Skip to content

ci: add job timeouts and PR concurrency to every workflow (#1050) - #1059

Merged
yakew7 merged 1 commit into
yakew7:mainfrom
AnayDhawan:fix/1050-workflow-timeouts-concurrency
Oct 18, 2026
Merged

yakew7 merged 1 commit into
yakew7:mainfrom
AnayDhawan:fix/1050-workflow-timeouts-concurrency

Conversation

@AnayDhawan

Copy link
Copy Markdown
Contributor

Summary

Add timeout-minutes to every workflow job and a concurrency group to every workflow that runs on pull_request, and write the policy up in .github/ACTIONS-AUDIT.md.

Type

  • Audit
  • Explainer
  • Bug fix
  • Other

Audit checklist

N/A, this PR is not an audit.


Explainer checklist

N/A, this PR is not an explainer.


Details

  • All 15 jobs across the 12 workflows now set timeout-minutes: 5 for the small check jobs, 10 for lint, favicons, explainers and browser smoke, 15 for the audit matrix, 20 for the profiler tests, 30 for the benchmark harness and CodeQL. Recent runs finish in under 5 minutes end to end, so the limits leave a wide margin.
  • 10 workflows get concurrency: group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}. cancel-in-progress is ${{ github.event_name == 'pull_request' }}, so a new commit cancels the stale PR run but a push to main or a scheduled run is never cancelled.
  • first.interaction.yml and pr-review-ping.yml are left without concurrency: they run on issues / pull_request_target and post one-off comments, which a cancel would drop.
  • Not changed: several workflows still trigger on both push and pull_request, so a commit on a branch with an open PR starts those jobs twice. Restricting push to main would fix that but changes which events gate a merge, so I left it as a separate decision. Noted in ACTIONS-AUDIT.md.

Testing

  • Parsed all 12 workflow files with PyYAML; every job has timeout-minutes, and concurrency is present on the 10 expected workflows.
  • python scripts/check_em_dash.py passes.

Linked issue

Closes #1050

Every job now sets timeout-minutes (5 to 30, recent runs finish in under
five minutes), and workflows that run on pull_request cancel superseded
PR runs via a concurrency group. Runs on main are never cancelled. The
policy is written up in .github/ACTIONS-AUDIT.md.
@vercel

vercel Bot commented Oct 18, 2026

Copy link
Copy Markdown
Contributor

@AnayDhawan is attempting to deploy a commit to the yashkewlani2020-gmailcom's projects Team on Vercel.

A member of the Team first needs to authorize it.

@github-actions

Copy link
Copy Markdown

@yakew7 @ahmdkaml - new PR touching a path you own, please review.

@yakew7
yakew7 marked this pull request as ready for review October 18, 2026 05:30
@yakew7
yakew7 merged commit 7858cff into yakew7:main Oct 18, 2026
19 of 20 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

The pull request and push workflows have no timeout-minutes or concurrency settings

2 participants