ci: one live run per workflow per ref; never cancel or coalesce main

Every workflow now carries a top-level concurrency group so a new push to a
branch or PR cancels the superseded run instead of queuing behind it in the
shared account-wide runner pool. Runs on main get a unique group (run_id) so
they are never cancelled and never coalesced; release/publish workflows are
likewise never cancelled. Reusable (workflow_call) workflows are untouched
because the caller's group governs them; constant cross-ref groups are left
as deliberate serialization.

24 workflow files changed.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Vf5U1eUfawCVRTVnJSF2He

Author: zackees

.github/workflows/auto-release.yml

@@ -6,6 +6,11 @@ on:
       - main
   workflow_dispatch:
 
+# Never cancelled and never coalesced: every publish runs to completion.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.run_id }}
+  cancel-in-progress: false
+
 permissions:
   contents: write
   pull-requests: write

.github/workflows/linux-arm-build.yml

@@ -6,6 +6,13 @@ on:
   pull_request:
   workflow_dispatch:
 
+# One live run per workflow per ref: a new push to a branch or PR cancels the
+# superseded run instead of queuing behind it in the shared account-wide runner
+# pool. Runs on main get a unique group, so they are never cancelled or coalesced.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref == 'refs/heads/main' && github.run_id || github.ref }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+
 jobs:
   call:
     uses: ./.github/workflows/_build.yml

.github/workflows/linux-arm-integration-test.yml

@@ -6,6 +6,13 @@ on:
   pull_request:
   workflow_dispatch:
 
+# One live run per workflow per ref: a new push to a branch or PR cancels the
+# superseded run instead of queuing behind it in the shared account-wide runner
+# pool. Runs on main get a unique group, so they are never cancelled or coalesced.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref == 'refs/heads/main' && github.run_id || github.ref }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+
 jobs:
   call:
     uses: ./.github/workflows/_integration-test.yml

.github/workflows/linux-arm-lint.yml

@@ -6,6 +6,13 @@ on:
   pull_request:
   workflow_dispatch:
 
+# One live run per workflow per ref: a new push to a branch or PR cancels the
+# superseded run instead of queuing behind it in the shared account-wide runner
+# pool. Runs on main get a unique group, so they are never cancelled or coalesced.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref == 'refs/heads/main' && github.run_id || github.ref }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+
 jobs:
   call:
     uses: ./.github/workflows/_lint.yml

.github/workflows/linux-arm-unit-test.yml

@@ -6,6 +6,13 @@ on:
   pull_request:
   workflow_dispatch:
 
+# One live run per workflow per ref: a new push to a branch or PR cancels the
+# superseded run instead of queuing behind it in the shared account-wide runner
+# pool. Runs on main get a unique group, so they are never cancelled or coalesced.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref == 'refs/heads/main' && github.run_id || github.ref }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+
 jobs:
   call:
     uses: ./.github/workflows/_unit-test.yml

.github/workflows/linux-x86-build.yml

@@ -6,6 +6,13 @@ on:
   pull_request:
   workflow_dispatch:
 
+# One live run per workflow per ref: a new push to a branch or PR cancels the
+# superseded run instead of queuing behind it in the shared account-wide runner
+# pool. Runs on main get a unique group, so they are never cancelled or coalesced.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref == 'refs/heads/main' && github.run_id || github.ref }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+
 jobs:
   call:
     uses: ./.github/workflows/_build.yml

.github/workflows/linux-x86-dwarf-smoke.yml

@@ -6,6 +6,13 @@ on:
   pull_request:
   workflow_dispatch:
 
+# One live run per workflow per ref: a new push to a branch or PR cancels the
+# superseded run instead of queuing behind it in the shared account-wide runner
+# pool. Runs on main get a unique group, so they are never cancelled or coalesced.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref == 'refs/heads/main' && github.run_id || github.ref }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+
 jobs:
   dwarf-smoke:
     runs-on: ubuntu-24.04

.github/workflows/linux-x86-integration-test.yml

@@ -6,6 +6,13 @@ on:
   pull_request:
   workflow_dispatch:
 
+# One live run per workflow per ref: a new push to a branch or PR cancels the
+# superseded run instead of queuing behind it in the shared account-wide runner
+# pool. Runs on main get a unique group, so they are never cancelled or coalesced.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref == 'refs/heads/main' && github.run_id || github.ref }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+
 jobs:
   call:
     uses: ./.github/workflows/_integration-test.yml

.github/workflows/linux-x86-lint.yml

@@ -6,6 +6,13 @@ on:
   pull_request:
   workflow_dispatch:
 
+# One live run per workflow per ref: a new push to a branch or PR cancels the
+# superseded run instead of queuing behind it in the shared account-wide runner
+# pool. Runs on main get a unique group, so they are never cancelled or coalesced.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref == 'refs/heads/main' && github.run_id || github.ref }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+
 jobs:
   call:
     uses: ./.github/workflows/_lint.yml

.github/workflows/linux-x86-unit-test.yml

@@ -6,6 +6,13 @@ on:
   pull_request:
   workflow_dispatch:
 
+# One live run per workflow per ref: a new push to a branch or PR cancels the
+# superseded run instead of queuing behind it in the shared account-wide runner
+# pool. Runs on main get a unique group, so they are never cancelled or coalesced.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref == 'refs/heads/main' && github.run_id || github.ref }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+
 jobs:
   call:
     uses: ./.github/workflows/_unit-test.yml