From 2df825eedbcd7c60aabf6a0412b02d1ce37aec71 Mon Sep 17 00:00:00 2001
From: Vitor Mattos <vitor@php.rio>
Date: Mon, 21 Sep 2026 16:27:41 -0300
Subject: [PATCH 1/2] chore: complete release artifact and publication contract

Signed-off-by: Vitor Mattos <vitor@php.rio>
---
 .nextcloud-release.yml | 37 +++++++++++++++++++++++++++++++++++++
 1 file changed, 37 insertions(+)

diff --git a/.nextcloud-release.yml b/.nextcloud-release.yml
index 4d0c7c767c..e176846b76 100644
--- a/.nextcloud-release.yml
+++ b/.nextcloud-release.yml
@@ -39,3 +39,40 @@ package:
     - make
     - appstore
     - verify-appstore-package
+  required_paths:
+    - appinfo
+    - composer
+    - css
+    - img
+    - js
+    - l10n
+    - lib
+    - templates
+    - vendor
+    - 3rdparty
+    - openapi.json
+    - openapi-administration.json
+    - openapi-full.json
+    - tests/php/fixtures/pdfs/small_valid.pdf
+  forbidden_paths:
+    - .git
+    - .github
+    - .devcontainer
+    - .patches
+    - build
+    - docs
+    - node_modules
+    - playwright
+    - src
+    - vendor-bin
+    - img/screenshot
+    - 3rdparty/.git
+    - 3rdparty/.github
+    - 3rdparty/vendor
+    - 3rdparty/vendor-bin
+    - 3rdparty/scoper.inc.php
+
+publication:
+  publisher_workflow: appstore-build-publish.yml
+  asset_name: '{app}-{tag}.tar.gz'
+  appstore_api: https://apps.nextcloud.com/api/v1/apps.json

From de1a1c8e30e2d73fb908fd31752d10748cdcaa10 Mon Sep 17 00:00:00 2001
From: Vitor Mattos <vitor@php.rio>
Date: Mon, 21 Sep 2026 16:55:55 -0300
Subject: [PATCH 2/2] ci: update release consumer validator

Signed-off-by: Vitor Mattos <vitor@php.rio>
---
 .github/workflows/release-metadata.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/release-metadata.yml b/.github/workflows/release-metadata.yml
index c69f7d1817..d0270756e6 100644
--- a/.github/workflows/release-metadata.yml
+++ b/.github/workflows/release-metadata.yml
@@ -37,7 +37,7 @@ jobs:
 
       - id: release
         name: Validate release consumer
-        uses: LibreCodeCoop/github-workflows/actions/validate-release-consumer@b0f1a51911ed5424a0dfa1ff0cb732cbd57c3d4c
+        uses: LibreCodeCoop/github-workflows/actions/validate-release-consumer@83fdddeb3efe9b9e464e1f5c2e2772322af94fc8
 
       - name: Verify packaging changelog mapping
         env: