feat: add comprehensive CI/CD workflows (tests, code quality, auto-fix, releases)

[Copilot]

The repo had a minimal test workflow with no coverage, no static analysis, no style enforcement, and no automated release process. This PR wires up a full CI/CD pipeline.

Workflows

• run-tests.yml (updated) — expands matrix to PHP 8.2/8.3/8.4 × Laravel 11/12/13 × prefer-lowest/prefer-stable; enables xdebug coverage; uploads coverage XML to Codecov (PHP 8.4 + Laravel 13 + prefer-stable only); retains per-run coverage artifacts for 7 days
• code-quality.yml (new) — four parallel jobs: PHPStan via composer analyse (Larastan level 9), Pint dry-run style check, composer validate --strict, composer audit
• fix-php-code-style.yml (new) — runs Pint on same-repo PRs and auto-commits any fixes back to the branch
• release.yml (new) — triggers on v*.*.* tags; runs test suite then creates a GitHub Release with auto-generated changelog from merged PRs

Supporting changes

• composer.json — adds larastan/larastan ^3.0 to require-dev (required by the existing analyse script; phpstan/extension-installer was already in allow-plugins)
• phpstan.neon.dist — new config: Larastan extension, src/ path, level 9
• README.md — adds Code Quality workflow badge
• All workflow jobs have explicit permissions blocks (contents: read by default; contents: write only where commits/releases are created)

Original prompt

Objective

Enhance the Activity package with comprehensive CI/CD workflows to automate testing, code quality checks, and build processes.

Current State

• Minimal GitHub Actions setup
• No automated test execution on push/PR
• No code quality checks (PHPStan, PHP-CS-Fixer)
• No coverage reports
• No automated release process

Requested Changes

1. run-tests.yml - Test Automation Workflow

Create a workflow that:

• Runs on push and pull requests
• Tests against multiple PHP versions (8.2, 8.3, 8.4)
• Tests against multiple Laravel versions (11.0, 12.0, 13.0)
• Runs Pest tests with coverage
• Uploads coverage to Codecov or similar
• Shows test results in PR checks

2. code-quality.yml - Code Quality Workflow

Create a workflow that:

• Runs PHPStan static analysis at level 9
• Runs PHP-CS-Fixer to check code style
• Validates composer.json
• Checks for security vulnerabilities

3. fix-php-code-style.yml - Auto-fix Code Style

Create a workflow that:

• Runs PHP-CS-Fixer on PRs
• Auto-commits fixes if style issues are found
• Posts helpful comments to PRs about style violations

4. release.yml - Automated Release Workflow

Create a workflow that:

• Triggers on version tags (v*..)
• Creates GitHub releases with changelogs
• Publishes to Packagist automatically (if possible)

Technical Requirements

• Use standard GitHub Actions
• PHP 8.2+ support
• Leverage existing composer scripts from composer.json
• Use Laravel's testbench for testing
• Generate artifacts (coverage reports)
• Add status badges to README

Expected Outcome

• Automated testing on every commit/PR
• Early detection of bugs and compatibility issues
• Consistent code quality standards
• Professional CI/CD pipeline
• Better developer experience for contributors

The following is the prior conversation context from the user's chat exploration (may be truncated):

User: Review the activity project i have and make suggestions to improve and enhance

Assistant: I'd be happy to review your activity project and suggest improvements! Could you please provide the name of the repository (e.g., barsch123/activity-project) or a link to it so I can take a look?

User: https://github.com/barsch123/activity

Assistant: Let me get more details about the key files:

Assistant: Now let me check the source code structure:

Assistant: Now let me check the GitHub Actions workflow to see what CI/CD is in place:

Assistant: Perfect! I've reviewed your Activity project—a lightweight Laravel activity logging package. Here's a comprehensive analysis with suggestions for improvement:

📊 Project Overview

Your project is a solid Laravel package for tracking model changes (audit logging). It has:

• ✅ Clear documentation (README, QUICKSTART, EXAMPLES)
• ✅ MIT License
• ✅ ~5 stars and active development (pushed April 2026)
• ✅ Published on Packagist (gottvergessen/activity)
• ✅ Well-structured codebase with separated concerns

---

🎯 Recommendations to Enhance & Improve

1. 🔄 CI/CD & Automation

Current State: Minimal GitHub Actions setup
Suggestion: Add comprehensive workflows:

• Run Tests Workflow - Execute tests on every push/PR
• Code Quality Checks - PHPStan, PHP-CS-Fixer linting
• Coverage Reports - Generate and track test coverage trends
• Automated Releases - Tag releases with changelogs automatically

Benefit: Ensures code quality, catches bugs early, and builds trust

---

2. 📝 CHANGELOG.md

Current State: Empty (only header exists)
Suggestion: Populate with semantic versioning (v1.0.0 changes, bug fixes, features)

Format Example:

# Changelog

## [1.0.0] - 2026-04-09
### Added
- Initial release of activity logging package
- Auto-tracking of model changes
- Batch operations support
- Custom actions and descriptions

### Fixed
- IP capture privacy concerns with explicit opt-in

Benefit: Users understand what changed between versions

---

3. 🧪 Test Coverage

Current State: Test structure exists but likely incomplete
Suggestion:

• Add integration tests for all trait features
• Test edge cases (batch operations, logging disable, etc.)
• Add tests for privacy-sensitive data (IP capture, password ignoring)
• Set coverage target (aim for 80%+)

Benefit: Reliability and prevents regressions

---

4. 📖 Documentation Enhancements

Suggestion: Add to README:

• Performance Considerations - Database impact of logging everything
• Best Practices - When to use this package, when not to
• Troubleshooting - Common issues and solutions
• Migration Guide - For users upgrading versions
• API Reference - Full method signatures with return types

---

5. 🏷️ Release & Versioning Strategy

Current State: No tags/releases visible
Suggestion:

• Create GitHub releases for each version
• Add semver tags (v1.0.0, v1.1.0, etc.)
• Include release notes with links to issues/PRs fixed

**B...

This pull request was created from Copilot chat.

[barsch123]

looks good