Retire github-workflows after ownership migrations

[vitormattos]

Goal

Retire this repository after its active responsibilities move to their natural owners.

This migration must not preserve legacy code for compatibility by default. Anything not used by the target architecture should be removed here, not copied elsewhere.

Destination epics

• Release product → Epic: Consolidate the complete release product in release-tool release-tool#60
• Organization workflow catalog → Epic: Make .github the single organization workflow catalog .github#58

Expected disposition

Move to release-tool

Only current release-product responsibilities:

• release lifecycle Actions and helpers that remain part of the target product;
• release-specific behavior that is first characterized and then incorporated into PHP;
• release-specific tests that remain useful;
• current release product documentation;
• release Action/versioning responsibilities.

Do not preserve helper Actions, scripts or compatibility entry points merely because they exist today. If the PHP architecture absorbs them, delete the old implementation after parity is proven.

Move to LibreCodeCoop/.github

Only current organization-catalog responsibilities:

• current organization workflow templates and required metadata;
• upstream Nextcloud vendoring/pins that are still used;
• current organization patches;
• upstream refresh/render/policy tooling that remains necessary;
• catalog and synchronization tests that validate the target architecture;
• sync-workflows Action;
• first-merged-pr-comment Action and documentation;
• current workflow adoption/dependency/cross-repository catalog documentation.

Delete rather than migrate

• workflow-templates/release-nextcloud-app.yml, its metadata and any tests/docs/references that only describe that retired workflow;
• catalog publication machinery that exists only for the github-workflows → .github hop;
• sync_catalog.py once the publication hop is removed;
• this repository's independent VERSION/release machinery once no public components remain here;
• stale generated outputs;
• obsolete architecture documentation;
• superseded reusable workflow experiments or compatibility paths not used by the target design;
• tests whose only purpose is validating removed behavior;
• any other legacy file discovered during the migration that has no current consumer or target responsibility.

Known consumer references to migrate or remove

A current organization-wide search found references to LibreCodeCoop/github-workflows in:

• LibreCodeCoop/extract workflow files;
• LibreCodeCoop/profile_fields workflow files, including the old release-nextcloud-app.yml;
• LibreSign/libresign release, nightly, sync, metadata and first-merged-PR workflows;
• LibreSign/documentation release-process documentation.

These references must be reviewed individually. References to current functionality should be repointed to their new owner; references to retired functionality should be removed rather than redirected to a compatibility shim.

Final checks before archival

• Search both LibreCodeCoop and LibreSign organizations for remaining LibreCodeCoop/github-workflows references.
• Search for retired workflow names such as release-nextcloud-app.
• Update current consumer workflows/templates to their new immutable Action pins.
• Remove retired consumer workflows instead of migrating them.
• Confirm catalog synchronization works directly from .github.
• Confirm release workflows use release-tool Actions.
• Confirm no current release or workflow process depends on this repository.
• Confirm no legacy compatibility layer was introduced solely to keep obsolete paths working.
• Archive/read-only this repository only after those checks pass.

[vitormattos]

Implementation retirement is complete.

Validated state:

• PR chore: retire github-workflows repository #183 merged and removed all Actions, workflows, templates, patches, vendoring, release runtime, repository version/release machinery, tests and superseded docs.
• main now contains only README, SECURITY, LICENSE and license texts.
• Direct checks of current consumer files confirm LibreSign, extract and profile_fields no longer reference LibreCodeCoop/github-workflows.
• LibreCodeCoop/.github and LibreCodeCoop/release-tool are the active owners.
• The remaining organization code-search hits for profile_fields point to pre-merge commit 03f06ef...; current main was checked directly and is clean.

The only remaining exit criterion is the repository administration flag itself: GitHub reports archived=false. The available GitHub connector has no repository-settings/archive mutation, so I cannot safely set archived=true from this session. Leaving this issue open solely for that final administrative toggle.

[vitormattos]

Final re-audit on 2026-09-24 confirms the implementation exit criteria still hold:

• organization code search returns no current hits for LibreCodeCoop/github-workflows in LibreCodeCoop or LibreSign;
• organization code search returns no current hits for release-nextcloud-app in LibreCodeCoop or LibreSign;
• main contains only README.md, SECURITY.md, LICENSE, and license texts;
• PR chore: retire github-workflows repository #183 is merged and the active implementation has been removed;
• GitHub still reports archived=false.

No further code migration is justified. The remaining step is the repository administration action that sets the repository archived/read-only. The available connector has repository admin permission but does not expose the archive/settings mutation, so this remains a genuine human/tooling block. Keep this issue open until archived=true is confirmed.

[vitormattos]

Final technical audit completed after the follow-up cleanup.

Validated current state:

• release-tool#74 removed the forgotten one-shot publish-v0.10.16.yml publisher;
• release-tool#75 removed the temporary release-specific Python reference implementation after parity, while retaining the behavioral/security scenarios against PHP;
• release-tool#76 aligned the architecture documentation with the actual public Action boundary;
• current release-tool/.github/workflows contains only the normal CI/release workflows; no version-specific one-shot publisher remains;
• searches across LibreCodeCoop and LibreSign return no current LibreCodeCoop/github-workflows references;
• searches across both organizations return no current release-nextcloud-app references;
• LibreSign/documentation source contains no current github-workflows references;
• the generated gh-pages release-process HTML is current and describes release-tool/.github ownership correctly. External web search still exposes a several-days-old crawl of the previous docs, which is stale indexing rather than a current repository dependency; documentation#104 tracks live-domain/search refresh verification.

There is no remaining technical dependency on this repository. The only program exit action still outstanding is setting LibreCodeCoop/github-workflows to archived/read-only; GitHub currently reports archived=false.