From 3eda47ecf81cb9f9899bb9eaadb36e0844162fee Mon Sep 17 00:00:00 2001 From: Jacob Magar Date: Fri, 31 Jul 2026 18:12:18 -0400 Subject: [PATCH 1/4] ci: stop release-building in CodeQL --- .github/workflows/codeql.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 0a550cd..8a67d12 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -56,7 +56,7 @@ jobs: - name: Build if: matrix.language == 'rust' - run: cargo build --release + run: cargo build --locked - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0 From 49cd905a488cdc25f1d408e0d69e1e8e6a17dafd Mon Sep 17 00:00:00 2001 From: Jacob Magar Date: Fri, 31 Jul 2026 21:20:33 -0400 Subject: [PATCH 2/4] ci: route jobs through scale-set selectors --- .github/workflows/ci.yml | 22 ++++++++++----------- .github/workflows/codeql.yml | 2 +- .github/workflows/dependabot-auto-merge.yml | 2 +- .github/workflows/msrv.yml | 2 +- 4 files changed, 14 insertions(+), 14 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 01b3983..8c5af2e 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -36,7 +36,7 @@ jobs: # ── fmt: cargo fmt --check ────────────────────────────────────────────────── fmt: name: Format - runs-on: [self-hosted, ci-pool-rust] + runs-on: ci-pool-rust timeout-minutes: 20 steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 @@ -53,7 +53,7 @@ jobs: # ── clippy: zero warnings ──────────────────────────────────────────────────── clippy: name: Clippy - runs-on: [self-hosted, ci-pool-rust] + runs-on: ci-pool-rust timeout-minutes: 20 steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 @@ -70,7 +70,7 @@ jobs: # ── test: cargo nextest run --profile ci ───────────────────────────────────── test: name: Test - runs-on: [self-hosted, ci-pool-rust] + runs-on: ci-pool-rust timeout-minutes: 30 steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 @@ -88,7 +88,7 @@ jobs: coverage: name: Coverage (65% lines) - runs-on: [self-hosted, ci-pool-rust] + runs-on: ci-pool-rust timeout-minutes: 30 steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 @@ -111,7 +111,7 @@ jobs: live-integration: name: Live JSON-RPC + SSH - runs-on: [self-hosted, ci-pool-system] + runs-on: ci-pool-system timeout-minutes: 30 steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 @@ -202,7 +202,7 @@ jobs: # ── web: pnpm install, lint, audit, static build ───────────────────────────── web: name: Web - runs-on: [self-hosted, ci-pool-typescript] + runs-on: ci-pool-typescript timeout-minutes: 20 defaults: run: @@ -239,7 +239,7 @@ jobs: # ── toml: taplo check ───────────────────────────────────────────────────────── toml: name: TOML Format - runs-on: [self-hosted, ci-pool-ops] + runs-on: ci-pool-ops timeout-minutes: 20 steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 @@ -261,7 +261,7 @@ jobs: # ── template: generated docs, plugin layout, coupled files ─────────────────── template: name: Template Contracts - runs-on: [self-hosted, ci-pool-ops] + runs-on: ci-pool-ops timeout-minutes: 20 steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 @@ -312,7 +312,7 @@ jobs: # ── deny: dependency advisories, licenses, bans, sources ───────────────────── audit: name: Cargo Deny - runs-on: [self-hosted, ci-pool-rust] + runs-on: ci-pool-rust timeout-minutes: 20 steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 @@ -338,7 +338,7 @@ jobs: npm: name: npm launcher - runs-on: [self-hosted, ci-pool-typescript] + runs-on: ci-pool-typescript steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6 @@ -353,7 +353,7 @@ jobs: container: name: Container smoke - runs-on: [self-hosted, ci-pool-system] + runs-on: ci-pool-system timeout-minutes: 30 steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 8a67d12..cca5660 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -10,7 +10,7 @@ on: jobs: analyze: name: Analyze (${{ matrix.language }}) - runs-on: [self-hosted, ci-pool-ops] + runs-on: ci-pool-ops timeout-minutes: 20 permissions: security-events: write diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml index 4ab05f6..2d38af8 100644 --- a/.github/workflows/dependabot-auto-merge.yml +++ b/.github/workflows/dependabot-auto-merge.yml @@ -11,7 +11,7 @@ permissions: jobs: auto-merge: name: Auto-merge patch/minor updates - runs-on: [self-hosted, ci-pool-ops] + runs-on: ci-pool-ops if: github.actor == 'dependabot[bot]' steps: - name: Fetch Dependabot metadata diff --git a/.github/workflows/msrv.yml b/.github/workflows/msrv.yml index dcd8981..3c9a340 100644 --- a/.github/workflows/msrv.yml +++ b/.github/workflows/msrv.yml @@ -17,7 +17,7 @@ env: jobs: msrv: name: Minimum Supported Rust Version - runs-on: [self-hosted, ci-pool-rust] + runs-on: ci-pool-rust timeout-minutes: 20 steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 From c7053682ec597d377eb44784c2b0ffd3b1833794 Mon Sep 17 00:00:00 2001 From: Jake Magar Date: Tue, 4 Aug 2026 23:48:24 -0400 Subject: [PATCH 3/4] chore(web): remove out/.gitkeep placeholder apps/web/out is generated by the Next.js static export and no longer needs a tracked placeholder to keep the directory present for builds. --- apps/web/out/.gitkeep | 1 - 1 file changed, 1 deletion(-) delete mode 100644 apps/web/out/.gitkeep diff --git a/apps/web/out/.gitkeep b/apps/web/out/.gitkeep deleted file mode 100644 index 43901c9..0000000 --- a/apps/web/out/.gitkeep +++ /dev/null @@ -1 +0,0 @@ -# Keep the static export directory present for clean Rust builds. From 0e7052ebbfd881118894397cbbc3eb47d8413ec8 Mon Sep 17 00:00:00 2001 From: Jake Magar Date: Wed, 5 Aug 2026 01:29:19 -0400 Subject: [PATCH 4/4] chore(web): restore out/.gitkeep placeholder apps/web/out/ is include_dir!'d at compile time (src/web.rs:23). Deleting the only tracked file in that directory breaks cargo build/check for any job that doesn't run pnpm build first, since the directory won't exist in a clean checkout. --- apps/web/out/.gitkeep | 1 + 1 file changed, 1 insertion(+) create mode 100644 apps/web/out/.gitkeep diff --git a/apps/web/out/.gitkeep b/apps/web/out/.gitkeep new file mode 100644 index 0000000..43901c9 --- /dev/null +++ b/apps/web/out/.gitkeep @@ -0,0 +1 @@ +# Keep the static export directory present for clean Rust builds.