ci: bound validation, release and upstream synchronization - #2
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
CI and maintenance workflows lacked job deadlines, while obsolete PR validations could run concurrently. Add a 15-minute limit to validation/release, a five-minute upstream-sync limit, and a two-minute wrong-target guard; cancel superseded validation and restrict token permissions. Update the release action from its unsupported v1 runtime to v2, retaining the same artifact and release inputs.
Keep daily/manual upstream synchronization and the dedicated SSH-key ownership of
main. Remove the redundant main-push sync trigger and let an active sync finish rather than interrupting a branch update. All changes targetlab-opencode-go-quota; upstream-ownedmainis untouched.Validation:
bun install --frozen-lockfileandbun run verifypassed (448 tests, lint, TypeScript and production single-file build). Actionlint and git diff --check passed. Publishing and SSH synchronization were reviewed statically, not executed. The required validation check isverify.Hosted final-head validation: CI run 35520354070 passed;
verifycompleted in 38 seconds.