From e3a3d182ea34d863f8ddc201582f479a77178b62 Mon Sep 17 00:00:00 2001
From: hyperpolymath <6759885+hyperpolymath@users.noreply.github.com>
Date: Sat, 30 May 2026 18:01:38 +0100
Subject: [PATCH] ci: concurrency cancel-in-progress + timeout-minutes on 3
 queue-saturating workflows
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Same pattern as proven#115. Targets the workflows that lacked
`concurrency:` declarations on this repo (the ones that already had
it — abi-verify, codeql, coq-build, scorecard-enforcer, hypatia-scan,
secret-scanner — are unchanged).

- rust-ci.yml `no-default-features` job: cargo build+test, 20m budget
- boj-build.yml `trigger-boj`: quick curl trigger, 5m
- instant-sync.yml `dispatch`: repository-dispatch, 5m

Each subsequent push to a ref now cancels its predecessor on these
workflows. Reduces queue pressure against the GitHub Pro 40-job
concurrent ceiling.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 .github/workflows/boj-build.yml    | 4 ++++
 .github/workflows/instant-sync.yml | 5 +++++
 .github/workflows/rust-ci.yml      | 5 +++++
 3 files changed, 14 insertions(+)

diff --git a/.github/workflows/boj-build.yml b/.github/workflows/boj-build.yml
index ddeab5d0..ee425466 100644
--- a/.github/workflows/boj-build.yml
+++ b/.github/workflows/boj-build.yml
@@ -4,9 +4,13 @@ on:
   push:
     branches: [main, master]
   workflow_dispatch:
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
 jobs:
   trigger-boj:
     runs-on: ubuntu-latest
+    timeout-minutes: 5
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
diff --git a/.github/workflows/instant-sync.yml b/.github/workflows/instant-sync.yml
index 98a72733..bb214d5e 100644
--- a/.github/workflows/instant-sync.yml
+++ b/.github/workflows/instant-sync.yml
@@ -11,9 +11,14 @@ on:
 permissions:
   contents: read
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   dispatch:
     runs-on: ubuntu-latest
+    timeout-minutes: 5
     steps:
       - name: Trigger Propagation
         uses: peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697 # v3
diff --git a/.github/workflows/rust-ci.yml b/.github/workflows/rust-ci.yml
index 7acccac4..33c5d502 100644
--- a/.github/workflows/rust-ci.yml
+++ b/.github/workflows/rust-ci.yml
@@ -12,6 +12,10 @@ on:
 permissions:
   contents: read
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   rust-ci:
     uses: hyperpolymath/standards/.github/workflows/rust-ci-reusable.yml@cc5a372af1af1b202c17f1b21efd954e6c038bef
@@ -19,6 +23,7 @@ jobs:
   no-default-features:
     name: Cargo build + test (ephapax-cli, --no-default-features)
     runs-on: ubuntu-latest
+    timeout-minutes: 20
     if: hashFiles('Cargo.toml') != ''
 
     # Proves ephapax can be built and tested with zero git dep on the