[build] add Github Cache workflow and cancel-on-failure guard in bazel.yml

Author: titusfortner

.github/workflows/bazel.yml

@@ -166,7 +166,6 @@ jobs:
           bazelrc: common --color=yes
           # Workaround for long path issues: https://github.com/bazelbuild/bazel/pull/22532
           output-base: ${{ inputs.os == 'windows' && 'D://b' || '' }}
-          cache-version: 2
           disk-cache: false
           external-cache: |
             manifest:
@@ -297,3 +296,9 @@ jobs:
           if [ "$AVAIL_GB" -lt 5 ]; then
             echo "::warning::Low disk space: ${AVAIL_GB}GB remaining"
           fi
+      - name: Cancel run on bazel failure to prevent poisoned cache save
+        if: failure() && steps.run-bazel.outcome == 'failure' && inputs.cache-save
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        shell: bash
+        run: gh run cancel ${{ github.run_id }}

.github/workflows/ci-rbe.yml

@@ -21,6 +21,7 @@ concurrency:
 permissions:
   contents: read
   packages: read
+  actions: write
 
 jobs:
   test:

.github/workflows/gh-cache.yml

@@ -1,14 +1,28 @@
-name: CI Cache
+name: Github Cache
 
 on:
+  push:
+    branches: [trunk]
+    paths:
+      - 'MODULE.bazel'
+      - 'rust/Cargo.lock'
+      - 'java/maven_install.json'
+      - 'py/requirements_lock.txt'
+      - 'rb/Gemfile.lock'
+      - 'dotnet/paket.lock'
+      - 'common/repositories.bzl'
+      - 'common/browsers.bzl'
+  schedule:
+    - cron: '30 6 * * *'
   workflow_dispatch:
 
 concurrency:
-  group: ci-cache-${{ github.ref }}
+  group: gh-cache-${{ github.ref }}
   cancel-in-progress: true
 
 permissions:
   contents: read
+  actions: write
 
 jobs:
   populate:
@@ -21,9 +35,8 @@ jobs:
     with:
       name: ${{ matrix.os }}
       os: ${{ matrix.os }}
-      cache-save: false
-      run: >
-        bazel build --nobuild --build_tests_only --keep_going
-        --repo_contents_cache=
-        //java/... //py/... //rb/... //rust/...
-        //javascript/selenium-webdriver/... //dotnet/...
+      cache-save: true
+      run: >-
+        bazel build --nobuild --build_tests_only --keep_going --repo_contents_cache=
+        //java/test/... //py:* //rb/spec/... //rust/tests/...
+        //javascript/selenium-webdriver:* //dotnet/test/...