From d29f571dbc64264c1fc71d5b756fa7d92f5f1094 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Felipe=20Say=C3=A3o=20Lobato=20Abreu?=
 <github@mentordosnerds.com>
Date: Fri, 24 Apr 2026 19:20:00 -0300
Subject: [PATCH 1/6] fix: update dev-tools workflow wrappers

---
 .github/workflows/changelog.yml |  1 +
 .github/workflows/tests.yml     | 12 ++++++++++++
 .github/workflows/wiki.yml      |  2 ++
 3 files changed, 15 insertions(+)

diff --git a/.github/workflows/changelog.yml b/.github/workflows/changelog.yml
index 2490ecb..bf4568b 100644
--- a/.github/workflows/changelog.yml
+++ b/.github/workflows/changelog.yml
@@ -31,6 +31,7 @@ on:
 permissions:
   contents: write
   pull-requests: write
+  repository-projects: write
 
 jobs:
   changelog:
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index d9b5d53..bff4e9e 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -2,6 +2,11 @@ name: "Fast Forward Test Suite"
 
 on:
   push:
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
   workflow_dispatch:
     inputs:
       max-outdated:
@@ -9,13 +14,20 @@ on:
         required: false
         type: number
         default: -1
+      publish-required-statuses:
+        description: Mirror required test matrix checks as commit statuses for workflow-dispatched runs.
+        required: false
+        type: boolean
+        default: false
 
 permissions:
   contents: read
+  statuses: write
 
 jobs:
   tests:
     uses: php-fast-forward/dev-tools/.github/workflows/tests.yml@main
     with:
       max-outdated: ${{ inputs.max-outdated || -1 }}
+      publish-required-statuses: ${{ inputs.publish-required-statuses || false }}
     secrets: inherit
diff --git a/.github/workflows/wiki.yml b/.github/workflows/wiki.yml
index d54c27a..cdf2726 100644
--- a/.github/workflows/wiki.yml
+++ b/.github/workflows/wiki.yml
@@ -5,6 +5,7 @@ on:
     types: [opened, synchronize, reopened]
 
 permissions:
+  actions: write
   contents: write
   pull-requests: read
 
@@ -15,6 +16,7 @@ concurrency:
 jobs:
   preview:
     permissions:
+      actions: write
       contents: write
       pull-requests: read
     # Pull-request wiki previews live here. Publication and preview cleanup are

From e6249c392db7e8a0694676c3d2d1e2e4fcd2a3e8 Mon Sep 17 00:00:00 2001
From: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
Date: Fri, 24 Apr 2026 22:20:44 +0000
Subject: [PATCH 2/6] Update wiki submodule pointer for PR #3

---
 .github/wiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/wiki b/.github/wiki
index 260749a..9cd0995 160000
--- a/.github/wiki
+++ b/.github/wiki
@@ -1 +1 @@
-Subproject commit 260749a37590db3e0f609e3ee72dd6f511c66cff
+Subproject commit 9cd09953e08f2c6fd22bb8aa00349c8014d63850

From b45fef20908580341f266c0f0b980a9653db4318 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Felipe=20Say=C3=A3o=20Lobato=20Abreu?=
 <github@mentordosnerds.com>
Date: Fri, 24 Apr 2026 19:25:15 -0300
Subject: [PATCH 3/6] chore: trigger workflow validation


From 1803d27ecd9e24224df8986cccaf375f3da9df20 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Felipe=20Say=C3=A3o=20Lobato=20Abreu?=
 <github@mentordosnerds.com>
Date: Fri, 24 Apr 2026 19:28:48 -0300
Subject: [PATCH 4/6] fix: document workflow wrapper updates

---
 CHANGELOG.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index e84f7fa..004c394 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,3 +14,4 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Fixed
 
 - Restore catalog and domain enum coverage so CI dependency and coverage gates pass.
+- Update DevTools workflow wrappers so changelog releases and wiki-triggered test validation receive the permissions and triggers required by the shared automation.

From 0655a9316bcde6b71aa64d693677d9fa6b3399cb Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Felipe=20Say=C3=A3o=20Lobato=20Abreu?=
 <github@mentordosnerds.com>
Date: Fri, 24 Apr 2026 19:38:53 -0300
Subject: [PATCH 5/6] fix: grant changelog action dispatch permission

---
 .github/workflows/changelog.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/changelog.yml b/.github/workflows/changelog.yml
index bf4568b..48e7a1e 100644
--- a/.github/workflows/changelog.yml
+++ b/.github/workflows/changelog.yml
@@ -29,6 +29,7 @@ on:
         default: release/v
 
 permissions:
+  actions: write
   contents: write
   pull-requests: write
   repository-projects: write

From eb5524ecd54cc14c06c8c7b3e724f09df3f7e11c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Felipe=20Say=C3=A3o=20Lobato=20Abreu?=
 <github@mentordosnerds.com>
Date: Fri, 24 Apr 2026 19:41:15 -0300
Subject: [PATCH 6/6] fix: reference workflow wrapper pull request

---
 CHANGELOG.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 004c394..b4434a0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,4 +14,4 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Fixed
 
 - Restore catalog and domain enum coverage so CI dependency and coverage gates pass.
-- Update DevTools workflow wrappers so changelog releases and wiki-triggered test validation receive the permissions and triggers required by the shared automation.
+- Update DevTools workflow wrappers so changelog releases and wiki-triggered test validation receive the permissions and triggers required by the shared automation (#3).