From bfbbbc3bdbcf547413c3852fb011c2c7bd8c7025 Mon Sep 17 00:00:00 2001
From: Joseph Bielawski <stloyd@users.noreply.github.com>
Date: Mon, 5 Oct 2026 17:06:11 +0200
Subject: [PATCH 1/2] Add GHA parallel into `job-static-analyze.yml`

---
 .github/workflows/job-static-analyze.yml | 44 +++++++++++++-----------
 1 file changed, 23 insertions(+), 21 deletions(-)

diff --git a/.github/workflows/job-static-analyze.yml b/.github/workflows/job-static-analyze.yml
index f5e347e37..938016a05 100644
--- a/.github/workflows/job-static-analyze.yml
+++ b/.github/workflows/job-static-analyze.yml
@@ -21,27 +21,29 @@ jobs:
         with:
           persist-credentials: false
 
-      - name: "Setup PHP Environment"
-        uses: "./.github/actions/setup-php-env"
-        with:
-          php-version: "${{ matrix.php-version }}"
-          dependencies: "${{ matrix.dependencies }}"
-          coverage: "none"
-          extra-working-directory: "web/landing"
-          extra-cache-key-suffix: "-website"
-          extra-composer-file: "web/landing/composer.lock"
+      - parallel:
+        - name: "Install actionlint + zizmor"
+          env:
+            ACTIONLINT_VERSION: "1.7.12"
+            ZIZMOR_VERSION: "1.24.1"
+          run: |
+            curl -fsSL "https://github.com/rhysd/actionlint/releases/download/v${ACTIONLINT_VERSION}/actionlint_${ACTIONLINT_VERSION}_linux_amd64.tar.gz" \
+              | sudo tar -xz -C /usr/local/bin actionlint
+            pipx install "zizmor==${ZIZMOR_VERSION}"
 
-      - name: "Static Analyze"
-        run: "just analyze"
+        - name: "Setup PHP Environment"
+          uses: "./.github/actions/setup-php-env"
+          with:
+            php-version: "${{ matrix.php-version }}"
+            dependencies: "${{ matrix.dependencies }}"
+            coverage: "none"
+            extra-working-directory: "web/landing"
+            extra-cache-key-suffix: "-website"
+            extra-composer-file: "web/landing/composer.lock"
 
-      - name: "Install actionlint + zizmor"
-        env:
-          ACTIONLINT_VERSION: "1.7.12"
-          ZIZMOR_VERSION: "1.24.1"
-        run: |
-          curl -fsSL "https://github.com/rhysd/actionlint/releases/download/v${ACTIONLINT_VERSION}/actionlint_${ACTIONLINT_VERSION}_linux_amd64.tar.gz" \
-            | sudo tar -xz -C /usr/local/bin actionlint
-          pipx install "zizmor==${ZIZMOR_VERSION}"
+      - parallel:
+        - name: "Static Analyze"
+          run: "just analyze"
 
-      - name: "Lint"
-        run: "just lint"
+        - name: "Lint"
+          run: "just lint"

From 726ec380fd1693e8909f5f5539c661955c868386 Mon Sep 17 00:00:00 2001
From: Joseph Bielawski <stloyd@gmail.com>
Date: Mon, 5 Oct 2026 17:21:42 +0200
Subject: [PATCH 2/2] Update zizmor to the latest version

---
 .github/workflows/job-static-analyze.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/job-static-analyze.yml b/.github/workflows/job-static-analyze.yml
index 938016a05..b6ba9a103 100644
--- a/.github/workflows/job-static-analyze.yml
+++ b/.github/workflows/job-static-analyze.yml
@@ -25,7 +25,7 @@ jobs:
         - name: "Install actionlint + zizmor"
           env:
             ACTIONLINT_VERSION: "1.7.12"
-            ZIZMOR_VERSION: "1.24.1"
+            ZIZMOR_VERSION: "1.30.1"
           run: |
             curl -fsSL "https://github.com/rhysd/actionlint/releases/download/v${ACTIONLINT_VERSION}/actionlint_${ACTIONLINT_VERSION}_linux_amd64.tar.gz" \
               | sudo tar -xz -C /usr/local/bin actionlint