diff --git a/.github/ISSUE_TEMPLATE/bug_report.md b/.github/ISSUE_TEMPLATE/bug_report.md
deleted file mode 100644
index fe26cd1..0000000
--- a/.github/ISSUE_TEMPLATE/bug_report.md
+++ /dev/null
@@ -1,28 +0,0 @@
----
-name: Bug report
-about: Create a report to help us improve
-title: ''
-labels: ''
-assignees: ''
-type: Bug
-
----
-
-**Describe the bug**
-A clear and concise description of what the bug is.
-
-**To Reproduce**
-Steps to reproduce the behavior:
-1. Go to '...'
-2. Click on '....'
-3. Scroll down to '....'
-4. See error
-
-**Expected behavior**
-A clear and concise description of what you expected to happen.
-
-**Screenshots**
-If applicable, add screenshots to help explain your problem.
-
-**Additional context**
-Add any other context about the problem here.
diff --git a/.github/ISSUE_TEMPLATE/bug_report.yml b/.github/ISSUE_TEMPLATE/bug_report.yml
new file mode 100644
index 0000000..490191b
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/bug_report.yml
@@ -0,0 +1,57 @@
+name: Bug report
+description: Something on the phpBB.com websites is broken or wrong
+labels: [bug]
+type: Bug
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for reporting! This tracker is for the phpBB.com websites only. Bugs in the phpBB
+        software go to [tracker.phpbb.com](https://tracker.phpbb.com/browse/PHPBB3), and security
+        problems must be [reported privately](https://github.com/phpbb/website_issues/security).
+  - type: dropdown
+    id: area
+    attributes:
+      label: Which site or area is affected?
+      options:
+        - www.phpbb.com
+        - area51.phpbb.com
+        - blog.phpbb.com
+        - tracker.phpbb.com (the tracker itself, not phpBB bugs)
+        - Downloads
+        - Sign-in / account
+        - Something else / not sure
+    validations:
+      required: true
+  - type: input
+    id: url
+    attributes:
+      label: Page URL
+      description: The address of the page where you saw the problem, if there is one.
+      placeholder: https://www.phpbb.com/...
+  - type: textarea
+    id: description
+    attributes:
+      label: Describe the bug
+      description: A clear and concise description of what the bug is.
+    validations:
+      required: true
+  - type: textarea
+    id: reproduce
+    attributes:
+      label: To reproduce
+      description: Steps to reproduce the behaviour.
+      placeholder: |
+        1. Go to '...'
+        2. Click on '...'
+        3. See error
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected behaviour
+      description: What you expected to happen instead.
+  - type: textarea
+    id: context
+    attributes:
+      label: Screenshots and additional context
+      description: Screenshots, browser and operating system, or anything else that helps.
diff --git a/.github/ISSUE_TEMPLATE/feature_request.md b/.github/ISSUE_TEMPLATE/feature_request.md
deleted file mode 100644
index e255ea9..0000000
--- a/.github/ISSUE_TEMPLATE/feature_request.md
+++ /dev/null
@@ -1,21 +0,0 @@
----
-name: Feature request
-about: Suggest an idea for this project
-title: ''
-labels: ''
-assignees: ''
-type: Feature
-
----
-
-**Is your feature request related to a problem? Please describe.**
-A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
-
-**Describe the solution you'd like**
-A clear and concise description of what you want to happen.
-
-**Describe alternatives you've considered**
-A clear and concise description of any alternative solutions or features you've considered.
-
-**Additional context**
-Add any other context or screenshots about the feature request here.
diff --git a/.github/ISSUE_TEMPLATE/feature_request.yml b/.github/ISSUE_TEMPLATE/feature_request.yml
new file mode 100644
index 0000000..b40855a
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/feature_request.yml
@@ -0,0 +1,41 @@
+name: Feature request
+description: Suggest an idea or improvement for the phpBB.com websites
+labels: [enhancement]
+type: Feature
+body:
+  - type: dropdown
+    id: area
+    attributes:
+      label: Which site or area is affected?
+      options:
+        - www.phpbb.com
+        - area51.phpbb.com
+        - blog.phpbb.com
+        - tracker.phpbb.com (the tracker itself, not phpBB bugs)
+        - Downloads
+        - Sign-in / account
+        - Something else / not sure
+    validations:
+      required: true
+  - type: textarea
+    id: problem
+    attributes:
+      label: Is your feature request related to a problem?
+      description: A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
+  - type: textarea
+    id: solution
+    attributes:
+      label: Describe the solution you'd like
+      description: A clear and concise description of what you want to happen.
+    validations:
+      required: true
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Describe alternatives you've considered
+      description: Any alternative solutions or features you've considered.
+  - type: textarea
+    id: context
+    attributes:
+      label: Additional context
+      description: Any other context or screenshots about the feature request.
diff --git a/.github/issue-routing.yml b/.github/issue-routing.yml
new file mode 100644
index 0000000..56f2ee3
--- /dev/null
+++ b/.github/issue-routing.yml
@@ -0,0 +1,65 @@
+# Issue routing: which labels an issue gets and who is assigned to it.
+#
+# This is the only place sites, labels and teams are defined. The "area" dropdown in
+# the issue forms (.github/ISSUE_TEMPLATE/*.yml) is generated from this file
+# automatically when it changes, so never edit those options by hand.
+#
+# How it works:
+#   1. Each entry under `labels` is a label. If it has an `area`, that text is an option
+#      in the issue form's dropdown, and picking it adds the label to a new issue.
+#   2. For every label on an issue, the members of its `teams` (and any extra `users`)
+#      are assigned. Adding one of these labels later assigns that label's team too.
+#   3. An issue always ends up with at least one label and one assignee: if it has
+#      none, the label marked `fallback: true` and its team are used. The fallback
+#      label is removed again once another routed label is added.
+#
+# Keys per label:
+#   area         Text shown in the form dropdown (optional; leave out for labels that
+#                are only added by hand). Dropdown order follows this file.
+#   teams        Team slugs in the phpbb organisation: development-team, extensions-team,
+#                management, styles-team, support-team, website-team.
+#   users        Extra GitHub usernames to assign (optional).
+#   color        Label colour, used when the label is created. Quote it.
+#   description  Label description, used when the label is created.
+#   fallback     true on exactly one label: used for issues nobody else picked up.
+
+# The dropdown heading in the issue forms.
+area_field: Which site or area is affected?
+
+labels:
+  "site: www":
+    area: www.phpbb.com
+    color: "1d76db"
+    description: www.phpbb.com
+    teams: [website-team]
+  "site: area51":
+    area: area51.phpbb.com
+    color: "5319e7"
+    description: area51.phpbb.com
+    teams: [website-team, development-team]
+  "site: blog":
+    area: blog.phpbb.com
+    color: "c5def5"
+    description: blog.phpbb.com
+    teams: [website-team]
+  "site: tracker":
+    area: tracker.phpbb.com (the tracker itself, not phpBB bugs)
+    color: "bfd4f2"
+    description: tracker.phpbb.com
+    teams: [website-team, development-team]
+  downloads:
+    area: Downloads
+    color: "0e8a16"
+    description: Downloads and the download pages
+    teams: [website-team]
+  accounts:
+    area: Sign-in / account
+    color: "fbca04"
+    description: Sign-in, registration and accounts
+    teams: [website-team]
+  needs triage:
+    area: Something else / not sure
+    fallback: true
+    color: "d4c5f9"
+    description: Needs to be looked at and routed
+    teams: [website-team]
diff --git a/.github/scripts/issue-routing.js b/.github/scripts/issue-routing.js
new file mode 100644
index 0000000..69bc482
--- /dev/null
+++ b/.github/scripts/issue-routing.js
@@ -0,0 +1,272 @@
+// Labels and assigns issues according to .github/issue-routing.yml.
+//
+// route() runs from .github/workflows/issue-routing.yml through actions/github-script.
+// Running this file directly validates the config against the issue forms:
+//   node issue-routing.js validate <config.json> <form.json>...
+// (the YAML files are converted to JSON with yq first, see the workflow).
+
+// GitHub refuses more than 10 assignees on an issue.
+const MAX_ASSIGNEES = 10;
+
+// Returns the answer given to a field of an issue form, or null.
+// Forms render as "### <label>\n\n<answer>\n\n### <next label>...".
+function formAnswer(body, field) {
+	const lines = (body || '').split(/\r?\n/);
+	const start = lines.findIndex((line) => line.trim() === `### ${field}`);
+	if (start === -1) {
+		return null;
+	}
+
+	const answer = [];
+	for (const line of lines.slice(start + 1)) {
+		if (line.startsWith('### ')) {
+			break;
+		}
+		answer.push(line);
+	}
+
+	const value = answer.join('\n').trim();
+	return value && value !== '_No response_' ? value : null;
+}
+
+// Reads the routing config and derives the dropdown areas and the fallback label.
+function loadConfig(raw) {
+	const labels = raw.labels || {};
+	const areas = {};
+	let fallback = null;
+	for (const [label, entry] of Object.entries(labels)) {
+		if (entry && entry.area) {
+			areas[entry.area] = label;
+		}
+		if (entry && entry.fallback) {
+			fallback = fallback || label;
+		}
+	}
+	return { areaField: raw.area_field, labels, areas, fallback };
+}
+
+async function route({ github, context, core, getOctokit }) {
+	const config = loadConfig(JSON.parse(require('fs').readFileSync(process.env.ROUTING_CONFIG, 'utf8')));
+
+	const { owner, repo } = context.repo;
+	const issue_number = context.payload.issue.number;
+	const summary = [];
+
+	// Team membership is organisation data the workflow's GITHUB_TOKEN cannot read,
+	// so it is fetched with the GitHub App token when one is configured.
+	const teamClient = process.env.TEAM_TOKEN ? getOctokit(process.env.TEAM_TOKEN) : null;
+	if (!teamClient) {
+		core.warning('No team token available: set the ISSUE_ROUTING_APP_CLIENT_ID variable and ISSUE_ROUTING_APP_PRIVATE_KEY secret. Only `users` from the config can be assigned.');
+	}
+
+	const teamCache = new Map();
+	async function teamMembers(slug) {
+		if (!teamClient) {
+			return [];
+		}
+		if (!teamCache.has(slug)) {
+			try {
+				const members = await teamClient.paginate(teamClient.rest.teams.listMembersInOrg, {
+					org: owner,
+					team_slug: slug,
+					per_page: 100,
+				});
+				teamCache.set(slug, members.map((member) => member.login));
+			} catch (error) {
+				core.warning(`Could not read members of team "${slug}": ${error.message}`);
+				teamCache.set(slug, []);
+			}
+		}
+		return teamCache.get(slug);
+	}
+
+	async function peopleFor(entry) {
+		const people = [...(entry.users || [])];
+		for (const slug of entry.teams || []) {
+			people.push(...await teamMembers(slug));
+		}
+		return people;
+	}
+
+	async function ensureLabel(name) {
+		const entry = config.labels[name] || {};
+		try {
+			await github.rest.issues.getLabel({ owner, repo, name });
+		} catch (error) {
+			if (error.status !== 404) {
+				throw error;
+			}
+			await github.rest.issues.createLabel({
+				owner,
+				repo,
+				name,
+				color: String(entry.color || 'ededed').replace(/^#/, ''),
+				description: entry.description || '',
+			});
+			summary.push(`Created label \`${name}\``);
+		}
+	}
+
+	async function addLabels(names) {
+		for (const name of names) {
+			await ensureLabel(name);
+		}
+		await github.rest.issues.addLabels({ owner, repo, issue_number, labels: names });
+		summary.push(`Added labels: ${names.map((name) => `\`${name}\``).join(', ')}`);
+	}
+
+	async function assign(people, reason) {
+		const current = new Set(assignees.map((login) => login.toLowerCase()));
+		const wanted = [...new Set(people)].filter((login) => !current.has(login.toLowerCase()));
+		const room = MAX_ASSIGNEES - assignees.length;
+		if (wanted.length > room) {
+			core.warning(`Only ${room} more assignee(s) allowed on an issue; skipping ${wanted.slice(room).join(', ')}.`);
+		}
+		const toAdd = wanted.slice(0, Math.max(room, 0));
+		if (!toAdd.length) {
+			return;
+		}
+
+		// Users without access to the repository are silently dropped by GitHub,
+		// so the response is the source of truth for who was actually assigned.
+		const { data } = await github.rest.issues.addAssignees({ owner, repo, issue_number, assignees: toAdd });
+		assignees = data.assignees.map((user) => user.login);
+		const added = toAdd.filter((login) => assignees.some((a) => a.toLowerCase() === login.toLowerCase()));
+		const dropped = toAdd.filter((login) => !added.includes(login));
+		if (added.length) {
+			summary.push(`Assigned ${added.map((login) => `@${login}`).join(', ')} (${reason})`);
+		}
+		if (dropped.length) {
+			core.warning(`Could not assign ${dropped.join(', ')}; do they have access to ${owner}/${repo}?`);
+		}
+	}
+
+	// Always work from the current state, not the (possibly stale) event payload.
+	const { data: issue } = await github.rest.issues.get({ owner, repo, issue_number });
+	let labels = issue.labels.map((label) => (typeof label === 'string' ? label : label.name));
+	let assignees = issue.assignees.map((user) => user.login);
+
+	// Tidying up a closed issue should not bring the fallback back.
+	if (issue.state === 'closed' && ['unlabeled', 'unassigned'].includes(context.payload.action)) {
+		return;
+	}
+
+	// 1. Label from the form's area dropdown.
+	if (['opened', 'reopened'].includes(context.payload.action)) {
+		const area = formAnswer(issue.body, config.areaField);
+		if (area) {
+			const label = config.areas[area];
+			if (!label) {
+				core.warning(`Area "${area}" is not the \`area\` of any label in the routing config.`);
+			} else if (!labels.includes(label)) {
+				await addLabels([label]);
+				labels.push(label);
+			}
+		}
+	}
+
+	// 2. Assign the teams of routed labels. On `labeled` only the new label counts,
+	//    so people removed by hand for earlier labels are not re-added; `unlabeled`
+	//    and `unassigned` only need the fallback check below.
+	let routedLabels = [];
+	if (['opened', 'reopened'].includes(context.payload.action)) {
+		routedLabels = labels;
+	} else if (context.payload.action === 'labeled' && labels.includes(context.payload.label.name)) {
+		routedLabels = [context.payload.label.name];
+	}
+	for (const label of routedLabels) {
+		const entry = config.labels[label];
+		if (entry) {
+			await assign(await peopleFor(entry), `label \`${label}\``);
+		}
+	}
+
+	// 3. Every issue gets at least one label and one assignee.
+	const hasRoutedLabel = labels.some((label) => config.labels[label] && label !== config.fallback);
+	if (!labels.length) {
+		await addLabels([config.fallback]);
+		labels.push(config.fallback);
+	} else if (hasRoutedLabel && labels.includes(config.fallback)) {
+		await github.rest.issues.removeLabel({ owner, repo, issue_number, name: config.fallback });
+		labels = labels.filter((label) => label !== config.fallback);
+		summary.push(`Removed label \`${config.fallback}\` (issue is routed)`);
+	}
+
+	if (!assignees.length) {
+		await assign(await peopleFor(config.labels[config.fallback]), 'fallback');
+	}
+	if (!assignees.length) {
+		core.setFailed(`Nobody could be assigned to #${issue_number}. Check the teams in the routing config and the app token.`);
+	}
+
+	await core.summary
+		.addHeading(`Issue #${issue_number} (${context.payload.action})`, 3)
+		.addList(summary.length ? summary : ['Nothing to change'])
+		.write();
+}
+
+// Returns a list of problems with the config, checked against the issue forms.
+function validate(raw, forms) {
+	const errors = [];
+	const config = loadConfig(raw);
+	const entries = Object.entries(config.labels);
+
+	if (!config.areaField) {
+		errors.push('`area_field` is missing.');
+	}
+	if (!entries.length) {
+		errors.push('No `labels` are defined.');
+	}
+
+	const fallbacks = entries.filter(([, entry]) => entry && entry.fallback).map(([label]) => label);
+	if (fallbacks.length !== 1) {
+		errors.push(`Exactly one label needs \`fallback: true\`; found ${fallbacks.length}.`);
+	}
+
+	const seenAreas = new Set();
+	for (const [label, entry] of entries) {
+		if (!entry || (!(entry.teams || []).length && !(entry.users || []).length)) {
+			errors.push(`Label "${label}" has no teams or users.`);
+		}
+		if (entry && entry.area) {
+			if (seenAreas.has(entry.area)) {
+				errors.push(`Area "${entry.area}" is used by more than one label.`);
+			}
+			seenAreas.add(entry.area);
+		}
+	}
+
+	// The dropdowns are generated from the config, so this only fails when a form
+	// was edited by hand or the sync did not run.
+	const expected = Object.keys(config.areas);
+	for (const { file, form } of forms) {
+		const dropdown = (form.body || []).find((field) =>
+			field.type === 'dropdown' && field.attributes && field.attributes.label === config.areaField);
+		if (!dropdown) {
+			errors.push(`${file}: no dropdown labelled "${config.areaField}".`);
+		} else if (JSON.stringify(dropdown.attributes.options || []) !== JSON.stringify(expected)) {
+			errors.push(`${file}: dropdown options do not match the areas in the routing config.`);
+		}
+	}
+
+	return errors;
+}
+
+module.exports = { route, validate, formAnswer };
+
+if (require.main === module) {
+	const fs = require('fs');
+	const [command, configFile, ...formFiles] = process.argv.slice(2);
+	if (command !== 'validate' || !configFile) {
+		console.error('Usage: node issue-routing.js validate <config.json> <form.json>...');
+		process.exit(2);
+	}
+
+	const read = (file) => JSON.parse(fs.readFileSync(file, 'utf8'));
+	const errors = validate(read(configFile), formFiles.map((file) => ({ file, form: read(file) })));
+	for (const error of errors) {
+		console.log(`::error::${error}`);
+	}
+	console.log(errors.length ? `${errors.length} problem(s) found.` : 'Routing config is valid.');
+	process.exit(errors.length ? 1 : 0);
+}
diff --git a/.github/scripts/sync-issue-forms.sh b/.github/scripts/sync-issue-forms.sh
new file mode 100755
index 0000000..02fbc56
--- /dev/null
+++ b/.github/scripts/sync-issue-forms.sh
@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+# Regenerates the area dropdown in every issue form from .github/issue-routing.yml.
+# Runs automatically (see .github/workflows/issue-routing-sync.yml); needs yq v4 to run by hand.
+set -euo pipefail
+
+config=.github/issue-routing.yml
+export FIELD="$(yq '.area_field' "$config")"
+
+for form in .github/ISSUE_TEMPLATE/*.yml; do
+	[ "$(basename "$form")" = config.yml ] && continue
+	yq -i '(.body[] | select(.type == "dropdown" and .attributes.label == strenv(FIELD)) | .attributes.options) =
+		([load("'"$config"'").labels[] | select(has("area")) | .area] | . style="")' "$form"
+done
diff --git a/.github/workflows/issue-routing-sync.yml b/.github/workflows/issue-routing-sync.yml
new file mode 100644
index 0000000..7a23bfc
--- /dev/null
+++ b/.github/workflows/issue-routing-sync.yml
@@ -0,0 +1,116 @@
+# Keeps the issue forms in step with .github/issue-routing.yml: validates the config,
+# regenerates the forms' area dropdown from it and commits the result back.
+#
+# The scripts come from the checked-out branch, so they only run in the read-only
+# `generate` job. The `commit` job has write access but runs none of the branch's
+# code: it only copies the generated forms in and pushes them.
+name: Sync issue routing
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - .github/issue-routing.yml
+      - .github/ISSUE_TEMPLATE/**
+      - .github/scripts/**
+  pull_request:
+    paths:
+      - .github/issue-routing.yml
+      - .github/ISSUE_TEMPLATE/**
+      - .github/scripts/**
+
+permissions:
+  contents: read
+
+concurrency:
+  group: issue-routing-sync-${{ github.ref }}
+  cancel-in-progress: true
+
+env:
+  # Pull requests from forks cannot be pushed to; they are only validated.
+  CAN_PUSH: ${{ github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository }}
+  REPOSITORY: ${{ github.event.pull_request.head.repo.full_name || github.repository }}
+  REF: ${{ github.event.pull_request.head.ref || github.ref }}
+
+jobs:
+  generate:
+    runs-on: ubuntu-latest
+    outputs:
+      changed: ${{ steps.diff.outputs.changed }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          repository: ${{ env.REPOSITORY }}
+          ref: ${{ env.REF }}
+          persist-credentials: false
+
+      - name: Regenerate issue forms
+        run: .github/scripts/sync-issue-forms.sh
+
+      - name: Validate
+        run: |
+          yq -o=json .github/issue-routing.yml > "$RUNNER_TEMP/issue-routing.json"
+          forms=()
+          for form in .github/ISSUE_TEMPLATE/*.yml; do
+            [ "$(basename "$form")" = config.yml ] && continue
+            yq -o=json "$form" > "$RUNNER_TEMP/$(basename "$form").json"
+            forms+=("$RUNNER_TEMP/$(basename "$form").json")
+          done
+          node .github/scripts/issue-routing.js validate "$RUNNER_TEMP/issue-routing.json" "${forms[@]}"
+
+      - name: Check for changes
+        id: diff
+        run: |
+          if git diff --quiet -- .github/ISSUE_TEMPLATE; then
+            echo "Issue forms are up to date."
+            echo "changed=false" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+          git diff -- .github/ISSUE_TEMPLATE
+          if [ "$CAN_PUSH" != true ]; then
+            echo "::error::The issue forms are out of date. Run .github/scripts/sync-issue-forms.sh and commit the result."
+            exit 1
+          fi
+          echo "changed=true" >> "$GITHUB_OUTPUT"
+
+      - name: Upload regenerated forms
+        if: steps.diff.outputs.changed == 'true'
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: issue-forms
+          path: .github/ISSUE_TEMPLATE/*.yml
+          include-hidden-files: true
+          retention-days: 1
+
+  commit:
+    needs: generate
+    if: needs.generate.outputs.changed == 'true'
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          repository: ${{ env.REPOSITORY }}
+          ref: ${{ env.REF }}
+
+      - name: Download regenerated forms
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          name: issue-forms
+          path: ${{ runner.temp }}/issue-forms
+
+      - name: Commit regenerated forms
+        run: |
+          # Only issue form files are taken over, whatever else the artifact holds.
+          find "$RUNNER_TEMP/issue-forms" -maxdepth 1 -type f -name '*.yml' -exec cp {} .github/ISSUE_TEMPLATE/ \;
+          if git diff --quiet -- .github/ISSUE_TEMPLATE; then
+            echo "Issue forms are already up to date."
+            exit 0
+          fi
+          git config user.name 'github-actions[bot]'
+          git config user.email '41898233+github-actions[bot]@users.noreply.github.com'
+          git commit -m 'Regenerate issue form areas from issue-routing.yml' -- .github/ISSUE_TEMPLATE
+          git push
diff --git a/.github/workflows/issue-routing.yml b/.github/workflows/issue-routing.yml
new file mode 100644
index 0000000..f86b382
--- /dev/null
+++ b/.github/workflows/issue-routing.yml
@@ -0,0 +1,52 @@
+# Labels and assigns new issues. Routing is configured in .github/issue-routing.yml.
+name: Issue routing
+
+on:
+  issues:
+    types: [opened, reopened, labeled, unlabeled, unassigned]
+
+permissions:
+  contents: read
+  issues: write
+
+# Opening an issue from a form also fires `labeled` for the form's labels, and
+# removing labels or assignees fires more events;
+# handle the events for one issue one at a time.
+concurrency:
+  group: issue-routing-${{ github.event.issue.number }}
+  cancel-in-progress: false
+
+jobs:
+  route:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout routing config
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          sparse-checkout: .github
+          persist-credentials: false
+
+      # GITHUB_TOKEN cannot read organisation teams, so a GitHub App installed on
+      # the phpbb organisation with "Members: read" provides a token for that.
+      - name: Create team lookup token
+        id: app-token
+        if: vars.ISSUE_ROUTING_APP_CLIENT_ID != ''
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        with:
+          client-id: ${{ vars.ISSUE_ROUTING_APP_CLIENT_ID }}
+          private-key: ${{ secrets.ISSUE_ROUTING_APP_PRIVATE_KEY }}
+          owner: ${{ github.repository_owner }}
+          permission-members: read
+
+      - name: Load routing config
+        run: yq -o=json .github/issue-routing.yml > "$RUNNER_TEMP/issue-routing.json"
+
+      - name: Label and assign
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+        env:
+          ROUTING_CONFIG: ${{ runner.temp }}/issue-routing.json
+          TEAM_TOKEN: ${{ steps.app-token.outputs.token }}
+        with:
+          script: |
+            const { route } = require('./.github/scripts/issue-routing.js');
+            await route({ github, context, core, getOctokit });
diff --git a/README.md b/README.md
index 0941f9a..7086b5a 100644
--- a/README.md
+++ b/README.md
@@ -1,7 +1,7 @@
 # phpBB.com website issues
 
-The issue tracker for the phpBB.com websites themselves — [www.phpbb.com](https://www.phpbb.com),
-[area51.phpbb.com](https://area51.phpbb.com) and related subdomains.
+The issue tracker for the phpBB.com websites themselves — [www.phpbb.com](https://www.phpbb.com)
+and its subdomains, such as area51, the blog and the tracker.
 
 ## What belongs here