fix: minimize Nextcloud workflow patches

patches/nextcloud/appstore-build-publish.yml.patch

@@ -1,13 +1,20 @@
---- appstore-build-publish.yml
-+++ appstore-build-publish.yml
-@@ -18,8 +18,8 @@ jobs:
+--- upstream/vendor/nextcloud/appstore-build-publish.yml
++++ workflow-templates/appstore-build-publish.yml
+@@ -1,6 +1,6 @@
+ # This workflow is provided via the organization template repository
+ #
+-# https://github.com/nextcloud/.github
++# https://github.com/LibreCodeCoop/.github
+ # https://docs.github.com/en/actions/learn-github-actions/sharing-workflows-with-your-organization
+ #
+ # SPDX-FileCopyrightText: 2021-2024 Nextcloud GmbH and Nextcloud contributors
+@@ -19,9 +19,6 @@
    build_and_publish:
      runs-on: ubuntu-latest
 
 -    # Only allowed to be run on nextcloud-releases repositories
 -    if: ${{ github.repository_owner == 'nextcloud-releases' }}
-+    # Downstream consumers publish from their own repositories.
-+    # Repository policy is enforced by the consumer.
-
+-
      steps:
        - name: Check actor permission
+         uses: skjnldsv/check-actor-permission@69e92a3c4711150929bca9fcf34448c5bf5526e7 # v3.0

patches/nextcloud/block-unconventional-commits.yml.patch

@@ -1,69 +1,19 @@
 --- upstream/vendor/nextcloud/block-unconventional-commits.yml
-+++ .github/workflows/block-unconventional-commits.yml
-@@ -1,36 +1,30 @@
--# This workflow is provided via the organization template repository
--#
++++ workflow-templates/block-unconventional-commits.yml
+@@ -1,6 +1,6 @@
+ # This workflow is provided via the organization template repository
+ #
 -# https://github.com/nextcloud/.github
--# https://docs.github.com/en/actions/learn-github-actions/sharing-workflows-with-your-organization
--#
--# SPDX-FileCopyrightText: 2024 Nextcloud GmbH and Nextcloud contributors
--# SPDX-License-Identifier: MIT
--
--name: Block unconventional commits
--
--on:
--  pull_request:
--    types: [opened, ready_for_review, reopened, synchronize]
--
--permissions:
--  contents: read
--
--concurrency:
--  group: block-unconventional-commits-${{ github.head_ref || github.run_id }}
--  cancel-in-progress: true
--
--jobs:
--  block-unconventional-commits:
--    name: Block unconventional commits
--
++# https://github.com/LibreCodeCoop/.github
+ # https://docs.github.com/en/actions/learn-github-actions/sharing-workflows-with-your-organization
+ #
+ # SPDX-FileCopyrightText: 2024 Nextcloud GmbH and Nextcloud contributors
+@@ -23,7 +23,7 @@
+   block-unconventional-commits:
+     name: Block unconventional commits
+
 -    runs-on: ubuntu-latest-low
--
--    steps:
--      - name: Checkout
--        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
--        with:
--          persist-credentials: false
--
--      - uses: webiny/action-conventional-commits@7f91b1595ca1951cdb671ddc9f07a49081ec5b69 # v1.4.2
--        with:
--          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-+# SPDX-FileCopyrightText: 2024 Nextcloud GmbH and Nextcloud contributors
-+# SPDX-FileCopyrightText: 2026 LibreCode coop and contributors
-+# SPDX-License-Identifier: MIT
-+
-+name: Block unconventional commits
-+
-+on:
-+  workflow_call:
-+
-+permissions:
-+  contents: read
-+
-+concurrency:
-+  group: block-unconventional-commits-${{ github.head_ref || github.run_id }}
-+  cancel-in-progress: true
-+
-+jobs:
-+  block-unconventional-commits:
-+    name: Block unconventional commits
 +    runs-on: ubuntu-latest
-+    steps:
-+      - name: Checkout
-+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-+        with:
-+          persist-credentials: false
-+
-+      - name: Validate conventional commits
-+        uses: webiny/action-conventional-commits@7f91b1595ca1951cdb671ddc9f07a49081ec5b69 # v1.4.2
-+        with:
-+          GITHUB_TOKEN: ${{ github.token }}
+
+     steps:
+       - name: Checkout

patches/nextcloud/block-unconventional-commits.yml.patch.license

@@ -0,0 +1,2 @@
+SPDX-FileCopyrightText: 2026 LibreCode coop and contributors
+SPDX-License-Identifier: AGPL-3.0-or-later

patches/nextcloud/lint-eslint.yml.patch

@@ -1,200 +1,28 @@
 --- upstream/vendor/nextcloud/lint-eslint.yml
-+++ .github/workflows/lint-eslint.yml
-@@ -1,100 +1,97 @@
--# This workflow is provided via the organization template repository
--#
++++ workflow-templates/lint-eslint.yml
+@@ -1,6 +1,6 @@
+ # This workflow is provided via the organization template repository
+ #
 -# https://github.com/nextcloud/.github
--# https://docs.github.com/en/actions/learn-github-actions/sharing-workflows-with-your-organization
--#
--# SPDX-FileCopyrightText: 2021-2024 Nextcloud GmbH and Nextcloud contributors
--# SPDX-License-Identifier: MIT
--
--name: Lint eslint
--
--on: pull_request
--
--permissions:
--  contents: read
--
--concurrency:
--  group: lint-eslint-${{ github.head_ref || github.run_id }}
--  cancel-in-progress: true
--
--jobs:
--  changes:
++# https://github.com/LibreCodeCoop/.github
+ # https://docs.github.com/en/actions/learn-github-actions/sharing-workflows-with-your-organization
+ #
+ # SPDX-FileCopyrightText: 2021-2024 Nextcloud GmbH and Nextcloud contributors
+@@ -19,7 +19,7 @@
+
+ jobs:
+   changes:
 -    runs-on: ubuntu-latest-low
--    permissions:
--      contents: read
--      pull-requests: read
--
--    outputs:
--      src: ${{ steps.changes.outputs.src}}
--
--    steps:
--      - uses: dorny/paths-filter@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d # v4.0.3
--        id: changes
--        continue-on-error: true
--        with:
--          filters: |
--            src:
--              - '.github/workflows/**'
--              - 'src/**'
--              - 'appinfo/info.xml'
--              - 'package.json'
--              - 'package-lock.json'
--              - 'tsconfig.json'
--              - '.eslintrc.*'
--              - '.eslintignore'
--              - '**.js'
--              - '**.ts'
--              - '**.vue'
--
--  lint:
--    runs-on: ubuntu-latest
--
--    needs: changes
--    if: needs.changes.outputs.src != 'false'
--
--    name: NPM lint
--
--    steps:
--      - name: Checkout
--        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
--        with:
--          persist-credentials: false
--
--      - name: Read package.json node and npm engines version
--        uses: skjnldsv/read-package-engines-version-actions@06d6baf7d8f41934ab630e97d9e6c0bc9c9ac5e4 # v3
--        id: versions
--        with:
--          fallbackNode: '^24'
--          fallbackNpm: '^11.3'
--
--      - name: Set up node ${{ steps.versions.outputs.nodeVersion }}
--        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
--        with:
--          node-version: ${{ steps.versions.outputs.nodeVersion }}
--
--      - name: Set up npm ${{ steps.versions.outputs.npmVersion }}
--        run: npm i -g 'npm@${{ steps.versions.outputs.npmVersion }}'
--
--      - name: Install dependencies
--        env:
--          CYPRESS_INSTALL_BINARY: 0
--          PUPPETEER_SKIP_DOWNLOAD: true
--        run: npm ci
--
--      - name: Lint
--        run: npm run lint
--
--  summary:
--    permissions:
--      contents: none
--    runs-on: ubuntu-latest-low
--    needs: [changes, lint]
--
--    if: always()
--
--    # This is the summary, we just avoid to rename it so that branch protection rules still match
--    name: eslint
--
--    steps:
--      - name: Summary status
--        run: if ${{ needs.changes.outputs.src != 'false' && needs.lint.result != 'success' }}; then exit 1; fi
-+# SPDX-FileCopyrightText: 2021-2024 Nextcloud GmbH and Nextcloud contributors
-+# SPDX-FileCopyrightText: 2026 LibreCode coop and contributors
-+# SPDX-License-Identifier: MIT
-+
-+name: Lint eslint
-+
-+on:
-+  workflow_call:
-+
-+permissions:
-+  contents: read
-+
-+concurrency:
-+  group: lint-eslint-${{ github.head_ref || github.run_id }}
-+  cancel-in-progress: true
-+
-+jobs:
-+  changes:
-+    runs-on: ubuntu-latest
-+    permissions:
-+      contents: read
-+      pull-requests: read
-+    outputs:
-+      src: ${{ steps.changes.outputs.src }}
-+    steps:
-+      - name: Detect JavaScript changes
-+        id: changes
-+        uses: dorny/paths-filter@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d # v4.0.3
-+        continue-on-error: true
-+        with:
-+          filters: |
-+            src:
-+              - '.github/workflows/**'
-+              - 'src/**'
-+              - 'appinfo/info.xml'
-+              - 'package.json'
-+              - 'package-lock.json'
-+              - 'tsconfig.json'
-+              - '.eslintrc.*'
-+              - '.eslintignore'
-+              - '**.js'
-+              - '**.ts'
-+              - '**.vue'
-+
-+  lint:
 +    runs-on: ubuntu-latest
-+    needs: changes
-+    if: needs.changes.outputs.src != 'false'
-+    name: NPM lint
-+    steps:
-+      - name: Checkout
-+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-+        with:
-+          persist-credentials: false
-+
-+      - name: Read package.json engines
-+        id: versions
-+        uses: skjnldsv/read-package-engines-version-actions@06d6baf7d8f41934ab630e97d9e6c0bc9c9ac5e4 # v3
-+        with:
-+          fallbackNode: '^24'
-+          fallbackNpm: '^11.3'
-+
-+      - name: Set up node ${{ steps.versions.outputs.nodeVersion }}
-+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
-+        with:
-+          node-version: ${{ steps.versions.outputs.nodeVersion }}
-+
-+      - name: Show npm version
-+        run: npm --version
-+
-+      - name: Install dependencies
-+        env:
-+          CYPRESS_INSTALL_BINARY: 0
-+          PUPPETEER_SKIP_DOWNLOAD: true
-+        run: npm ci
-+
-+      - name: Lint
-+        run: npm run lint
-+
-+  summary:
-+    permissions:
-+      contents: none
+     permissions:
+       contents: read
+       pull-requests: read
+@@ -87,7 +87,7 @@
+   summary:
+     permissions:
+       contents: none
+-    runs-on: ubuntu-latest-low
 +    runs-on: ubuntu-latest
-+    needs:
-+      - changes
-+      - lint
-+    if: always()
-+    name: eslint
-+    steps:
-+      - name: Summary status
-+        env:
-+          CHANGED: ${{ needs.changes.outputs.src }}
-+          LINT_RESULT: ${{ needs.lint.result }}
-+        run: |
-+          if [ "$CHANGED" != "false" ] && [ "$LINT_RESULT" != "success" ]; then
-+            exit 1
-+          fi
+     needs: [changes, lint]
+
+     if: always()

patches/nextcloud/lint-eslint.yml.patch.license

@@ -0,0 +1,2 @@
+SPDX-FileCopyrightText: 2026 LibreCode coop and contributors
+SPDX-License-Identifier: AGPL-3.0-or-later