)

Author: tangrufus

.github/actions/set-envs/action.yml

@@ -0,0 +1,26 @@
+name: Audit
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '23 3 * * 1' # Weekly on Monday
+  pull_request:
+    branches:
+      - main
+  push:
+    branches:
+      - main
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref_name }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  php:
+    uses: typisttech/.github/.github/workflows/audit-php.yml@v3
+
+  go:
+    uses: typisttech/.github/.github/workflows/audit-go.yml@v3

.github/workflows/audit.yml

@@ -1,19 +1,21 @@
 name: Dependabot Auto-merge
 
-on: pull_request
+on:
+  pull_request:
+    branches:
+      - main
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.run_id }}
   cancel-in-progress: true
 
-permissions: {}
+permissions:
+  contents: write
+  pull-requests: write
 
 jobs:
   dependabot:
-    permissions:
-      contents: write
-      pull-requests: write
-    uses: typisttech/.github/.github/workflows/dependabot-auto-merge.yml@v2
+    uses: typisttech/.github/.github/workflows/dependabot-auto-merge.yml@v3
     with:
       minor: true
       patch: true

.github/workflows/composer-audit.yml

@@ -0,0 +1,22 @@
+name: Format
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - main
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref_name }}
+  cancel-in-progress: true
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  php:
+    uses: typisttech/.github/.github/workflows/format-php.yml@v3
+    with:
+      pint-extra-paths: bin/*
+    secrets: inherit

.github/workflows/composer-normalize.yml

@@ -13,33 +13,22 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref_name }}-${{ github.event.pull_request.number || github.sha }}
   cancel-in-progress: true
 
-permissions: {}
+permissions:
+  contents: read
 
 jobs:
-  phpstan:
+  php:
+    uses: typisttech/.github/.github/workflows/lint-php.yml@v3
+    with:
+      box: true
+  
+  go:
+    uses: typisttech/.github/.github/workflows/lint-go.yml@v3
+
+  wait-for-all-lint:
+    needs:
+      - php
+      - go
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
-
-      - uses: shivammathur/setup-php@v2
-        with:
-          php-version: '8.4'
-          coverage: none
-      - uses: ramsey/composer-install@v3
-
-      - run: vendor/bin/phpstan analyse --error-format=github
-
-  box:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          fetch-depth: 0
-
-      - uses: shivammathur/setup-php@v2
-        with:
-          php-version: '8.4'
-          coverage: none
-          tools: box:4
-
-      - run: box validate
+      - run: exit 0

.github/workflows/dependabot-auto-merge.yml

@@ -55,15 +55,15 @@ jobs:
         run: |
           for arch in ${ARCHS}; do
             echo "::group::==> ${arch}"
-            gh attestation verify --repo "${REPO}" "composer-semver_Linux_${arch}.deb"
+            gh attestation verify --repo "${REPO}" "composer-semver_linux_${arch}.deb"
             echo "::endgroup::"
           done
         env:
           REPO: ${{ github.repository }}
           ARCHS: "arm64 amd64"
           GH_TOKEN: ${{ github.token }}
 
-      - name: Push composer-semver_Linux_arm64.deb
+      - name: Push composer-semver_linux_arm64.deb
         uses: cloudsmith-io/[email protected]
         with:
           api-key: ${{ secrets.CLOUDSMITH_API_KEY_TASTENDRUCK }}
@@ -74,9 +74,9 @@ jobs:
           distro: any-distro
           release: any-version
           no-wait-for-sync: true
-          file: composer-semver_Linux_arm64.deb
+          file: composer-semver_linux_arm64.deb
 
-      - name: Push composer-semver_Linux_amd64.deb
+      - name: Push composer-semver_linux_amd64.deb
         uses: cloudsmith-io/[email protected]
         with:
           api-key: ${{ secrets.CLOUDSMITH_API_KEY_TASTENDRUCK }}
@@ -87,4 +87,4 @@ jobs:
           distro: any-distro
           release: any-version
           no-wait-for-sync: true
-          file: composer-semver_Linux_amd64.deb
+          file: composer-semver_linux_amd64.deb