🚀 ci: optimize GitHub workflows with caching and timeouts

- Add timeout-minutes to all jobs
- Add Go modules cache in CI workflow
- Use go.mod file for Go version detection
- Add Helm plugins cache in Helm release workflow
- Add registry cache support for Docker builds
- Improve coverage upload condition
- Add coverage.txt to .gitignore

Author: crazygit

.github/workflows/ci.yaml

@@ -17,15 +17,25 @@ permissions:
 jobs:
   test:
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     steps:
       - name: Checkout
         uses: actions/checkout@v4
 
+      - name: Cache Go modules
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cache/go-build
+            ~/go/pkg/mod
+          key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
+          restore-keys: |
+            ${{ runner.os }}-go-
+
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
-          go-version: "1.25"
-          cache: true
+          go-version-file: 'go.mod'
 
       - name: Run go vet
         run: go vet ./...
@@ -34,6 +44,7 @@ jobs:
         run: go test -race -coverprofile=coverage.txt -covermode=atomic ./...
 
       - name: Upload coverage to Codecov
+        if: success() || failure()
         uses: codecov/codecov-action@v4
         with:
           file: ./coverage.txt
@@ -42,6 +53,7 @@ jobs:
 
   helm-lint:
     runs-on: ubuntu-latest
+    timeout-minutes: 5
     steps:
       - name: Checkout
         uses: actions/checkout@v4

.github/workflows/docker-release.yaml

@@ -45,7 +45,11 @@ jobs:
           push: true
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
-          cache-from: type=gha
-          cache-to: type=gha,mode=max
+          cache-from: |
+            type=gha
+            type=registry,ref=ghcr.io/crazygit/cert-manager-alidns-webhook:buildcache
+          cache-to: |
+            type=gha,mode=max
+            type=registry,ref=ghcr.io/crazygit/cert-manager-alidns-webhook:buildcache,mode=max
           provenance: true
           sbom: true

.github/workflows/helm-release.yaml

@@ -12,10 +12,19 @@ permissions:
 jobs:
   package-and-push:
     runs-on: ubuntu-latest
+    timeout-minutes: 5
     steps:
       - name: Checkout
         uses: actions/checkout@v4
 
+      - name: Cache Helm plugins
+        uses: actions/cache@v4
+        with:
+          path: ~/.local/share/helm/plugins
+          key: ${{ runner.os }}-helm-plugins-${{ hashFiles('**/Chart.yaml') }}
+          restore-keys: |
+            ${{ runner.os }}-helm-plugins-
+
       - name: Set up Helm
         uses: azure/setup-helm@v4
         with:

.gitignore

@@ -18,3 +18,4 @@ cert-manager-webhook-example
 _out
 _test
 *.tgz
+coverage.txt