archetech / archon / 33784393261

95%

push

github

ci: Gate on the full image build, and cancel superseded runs (#1032)

* ci: Cancel superseded runs on branches and bound the unit-test job

Only the head commit's checks gate a merge, but nothing cancelled the runs
belonging to commits a push had already superseded. The branch behind #1017
started the 27-image build ten times and cancelled none of them; at roughly
85 minutes of runner time per run that is some 850 minutes spent on commits
nobody would merge. Two other branches from the same day each started it
four times.

Every workflow triggered by push or pull_request now shares a concurrency
group keyed on workflow and ref, cancelling in progress only when the ref is
not main, so main's builds and scans still always complete. docker-publish
is deliberately excluded: cancelling a release publish partway is worse than
the compute it would save.

The unit-test job also gains a 30 minute bound. npm test runs jest
--runInBand without --forceExit, so a leaked handle keeps the job alive
rather than failing it, and no workflow in the repository set any timeout.
That job averages 4.4 minutes.

Path filters were tried first and dropped. A conservative paths-ignore for
docs, markdown, tests, compose fragments and the env samples would have
skipped the image build on none of the last thirty commits on main, because
almost every commit touches source, a lockfile, a workflow or a script.

Refs #1021.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GYGMfX3foBcVqP7AQNXjWj

* ci: Add a rollup context for the full image build

The 27-image matrix and the arm64 cross-compile gate nothing today. They
run on every push, take roughly 88 minutes of runner time, and a failure in
any of them does not stop a merge -- the only images a required check
covers are the gatekeeper and keymaster flavours built by the sibling
workflow.

That is the worst of both: the work is done and the answer ignored. This
adds a single con... (continued)

3881 of 4464 branches covered (86.94%)

Branch coverage included in aggregate %.

8528 of 8953 relevant lines covered (95.25%)

717.59 hits per line