From 71ad9cbfc1445c082fee77ed75a1eef1ebf31843 Mon Sep 17 00:00:00 2001
From: "ncmake-updater[bot]"
 <307247918+ncmake-updater[bot]@users.noreply.github.com>
Date: Sun, 2 Aug 2026 07:49:31 +0000
Subject: [PATCH] ci: update managed CI workflows from upstream

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 .github/workflows/.ncmake-workflows.json |  4 ++--
 .github/workflows/workflow-updater.yml   | 10 +++++++---
 2 files changed, 9 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/.ncmake-workflows.json b/.github/workflows/.ncmake-workflows.json
index 33a245f..dd95899 100644
--- a/.github/workflows/.ncmake-workflows.json
+++ b/.github/workflows/.ncmake-workflows.json
@@ -35,8 +35,8 @@
     "source": "nextcloud"
   },
   "workflow-updater.yml": {
-    "hash": "ea3b70d0fdd6a7d7073418b7b75742195712fe51ab8320a1e24ab3e004d0e9e8",
-    "sha": "0147c7cd66aa09985b95e86e370f81e625b3314e",
+    "hash": "336f88603161615da3dcadaa3c02185b816ebcbb87fa9c5fb532fad42e8d60cf",
+    "sha": "1407e592f85bbd1299cc5ff5e2db1eec861d0182",
     "source": "ncmake"
   }
 }
diff --git a/.github/workflows/workflow-updater.yml b/.github/workflows/workflow-updater.yml
index 0147c7c..1407e59 100644
--- a/.github/workflows/workflow-updater.yml
+++ b/.github/workflows/workflow-updater.yml
@@ -10,7 +10,7 @@
 # minted per run as a short-lived token. The app is required because the default
 # GITHUB_TOKEN may not push workflow files, and it is preferred over a PAT
 # because the same token both pushes the files and produces verified, signed
-# commits. Store its credentials as the NCMAKE_UPDATER_APP_ID and
+# commits. Store its credentials as the NCMAKE_UPDATER_CLIENT_ID and
 # NCMAKE_UPDATER_PRIVATE_KEY secrets. See doc/AUTOUPDATE_WORKFLOW.md and
 # doc/GITHUB_APP.md.
 
@@ -18,7 +18,11 @@ name: ncmake workflow update
 
 on:
   schedule:
-    - cron: '30 5 * * *'      # daily 05:30 UTC
+    # Daily at 05:30 UTC. GitHub starts scheduled runs on a best-effort basis and
+    # delays them under load, so expect this a few hours late, not on the minute
+    # (see doc/AUTOUPDATE_WORKFLOW.md). Trigger workflow_dispatch to run without
+    # waiting for the schedule.
+    - cron: '30 5 * * *'
   workflow_dispatch:
 
 permissions:
@@ -36,7 +40,7 @@ jobs:
         id: app-token
         uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
         with:
-          app-id: ${{ secrets.NCMAKE_UPDATER_APP_ID }}
+          client-id: ${{ secrets.NCMAKE_UPDATER_CLIENT_ID }}
           private-key: ${{ secrets.NCMAKE_UPDATER_PRIVATE_KEY }}
 
       - name: Checkout