Add timeouts to every job and pin actions/checkout to an exact tag #109

Merged
Tirsvad merged 1 commits from workflow-timeouts-and-pins into main 2026-10-11 06:53:53 +02:00
Owner

Applies the findings of the new workflow checklist QC-WF-001 (review records
RC-077 and RC-078 in sqa-and-qc) to the workflows of this repository, the
ones that every consumer runs.

What

  • timeout-minutes on every job (criterion 14): quality-checks 15, release
    15, validate-workflows 10, sync-milestones 15, publish-wiki 10,
    sync-github-metadata 5.
  • actions/checkout@v4 becomes actions/checkout@v4.2.2 (criterion 8: an exact
    release tag, not a moving major tag), in the five workflows and the two
    scoped workflows.
  • CHANGELOG.md, Unreleased, "Changed".

No change to inputs, secrets, triggers or behaviour.

Checks

python -m pytest -q tests 305 passed; python tools/changelog.py check passes.

Wiki

No wiki pages changed: the workflow behaviour and the documented inputs are
the same; python tools/build_wiki.py writes 0 pages.

Not in this pull request

  • The two 6-line run: blocks of sync-milestones.yml (criterion 20). The
    template is in the framework; the script that replaces them is a framework
    change (sqa-qc-framework), and this copy follows when the pin moves.
  • A full commit SHA for actions/checkout: not verified to be accepted by the
    instance's runner, so the exact tag is used. QC-WF-001 criterion 8 allows
    either.

Issues

No issue is closed by this pull request; no issue was opened for this work.

Applies the findings of the new workflow checklist `QC-WF-001` (review records RC-077 and RC-078 in `sqa-and-qc`) to the workflows of this repository, the ones that every consumer runs. ## What - `timeout-minutes` on every job (criterion 14): quality-checks 15, release 15, validate-workflows 10, sync-milestones 15, publish-wiki 10, sync-github-metadata 5. - `actions/checkout@v4` becomes `actions/checkout@v4.2.2` (criterion 8: an exact release tag, not a moving major tag), in the five workflows and the two scoped workflows. - `CHANGELOG.md`, `Unreleased`, "Changed". No change to inputs, secrets, triggers or behaviour. ## Checks `python -m pytest -q tests` 305 passed; `python tools/changelog.py check` passes. ## Wiki No wiki pages changed: the workflow behaviour and the documented inputs are the same; `python tools/build_wiki.py` writes 0 pages. ## Not in this pull request - The two 6-line `run:` blocks of `sync-milestones.yml` (criterion 20). The template is in the framework; the script that replaces them is a framework change (sqa-qc-framework), and this copy follows when the pin moves. - A full commit SHA for `actions/checkout`: not verified to be accepted by the instance's runner, so the exact tag is used. `QC-WF-001` criterion 8 allows either. ## Issues No issue is closed by this pull request; no issue was opened for this work.
Tirsvad added 1 commit 2026-10-11 06:49:37 +02:00
Add timeouts to every job and pin actions/checkout to an exact tag
TirSystem/github-action: Publish wiki / publish-wiki (push) Skipped
TirSystem/github-action: Sync GitHub mirror metadata / sync-metadata (push) Skipped
Validate workflows / validate (pull_request) Successful in 18s
1bad75c367
Findings of QC-WF-001 (criteria 8 and 14) applied to the workflows of this
repository and to the two scoped workflows:

- timeout-minutes on every job: quality-checks 15, release 15,
  validate-workflows 10, sync-milestones 15, publish-wiki 10,
  sync-github-metadata 5.
- actions/checkout@v4 becomes actions/checkout@v4.2.2.

No change to inputs, secrets or behaviour. The 6-line run blocks of
sync-milestones.yml move to a script in the framework in a separate change.
Tirsvad merged commit 6393476fe1 into main 2026-10-11 06:53:53 +02:00
Tirsvad deleted branch workflow-timeouts-and-pins 2026-10-11 06:53:53 +02:00
Sign in to join this conversation.