Skip to content

fix(ci): serialize Docker release image sets #1621

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
seonghobae wants to merge 18 commits into
base: fix/docker-publish-pr-concurrency
Choose a base branch
from
Draft

fix(ci): serialize Docker release image sets #1621

Show file tree
Hide file tree
Changes from 7 commits
Commits
Show all changes
18 commits
Select commit Hold shift + click to select a range
acb374e
fix(ci): coalesce Bandit pull request scans
seonghobae Sep 8, 2026
55d601c
chore(ci): defer Bandit concurrency to canonical owner
seonghobae Sep 8, 2026
c1286c1
merge(ci): adopt protected develop while preserving Bandit provenance
seonghobae Sep 8, 2026
b609301
experiment: add PR-scoped concurrency to Bandit scan
seonghobae Sep 9, 2026
f6ad4dd
experiment: scope Docker PR validation to job-level concurrency
seonghobae Sep 9, 2026
2aa1235
experiment: standardize PR concurrency groups to workflow-repository-…
seonghobae Sep 9, 2026
1032993
fix(ci): serialize Docker tag publishes per ref, never cancel releases
seonghobae Sep 9, 2026
22f3532
fix(ci): scope Docker PR validation concurrency per matrix component
seonghobae Sep 9, 2026
562338e
fix(ci): isolate matrix image publication groups
seonghobae Sep 9, 2026
55e0588
test(ci): pin queued release publication semantics
seonghobae Sep 9, 2026
12d8cac
fix(ci): queue release image publishes without cross-component eviction
seonghobae Sep 9, 2026
86ea640
test(ci): require whole-release image serialization
seonghobae Sep 9, 2026
c8b565e
fix(ci): serialize whole release image sets
seonghobae Sep 9, 2026
e4ab2ab
test(ci): follow release workflow decomposition
seonghobae Sep 9, 2026
2e09118
docs(ci): record release-set serialization decision
seonghobae Sep 9, 2026
d5b1e09
test(ci): reject prerelease latest publication
seonghobae Sep 9, 2026
0d45b53
fix(ci): fail closed on prerelease latest tags
seonghobae Sep 9, 2026
6e1378c
docs(ci): bind stable latest to release contract
seonghobae Sep 9, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/app-ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ permissions:
contents: read

concurrency:
group: application-ci-${{ github.event.pull_request.number || github.ref }}
group: ${{ github.workflow }}-${{ github.repository }}-${{ github.event.pull_request.number || github.ref }}
cancel-in-progress: true

jobs:
Expand Down
4 changes: 4 additions & 0 deletions .github/workflows/bandit.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,10 @@ on:
permissions:
contents: read

concurrency:
group: Bandit Security Scan-${{ github.repository }}-${{ github.event.pull_request.number || github.ref }}
cancel-in-progress: true

jobs:
security:
runs-on: ubuntu-latest
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/dependency-review.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ permissions:
pull-requests: read

concurrency:
group: dependency-review-${{ github.event.pull_request.number || github.ref }}
group: ${{ github.workflow }}-${{ github.repository }}-${{ github.event.pull_request.number || github.ref }}
cancel-in-progress: true

jobs:
Expand Down
6 changes: 6 additions & 0 deletions .github/workflows/docker-publish.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,6 +25,9 @@ jobs:
name: validate ${{ matrix.component }} image
if: github.event_name == 'pull_request'
runs-on: ubuntu-latest
concurrency:
group: Build and Publish Docker Images-pr-validation-${{ github.repository }}-${{ github.event.pull_request.number || github.ref }}
Comment thread
coderabbitai[bot] marked this conversation as resolved.
Outdated
cancel-in-progress: true
Comment thread
github-actions[bot] marked this conversation as resolved.
Outdated
strategy:
fail-fast: false
matrix:
Expand Down Expand Up @@ -175,6 +178,9 @@ jobs:
name: publish ${{ matrix.component }} image
if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
runs-on: ubuntu-latest
concurrency:
group: Build and Publish Docker Images-publish-${{ github.repository }}-${{ github.ref }}
cancel-in-progress: false
Comment thread
github-actions[bot] marked this conversation as resolved.
Outdated
permissions:
contents: read
packages: write
Expand Down
Loading