diff --git a/.github/workflows/backend-ci.yaml b/.github/workflows/backend-ci.yaml
index ba1028e..916ce53 100644
--- a/.github/workflows/backend-ci.yaml
+++ b/.github/workflows/backend-ci.yaml
@@ -1,36 +1,40 @@
-name: CI
+name: Backend CI
 
 on:
     push:
         branches:
-            - main
             - '[0-9]+.[0-9]+'
     pull_request: ~
+    workflow_dispatch: ~
 
 jobs:
     cs-fix:
         name: Run code style check
-        runs-on: "ubuntu-24.04"
+        runs-on: "ubuntu-26.04"
         strategy:
             matrix:
                 php:
                     - '8.3'
         steps:
-            -   uses: actions/checkout@v6
+            -   uses: actions/checkout@v7
 
             -   uses: ibexa/gh-workflows/actions/composer-install@main
                 with:
+                    php-version: ${{ matrix.php }}
                     gh-client-id: ${{ secrets.AUTOMATION_CLIENT_ID }}
                     gh-client-secret: ${{ secrets.AUTOMATION_CLIENT_SECRET }}
                     satis-network-key: ${{ secrets.SATIS_NETWORK_KEY }}
                     satis-network-token: ${{ secrets.SATIS_NETWORK_TOKEN }}
 
             -   name: Run code style check
-                run: composer run-script check-cs -- --format=checkstyle | cs2pr
+                shell: bash
+                run: |
+                    set -euo pipefail
+                    composer run-script check-cs -- --format=checkstyle | cs2pr
 
     tests:
         name: Tests
-        runs-on: "ubuntu-24.04"
+        runs-on: "ubuntu-26.04"
         timeout-minutes: 10
 
         strategy:
@@ -40,10 +44,11 @@ jobs:
                     - '8.3'
                     - '8.4'
         steps:
-            -   uses: actions/checkout@v6
+            -   uses: actions/checkout@v7
 
             -   uses: ibexa/gh-workflows/actions/composer-install@main
                 with:
+                    php-version: ${{ matrix.php }}
                     gh-client-id: ${{ secrets.AUTOMATION_CLIENT_ID }}
                     gh-client-secret: ${{ secrets.AUTOMATION_CLIENT_SECRET }}
                     satis-network-key: ${{ secrets.SATIS_NETWORK_KEY }}
diff --git a/.github/workflows/pr-assign.yaml b/.github/workflows/pr-assign.yaml
deleted file mode 100644
index ea9165c..0000000
--- a/.github/workflows/pr-assign.yaml
+++ /dev/null
@@ -1,10 +0,0 @@
-name: Assign Pull Request to maintainers
-
-on:
-    pull_request_target: ~
-
-jobs:
-    assign:
-        uses: ibexa/gh-workflows/.github/workflows/pr-assign.yml@main
-        secrets:
-            robot-token: ${{ secrets.EZROBOT_PAT }}
diff --git a/.github/workflows/rector.yaml b/.github/workflows/rector.yaml
new file mode 100644
index 0000000..08fbf2c
--- /dev/null
+++ b/.github/workflows/rector.yaml
@@ -0,0 +1,18 @@
+name: Rector PHP
+
+on:
+    push:
+        branches:
+            - '[0-9]+.[0-9]+'
+    pull_request: ~
+
+jobs:
+    rector:
+        uses: ibexa/gh-workflows/.github/workflows/rector.yml@main
+        with:
+            php-version: '8.3'
+        secrets:
+            AUTOMATION_CLIENT_ID: ${{ secrets.AUTOMATION_CLIENT_ID }}
+            AUTOMATION_CLIENT_SECRET: ${{ secrets.AUTOMATION_CLIENT_SECRET }}
+            SATIS_NETWORK_KEY: ${{ secrets.SATIS_NETWORK_KEY }}
+            SATIS_NETWORK_TOKEN: ${{ secrets.SATIS_NETWORK_TOKEN }}
diff --git a/.github/workflows/rector.yaml.yml b/.github/workflows/rector.yaml.yml
deleted file mode 100644
index 955d6b4..0000000
--- a/.github/workflows/rector.yaml.yml
+++ /dev/null
@@ -1,27 +0,0 @@
-name: Rector PHP
-on:
-    push:
-        branches:
-            - main
-            - '[0-9]+.[0-9]+'
-    pull_request: ~
-jobs:
-    rector:
-        name: Run rector
-        runs-on: "ubuntu-24.04"
-        strategy:
-            matrix:
-                php:
-                    - '8.3'
-        steps:
-            -   uses: actions/checkout@v6
-
-            -   uses: ibexa/gh-workflows/actions/composer-install@main
-                with:
-                    gh-client-id: ${{ secrets.AUTOMATION_CLIENT_ID }}
-                    gh-client-secret: ${{ secrets.AUTOMATION_CLIENT_SECRET }}
-                    satis-network-key: ${{ secrets.SATIS_NETWORK_KEY }}
-                    satis-network-token: ${{ secrets.SATIS_NETWORK_TOKEN }}
-
-            -   name: Run rector
-                run: vendor/bin/rector process --dry-run --ansi
diff --git a/.github/workflows/reviewers.yaml.yml b/.github/workflows/reviewers.yaml
similarity index 100%
rename from .github/workflows/reviewers.yaml.yml
rename to .github/workflows/reviewers.yaml