ci: avoid gitconfig lock race on shared runner via GIT_CONFIG env vars

Author: ice-chillios

.github/workflows/ci.yml

@@ -16,10 +16,12 @@ jobs:
           fetch-depth: 0
           ref: ${{ github.head_ref }}
 
-      - name: Configure and checkout submodules
-        run: |
-          git config --global url."https://github.com/".insteadOf "git@github.com:"
-          git submodule update --init --recursive
+      - name: Checkout submodules
+        env:
+          GIT_CONFIG_COUNT: "1"
+          GIT_CONFIG_KEY_0: url.https://github.com/.insteadOf
+          GIT_CONFIG_VALUE_0: git@github.com:
+        run: git submodule update --init --recursive
 
       - name: Install dependencies
         run: bun install --frozen-lockfile
@@ -36,10 +38,12 @@ jobs:
           fetch-depth: 0
           ref: ${{ github.head_ref }}
 
-      - name: Configure and checkout submodules
-        run: |
-          git config --global url."https://github.com/".insteadOf "git@github.com:"
-          git submodule update --init --recursive
+      - name: Checkout submodules
+        env:
+          GIT_CONFIG_COUNT: "1"
+          GIT_CONFIG_KEY_0: url.https://github.com/.insteadOf
+          GIT_CONFIG_VALUE_0: git@github.com:
+        run: git submodule update --init --recursive
 
       - name: Install dependencies
         run: bun install --frozen-lockfile
@@ -56,10 +60,12 @@ jobs:
           fetch-depth: 0
           ref: ${{ github.head_ref }}
 
-      - name: Configure and checkout submodules
-        run: |
-          git config --global url."https://github.com/".insteadOf "git@github.com:"
-          git submodule update --init --recursive
+      - name: Checkout submodules
+        env:
+          GIT_CONFIG_COUNT: "1"
+          GIT_CONFIG_KEY_0: url.https://github.com/.insteadOf
+          GIT_CONFIG_VALUE_0: git@github.com:
+        run: git submodule update --init --recursive
 
       - name: Install dependencies
         run: bun install --frozen-lockfile
@@ -76,10 +82,12 @@ jobs:
           fetch-depth: 0
           ref: ${{ github.head_ref }}
 
-      - name: Configure and checkout submodules
-        run: |
-          git config --global url."https://github.com/".insteadOf "git@github.com:"
-          git submodule update --init --recursive
+      - name: Checkout submodules
+        env:
+          GIT_CONFIG_COUNT: "1"
+          GIT_CONFIG_KEY_0: url.https://github.com/.insteadOf
+          GIT_CONFIG_VALUE_0: git@github.com:
+        run: git submodule update --init --recursive
 
       - name: Install dependencies
         run: bun install --frozen-lockfile
@@ -108,10 +116,12 @@ jobs:
           fetch-depth: 0
           ref: ${{ github.head_ref }}
 
-      - name: Configure and checkout submodules
-        run: |
-          git config --global url."https://github.com/".insteadOf "git@github.com:"
-          git submodule update --init --recursive
+      - name: Checkout submodules
+        env:
+          GIT_CONFIG_COUNT: "1"
+          GIT_CONFIG_KEY_0: url.https://github.com/.insteadOf
+          GIT_CONFIG_VALUE_0: git@github.com:
+        run: git submodule update --init --recursive
 
       - name: Install dependencies
         run: bun install --frozen-lockfile
@@ -147,10 +157,12 @@ jobs:
           fetch-depth: 0
           ref: ${{ github.head_ref }}
 
-      - name: Configure and checkout submodules
-        run: |
-          git config --global url."https://github.com/".insteadOf "git@github.com:"
-          git submodule update --init --recursive
+      - name: Checkout submodules
+        env:
+          GIT_CONFIG_COUNT: "1"
+          GIT_CONFIG_KEY_0: url.https://github.com/.insteadOf
+          GIT_CONFIG_VALUE_0: git@github.com:
+        run: git submodule update --init --recursive
 
       - name: Install dependencies
         run: bun install --frozen-lockfile

.github/workflows/release.yml

@@ -21,11 +21,12 @@ jobs:
           ref: ${{ github.head_ref }}
           token: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Configure and checkout submodules
-        run: |
-          # Convert SSH URLs to HTTPS for GitHub Actions
-          git config --global url."https://github.com/".insteadOf "git@github.com:"
-          git submodule update --init --recursive
+      - name: Checkout submodules
+        env:
+          GIT_CONFIG_COUNT: "1"
+          GIT_CONFIG_KEY_0: url.https://github.com/.insteadOf
+          GIT_CONFIG_VALUE_0: git@github.com:
+        run: git submodule update --init --recursive
 
       - uses: ./tools/github/setup
         with: