Skip to content

ci: lint workflows on jactionlint's default profile - #68

Merged
robinbowes merged 1 commit into
mainfrom
robin/glb-3-jactionlint-default
Oct 15, 2026
Merged

robinbowes merged 1 commit into
mainfrom
robin/glb-3-jactionlint-default

Conversation

@robinbowes

Copy link
Copy Markdown
Collaborator

Sets .github/jactionlint.yaml to profile: default and fixes the 13 findings it reports.

  • missing-timeout (11 jobs): sets timeout-minutes on every job. Jobs that took 4–53 s across the last 60 CI runs and the last 10 runs of the other workflows get 5. The docs build (63 s) gets 10, and so does publish, which runs uv build and the PyPI upload and has no runs to measure yet.
  • concurrency-limits (ci.yaml): groups runs per pull request, or per ref on push. Superseded PR runs are cancelled; runs on main all finish, the same way docs.yaml handles it.
  • dependabot-cooldown (npm, /docs/site): adds an inline # jactionlint ignore=dependabot-cooldown. The 1-day cooldown is deliberate, and the comment above it explains why (pnpm treats cooldown as a hard minimumReleaseAge). The other ecosystems are still held to 7 days.

prek run --all-files passes locally.

GLB-3 (pilot for the jactionlint rollout, Phase 2).

🤖 Generated with Claude Code

Set profile: default and fix its findings:

- timeout-minutes on every job: 5 for jobs observed at 4-49 s, 10 for
  the docs build (63 s) and the PyPI publish, which has no runs yet.
- ci.yaml concurrency, keyed per pull request; superseded PR runs are
  cancelled, main runs all finish (as docs.yaml does).
- Ignore dependabot-cooldown on the npm entry, whose 1-day cooldown is
  deliberate and explained in the comment above it.

Refs: GLB-3

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@robinbowes
robinbowes merged commit ec364c3 into main Oct 15, 2026
12 checks passed
@robinbowes
robinbowes deleted the robin/glb-3-jactionlint-default branch October 15, 2026 13:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant