feat: bootstrap pdf signature validator package #1

	# SPDX-FileCopyrightText: 2026 LibreCode coop and contributors
	# SPDX-License-Identifier: AGPL-3.0-or-later

	name: Deptrac

	on:
	push:
	pull_request:

	permissions:
	contents: read

	concurrency:
	group: deptrac-${{ github.head_ref \|\| github.run_id }}
	cancel-in-progress: true

	jobs:
	php-version:
	runs-on: ubuntu-latest
	outputs:
	min: ${{ steps.php.outputs.min }}
	steps:
	- uses: actions/checkout@v4
	with:
	persist-credentials: false

	- name: Read PHP min version from composer.json
	id: php
	run: \|
	min=$(jq -r '.require.php' composer.json \| grep -oP '\d+\.\d+' \| head -1)
	echo "min=$min" >> $GITHUB_OUTPUT

	deptrac:
	runs-on: ubuntu-latest
	needs: php-version
	name: deptrac
	steps:
	- uses: actions/checkout@v4
	with:
	persist-credentials: false

	- name: Set up PHP ${{ needs.php-version.outputs.min }}
	uses: shivammathur/setup-php@v2
	with:
	php-version: ${{ needs.php-version.outputs.min }}
	tools: composer:v2
	coverage: none
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

	- name: Install dependencies
	run: composer install --no-interaction --prefer-dist

	- name: Run Deptrac
	run: composer run deptrac

	summary:
	runs-on: ubuntu-latest
	needs: deptrac
	if: always()
	name: deptrac-summary
	steps:
	- name: Summary status
	run: if ${{ needs.deptrac.result != 'success' && needs.deptrac.result != 'skipped' }}; then exit 1; fi

Provide feedback