feat: track reusable workflows from Nextcloud upstream

patches/nextcloud/block-unconventional-commits.yml.patch

@@ -0,0 +1,69 @@
+--- upstream/vendor/nextcloud/block-unconventional-commits.yml
++++ .github/workflows/block-unconventional-commits.yml
+@@ -1,36 +1,30 @@
+-# This workflow is provided via the organization template repository
+-#
+-# https://github.com/nextcloud/.github
+-# https://docs.github.com/en/actions/learn-github-actions/sharing-workflows-with-your-organization
+-#
+-# SPDX-FileCopyrightText: 2024 Nextcloud GmbH and Nextcloud contributors
+-# SPDX-License-Identifier: MIT
+-
+-name: Block unconventional commits
+-
+-on:
+-  pull_request:
+-    types: [opened, ready_for_review, reopened, synchronize]
+-
+-permissions:
+-  contents: read
+-
+-concurrency:
+-  group: block-unconventional-commits-${{ github.head_ref || github.run_id }}
+-  cancel-in-progress: true
+-
+-jobs:
+-  block-unconventional-commits:
+-    name: Block unconventional commits
+-
+-    runs-on: ubuntu-latest-low
+-
+-    steps:
+-      - name: Checkout
+-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+-        with:
+-          persist-credentials: false
+-
+-      - uses: webiny/action-conventional-commits@7f91b1595ca1951cdb671ddc9f07a49081ec5b69 # v1.4.2
+-        with:
+-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
++# SPDX-FileCopyrightText: 2024 Nextcloud GmbH and Nextcloud contributors
++# SPDX-FileCopyrightText: 2026 LibreCode coop and contributors
++# SPDX-License-Identifier: MIT
++
++name: Block unconventional commits
++
++on:
++  workflow_call:
++
++permissions:
++  contents: read
++
++concurrency:
++  group: block-unconventional-commits-${{ github.head_ref || github.run_id }}
++  cancel-in-progress: true
++
++jobs:
++  block-unconventional-commits:
++    name: Block unconventional commits
++    runs-on: ubuntu-latest
++    steps:
++      - name: Checkout
++        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
++        with:
++          persist-credentials: false
++
++      - name: Validate conventional commits
++        uses: webiny/action-conventional-commits@7f91b1595ca1951cdb671ddc9f07a49081ec5b69 # v1.4.2
++        with:
++          GITHUB_TOKEN: ${{ github.token }}

patches/nextcloud/lint-eslint.yml.patch

@@ -0,0 +1,200 @@
+--- upstream/vendor/nextcloud/lint-eslint.yml
++++ .github/workflows/lint-eslint.yml
+@@ -1,100 +1,97 @@
+-# This workflow is provided via the organization template repository
+-#
+-# https://github.com/nextcloud/.github
+-# https://docs.github.com/en/actions/learn-github-actions/sharing-workflows-with-your-organization
+-#
+-# SPDX-FileCopyrightText: 2021-2024 Nextcloud GmbH and Nextcloud contributors
+-# SPDX-License-Identifier: MIT
+-
+-name: Lint eslint
+-
+-on: pull_request
+-
+-permissions:
+-  contents: read
+-
+-concurrency:
+-  group: lint-eslint-${{ github.head_ref || github.run_id }}
+-  cancel-in-progress: true
+-
+-jobs:
+-  changes:
+-    runs-on: ubuntu-latest-low
+-    permissions:
+-      contents: read
+-      pull-requests: read
+-
+-    outputs:
+-      src: ${{ steps.changes.outputs.src}}
+-
+-    steps:
+-      - uses: dorny/paths-filter@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d # v4.0.3
+-        id: changes
+-        continue-on-error: true
+-        with:
+-          filters: |
+-            src:
+-              - '.github/workflows/**'
+-              - 'src/**'
+-              - 'appinfo/info.xml'
+-              - 'package.json'
+-              - 'package-lock.json'
+-              - 'tsconfig.json'
+-              - '.eslintrc.*'
+-              - '.eslintignore'
+-              - '**.js'
+-              - '**.ts'
+-              - '**.vue'
+-
+-  lint:
+-    runs-on: ubuntu-latest
+-
+-    needs: changes
+-    if: needs.changes.outputs.src != 'false'
+-
+-    name: NPM lint
+-
+-    steps:
+-      - name: Checkout
+-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+-        with:
+-          persist-credentials: false
+-
+-      - name: Read package.json node and npm engines version
+-        uses: skjnldsv/read-package-engines-version-actions@06d6baf7d8f41934ab630e97d9e6c0bc9c9ac5e4 # v3
+-        id: versions
+-        with:
+-          fallbackNode: '^24'
+-          fallbackNpm: '^11.3'
+-
+-      - name: Set up node ${{ steps.versions.outputs.nodeVersion }}
+-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+-        with:
+-          node-version: ${{ steps.versions.outputs.nodeVersion }}
+-
+-      - name: Set up npm ${{ steps.versions.outputs.npmVersion }}
+-        run: npm i -g 'npm@${{ steps.versions.outputs.npmVersion }}'
+-
+-      - name: Install dependencies
+-        env:
+-          CYPRESS_INSTALL_BINARY: 0
+-          PUPPETEER_SKIP_DOWNLOAD: true
+-        run: npm ci
+-
+-      - name: Lint
+-        run: npm run lint
+-
+-  summary:
+-    permissions:
+-      contents: none
+-    runs-on: ubuntu-latest-low
+-    needs: [changes, lint]
+-
+-    if: always()
+-
+-    # This is the summary, we just avoid to rename it so that branch protection rules still match
+-    name: eslint
+-
+-    steps:
+-      - name: Summary status
+-        run: if ${{ needs.changes.outputs.src != 'false' && needs.lint.result != 'success' }}; then exit 1; fi
++# SPDX-FileCopyrightText: 2021-2024 Nextcloud GmbH and Nextcloud contributors
++# SPDX-FileCopyrightText: 2026 LibreCode coop and contributors
++# SPDX-License-Identifier: MIT
++
++name: Lint eslint
++
++on:
++  workflow_call:
++
++permissions:
++  contents: read
++
++concurrency:
++  group: lint-eslint-${{ github.head_ref || github.run_id }}
++  cancel-in-progress: true
++
++jobs:
++  changes:
++    runs-on: ubuntu-latest
++    permissions:
++      contents: read
++      pull-requests: read
++    outputs:
++      src: ${{ steps.changes.outputs.src }}
++    steps:
++      - name: Detect JavaScript changes
++        id: changes
++        uses: dorny/paths-filter@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d # v4.0.3
++        continue-on-error: true
++        with:
++          filters: |
++            src:
++              - '.github/workflows/**'
++              - 'src/**'
++              - 'appinfo/info.xml'
++              - 'package.json'
++              - 'package-lock.json'
++              - 'tsconfig.json'
++              - '.eslintrc.*'
++              - '.eslintignore'
++              - '**.js'
++              - '**.ts'
++              - '**.vue'
++
++  lint:
++    runs-on: ubuntu-latest
++    needs: changes
++    if: needs.changes.outputs.src != 'false'
++    name: NPM lint
++    steps:
++      - name: Checkout
++        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
++        with:
++          persist-credentials: false
++
++      - name: Read package.json engines
++        id: versions
++        uses: skjnldsv/read-package-engines-version-actions@06d6baf7d8f41934ab630e97d9e6c0bc9c9ac5e4 # v3
++        with:
++          fallbackNode: '^24'
++          fallbackNpm: '^11.3'
++
++      - name: Set up node ${{ steps.versions.outputs.nodeVersion }}
++        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
++        with:
++          node-version: ${{ steps.versions.outputs.nodeVersion }}
++
++      - name: Show npm version
++        run: npm --version
++
++      - name: Install dependencies
++        env:
++          CYPRESS_INSTALL_BINARY: 0
++          PUPPETEER_SKIP_DOWNLOAD: true
++        run: npm ci
++
++      - name: Lint
++        run: npm run lint
++
++  summary:
++    permissions:
++      contents: none
++    runs-on: ubuntu-latest
++    needs:
++      - changes
++      - lint
++    if: always()
++    name: eslint
++    steps:
++      - name: Summary status
++        env:
++          CHANGED: ${{ needs.changes.outputs.src }}
++          LINT_RESULT: ${{ needs.lint.result }}
++        run: |
++          if [ "$CHANGED" != "false" ] && [ "$LINT_RESULT" != "success" ]; then
++            exit 1
++          fi

patches/nextcloud/lint-info-xml.yml.patch

@@ -0,0 +1,77 @@
+--- upstream/vendor/nextcloud/lint-info-xml.yml
++++ .github/workflows/lint-info-xml.yml
+@@ -1,40 +1,34 @@
+-# This workflow is provided via the organization template repository
+-#
+-# https://github.com/nextcloud/.github
+-# https://docs.github.com/en/actions/learn-github-actions/sharing-workflows-with-your-organization
+-#
+-# SPDX-FileCopyrightText: 2021-2024 Nextcloud GmbH and Nextcloud contributors
+-# SPDX-License-Identifier: MIT
+-
+-name: Lint info.xml
+-
+-on: pull_request
+-
+-permissions:
+-  contents: read
+-
+-concurrency:
+-  group: lint-info-xml-${{ github.head_ref || github.run_id }}
+-  cancel-in-progress: true
+-
+-jobs:
+-  xml-linters:
+-    runs-on: ubuntu-latest-low
+-
+-    name: info.xml lint
+-    steps:
+-      - name: Checkout
+-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+-        with:
+-          persist-credentials: false
+-          sparse-checkout: |
+-            appinfo/
+-
+-      - name: Download schema
+-        run: wget https://raw.githubusercontent.com/nextcloud/appstore/master/nextcloudappstore/api/v1/release/info.xsd
+-
+-      - name: Lint info.xml
+-        uses: ChristophWurst/xmllint-action@36f2a302f84f8c83fceea0b9c59e1eb4a616d3c1 # v1.2
+-        with:
+-          xml-file: ./appinfo/info.xml
+-          xml-schema-file: ./info.xsd
++# SPDX-FileCopyrightText: 2021-2024 Nextcloud GmbH and Nextcloud contributors
++# SPDX-FileCopyrightText: 2026 LibreCode coop and contributors
++# SPDX-License-Identifier: MIT
++
++name: Lint info.xml
++
++on:
++  workflow_call:
++
++permissions:
++  contents: read
++
++jobs:
++  xml-linters:
++    name: info.xml lint
++    runs-on: ubuntu-latest
++    steps:
++      - name: Checkout
++        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
++        with:
++          persist-credentials: false
++          sparse-checkout: |
++            appinfo/
++
++      - name: Download schema
++        run: >-
++          wget
++          https://raw.githubusercontent.com/nextcloud/appstore/c8fe8dcb388d2ed7b566e982fd64aa38463ba80a/nextcloudappstore/api/v1/release/info.xsd
++
++      - name: Lint info.xml
++        uses: ChristophWurst/xmllint-action@36f2a302f84f8c83fceea0b9c59e1eb4a616d3c1 # v1.2
++        with:
++          xml-file: ./appinfo/info.xml
++          xml-schema-file: ./info.xsd