Fix DevTools workflow wrappers

.github/workflows/changelog.yml

@@ -29,8 +29,10 @@ on:
         default: release/v
 
 permissions:
+  actions: write
   contents: write
   pull-requests: write
+  repository-projects: write
 
 jobs:
   changelog:

.github/workflows/tests.yml

@@ -2,20 +2,32 @@ name: "Fast Forward Test Suite"
 
 on:
   push:
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
   workflow_dispatch:
     inputs:
       max-outdated:
         description: Maximum number of outdated packages allowed by the dependencies command.
         required: false
         type: number
         default: -1
+      publish-required-statuses:
+        description: Mirror required test matrix checks as commit statuses for workflow-dispatched runs.
+        required: false
+        type: boolean
+        default: false
 
 permissions:
   contents: read
+  statuses: write
 
 jobs:
   tests:
     uses: php-fast-forward/dev-tools/.github/workflows/tests.yml@main
     with:
       max-outdated: ${{ inputs.max-outdated || -1 }}
+      publish-required-statuses: ${{ inputs.publish-required-statuses || false }}
     secrets: inherit

.github/workflows/wiki.yml

@@ -5,6 +5,7 @@ on:
     types: [opened, synchronize, reopened]
 
 permissions:
+  actions: write
   contents: write
   pull-requests: read
 
@@ -15,6 +16,7 @@ concurrency:
 jobs:
   preview:
     permissions:
+      actions: write
       contents: write
       pull-requests: read
     # Pull-request wiki previews live here. Publication and preview cleanup are

CHANGELOG.md

@@ -14,3 +14,4 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Fixed
 
 - Restore catalog and domain enum coverage so CI dependency and coverage gates pass.
+- Update DevTools workflow wrappers so changelog releases and wiki-triggered test validation receive the permissions and triggers required by the shared automation (#3).