CI: cancel previous jobs on PR updates

.github/workflows/main.yml

@@ -4,8 +4,15 @@ on:
   pull_request:
   push:
 
+# When a PR is updated, cancel the jobs from the previous version. Merges
+# do not define head_ref, so use run_id to never cancel those jobs.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
 jobs:
   build-wheels:
+    timeout-minutes: 15
     runs-on: ubuntu-latest
 
     steps:
@@ -36,6 +43,7 @@ jobs:
           retention-days: 1
 
   build-test-env-base:
+    timeout-minutes: 15
     runs-on: ubuntu-latest
 
     steps:
@@ -78,6 +86,7 @@ jobs:
           mamba env export -p /tmp/test_env
 
   run-black-check:
+    timeout-minutes: 15
     runs-on: ubuntu-latest
     needs:
       - build-test-env-base
@@ -102,6 +111,7 @@ jobs:
           black --check .
 
   run-pylint:
+    timeout-minutes: 15
     runs-on: ubuntu-latest
     needs:
       - build-test-env-base
@@ -131,6 +141,7 @@ jobs:
           pylint -v odc
 
   run-mypy:
+    timeout-minutes: 15
     runs-on: ubuntu-latest
     needs:
       - build-test-env-base
@@ -155,6 +166,7 @@ jobs:
           mypy --explicit-package-bases --python-version 3.10 odc
 
   test-with-coverage:
+    timeout-minutes: 15
     runs-on: ubuntu-latest
     permissions:
       id-token: write
@@ -207,6 +219,7 @@ jobs:
           use_oidc: true
 
   test-wheels:
+    timeout-minutes: 15
     runs-on: ubuntu-latest
 
     needs:
@@ -254,6 +267,7 @@ jobs:
           DASK_TEMPORARY_DIRECTORY: /tmp/dask
 
   check-docs:
+    timeout-minutes: 15
     runs-on: ubuntu-latest
 
     needs:

.github/workflows/publish-pypi.yml

@@ -3,10 +3,16 @@ name: Publish to PyPI
 on:
   workflow_dispatch:
 
+# When a PR is updated, cancel the jobs from the previous version. Merges
+# do not define head_ref, so use run_id to never cancel those jobs.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
 jobs:
   publish-pypi:
     if: github.repository == 'opendatacube/odc-geo'
-
+    timeout-minutes: 15
     runs-on: ubuntu-latest
 
     steps: