ci: give every job a timeout

No job had timeout-minutes, so a hung step held a runner for GitHub's six-hour default. Test and housekeeping jobs stop after 45 minutes, the image builds after two hours.
2026-10-18 21:16:47 +00:00 · 2026-10-07 16:52:26 +02:00
parent c60277c4d2
commit 1a4df59bf3
11 changed files with 26 additions and 0 deletions
@@ -11,6 +11,7 @@ jobs:
  close-stale:
    if: github.repository == 'liketrek/TREK'
    runs-on: ubuntu-latest
+    timeout-minutes: 45
    steps:
      - name: Close stale invalid-title issues
        uses: actions/github-script@v7
@@ -12,6 +12,7 @@ jobs:
  close-stale:
    if: github.repository == 'liketrek/TREK'
    runs-on: ubuntu-latest
+    timeout-minutes: 45
    steps:
      - name: Close stale wrong-base-branch PRs
        uses: actions/github-script@v7
@@ -11,6 +11,7 @@ jobs:
  check-title:
    if: github.repository == 'liketrek/TREK'
    runs-on: ubuntu-latest
+    timeout-minutes: 45
    steps:
      - name: Flag or redirect issue
        uses: actions/github-script@v7
@@ -20,6 +20,7 @@ jobs:
  version-bump:
    if: github.repository == 'liketrek/TREK'
    runs-on: ubuntu-latest
+    timeout-minutes: 120
    outputs:
      version: ${{ steps.bump.outputs.VERSION }}
      sha: ${{ steps.bump.outputs.SHA }}
@@ -68,6 +69,7 @@ jobs:

  build:
    runs-on: ${{ matrix.runner }}
+    timeout-minutes: 120
    needs: version-bump
    strategy:
      fail-fast: false
@@ -128,6 +130,7 @@ jobs:

  merge:
    runs-on: ubuntu-latest
+    timeout-minutes: 120
    needs: [version-bump, build]
    steps:
      - uses: actions/checkout@v4
@@ -24,6 +24,7 @@ jobs:
  version-bump:
    if: github.repository == 'liketrek/TREK'
    runs-on: ubuntu-latest
+    timeout-minutes: 120
    outputs:
      version: ${{ steps.bump.outputs.VERSION }}
    steps:
@@ -114,6 +115,7 @@ jobs:

  build:
    runs-on: ${{ matrix.runner }}
+    timeout-minutes: 120
    needs: version-bump
    strategy:
      fail-fast: false
@@ -174,6 +176,7 @@ jobs:

  merge:
    runs-on: ubuntu-latest
+    timeout-minutes: 120
    needs: [version-bump, build]
    steps:
      - uses: actions/checkout@v4
@@ -232,6 +235,7 @@ jobs:

  release-helm:
    runs-on: ubuntu-latest
+    timeout-minutes: 120
    needs: version-bump
    steps:
      - name: Checkout
@@ -8,6 +8,7 @@ jobs:
  check-target:
    if: github.repository == 'liketrek/TREK'
    runs-on: ubuntu-latest
+    timeout-minutes: 45
    permissions:
      pull-requests: write
      issues: write
@@ -10,6 +10,7 @@ concurrency:
 jobs:
  lint:
    runs-on: ubuntu-latest
+    timeout-minutes: 45
    permissions:
      pull-requests: write
    steps:
@@ -16,6 +16,7 @@ jobs:
  publish:
    if: github.repository == 'liketrek/TREK'
    runs-on: ubuntu-latest
+    timeout-minutes: 45
    defaults:
      run:
        working-directory: plugin-sdk
@@ -19,6 +19,7 @@ jobs:
    # Scout login can never succeed there.
    if: github.repository == 'liketrek/TREK' && github.event.pull_request.head.repo.fork != true
    runs-on: ubuntu-latest
+    timeout-minutes: 45
    steps:
      - uses: actions/checkout@v4

@@ -98,6 +98,7 @@ jobs:
  plugin-facts:
    name: Plugin Permission Facts
    runs-on: ubuntu-latest
+    timeout-minutes: 45
    steps:
      - uses: actions/checkout@v6

@@ -125,6 +126,7 @@ jobs:
  i18n-parity:
    name: i18n Key Parity
    runs-on: ubuntu-latest
+    timeout-minutes: 45

    steps:
      - uses: actions/checkout@v6
@@ -139,6 +141,7 @@ jobs:
  server-quality:
    name: Server Types & Lint
    runs-on: ubuntu-latest
+    timeout-minutes: 45
    steps:
      - uses: actions/checkout@v6

@@ -203,6 +206,7 @@ jobs:
  client-quality:
    name: Client Types & Lint
    runs-on: ubuntu-latest
+    timeout-minutes: 45

    steps:
      - uses: actions/checkout@v6
@@ -231,6 +235,7 @@ jobs:
  plugin-sdk-quality:
    name: Plugin SDK Types
    runs-on: ubuntu-latest
+    timeout-minutes: 45
    defaults:
      run:
        working-directory: plugin-sdk
@@ -253,6 +258,7 @@ jobs:
  s3-contract:
    name: S3 Driver Contract (MinIO)
    runs-on: ubuntu-latest
+    timeout-minutes: 45
    needs: [plugin-facts, i18n-parity, server-quality, client-quality, plugin-sdk-quality]
    # Fork PRs don't get repo secrets, so MINIO_LICENSE_KEY would be empty and
    # the AIStor container would fail to boot. Pushes and manual dispatches do
@@ -325,6 +331,7 @@ jobs:
  server-coverage:
    name: Server Coverage
    runs-on: ubuntu-latest
+    timeout-minutes: 45
    needs: [plugin-facts, i18n-parity, server-quality, client-quality, plugin-sdk-quality]
    steps:
      - uses: actions/checkout@v6
@@ -363,6 +370,7 @@ jobs:
  client-coverage:
    name: Client Coverage
    runs-on: ubuntu-latest
+    timeout-minutes: 45
    needs: [plugin-facts, i18n-parity, server-quality, client-quality, plugin-sdk-quality]
    steps:
      - uses: actions/checkout@v6
@@ -396,6 +404,7 @@ jobs:
  shared-coverage:
    name: Shared Coverage
    runs-on: ubuntu-latest
+    timeout-minutes: 45
    needs: [plugin-facts, i18n-parity, server-quality, client-quality, plugin-sdk-quality]
    steps:
      - uses: actions/checkout@v6
@@ -422,6 +431,7 @@ jobs:
  plugin-sdk-coverage:
    name: Plugin SDK Coverage
    runs-on: ubuntu-latest
+    timeout-minutes: 45
    needs: [plugin-facts, i18n-parity, server-quality, client-quality, plugin-sdk-quality]
    defaults:
      run:
@@ -454,6 +464,7 @@ jobs:
  scan:
    name: Scan
    runs-on: ubuntu-latest
+    timeout-minutes: 45
    # Fork PRs don't receive SONAR_TOKEN — skip the scan rather than fail it.
    if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
    # Coverage jobs failing must stop the scan: a missing lcov file would make
@@ -19,6 +19,7 @@ jobs:
  deploy:
    if: github.repository == 'liketrek/TREK'
    runs-on: ubuntu-latest
+    timeout-minutes: 45
    steps:
      - uses: actions/checkout@v4
      - name: Publish to GitHub wiki