Skip to content

Conversation

@smortezah
Copy link
Contributor

This pull request updates the CI workflow configuration in .github/workflows/ci.yml to improve reliability, performance, and security. Key changes include workflow concurrency control, permissions tightening, better caching for dependencies, and updates to action versions.

Workflow improvements:

  • Added concurrency settings to prevent overlapping workflow runs and ensure only the latest run for a given branch proceeds.
  • Set explicit permissions for workflow to limit repository access to read-only, improving security.

Dependency management and caching:

  • Replaced direct pnpm install with a cache setup for the pnpm store directory, improving install speed and reliability. Now uses pnpm install --frozen-lockfile to ensure consistent dependency resolution.

Action and configuration updates:

  • Updated action versions for actions/checkout (v5), actions/setup-node (v6), and added fetch-depth: 1 for faster checkouts.
  • Added timeout-minutes: 10 for both lint and typecheck jobs to prevent hanging workflows.

@johannschopplich johannschopplich changed the title build: update CI configuration for improved caching and dependency management ci: update CI configuration for improved caching and dependency management Nov 2, 2025
@johannschopplich
Copy link
Collaborator

Thanks a lot!

@johannschopplich johannschopplich merged commit c3db2a1 into toon-format:main Nov 2, 2025
2 checks passed
@smortezah smortezah deleted the build/ci branch November 2, 2025 20:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants