docs: say why the publish job cannot move off ubuntu-latest - #6
Merged
Conversation
The organization used 100% of its 2,000 Actions minutes in August 2026 and every other macOS/Windows/Linux job moved to Blacksmith. This one cannot: npm provenance only accepts an OIDC token from a cloud-hosted runner, which makes it the last job in the org spending GitHub minutes. Written down so the next sweep does not try the move and break publishing to save a Linux minute. The 15-minute timeout added in #4 is recorded with it, and so is the consequence for a $0 Actions budget: it would block releases. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01AeC9A41jR2f57fJ3yUnWoD
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The organization used 100% of its 2,000 GitHub Actions minutes in August 2026. macOS was 84% of it, and every macOS/Windows/Linux job in the org has since moved to Blacksmith.
This one cannot. npm provenance only accepts an OIDC token from a cloud-hosted runner (npm docs), which leaves
publishas the only job in the organization that spends GitHub Actions minutes. The workflow file already carried a one-line comment saying so; this puts it where someone doing an org-wide sweep will read it before trying the move. I tried it before checking, which is why it is worth writing down.Recorded with it: the
timeout-minutes: 15added in #4, its measurement (30 seconds to 1m22s over seven runs) and its reason (the 360-minute default would put 18% of the monthly allowance behind one hungnpm publish, andconcurrencysetscancel-in-progress: false), and the consequence for a $0 Actions budget — it would block releases.Documentation only.
🤖 Generated with Claude Code
https://claude.ai/code/session_01AeC9A41jR2f57fJ3yUnWoD