From d4947a7a80869437f23519032deb08b1386ce61e Mon Sep 17 00:00:00 2001
From: Jonathan Miller <jmiller@mokoconsulting.tech>
Date: Sun, 5 Jul 2026 15:49:44 -0500
Subject: [PATCH] fix(templates): CODEOWNERS use .mokogitea/workflows not
 .github/workflows
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The synced CODEOWNERS templates deployed to MokoGitea repos pointed at
`.github/workflows/` (and other `.github/` config paths), which never
match the real `.mokogitea/` files — so code-owner protection on
workflows/config was silently a no-op. Also refreshes the stale,
consolidated-away workflow filename list to the current canonical set.

- templates/mokogitea/CODEOWNERS: repoint workflow + config paths to
  .mokogitea/; replace obsolete workflow names (deploy-dev, auto-dev-issue,
  standards-compliance, ci-joomla, update-server, branch-freeze, …) with
  the current set (auto-release, pre-release, cascade-dev, ci-generic,
  pr-check, cleanup, branch-cleanup, notify, repo-health, gitleaks,
  issue-branch, ci-issue-reporter, sync-on-merge, version-set, …).
- templates/docs/required/CODEOWNERS: same .github -> .mokogitea repoint.

Deliberately NOT changed (not simple path-swaps): template-SECURITY.md's
codeql-analysis / dependabot refs (GitHub-only features with no MokoGitea
equivalent), and the schema/gitignore/doc-example refs — see #337.

Closes #337

Claude-Session: https://claude.ai/code/session_01WbGBN9VyRK61zczYWcCQ2i
---
 templates/docs/required/CODEOWNERS |  4 +--
 templates/mokogitea/CODEOWNERS     | 53 ++++++++++++++----------------
 2 files changed, 27 insertions(+), 30 deletions(-)

diff --git a/templates/docs/required/CODEOWNERS b/templates/docs/required/CODEOWNERS
index 990bc8a..630df71 100644
--- a/templates/docs/required/CODEOWNERS
+++ b/templates/docs/required/CODEOWNERS
@@ -19,10 +19,10 @@
 /api/ @mokoconsulting-tech
 
 # CI/CD WORKFLOWS
-/.github/workflows/ @mokoconsulting-tech
+/.mokogitea/workflows/ @mokoconsulting-tech
 
 # ISSUE TEMPLATES
-/.github/ISSUE_TEMPLATE/ @mokoconsulting-tech
+/.mokogitea/ISSUE_TEMPLATE/ @mokoconsulting-tech
 
 # GOVERNANCE + OPERATIONAL FILES
 /CONTRIBUTING.md @mokoconsulting-tech
diff --git a/templates/mokogitea/CODEOWNERS b/templates/mokogitea/CODEOWNERS
index f818f4a..2a52a7e 100644
--- a/templates/mokogitea/CODEOWNERS
+++ b/templates/mokogitea/CODEOWNERS
@@ -8,35 +8,32 @@
 # Combined with branch protection (require PR reviews), this prevents
 # unauthorized modifications to workflows, configs, and governance files.
 
-# ── Synced workflows (managed by MokoCli — do not edit manually) ────
-/.github/workflows/deploy-dev.yml                @jmiller
-/.github/workflows/deploy-demo.yml               @jmiller
-/.github/workflows/deploy-manual.yml             @jmiller
-/.github/workflows/auto-release.yml              @jmiller
-/.github/workflows/auto-dev-issue.yml            @jmiller
-/.github/workflows/auto-assign.yml               @jmiller
-/.github/workflows/sync-version-on-merge.yml     @jmiller
-/.github/workflows/enterprise-firewall-setup.yml @jmiller
-/.github/workflows/repository-cleanup.yml        @jmiller
-/.github/workflows/standards-compliance.yml      @jmiller
-/.github/workflows/codeql-analysis.yml           @jmiller
-/.github/workflows/repo_health.yml               @jmiller
-/.github/workflows/ci-joomla.yml                 @jmiller
-/.github/workflows/update-server.yml             @jmiller
-/.github/workflows/deploy-manual.yml             @jmiller
-/.github/workflows/ci-dolibarr.yml               @jmiller
-/.github/workflows/publish-to-mokodolimods.yml   @jmiller
-/.github/workflows/changelog-validation.yml      @jmiller
-/.github/workflows/branch-freeze.yml             @jmiller
-# Custom workflows in .github/workflows/ not listed above are repo-owned.
+# ── Synced workflows (managed by MokoCLI — do not edit manually) ────
+/.mokogitea/workflows/auto-bump.yml          @jmiller
+/.mokogitea/workflows/auto-release.yml       @jmiller
+/.mokogitea/workflows/pre-release.yml        @jmiller
+/.mokogitea/workflows/cascade-dev.yml        @jmiller
+/.mokogitea/workflows/rc-revert.yml          @jmiller
+/.mokogitea/workflows/branch-cleanup.yml     @jmiller
+/.mokogitea/workflows/cleanup.yml            @jmiller
+/.mokogitea/workflows/ci-generic.yml         @jmiller
+/.mokogitea/workflows/pr-check.yml           @jmiller
+/.mokogitea/workflows/notify.yml             @jmiller
+/.mokogitea/workflows/repo-health.yml        @jmiller
+/.mokogitea/workflows/gitleaks.yml           @jmiller
+/.mokogitea/workflows/issue-branch.yml       @jmiller
+/.mokogitea/workflows/ci-issue-reporter.yml  @jmiller
+/.mokogitea/workflows/sync-on-merge.yml      @jmiller
+/.mokogitea/workflows/version-set.yml        @jmiller
+# Custom workflows in .mokogitea/workflows/ not listed above are repo-owned.
 
-# ── GitHub configuration ─────────────────────────────────────────────────
-/.github/ISSUE_TEMPLATE/                @jmiller
-/.github/CODEOWNERS                     @jmiller
-/.github/copilot.yml                    @jmiller
-/.github/copilot-instructions.md        @jmiller
-/.github/CLAUDE.md                      @jmiller
-/.github/.mokostandards                 @jmiller
+# ── MokoGitea configuration ──────────────────────────────────────────────
+/.mokogitea/ISSUE_TEMPLATE/             @jmiller
+/.mokogitea/CODEOWNERS                  @jmiller
+/.mokogitea/copilot.yml                 @jmiller
+/.mokogitea/copilot-instructions.md     @jmiller
+/.mokogitea/CLAUDE.md                   @jmiller
+/.mokogitea/.mokostandards              @jmiller
 
 # ── Build and config files ───────────────────────────────────────────────
 /composer.json                          @jmiller