zostera / django-marina / 37101027170

100%

push

github

ci: bound the release and Dependabot jobs too (#684)

"A 15-minute timeout-minutes to every CI job" in 26.2 was applied to ci.yml
only. release.yml and the Dependabot workflow were left on GitHub's 6 hour
default, in all five Zostera repos. A job that hangs rather than fails burns
the whole allowance before anyone notices.

release.yml gets 20 rather than 15. It does everything the ci.yml build job
does, then uploads to PyPI, and a bound that fires during a publish is worse
than one that never fires at all. Dependabot gets 15, against a runtime in
seconds.

PACKAGING.md now says every job in every workflow carries a bound, so the rule
does not get read as "every job in ci.yml" a second time.

Found while bounding the jobs in observation/wrnpro and observation/meetnetten,
where the same gap was wider.

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

28 of 28 branches covered (100.0%)

Branch coverage included in aggregate %.

164 of 164 relevant lines covered (100.0%)

16.0 hits per line