ci: adopt Fast Forward Changelog v0.3.0

.changelog/adopt-fast-forward-changelog.md

@@ -0,0 +1,6 @@
+---
+category: changed
+type: patch
+---
+
+Automate changelog checks, version pull requests and approved releases with Fast Forward Changelog, with the project skill available to contributors.

.changelog/manage-changelog-skill-through-composer.md

@@ -0,0 +1,6 @@
+---
+category: changed
+type: patch
+---
+
+Restore the Changelog skill from its GitHub source during Composer installation instead of committing a generated copy and separate installation receipt.

.gitattributes

@@ -1,4 +1,7 @@
 *                   text=auto
+/.agents/           export-ignore
+/.changelog/        export-ignore
+/CONTRIBUTING.md    export-ignore
 /.github/           export-ignore
 /tests/             export-ignore
 /.docheader         export-ignore
@@ -13,3 +16,4 @@
 /phpunit.xml        export-ignore
 /docs/ export-ignore
 /README*.md export-ignore
+/skills.json export-ignore

.github/workflows/changelog.yml

@@ -0,0 +1,43 @@
+name: Changelog
+
+on:
+  pull_request:
+    branches:
+      - main
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - ready_for_review
+      - labeled
+      - unlabeled
+  pull_request_target:
+    branches:
+      - main
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - ready_for_review
+      - labeled
+      - unlabeled
+      - closed
+  push:
+    branches:
+      - main
+  workflow_dispatch: null
+
+permissions: {}
+
+jobs:
+  changelog:
+    permissions:
+      contents: write
+      pull-requests: write
+      issues: read
+      statuses: write
+    uses: php-fast-forward/changelog/.github/workflows/changelog.yml@v0
+    with:
+      source: github
+      version-pr-title: 'chore(release): fast-forward/http-message v{current_version} → v{next_version}'
+      base-branch: main

.gitignore

@@ -5,4 +5,5 @@ tmp/
 vendor/
 composer.lock
 *.cache
-TO-DO.md
+TO-DO.md
+/.agents/

CHANGELOG.md

@@ -0,0 +1,32 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [1.4.0] - 2026-03-29
+
+**Full Changelog**: https://github.com/php-fast-forward/http-message/compare/v1.3.0...v1.4.0
+
+## [1.3.0] - 2025-11-17
+
+Release notes are unavailable for this version.
+
+## [1.2.0] - 2025-06-30
+
+**Full Changelog**: https://github.com/php-fast-forward/http-message/compare/v1.1.0...v1.2.0
+
+## [1.1.0] - 2025-06-30
+
+Release notes are unavailable for this version.
+
+## [1.0.0] - 2025-06-30
+
+Release notes are unavailable for this version.
+
+[1.4.0]: https://github.com/php-fast-forward/http-message/compare/v1.3.0...v1.4.0
+[1.3.0]: https://github.com/php-fast-forward/http-message/compare/v1.2.0...v1.3.0
+[1.2.0]: https://github.com/php-fast-forward/http-message/compare/v1.1.0...v1.2.0
+[1.1.0]: https://github.com/php-fast-forward/http-message/compare/v1.0.0...v1.1.0
+[1.0.0]: https://github.com/php-fast-forward/http-message/releases/tag/v1.0.0

CONTRIBUTING.md

@@ -0,0 +1,49 @@
+# Contributing
+
+Add one independent `.changelog/*.md` fragment for each observable change.
+Use [Fast Forward Changelog](https://github.com/php-fast-forward/changelog)
+through CPX with PHP 8.5 or newer; the package's PHP requirements stay unchanged.
+
+```sh
+cpx --skip-local fast-forward/changelog help add
+cpx --skip-local fast-forward/changelog add "Describe the change." --category=fixed --no-interaction
+cpx --skip-local fast-forward/changelog check --no-interaction
+```
+
+Choose the category and semantic impact that describe the change. Commit the
+fragment with the contribution; leave published history intact and do not add
+an `Unreleased` section to `CHANGELOG.md`. After committing, validate the PR delta
+with `check --since=origin/main --source=github --no-interaction` using the same CLI.
+
+Run `composer install` to fetch the project skill into
+`.agents/skills/fast-forward-changelog`. The committed `skills.json` selects its
+GitHub source through `llm/skills`; generated `.agents` files stay out of Git.
+This does not install Changelog's runtime dependencies into the library.
+Inspect the copy with `composer skills:show` and refresh compatible versions with
+`composer skills:update --from=github`. Keep the skill under this manager's
+ownership; do not run the legacy Changelog skill installer on it.
+Its PHP integration example currently shows a CLI check outside the disposable
+target directory. Run that check with `--cwd=/absolute/project` to validate the
+same project. The bundled payload remains intact so native integrity checks and
+future updates remain reliable; the example correction belongs upstream.
+
+The GitHub workflow checks fragments, maintains PR feedback and prepares a
+version PR from stable ancestral tags and committed history. Review that PR's
+version, history and fragment deletions before merging it. It never merges itself;
+its approved merge publishes the version tag and GitHub Release. Installing the
+workflow or merging an ordinary contribution does not publish a release.
+
+With the default `GITHUB_TOKEN`, a generated version PR's `pull_request` runs
+can require approval. Select **Approve workflows to run**, then inspect the
+results before merging. A GitHub App installation token is optional when CI
+must start without that approval; follow the selected release's
+[App configuration guide](https://github.com/php-fast-forward/changelog/blob/v0/docs/github-app.md).
+
+There was no central changelog before this integration. Its historical backfill
+preserves existing GitHub Release text and links verified ancestral versions in
+Keep a Changelog format. Releases `v1.4.0` and `v1.2.0` contain only comparison
+links; `v1.3.0`, `v1.1.0` and `v1.0.0` have empty bodies. These gaps cannot supply
+change descriptions or origin PRs, so do not invent them. New fragments resolve
+their origin PR during consolidation when GitHub can prove the association;
+leave optional PR metadata absent until that evidence exists. The GitHub Release
+body for each new version uses the same consolidated notes as `CHANGELOG.md`.

composer.json

@@ -20,7 +20,8 @@
         "psr/http-message": "^2.0"
     },
     "require-dev": {
-        "fast-forward/dev-tools": "dev-main"
+        "fast-forward/dev-tools": "dev-main",
+        "llm/skills": "^1.15"
     },
     "minimum-stability": "stable",
     "autoload": {
@@ -39,7 +40,8 @@
             "fast-forward/dev-tools": true,
             "phpdocumentor/shim": true,
             "phpro/grumphp": true,
-            "pyrech/composer-changelogs": true
+            "pyrech/composer-changelogs": true,
+            "llm/skills": true
         },
         "platform": {
             "php": "8.3.0"

skills.json

@@ -0,0 +1,21 @@
+{
+    "$schema": "https://raw.githubusercontent.com/roxblnfk/skills/master/resources/skills.schema.json",
+    "target": ".agents/skills",
+    "aliases": [],
+    "discovery": false,
+    "auto-sync": true,
+    "vendor-sources": false,
+    "dependencies": {
+        "composer": false
+    },
+    "sources": [
+        {
+            "from": "github",
+            "package": "php-fast-forward/changelog",
+            "ref": "^0.3.0",
+            "skills": [
+                "fast-forward-changelog"
+            ]
+        }
+    ]
+}