Cancel in-progress workflow runs on new pushes to the same ref via concurrency groups

Author: tjementum

.github/workflows/account.yml

@@ -25,6 +25,13 @@ on:
       - "!**.md"
   workflow_dispatch:
 
+concurrency:
+  group: account-${{ github.ref }}
+  # Cancel superseded runs on pull requests, but never on main — main runs trigger deploys, and
+  # cancelling a parent workflow propagates into the called reusable deploy workflow, so a
+  # mid-deploy cancel could leave a container app or migration in a half-applied state.
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+
 permissions:
   id-token: write
   contents: read

.github/workflows/app-gateway.yml

@@ -21,6 +21,13 @@ on:
       - "!**.md"
   workflow_dispatch:
 
+concurrency:
+  group: app-gateway-${{ github.ref }}
+  # Cancel superseded runs on pull requests, but never on main — main runs trigger deploys, and
+  # cancelling a parent workflow propagates into the called reusable deploy workflow, so a
+  # mid-deploy cancel could leave a container app in a half-applied state.
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+
 permissions:
   id-token: write
   contents: read

.github/workflows/cloud-infrastructure.yml

@@ -17,6 +17,13 @@ on:
       - "!**.md"
   workflow_dispatch:
 
+concurrency:
+  group: cloud-infrastructure-${{ github.ref }}
+  # Cancel superseded runs on pull requests, but never on main — main runs trigger infrastructure
+  # deploys, and cancelling a parent workflow propagates into the called reusable deploy workflow,
+  # so a mid-deploy cancel could leave Bicep in a half-applied state.
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+
 permissions:
   id-token: write
   contents: read

.github/workflows/code-style.yml

@@ -17,6 +17,10 @@ on:
       - "!**.md"
   workflow_dispatch:
 
+concurrency:
+  group: code-style-${{ github.ref }}
+  cancel-in-progress: true
+
 permissions:
   id-token: write
   contents: read

.github/workflows/developer-cli.yml

@@ -15,6 +15,10 @@ on:
       - "!**.md"
   workflow_dispatch:
 
+concurrency:
+  group: developer-cli-${{ github.ref }}
+  cancel-in-progress: true
+
 permissions:
   contents: read
 

.github/workflows/main.yml

@@ -25,6 +25,13 @@ on:
       - "!**.md"
   workflow_dispatch:
 
+concurrency:
+  group: main-${{ github.ref }}
+  # Cancel superseded runs on pull requests, but never on main — main runs trigger deploys, and
+  # cancelling a parent workflow propagates into the called reusable deploy workflow, so a
+  # mid-deploy cancel could leave a container app or migration in a half-applied state.
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+
 permissions:
   id-token: write
   contents: read

.github/workflows/pull-request-conventions.yml

@@ -4,6 +4,10 @@ on:
   pull_request:
     types: [opened, synchronize, reopened, edited, labeled, unlabeled]
 
+concurrency:
+  group: pull-request-conventions-${{ github.ref }}
+  cancel-in-progress: true
+
 permissions:
   contents: read
   pull-requests: write