From 80112524c6e32f668fb74164adbc340727571cd0 Mon Sep 17 00:00:00 2001
From: Nikolas Evers <vintagesucks@users.noreply.github.com>
Date: Wed, 19 Aug 2026 17:19:03 +0200
Subject: [PATCH 1/3] ci: verify extension against lowest dependencies

---
 .github/workflows/php.yml | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/.github/workflows/php.yml b/.github/workflows/php.yml
index 5fc1ff0..a98c197 100644
--- a/.github/workflows/php.yml
+++ b/.github/workflows/php.yml
@@ -31,6 +31,25 @@ jobs:
     with:
       extension_name: ${{ github.event.repository.name }}
 
+  extension_verifier:
+    name: Extension Verifier (lowest)
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout SwagPlatformDemoData
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+      - name: Remove PHPStan config
+        run: rm phpstan.neon.dist
+
+      - name: Allow composer to resolve advisory-affected releases
+        run: composer config policy.advisories.block false
+
+      - name: Run verifier
+        uses: shopware/github-actions/extension-verifier@main
+        with:
+          action: check
+          check-against: lowest
+
   phpunit:
     name: PHPUnit
     strategy:

From 986d726be10dd18eaf32c4d04ff96d6b307b5cfb Mon Sep 17 00:00:00 2001
From: Nikolas Evers <vintagesucks@users.noreply.github.com>
Date: Wed, 19 Aug 2026 17:19:04 +0200
Subject: [PATCH 2/3] ci: add dependabot for github actions

---
 .github/dependabot.yml | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..e25b092
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,19 @@
+version: 2
+updates:
+  - package-ecosystem: 'github-actions'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+    cooldown:
+      default-days: 7
+      semver-major-days: 30
+      semver-minor-days: 14
+      semver-patch-days: 7
+    reviewers:
+      - 'shopware/product-cc-after-sales'
+    commit-message:
+      prefix: 'chore'
+    groups:
+      github-actions:
+        patterns:
+          - '*'

From e6376d372aa78b00694699bbc16a452e0d116876 Mon Sep 17 00:00:00 2001
From: Nikolas Evers <vintagesucks@users.noreply.github.com>
Date: Wed, 19 Aug 2026 17:23:11 +0200
Subject: [PATCH 3/3] ci: ignore package label finding on lowest core

---
 .shopware-extension.yml | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 .shopware-extension.yml

diff --git a/.shopware-extension.yml b/.shopware-extension.yml
new file mode 100644
index 0000000..b611c5d
--- /dev/null
+++ b/.shopware-extension.yml
@@ -0,0 +1,7 @@
+# yaml-language-server: $schema=https://shopware.github.io/shopware-cli/shopware-extension-schema.json
+compatibility_date: '2026-08-19'
+
+validation:
+  ignore:
+    # 6.6.0 does not know the 'fundamentals@after-sales' package label
+    - message: 'Parameter #1 $package of attribute class Shopware\Core\Framework\Log\Package constructor expects'