From 763bff77cae9edefad3345914ad1bb59e385a550 Mon Sep 17 00:00:00 2001 From: Luke Nelson Date: Thu, 23 Jul 2026 20:44:16 +0100 Subject: [PATCH 01/11] ci: add concurrency settings to CI workflows --- .github/workflows/ci.yml | 4 ++++ .github/workflows/release-nightly.yml | 4 ++++ 2 files changed, 8 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index b4b3f9376..8f7ee0da5 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -11,6 +11,10 @@ on: permissions: {} +concurrency: + group: ${{ github.workflow }}-${{ github.event_name == 'pull_request' && github.event.number || github.ref }} + cancel-in-progress: true + jobs: changes: runs-on: ubuntu-latest diff --git a/.github/workflows/release-nightly.yml b/.github/workflows/release-nightly.yml index 014e9a547..0cf9e44b6 100644 --- a/.github/workflows/release-nightly.yml +++ b/.github/workflows/release-nightly.yml @@ -10,6 +10,10 @@ on: permissions: {} +concurrency: + group: ${{ github.workflow }}-${{ github.event_name == 'pull_request' && github.event.number || github.ref }} + cancel-in-progress: false + jobs: release-pkg-pr-new: runs-on: ubuntu-latest From f6564822b4eda9c5cf67ab006ed1923541654359 Mon Sep 17 00:00:00 2001 From: Luke Nelson Date: Thu, 23 Jul 2026 20:48:01 +0100 Subject: [PATCH 02/11] ci: switch runners from ubuntu-latest to ubuntu-slim --- .github/workflows/agent-scan.yml | 2 +- .github/workflows/ci.yml | 2 +- .github/workflows/reproduction-close.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/agent-scan.yml b/.github/workflows/agent-scan.yml index 9fd9d7a27..8596b0528 100644 --- a/.github/workflows/agent-scan.yml +++ b/.github/workflows/agent-scan.yml @@ -17,7 +17,7 @@ permissions: jobs: agentscan: - runs-on: ubuntu-latest + runs-on: ubuntu-slim steps: - name: AgentScan id: agentscan diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 8f7ee0da5..41493333d 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -118,7 +118,7 @@ jobs: ci-ok: if: always() - runs-on: ubuntu-latest + runs-on: ubuntu-slim needs: - changes - lint diff --git a/.github/workflows/reproduction-close.yml b/.github/workflows/reproduction-close.yml index f762a07ef..f48d03522 100644 --- a/.github/workflows/reproduction-close.yml +++ b/.github/workflows/reproduction-close.yml @@ -9,7 +9,7 @@ permissions: jobs: stale: - runs-on: ubuntu-latest + runs-on: ubuntu-slim steps: - uses: actions/stale@eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899 # v10.3.0 with: From 5f4fe44990b2fa48d9aa7cbc8d6e093c3ee1760b Mon Sep 17 00:00:00 2001 From: Luke Nelson Date: Thu, 23 Jul 2026 20:49:23 +0100 Subject: [PATCH 03/11] ci: disable credential persistence for checkout actions --- .github/workflows/ci.yml | 4 ++++ .github/workflows/release-nightly.yml | 4 ++++ 2 files changed, 8 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 41493333d..df9bad2ae 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -52,6 +52,8 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + with: + persist-credentials: false - run: corepack enable - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: @@ -81,6 +83,8 @@ jobs: runs-on: ${{ matrix.os }} steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + with: + persist-credentials: false - run: corepack enable - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: diff --git a/.github/workflows/release-nightly.yml b/.github/workflows/release-nightly.yml index 0cf9e44b6..962ff095f 100644 --- a/.github/workflows/release-nightly.yml +++ b/.github/workflows/release-nightly.yml @@ -19,6 +19,8 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + with: + persist-credentials: false - run: corepack enable - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: @@ -43,6 +45,8 @@ jobs: id-token: write steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + with: + persist-credentials: false - run: corepack enable - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: From 9107b594ff012510c8f60f45ba21a24424bbb544 Mon Sep 17 00:00:00 2001 From: Luke Nelson Date: Thu, 23 Jul 2026 20:49:55 +0100 Subject: [PATCH 04/11] ci: use latest node 24 --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index df9bad2ae..2303afca6 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -57,7 +57,7 @@ jobs: - run: corepack enable - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: - node-version: 24.18.0 + node-version: 24 cache: "pnpm" - name: ๐Ÿ“ฆ Install dependencies From 64703da6ef58ea3e26b35ebd8b296d643df0933a Mon Sep 17 00:00:00 2001 From: Luke Nelson Date: Thu, 23 Jul 2026 20:54:10 +0100 Subject: [PATCH 05/11] ci: drop explicit chromium now that issue is resolved --- .github/workflows/ci.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 2303afca6..ea14dce07 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -95,8 +95,7 @@ jobs: run: pnpm install - name: Install Playwright - # does not need to explicitly set chromium after https://github.com/microsoft/playwright/issues/14862 is solved - run: pnpm playwright-core install chromium + run: pnpm playwright-core install - run: pnpm dev:prepare From 97b48c02ed00a0bfeb96fbd64648a556c76d78d0 Mon Sep 17 00:00:00 2001 From: Luke Nelson Date: Thu, 23 Jul 2026 20:54:37 +0100 Subject: [PATCH 06/11] ci: optimize parallel execution of linting, type checking, and building tasks --- .github/workflows/ci.yml | 25 ++++++++++++------------- 1 file changed, 12 insertions(+), 13 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index ea14dce07..b7baa7ca9 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -65,14 +65,13 @@ jobs: - run: pnpm dev:prepare - - name: ๐Ÿ”  Lint project - run: pnpm lint - - - name: โœ‚๏ธ Knip project - run: pnpm knip --workspace . - - - name: โš™๏ธ Check package engines - run: pnpm installed-check -d --no-workspaces + - parallel: + - name: ๐Ÿ”  Lint project + run: pnpm lint + - name: โœ‚๏ธ Knip project + run: pnpm knip --workspace . + - name: โš™๏ธ Check package engines + run: pnpm installed-check -d --no-workspaces ci: needs: changes @@ -99,11 +98,11 @@ jobs: - run: pnpm dev:prepare - - name: ๐Ÿ’ช Type check - run: pnpm test:types - - - name: ๐Ÿ›  Build project - run: pnpm build + - parallel: + - name: ๐Ÿ’ช Type check + run: pnpm test:types + - name: ๐Ÿ›  Build project + run: pnpm build - name: ๐Ÿงช Test project run: pnpm test From 1ade1b82e3c34e408d9243cbc5ecc3adecc4b445 Mon Sep 17 00:00:00 2001 From: Luke Nelson Date: Thu, 23 Jul 2026 21:02:15 +0100 Subject: [PATCH 07/11] ci: revert conflicting paralell jobs --- .github/workflows/ci.yml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index b7baa7ca9..55e90506a 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -98,11 +98,11 @@ jobs: - run: pnpm dev:prepare - - parallel: - - name: ๐Ÿ’ช Type check - run: pnpm test:types - - name: ๐Ÿ›  Build project - run: pnpm build + - name: ๐Ÿ’ช Type check + run: pnpm test:types + + - name: ๐Ÿ›  Build project + run: pnpm build - name: ๐Ÿงช Test project run: pnpm test From 78cfcc23df3ee2b95d3184270aa3fd58994b22ff Mon Sep 17 00:00:00 2001 From: Luke Nelson Date: Thu, 23 Jul 2026 21:04:27 +0100 Subject: [PATCH 08/11] ci: revert conflicting parelell steps --- .github/workflows/ci.yml | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 55e90506a..ea14dce07 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -65,13 +65,14 @@ jobs: - run: pnpm dev:prepare - - parallel: - - name: ๐Ÿ”  Lint project - run: pnpm lint - - name: โœ‚๏ธ Knip project - run: pnpm knip --workspace . - - name: โš™๏ธ Check package engines - run: pnpm installed-check -d --no-workspaces + - name: ๐Ÿ”  Lint project + run: pnpm lint + + - name: โœ‚๏ธ Knip project + run: pnpm knip --workspace . + + - name: โš™๏ธ Check package engines + run: pnpm installed-check -d --no-workspaces ci: needs: changes From 5c71993eca70517ff54d38c62b1a201fac0f6185 Mon Sep 17 00:00:00 2001 From: Luke Nelson Date: Thu, 23 Jul 2026 21:12:04 +0100 Subject: [PATCH 09/11] Revert "ci: drop explicit chromium now that issue is resolved" This reverts commit 64703da6ef58ea3e26b35ebd8b296d643df0933a. --- .github/workflows/ci.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index ea14dce07..2303afca6 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -95,7 +95,8 @@ jobs: run: pnpm install - name: Install Playwright - run: pnpm playwright-core install + # does not need to explicitly set chromium after https://github.com/microsoft/playwright/issues/14862 is solved + run: pnpm playwright-core install chromium - run: pnpm dev:prepare From 7d79bc10c191a090e83a2882d76baaa2f0a320f6 Mon Sep 17 00:00:00 2001 From: Luke Nelson Date: Thu, 23 Jul 2026 22:53:59 +0100 Subject: [PATCH 10/11] ci: add persist-credentials option to checkout action --- .github/workflows/ci.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 2303afca6..14fff0594 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -25,6 +25,8 @@ jobs: src: ${{ steps.filter.outputs.src }} steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + with: + persist-credentials: false - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1 id: filter with: From d3306157464c75ce1b9f18e7d92e13e8478c9735 Mon Sep 17 00:00:00 2001 From: Luke Nelson Date: Tue, 28 Jul 2026 10:23:06 +0100 Subject: [PATCH 11/11] Ensure all nightly releases are published Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com> --- .github/workflows/release-nightly.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/release-nightly.yml b/.github/workflows/release-nightly.yml index 962ff095f..403953df8 100644 --- a/.github/workflows/release-nightly.yml +++ b/.github/workflows/release-nightly.yml @@ -13,6 +13,7 @@ permissions: {} concurrency: group: ${{ github.workflow }}-${{ github.event_name == 'pull_request' && github.event.number || github.ref }} cancel-in-progress: false + queue: max jobs: release-pkg-pr-new: