Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions .gitattributes
Original file line number Diff line number Diff line change
Expand Up @@ -8,3 +8,8 @@
/phpunit.xml export-ignore
/tests export-ignore
/.editorconfig export-ignore
/phpstan.neon export-ignore
/captainhook.json export-ignore
/pint.json export-ignore
/CHANGELOG.md export-ignore
/README.md export-ignore
Comment on lines +14 to +15
Copy link

Copilot AI Mar 31, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The new export-ignore entries for CHANGELOG.md and README.md don't follow the column alignment used in the rest of this file (see lines 5-13). Aligning spacing keeps the file consistent and easier to scan.

Suggested change
/CHANGELOG.md export-ignore
/README.md export-ignore
/CHANGELOG.md export-ignore
/README.md export-ignore

Copilot uses AI. Check for mistakes.
11 changes: 0 additions & 11 deletions .github/release-please-config.json

This file was deleted.

73 changes: 0 additions & 73 deletions .github/workflows/dependabot-auto-merge.yml

This file was deleted.

30 changes: 0 additions & 30 deletions .github/workflows/release-please.yml

This file was deleted.

22 changes: 22 additions & 0 deletions .github/workflows/release.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
name: Release

on:
pull_request:
types: [ closed ]

jobs:
release:
if: github.event.pull_request.merged == true
runs-on: ubuntu-latest
permissions:
contents: write
pull-requests: write
steps:
- uses: actions/checkout@v6
with:
ref: ${{ github.event.pull_request.merge_commit_sha }}
Comment on lines +4 to +17
Copy link

Copilot AI Mar 31, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This workflow runs on pull_request (closed) but performs write operations (contents: write, creating/updating releases). For PRs coming from forks, GitHub Actions restricts the GITHUB_TOKEN to read-only on pull_request events regardless of the permissions block, which can cause the release step to fail. If releases should run for fork-based contributions, consider triggering on push to main after merge, or using pull_request_target with appropriate hardening (checkout the merge commit SHA and avoid running untrusted code).

Suggested change
pull_request:
types: [ closed ]
jobs:
release:
if: github.event.pull_request.merged == true
runs-on: ubuntu-latest
permissions:
contents: write
pull-requests: write
steps:
- uses: actions/checkout@v6
with:
ref: ${{ github.event.pull_request.merge_commit_sha }}
push:
branches:
- main
jobs:
release:
runs-on: ubuntu-latest
permissions:
contents: write
steps:
- uses: actions/checkout@v6
with:
ref: ${{ github.sha }}

Copilot uses AI. Check for mistakes.
fetch-depth: 0
- uses: offload-project/release-champion@v1
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
draft-release: false
3 changes: 2 additions & 1 deletion composer.json
Original file line number Diff line number Diff line change
Expand Up @@ -46,7 +46,8 @@
"test-coverage": "pest --coverage",
"analyse": "phpstan analyse --memory-limit=-1",
"analyse-baseline": "phpstan analyse --memory-limit=-1 --generate-baseline",
"pint": "vendor/bin/pint"
"pint": "vendor/bin/pint",
"install-hooks": "vendor/bin/captainhook install --only-enabled"
},
"extra": {
"laravel": {
Expand Down
Loading