Update toolings

Author: tangrufus

.gitattributes

@@ -4,7 +4,7 @@
 /* export-ignore
 
 # Export white-listed production code only.
-/bin            -export-ignore
+/bin/php-matrix -export-ignore
 /data           -export-ignore
 /src            -export-ignore
 /composer.json  -export-ignore

.github/dependabot.yml

@@ -4,12 +4,20 @@ updates:
   - package-ecosystem: composer
     directory: /
     schedule:
-      interval: weekly
+      interval: daily
+    cooldown:
+      default-days: 3
+
   - package-ecosystem: gomod
     directory: /
     schedule:
-      interval: weekly
+      interval: daily
+    cooldown:
+      default-days: 3
+
   - package-ecosystem: github-actions
     directory: /
     schedule:
-      interval: weekly
+      interval: daily
+    cooldown:
+      default-days: 3

.github/release-drafter.yml

@@ -3,7 +3,7 @@ name: Audit
 on:
   workflow_dispatch:
   schedule:
-    - cron: '23 3 * * 1' # Weekly on Monday
+    - cron: '26 3 * * *'
   pull_request:
     branches:
       - main
@@ -20,7 +20,7 @@ permissions:
 
 jobs:
   php:
-    uses: typisttech/.github/.github/workflows/audit-php.yml@v3
+    uses: typisttech/.github/.github/workflows/audit-php.yml@8c3b859e35165a6e81a660713be195ec61d2ca1d # v5.2.1
 
   go:
-    uses: typisttech/.github/.github/workflows/audit-go.yml@v3
+    uses: typisttech/.github/.github/workflows/audit-go.yml@8c3b859e35165a6e81a660713be195ec61d2ca1d # v5.2.1

.github/workflows/audit.yml

@@ -15,7 +15,7 @@ permissions:
 
 jobs:
   dependabot:
-    uses: typisttech/.github/.github/workflows/dependabot-auto-merge.yml@v3
+    uses: typisttech/.github/.github/workflows/dependabot-auto-merge.yml@8c3b859e35165a6e81a660713be195ec61d2ca1d # v5.2.1
     with:
       minor: true
       patch: true

.github/workflows/dependabot-auto-merge.yml

@@ -18,17 +18,21 @@ permissions:
 
 jobs:
   actions:
-    uses: typisttech/.github/.github/workflows/lint-actions.yml@v3
+    uses: typisttech/.github/.github/workflows/lint-actions.yml@8c3b859e35165a6e81a660713be195ec61d2ca1d # v5.2.1
 
   php:
-    uses: typisttech/.github/.github/workflows/lint-php.yml@v3
+    uses: typisttech/.github/.github/workflows/lint-php.yml@8c3b859e35165a6e81a660713be195ec61d2ca1d # v5.2.1
     with:
+      phpstan: true
       box: true
-  
+      box-php-version: '8.5'
+      box-version: '4'
+
   go:
-    uses: typisttech/.github/.github/workflows/lint-go.yml@v3
+    uses: typisttech/.github/.github/workflows/lint-go.yml@8c3b859e35165a6e81a660713be195ec61d2ca1d # v5.2.1
     with:
-      golangci-lint: false
+      golangci-lint: true
+      golangci-lint-version: v2.11 # Must be kept in sync with @../../mise.toml
 
   wait-for-all-lint:
     needs:

.github/workflows/lint.yml

@@ -0,0 +1,19 @@
+name: Release Drafter
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - main
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref_name }}
+  cancel-in-progress: true
+
+permissions:
+  contents: write
+  pull-requests: read
+
+jobs:
+  release-drafter:
+    uses: typisttech/.github/.github/workflows/release-drafter.yml@8c3b859e35165a6e81a660713be195ec61d2ca1d # v5.2.1