Skip to content

ci: cancel superseded PR runs and give every job a timeout - #268

Merged
Nic-dorman merged 1 commit into
mainfrom
nic/v2-1822-ci-concurrency-timeouts
Nov 3, 2026
Merged

Nic-dorman merged 1 commit into
mainfrom
nic/v2-1822-ci-concurrency-timeouts

Conversation

@Nic-dorman

Copy link
Copy Markdown
Member

Linear issue

Closes V2-1822

Summary

The first, small step of the ant-node CI cost work (parent V2-1811, from the CI audit V2-1799). It's split out so it can merge ahead of the job consolidation, which follows as a separate PR stacked on this one.

A PR's CI costs about 200 job-minutes (median: Test windows 57m, macOS 45m, ubuntu 37m). Two gaps made that worse:

  • Nothing cancelled superseded runs. Each push to a PR started a full run on top of the one still going.
  • No job had timeout-minutes. A hung test held its runner, possibly one of the org's few macOS slots, for GitHub's 6-hour default.

This PR:

  • adds a workflow-level concurrency group per PR (ci-<PR number>) with cancel-in-progress: true
  • adds timeout-minutes to every ci.yml job, set above the slowest successful run in the last ~50:
Job Timeout Max seen
Test (3 OS) 90 76 (windows)
Build (3 OS) 30 14
Storage on {ext4,xfs,btrfs}, Test (no logging), WebRTC devnet 25 ~9.5
MSRV, Clippy, Notices, Documentation, Security Audit 20 ~4
Format Check 10 <1

Not touched: pr-checks.yml (kept verbatim across six repos), adr-governance.yml, release.yml.

Risk tier

  • T0 — docs / tooling / CI / pure UX-output. Repo CI only.
  • T1 — client-only, no network-facing behavior change. CI + prod compat smoke.
  • T2 — node/client logic with behavioral surface, no protocol/format/economics change. Dev testnet + ADR.
  • T3 — protocol / storage format / payments / routing. T2 evidence + adversarial testing.

Compatibility

  • Wire: none
  • Storage: none
  • API: none

Semver impact

  • breaking
  • feature
  • fix

Test evidence

  • The edited ci.yml parses (PyYAML); every job has the expected timeout-minutes, and the concurrency block is present.
  • This PR's own CI run is the live test: every job should finish well inside its timeout. Security Audit is expected to fail on RUSTSEC-2026-0387 (V2-1743), as it does on every PR now.

New dependency

none

ADR

n/a

Mitigation / rollback

Revert the commit. If a timeout proves too tight on a cold cache, raise that job's value.

🤖 Generated with Claude Code

A PR's CI is about 200 job-minutes (Test windows ~57m, macOS ~45m,
ubuntu ~37m median). Nothing cancelled the run for a superseded push, so
each push to a PR stacked a full run on top of the one still going. No job
set timeout-minutes either, so a hung test held its runner (possibly one
of our few macOS slots) for GitHub's 6-hour default.

- workflow-level concurrency group per PR with cancel-in-progress
- timeout-minutes on every job, set above the slowest successful run
  in the last ~50: test 90 (max seen 76), build 30 (14),
  filesystems/no-logging/devnet 25 (9.5), the rest 20, fmt 10

Closes V2-1822. The job consolidation follows separately.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

@MaidSafe-Hermes MaidSafe-Hermes left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

APPROVE

Reviewed WithAutonomi/ant-node@46ebc21b0f69cf9af81a684b9bc6731c4d0fc515 against base 02c8682466df5c0c6723f32c46223a572f020ed4. The workflow-level per-PR concurrency group and all 11 job timeouts are valid and match the intended behavior. No blocking code issue found.

Coverage: 2/2 seats reviewed (sol-1 gpt-6.1-sol xhigh; glm-1 z-ai/glm-5.3); both seats agree (two model families). No local tests run; this CI-only change was reviewed statically. Current Security Audit and Third-party notices failures are separate from this diff and are merge-check concerns, not code-review blockers.

@Nic-dorman
Nic-dorman merged commit 81c9ceb into main Nov 3, 2026
19 of 21 checks passed
@Nic-dorman
Nic-dorman deleted the nic/v2-1822-ci-concurrency-timeouts branch November 3, 2026 13:13
grumbach added a commit to grumbach/ant-node that referenced this pull request Nov 3, 2026
Brings in the browser listener's UPnP port mapping (WithAutonomi#264, ADR-0027), the CI
concurrency and job timeouts (WithAutonomi#268) and the removal of claude.yml (WithAutonomi#267).

Conflicts: the endpoint publication, where main's Publication replaces the
single endpoint and the swarm's STUN server is still set beside it, and the
ADR index, which lists both ADR-0026 and ADR-0027.

A mapped endpoint withdrawn when its mapping ends now also clears the swarm's
STUN server, so the node hosts no rooms while browsers cannot reach it, as
before any endpoint is published. ADR-0026 says so, and main's two withdrawal
tests check the STUN server is set on publication and gone after withdrawal.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants