@catladder/cli 5.1.3 → 5.2.0

package/dist/bundles/catenv/index.js

@@ -4803,9 +4803,20 @@ const createGitlabPipelineWithDefaults = ({ image, variables, before_script, aut
         ],
         workflow: {
             name: "$PIPELINE_ICON $PIPELINE_NAME",
+            // superseded pipelines must actually die: "interruptible" cancels
+            // every interruptible job, while gitlab's default "conservative"
+            // lets one started `interruptible: false` job shield the whole
+            // pipeline from cancellation. The rules below opt the pipelines
+            // that must run to completion back out.
+            // NOTE: this only tunes the project setting "Auto-cancel
+            // redundant pipelines" — with that setting off nothing cancels.
+            auto_cancel: { on_new_commit: "interruptible" },
             rules: [
                 {
                     if: '$CI_PIPELINE_SOURCE  == "trigger"',
+                    // an agent run is not redundant work: a commit landing while
+                    // it thinks must not kill it
+                    auto_cancel: { on_new_commit: "none" },
                     variables: {
                         PIPELINE_ICON: "🤖",
                         PIPELINE_NAME: "Thinking...",
@@ -4834,6 +4845,11 @@ const createGitlabPipelineWithDefaults = ({ image, variables, before_script, aut
                 },
                 {
                     if: rules_1.RULE_IS_TAGGED_RELEASE.if,
+                    // a release pipeline always runs through: tags are immutable,
+                    // so this only bites when someone force-moves one — and a
+                    // release cancelled halfway leaves the version published in
+                    // some places and missing in others
+                    auto_cancel: { on_new_commit: "none" },
                     variables: {
                         PIPELINE_ICON: "🐱📦",
                         PIPELINE_NAME: "Release $CI_COMMIT_TAG",
@@ -4950,6 +4966,12 @@ mainBranchJobNames) => {
         image: releaseImage,
         script: [method.script],
         after_script: [EXPIRED_TOKEN_HELP],
+        // a release in flight must never be killed by a new commit — a
+        // half-published version (tag pushed, npm publish missing) is not
+        // recoverable by re-running. Under gitlab's default "conservative"
+        // auto-cancel this also shields the rest of the pipeline, but only
+        // once the release actually started, which is late by construction.
+        interruptible: false,
     };
     const forceReleaseJob = {
         ["⚠️ force create release"]: {
@@ -4973,6 +4995,10 @@ mainBranchJobNames) => {
                 stage: "test",
                 image: releaseImage,
                 script: [method.checkScript],
+                // a redundant report is worthless: without this the job
+                // defaults to interruptible: false and, once started, stops
+                // gitlab from auto-cancelling the superseded MR pipeline
+                interruptible: true,
                 allow_failure: true,
                 artifacts: {
                     paths: ["changeset-report.md"],
@@ -5042,6 +5068,9 @@ mainBranchJobNames) => {
             script: [
                 `echo "release queued — '${exports.RELEASE_EXECUTOR_JOB_NAME}' runs it as soon as every other job in this pipeline succeeded"`,
             ],
+            // the recorded intent must survive a new commit: cancelling it
+            // would silently drop the queued release
+            interruptible: false,
             needs: [],
             // allow_failure keeps the unclicked button from blocking the
             // pipeline AND makes the executor's needs treat it as optional

package/dist/bundles/cli/index.js

@@ -11355,9 +11355,20 @@ const createGitlabPipelineWithDefaults = ({ image, variables, before_script, aut
         ],
         workflow: {
             name: "$PIPELINE_ICON $PIPELINE_NAME",
+            // superseded pipelines must actually die: "interruptible" cancels
+            // every interruptible job, while gitlab's default "conservative"
+            // lets one started `interruptible: false` job shield the whole
+            // pipeline from cancellation. The rules below opt the pipelines
+            // that must run to completion back out.
+            // NOTE: this only tunes the project setting "Auto-cancel
+            // redundant pipelines" — with that setting off nothing cancels.
+            auto_cancel: { on_new_commit: "interruptible" },
             rules: [
                 {
                     if: '$CI_PIPELINE_SOURCE  == "trigger"',
+                    // an agent run is not redundant work: a commit landing while
+                    // it thinks must not kill it
+                    auto_cancel: { on_new_commit: "none" },
                     variables: {
                         PIPELINE_ICON: "🤖",
                         PIPELINE_NAME: "Thinking...",
@@ -11386,6 +11397,11 @@ const createGitlabPipelineWithDefaults = ({ image, variables, before_script, aut
                 },
                 {
                     if: rules_1.RULE_IS_TAGGED_RELEASE.if,
+                    // a release pipeline always runs through: tags are immutable,
+                    // so this only bites when someone force-moves one — and a
+                    // release cancelled halfway leaves the version published in
+                    // some places and missing in others
+                    auto_cancel: { on_new_commit: "none" },
                     variables: {
                         PIPELINE_ICON: "🐱📦",
                         PIPELINE_NAME: "Release $CI_COMMIT_TAG",
@@ -11502,6 +11518,12 @@ mainBranchJobNames) => {
         image: releaseImage,
         script: [method.script],
         after_script: [EXPIRED_TOKEN_HELP],
+        // a release in flight must never be killed by a new commit — a
+        // half-published version (tag pushed, npm publish missing) is not
+        // recoverable by re-running. Under gitlab's default "conservative"
+        // auto-cancel this also shields the rest of the pipeline, but only
+        // once the release actually started, which is late by construction.
+        interruptible: false,
     };
     const forceReleaseJob = {
         ["⚠️ force create release"]: {
@@ -11525,6 +11547,10 @@ mainBranchJobNames) => {
                 stage: "test",
                 image: releaseImage,
                 script: [method.checkScript],
+                // a redundant report is worthless: without this the job
+                // defaults to interruptible: false and, once started, stops
+                // gitlab from auto-cancelling the superseded MR pipeline
+                interruptible: true,
                 allow_failure: true,
                 artifacts: {
                     paths: ["changeset-report.md"],
@@ -11594,6 +11620,9 @@ mainBranchJobNames) => {
             script: [
                 `echo "release queued — '${exports.RELEASE_EXECUTOR_JOB_NAME}' runs it as soon as every other job in this pipeline succeeded"`,
             ],
+            // the recorded intent must survive a new commit: cancelling it
+            // would silently drop the queued release
+            interruptible: false,
             needs: [],
             // allow_failure keeps the unclicked button from blocking the
             // pipeline AND makes the executor's needs treat it as optional

package/dist/bundles/skills/catladder-pipelines/SKILL.md

@@ -37,6 +37,38 @@ Generated layout:
 Stages: setup → test → build → deploy → verify (post-deploy checks),
 plus stop jobs for review-app teardown.
 
+## Superseded pipelines are cancelled
+
+Pushing a new commit cancels the pipeline of the previous one, so the
+runners are not busy with results nobody will read.
+
+| Pipeline | On a new commit |
+|---|---|
+| `mr` | cancelled |
+| `mainBranch` (dev) | cancelled, except a release already running |
+| `taggedRelease` | **runs through** — never cancelled |
+| agent runs (`trigger`) | **runs through** — never cancelled |
+
+- **GitHub**: the generated MR workflow sets `concurrency` with
+  `cancel-in-progress: true`.
+- **GitLab**: generated `workflow:auto_cancel:on_new_commit:
+  interruptible`, with per-rule `none` for tags and agent runs. Every
+  job carries an explicit `interruptible`, jobs that must finish
+  (release jobs, agent jobs) carry `interruptible: false`.
+
+**GitLab requires the project setting too.** The generated YAML only
+tunes *how* redundant pipelines are cancelled — it does not switch the
+feature on. If old pipelines keep running, check **Settings > CI/CD >
+General pipelines > Auto-cancel redundant pipelines**; with that
+checkbox off nothing is ever cancelled. (`catladder project-doctor`
+does not check this.)
+
+**Adding a hand-written GitLab job?** Set `interruptible` explicitly.
+GitLab defaults it to `false`, and a non-interruptible job that has
+started keeps *itself* alive — under gitlab's own default
+(`conservative`, which catladder overrides) it would shield the whole
+pipeline from cancellation.
+
 ## Review-app auto-stop and pinning (GitLab)
 
 GitLab review environments stop automatically after 1 week, dev

package/dist/packages/pipeline/src/backends/gitlab/createGitlabPipeline.js

@@ -33,9 +33,20 @@ const createGitlabPipelineWithDefaults = ({ image, variables, before_script, aut
         ],
         workflow: {
             name: "$PIPELINE_ICON $PIPELINE_NAME",
+            // superseded pipelines must actually die: "interruptible" cancels
+            // every interruptible job, while gitlab's default "conservative"
+            // lets one started `interruptible: false` job shield the whole
+            // pipeline from cancellation. The rules below opt the pipelines
+            // that must run to completion back out.
+            // NOTE: this only tunes the project setting "Auto-cancel
+            // redundant pipelines" — with that setting off nothing cancels.
+            auto_cancel: { on_new_commit: "interruptible" },
             rules: [
                 {
                     if: '$CI_PIPELINE_SOURCE  == "trigger"',
+                    // an agent run is not redundant work: a commit landing while
+                    // it thinks must not kill it
+                    auto_cancel: { on_new_commit: "none" },
                     variables: {
                         PIPELINE_ICON: "🤖",
                         PIPELINE_NAME: "Thinking...",
@@ -64,6 +75,11 @@ const createGitlabPipelineWithDefaults = ({ image, variables, before_script, aut
                 },
                 {
                     if: rules_1.RULE_IS_TAGGED_RELEASE.if,
+                    // a release pipeline always runs through: tags are immutable,
+                    // so this only bites when someone force-moves one — and a
+                    // release cancelled halfway leaves the version published in
+                    // some places and missing in others
+                    auto_cancel: { on_new_commit: "none" },
                     variables: {
                         PIPELINE_ICON: "🐱📦",
                         PIPELINE_NAME: "Release $CI_COMMIT_TAG",

package/dist/packages/pipeline/src/backends/gitlab/createGitlabPipeline.js.map

@@ -1 +1 @@
-{"version":3,"file":"createGitlabPipeline.js","sourceRoot":"","sources":["../../../../../../../../packages/pipeline/src/backends/gitlab/createGitlabPipeline.ts"],"names":[],"mappings":";;;AACA,0CAAwD;AACxD,6CAIwB;AACxB,uCAIqB;AAGrB;;;;;GAKG;AACH,MAAM,sBAAsB,GAAG,SAAS,CAAC;AAElC,MAAM,gCAAgC,GAAG,CAAC,EAC/C,KAAK,EACL,SAAS,EACT,aAAa,EACb,QAAQ,EACR,GAAG,MAAM,EAGV,EAAsB,EAAE;IACvB,MAAM,QAAQ,GAAG,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC;IAC/C,OAAO;QACL,KAAK,EAAE,KAAK,aAAL,KAAK,cAAL,KAAK,GAAI,sBAAsB;QACtC,SAAS,EAAE;YACT,cAAc,EAAE,MAAM,EAAE,uFAAuF;YAC/G,0BAA0B,EAAE,MAAM,EAAE,kCAAkC;YACtE,uBAAuB,EAAE,MAAM,EAAE,gCAAgC;YACjE,wBAAwB,EAAE,IAAI,EAAE,0EAA0E;YAE1G,SAAS,EAAE,GAAG,EAAE,yBAAyB;YACzC,0DAA0D;YAC1D,0DAA0D;YAC1D,4CAA4C;YAC5C,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,oCAAyB,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,SAAS,aAAT,SAAS,cAAT,SAAS,GAAI,EAAE,CAAC;SACrB;QACD,aAAa,EAAE;YACb,GAAG,CAAC,GAAG,4BAAqB,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACpD,MAAM,CAAC,cAAc,EAAE,CACxB;YACD,GAAG,CAAC,aAAa,aAAb,aAAa,cAAb,aAAa,GAAI,EAAE,CAAC;SACzB;QACD,QAAQ,EAAE;YACR,IAAI,EAAE,+BAA+B;YACrC,KAAK,EAAE;gBACL;oBACE,EAAE,EAAE,mCAAmC;oBACvC,SAAS,EAAE;wBACT,aAAa,EAAE,IAAI;wBACnB,aAAa,EAAE,aAAa;qBAC7B;iBACF;gBACD,+DAA+D;gBAC/D,uCAAuC;gBACvC,GAAG,CAAC,QAAQ;oBACV,CAAC,CAAC;wBACE;4BACE,EAAE,EAAE,GAAG,6BAAqB,CAAC,EAAE,oCAAoC,IAAA,iCAAsB,EAAC,QAAQ,CAAC,GAAG;4BACtG,SAAS,EAAE;gCACT,aAAa,EAAE,MAAM;gCACrB,aAAa,EACX,mDAAmD;gCACrD,CAAC,oCAAyB,CAAC,EAAE,OAAO;6BACrC;yBACF;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP;oBACE,EAAE,EAAE,6BAAqB,CAAC,EAAE;oBAC5B,SAAS,EAAE;wBACT,aAAa,EAAE,MAAM;wBACrB,aAAa,EAAE,mDAAmD;qBACnE;iBACF;gBACD;oBACE,EAAE,EAAE,8BAAsB,CAAC,EAAE;oBAC7B,SAAS,EAAE;wBACT,aAAa,EAAE,MAAM;wBACrB,aAAa,EAAE,wBAAwB;qBACxC;iBACF;gBACD;oBACE,EAAE,EAAE,kDAA0C,CAAC,EAAE;oBACjD,SAAS,EAAE;wBACT,aAAa,EAAE,MAAM;wBACrB,aAAa,EAAE,yBAAyB;qBACzC;iBACF;gBAED;oBACE,IAAI,EAAE,QAAQ,EAAE,WAAW;oBAC3B,SAAS,EAAE;wBACT,aAAa,EAAE,KAAK;wBACpB,aAAa,EAAE,SAAS;qBACzB;iBACF;aACF;SACF;QAED,GAAG,MAAM;KACV,CAAC;AACJ,CAAC,CAAC;AA1FW,QAAA,gCAAgC,oCA0F3C"}
+{"version":3,"file":"createGitlabPipeline.js","sourceRoot":"","sources":["../../../../../../../../packages/pipeline/src/backends/gitlab/createGitlabPipeline.ts"],"names":[],"mappings":";;;AACA,0CAAwD;AACxD,6CAIwB;AACxB,uCAIqB;AAGrB;;;;;GAKG;AACH,MAAM,sBAAsB,GAAG,SAAS,CAAC;AAElC,MAAM,gCAAgC,GAAG,CAAC,EAC/C,KAAK,EACL,SAAS,EACT,aAAa,EACb,QAAQ,EACR,GAAG,MAAM,EAGV,EAAsB,EAAE;IACvB,MAAM,QAAQ,GAAG,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC;IAC/C,OAAO;QACL,KAAK,EAAE,KAAK,aAAL,KAAK,cAAL,KAAK,GAAI,sBAAsB;QACtC,SAAS,EAAE;YACT,cAAc,EAAE,MAAM,EAAE,uFAAuF;YAC/G,0BAA0B,EAAE,MAAM,EAAE,kCAAkC;YACtE,uBAAuB,EAAE,MAAM,EAAE,gCAAgC;YACjE,wBAAwB,EAAE,IAAI,EAAE,0EAA0E;YAE1G,SAAS,EAAE,GAAG,EAAE,yBAAyB;YACzC,0DAA0D;YAC1D,0DAA0D;YAC1D,4CAA4C;YAC5C,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,oCAAyB,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,SAAS,aAAT,SAAS,cAAT,SAAS,GAAI,EAAE,CAAC;SACrB;QACD,aAAa,EAAE;YACb,GAAG,CAAC,GAAG,4BAAqB,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACpD,MAAM,CAAC,cAAc,EAAE,CACxB;YACD,GAAG,CAAC,aAAa,aAAb,aAAa,cAAb,aAAa,GAAI,EAAE,CAAC;SACzB;QACD,QAAQ,EAAE;YACR,IAAI,EAAE,+BAA+B;YACrC,kEAAkE;YAClE,iEAAiE;YACjE,+DAA+D;YAC/D,gEAAgE;YAChE,wCAAwC;YACxC,yDAAyD;YACzD,gEAAgE;YAChE,WAAW,EAAE,EAAE,aAAa,EAAE,eAAe,EAAE;YAC/C,KAAK,EAAE;gBACL;oBACE,EAAE,EAAE,mCAAmC;oBACvC,6DAA6D;oBAC7D,6BAA6B;oBAC7B,WAAW,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE;oBACtC,SAAS,EAAE;wBACT,aAAa,EAAE,IAAI;wBACnB,aAAa,EAAE,aAAa;qBAC7B;iBACF;gBACD,+DAA+D;gBAC/D,uCAAuC;gBACvC,GAAG,CAAC,QAAQ;oBACV,CAAC,CAAC;wBACE;4BACE,EAAE,EAAE,GAAG,6BAAqB,CAAC,EAAE,oCAAoC,IAAA,iCAAsB,EAAC,QAAQ,CAAC,GAAG;4BACtG,SAAS,EAAE;gCACT,aAAa,EAAE,MAAM;gCACrB,aAAa,EACX,mDAAmD;gCACrD,CAAC,oCAAyB,CAAC,EAAE,OAAO;6BACrC;yBACF;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP;oBACE,EAAE,EAAE,6BAAqB,CAAC,EAAE;oBAC5B,SAAS,EAAE;wBACT,aAAa,EAAE,MAAM;wBACrB,aAAa,EAAE,mDAAmD;qBACnE;iBACF;gBACD;oBACE,EAAE,EAAE,8BAAsB,CAAC,EAAE;oBAC7B,8DAA8D;oBAC9D,0DAA0D;oBAC1D,4DAA4D;oBAC5D,oCAAoC;oBACpC,WAAW,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE;oBACtC,SAAS,EAAE;wBACT,aAAa,EAAE,MAAM;wBACrB,aAAa,EAAE,wBAAwB;qBACxC;iBACF;gBACD;oBACE,EAAE,EAAE,kDAA0C,CAAC,EAAE;oBACjD,SAAS,EAAE;wBACT,aAAa,EAAE,MAAM;wBACrB,aAAa,EAAE,yBAAyB;qBACzC;iBACF;gBAED;oBACE,IAAI,EAAE,QAAQ,EAAE,WAAW;oBAC3B,SAAS,EAAE;wBACT,aAAa,EAAE,KAAK;wBACpB,aAAa,EAAE,SAAS;qBACzB;iBACF;aACF;SACF;QAED,GAAG,MAAM;KACV,CAAC;AACJ,CAAC,CAAC;AA1GW,QAAA,gCAAgC,oCA0G3C"}

package/dist/packages/pipeline/src/backends/gitlab/gitlabReleaseJobs.d.ts

@@ -7,6 +7,7 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         stage: string;
         image: string;
         script: string[];
+        interruptible: true;
         allow_failure: true;
         artifacts: {
             paths: string[];
@@ -42,6 +43,7 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         image: string;
         script: string[];
         after_script: string[];
+        interruptible: false;
     };
     "create release": {
         rules: {
@@ -58,6 +60,7 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         image: string;
         script: string[];
         after_script: string[];
+        interruptible: false;
         needs?: undefined;
         allow_failure?: undefined;
     };
@@ -81,6 +84,7 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         image: string;
         script: string[];
         after_script: string[];
+        interruptible: false;
     };
     "create release": {
         rules: {
@@ -97,6 +101,7 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         image: string;
         script: string[];
         after_script: string[];
+        interruptible: false;
         needs?: undefined;
         allow_failure?: undefined;
     };
@@ -105,6 +110,7 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         stage: string;
         image: string;
         script: string[];
+        interruptible: true;
         allow_failure: true;
         artifacts: {
             paths: string[];
@@ -140,6 +146,7 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         image: string;
         script: string[];
         after_script: string[];
+        interruptible: false;
     };
     "create release": {
         allow_failure: true;
@@ -157,6 +164,7 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         image: string;
         script: string[];
         after_script: string[];
+        interruptible: false;
         needs?: undefined;
     };
 } | {
@@ -179,6 +187,7 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         image: string;
         script: string[];
         after_script: string[];
+        interruptible: false;
     };
     "create release": {
         allow_failure: true;
@@ -196,6 +205,7 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         image: string;
         script: string[];
         after_script: string[];
+        interruptible: false;
         needs?: undefined;
     };
 } | {
@@ -203,6 +213,7 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         stage: string;
         image: string;
         script: string[];
+        interruptible: true;
         allow_failure: true;
         artifacts: {
             paths: string[];
@@ -238,11 +249,13 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         image: string;
         script: string[];
         after_script: string[];
+        interruptible: false;
     };
     "create release": {
         stage: string;
         image: string;
         script: string[];
+        interruptible: false;
         needs: any[];
         allow_failure: true;
         rules: {
@@ -277,6 +290,7 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         image: string;
         script: string[];
         after_script: string[];
+        interruptible: false;
     };
 } | {
     "\uD83E\uDD8B changeset check"?: undefined;
@@ -298,11 +312,13 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         image: string;
         script: string[];
         after_script: string[];
+        interruptible: false;
     };
     "create release": {
         stage: string;
         image: string;
         script: string[];
+        interruptible: false;
         needs: any[];
         allow_failure: true;
         rules: {
@@ -337,5 +353,6 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         image: string;
         script: string[];
         after_script: string[];
+        interruptible: false;
     };
 };

package/dist/packages/pipeline/src/backends/gitlab/gitlabReleaseJobs.js

@@ -53,6 +53,12 @@ mainBranchJobNames) => {
         image: releaseImage,
         script: [method.script],
         after_script: [EXPIRED_TOKEN_HELP],
+        // a release in flight must never be killed by a new commit — a
+        // half-published version (tag pushed, npm publish missing) is not
+        // recoverable by re-running. Under gitlab's default "conservative"
+        // auto-cancel this also shields the rest of the pipeline, but only
+        // once the release actually started, which is late by construction.
+        interruptible: false,
     };
     const forceReleaseJob = {
         ["⚠️ force create release"]: {
@@ -76,6 +82,10 @@ mainBranchJobNames) => {
                 stage: "test",
                 image: releaseImage,
                 script: [method.checkScript],
+                // a redundant report is worthless: without this the job
+                // defaults to interruptible: false and, once started, stops
+                // gitlab from auto-cancelling the superseded MR pipeline
+                interruptible: true,
                 allow_failure: true,
                 artifacts: {
                     paths: ["changeset-report.md"],
@@ -145,6 +155,9 @@ mainBranchJobNames) => {
             script: [
                 `echo "release queued — '${exports.RELEASE_EXECUTOR_JOB_NAME}' runs it as soon as every other job in this pipeline succeeded"`,
             ],
+            // the recorded intent must survive a new commit: cancelling it
+            // would silently drop the queued release
+            interruptible: false,
             needs: [],
             // allow_failure keeps the unclicked button from blocking the
             // pipeline AND makes the executor's needs treat it as optional

package/dist/packages/pipeline/src/backends/gitlab/gitlabReleaseJobs.js.map

@@ -1 +1 @@
-{"version":3,"file":"gitlabReleaseJobs.js","sourceRoot":"","sources":["../../../../../../../../packages/pipeline/src/backends/gitlab/gitlabReleaseJobs.ts"],"names":[],"mappings":";;;AAAA,uCAOqB;AAErB,2CAAiD;AAIjD,MAAM,kBAAkB,GACtB,gJAAgJ,CAAC;AAEnJ;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAEf,QAAA,uBAAuB,GAAG,gBAAgB,CAAC;AAC3C,QAAA,yBAAyB,GAAG,mCAAmC,CAAC;AAE7E,MAAM,gBAAgB,GAAG;IACvB,oCAA4B;IAC5B,mCAA2B;IAC3B,8BAAsB;CACvB,CAAC;AAEF,sEAAsE;AACtE,mEAAmE;AACnE,uEAAuE;AACvE,oCAAoC;AACpC,MAAM,kBAAkB,GAAG;IACzB,GAAG,gBAAgB;IACnB;QACE,EAAE,EAAE,kCAA0B;QAC9B,IAAI,EAAE,QAAQ;KACf;IACD;QACE,EAAE,EAAE,oCAA4B;QAChC,IAAI,EAAE,QAAQ;KACf;CACqB,CAAC;AAElB,MAAM,oBAAoB,GAAG,CAClC,MAAc,EACd,MAAqB;AACrB;;;;GAIG;AACH,kBAA4B,EAC5B,EAAE;;IACF,MAAM,MAAM,GAAG,IAAA,0BAAgB,EAAC,MAAM,CAAC,CAAC;IACxC,qEAAqE;IACrE,qEAAqE;IACrE,kEAAkE;IAClE,uCAAuC;IACvC,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC;QACrC,cAAc,EAAE,MAAM,CAAC,KAAK;KAC7B,CAAC,CAAC,KAAK,CAAC;IAET,MAAM,cAAc,GAAG;QACrB,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;QACvB,YAAY,EAAE,CAAC,kBAAkB,CAAC;KACZ,CAAC;IAEzB,MAAM,eAAe,GAAG;QACtB,CAAC,yBAAyB,CAAC,EAAE;YAC3B,GAAG,cAAc;YACjB,KAAK,EAAE,EAAE;YACT,aAAa,EAAE,IAAI;YACnB,2DAA2D;YAC3D,wDAAwD;YACxD,GAAG,CAAC,MAAM,CAAC,qBAAqB;gBAC9B,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,qBAAqB,EAAE;gBAC7C,CAAC,CAAC,EAAE,CAAC;YACP,KAAK,EAAE,kBAAkB;SACH;KACzB,CAAC;IAEF,mEAAmE;IACnE,8DAA8D;IAC9D,gCAAgC;IAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW;QACjC,CAAC,CAAC;YACE,CAAC,oBAAoB,CAAC,EAAE;gBACtB,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,YAAY;gBACnB,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC;gBAC5B,aAAa,EAAE,IAAI;gBACnB,SAAS,EAAE;oBACT,KAAK,EAAE,CAAC,qBAAqB,CAAC;oBAC9B,SAAS,EAAE,kBAAkB;oBAC7B,2CAA2C;oBAC3C,IAAI,EAAE,QAAiB;iBACxB;gBACD,KAAK,EAAE;oBACL,mCAA2B;oBAC3B,8BAAsB;oBACtB,6BAAqB;iBACC;aACF;SACzB;QACH,CAAC,CAAC,EAAE,CAAC;IAEP,IAAI,CAAA,MAAA,MAAM,CAAC,QAAQ,0CAAE,IAAI,MAAK,MAAM,EAAE,CAAC;QACrC,OAAO;YACL,CAAC,+BAAuB,CAAC,EAAE;gBACzB,GAAG,cAAc;gBACjB,KAAK,EAAE;oBACL,GAAG,gBAAgB;oBACnB;wBACE,EAAE,EAAE,kCAA0B;wBAC9B,IAAI,EAAE,YAAY;qBACnB;oBACD;wBACE,EAAE,EAAE,oCAA4B;wBAChC,IAAI,EAAE,QAAQ;wBACd,sDAAsD;wBACtD,gDAAgD;wBAChD,aAAa,EAAE,IAAI;qBACpB;iBACqB;aACF;YACxB,GAAG,eAAe;YAClB,GAAG,QAAQ;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG;QACpB,EAAE,GAAG,EAAE,+BAAuB,EAAE;QAChC,iEAAiE;QACjE,uBAAuB;QACvB,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;KACrE,CAAC;IAEF,IAAI,aAAa,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAC5C,OAAO,CAAC,IAAI,CACV,6CAA6C,gBAAgB,UAAU;YACrE,QAAQ,+BAAuB,qCAAqC;YACpE,0DAA0D,gBAAgB,GAAG,CAChF,CAAC;QACF,OAAO;YACL,CAAC,+BAAuB,CAAC,EAAE;gBACzB,GAAG,cAAc;gBACjB,aAAa,EAAE,IAAI;gBACnB,KAAK,EAAE,kBAAkB;aACH;YACxB,GAAG,eAAe;YAClB,GAAG,QAAQ;SACZ,CAAC;IACJ,CAAC;IAED,OAAO;QACL,oEAAoE;QACpE,kEAAkE;QAClE,qEAAqE;QACrE,qEAAqE;QACrE,CAAC,+BAAuB,CAAC,EAAE;YACzB,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE;gBACN,2BAA2B,iCAAyB,kEAAkE;aACvH;YACD,KAAK,EAAE,EAAE;YACT,6DAA6D;YAC7D,+DAA+D;YAC/D,2DAA2D;YAC3D,aAAa,EAAE,IAAI;YACnB,KAAK,EAAE,kBAAkB;SACH;QACxB,mEAAmE;QACnE,oEAAoE;QACpE,kEAAkE;QAClE,sCAAsC;QACtC,CAAC,iCAAyB,CAAC,EAAE;YAC3B,GAAG,cAAc;YACjB,KAAK,EAAE,aAAa;YACpB,KAAK,EAAE;gBACL,GAAG,gBAAgB;gBACnB;oBACE,EAAE,EAAE,kCAA0B;oBAC9B,IAAI,EAAE,YAAY;iBACnB;gBACD;oBACE,EAAE,EAAE,oCAA4B;oBAChC,IAAI,EAAE,YAAY;iBACnB;aACqB;SACF;QACxB,GAAG,eAAe;QAClB,GAAG,QAAQ;KACZ,CAAC;AACJ,CAAC,CAAC;AAzJW,QAAA,oBAAoB,wBAyJ/B"}
+{"version":3,"file":"gitlabReleaseJobs.js","sourceRoot":"","sources":["../../../../../../../../packages/pipeline/src/backends/gitlab/gitlabReleaseJobs.ts"],"names":[],"mappings":";;;AAAA,uCAOqB;AAErB,2CAAiD;AAIjD,MAAM,kBAAkB,GACtB,gJAAgJ,CAAC;AAEnJ;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAEf,QAAA,uBAAuB,GAAG,gBAAgB,CAAC;AAC3C,QAAA,yBAAyB,GAAG,mCAAmC,CAAC;AAE7E,MAAM,gBAAgB,GAAG;IACvB,oCAA4B;IAC5B,mCAA2B;IAC3B,8BAAsB;CACvB,CAAC;AAEF,sEAAsE;AACtE,mEAAmE;AACnE,uEAAuE;AACvE,oCAAoC;AACpC,MAAM,kBAAkB,GAAG;IACzB,GAAG,gBAAgB;IACnB;QACE,EAAE,EAAE,kCAA0B;QAC9B,IAAI,EAAE,QAAQ;KACf;IACD;QACE,EAAE,EAAE,oCAA4B;QAChC,IAAI,EAAE,QAAQ;KACf;CACqB,CAAC;AAElB,MAAM,oBAAoB,GAAG,CAClC,MAAc,EACd,MAAqB;AACrB;;;;GAIG;AACH,kBAA4B,EAC5B,EAAE;;IACF,MAAM,MAAM,GAAG,IAAA,0BAAgB,EAAC,MAAM,CAAC,CAAC;IACxC,qEAAqE;IACrE,qEAAqE;IACrE,kEAAkE;IAClE,uCAAuC;IACvC,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC;QACrC,cAAc,EAAE,MAAM,CAAC,KAAK;KAC7B,CAAC,CAAC,KAAK,CAAC;IAET,MAAM,cAAc,GAAG;QACrB,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;QACvB,YAAY,EAAE,CAAC,kBAAkB,CAAC;QAClC,+DAA+D;QAC/D,kEAAkE;QAClE,mEAAmE;QACnE,mEAAmE;QACnE,oEAAoE;QACpE,aAAa,EAAE,KAAK;KACE,CAAC;IAEzB,MAAM,eAAe,GAAG;QACtB,CAAC,yBAAyB,CAAC,EAAE;YAC3B,GAAG,cAAc;YACjB,KAAK,EAAE,EAAE;YACT,aAAa,EAAE,IAAI;YACnB,2DAA2D;YAC3D,wDAAwD;YACxD,GAAG,CAAC,MAAM,CAAC,qBAAqB;gBAC9B,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,qBAAqB,EAAE;gBAC7C,CAAC,CAAC,EAAE,CAAC;YACP,KAAK,EAAE,kBAAkB;SACH;KACzB,CAAC;IAEF,mEAAmE;IACnE,8DAA8D;IAC9D,gCAAgC;IAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW;QACjC,CAAC,CAAC;YACE,CAAC,oBAAoB,CAAC,EAAE;gBACtB,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,YAAY;gBACnB,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC;gBAC5B,wDAAwD;gBACxD,4DAA4D;gBAC5D,yDAAyD;gBACzD,aAAa,EAAE,IAAI;gBACnB,aAAa,EAAE,IAAI;gBACnB,SAAS,EAAE;oBACT,KAAK,EAAE,CAAC,qBAAqB,CAAC;oBAC9B,SAAS,EAAE,kBAAkB;oBAC7B,2CAA2C;oBAC3C,IAAI,EAAE,QAAiB;iBACxB;gBACD,KAAK,EAAE;oBACL,mCAA2B;oBAC3B,8BAAsB;oBACtB,6BAAqB;iBACC;aACF;SACzB;QACH,CAAC,CAAC,EAAE,CAAC;IAEP,IAAI,CAAA,MAAA,MAAM,CAAC,QAAQ,0CAAE,IAAI,MAAK,MAAM,EAAE,CAAC;QACrC,OAAO;YACL,CAAC,+BAAuB,CAAC,EAAE;gBACzB,GAAG,cAAc;gBACjB,KAAK,EAAE;oBACL,GAAG,gBAAgB;oBACnB;wBACE,EAAE,EAAE,kCAA0B;wBAC9B,IAAI,EAAE,YAAY;qBACnB;oBACD;wBACE,EAAE,EAAE,oCAA4B;wBAChC,IAAI,EAAE,QAAQ;wBACd,sDAAsD;wBACtD,gDAAgD;wBAChD,aAAa,EAAE,IAAI;qBACpB;iBACqB;aACF;YACxB,GAAG,eAAe;YAClB,GAAG,QAAQ;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG;QACpB,EAAE,GAAG,EAAE,+BAAuB,EAAE;QAChC,iEAAiE;QACjE,uBAAuB;QACvB,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;KACrE,CAAC;IAEF,IAAI,aAAa,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAC5C,OAAO,CAAC,IAAI,CACV,6CAA6C,gBAAgB,UAAU;YACrE,QAAQ,+BAAuB,qCAAqC;YACpE,0DAA0D,gBAAgB,GAAG,CAChF,CAAC;QACF,OAAO;YACL,CAAC,+BAAuB,CAAC,EAAE;gBACzB,GAAG,cAAc;gBACjB,aAAa,EAAE,IAAI;gBACnB,KAAK,EAAE,kBAAkB;aACH;YACxB,GAAG,eAAe;YAClB,GAAG,QAAQ;SACZ,CAAC;IACJ,CAAC;IAED,OAAO;QACL,oEAAoE;QACpE,kEAAkE;QAClE,qEAAqE;QACrE,qEAAqE;QACrE,CAAC,+BAAuB,CAAC,EAAE;YACzB,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE;gBACN,2BAA2B,iCAAyB,kEAAkE;aACvH;YACD,+DAA+D;YAC/D,yCAAyC;YACzC,aAAa,EAAE,KAAK;YACpB,KAAK,EAAE,EAAE;YACT,6DAA6D;YAC7D,+DAA+D;YAC/D,2DAA2D;YAC3D,aAAa,EAAE,IAAI;YACnB,KAAK,EAAE,kBAAkB;SACH;QACxB,mEAAmE;QACnE,oEAAoE;QACpE,kEAAkE;QAClE,sCAAsC;QACtC,CAAC,iCAAyB,CAAC,EAAE;YAC3B,GAAG,cAAc;YACjB,KAAK,EAAE,aAAa;YACpB,KAAK,EAAE;gBACL,GAAG,gBAAgB;gBACnB;oBACE,EAAE,EAAE,kCAA0B;oBAC9B,IAAI,EAAE,YAAY;iBACnB;gBACD;oBACE,EAAE,EAAE,oCAA4B;oBAChC,IAAI,EAAE,YAAY;iBACnB;aACqB;SACF;QACxB,GAAG,eAAe;QAClB,GAAG,QAAQ;KACZ,CAAC;AACJ,CAAC,CAAC;AAtKW,QAAA,oBAAoB,wBAsK/B"}

package/dist/packages/pipeline/src/types/gitlab-types.d.ts

@@ -4,6 +4,33 @@ export { Retry, Image as GitlabJobImage } from "./gitlab-ci-yml";
 export type Artifacts = GitlabCiArtifacts;
 export type { GitlabJobCache };
 export type GitlabRule = Exclude<Exclude<Rules, null>[number], string | string[]>;
+/**
+ * gitlab's auto-cancel policy for redundant pipelines. Tunes the
+ * project setting "Auto-cancel redundant pipelines" (Settings > CI/CD >
+ * General pipelines) — it does NOT enable it: with the setting off,
+ * nothing is ever cancelled regardless of this.
+ *
+ * needs gitlab >= 16.8 (top-level) / >= 16.10 (per workflow rule).
+ */
+export interface GitlabAutoCancel {
+    /**
+     * - `conservative` (gitlab's default): cancel the whole pipeline, but
+     *   only while no `interruptible: false` job has *started* — a single
+     *   such job then shields every other job from cancellation
+     * - `interruptible`: cancel every `interruptible: true` job, with no
+     *   such veto
+     * - `none`: never auto-cancel
+     */
+    on_new_commit?: "conservative" | "interruptible" | "none";
+    on_job_failure?: "all" | "none";
+}
+/**
+ * a workflow rule may override {@link GitlabAutoCancel} per pipeline
+ * kind — job rules may not.
+ */
+export type GitlabWorkflowRule = GitlabRule & {
+    auto_cancel?: GitlabAutoCancel;
+};
 export type GitlabEnvironment = Omit<Exclude<JobTemplate["environment"], undefined | string>, "deployment_tier">;
 export interface GitlabJobDef extends Pick<JobTemplate, "after_script" | "allow_failure" | "artifacts" | "before_script" | "coverage" | "dependencies" | "environment" | "except" | "hooks" | "image" | "interruptible" | "needs" | "only" | "parallel" | "release" | "resource_group" | "retry" | "rules" | "script" | "services" | "stage" | "tags" | "trigger" | "variables"> {
     stage: JobTemplate["stage"];
@@ -23,8 +50,9 @@ export interface GitlabJobDef extends Pick<JobTemplate, "after_script" | "allow_
 export interface GitlabPipeline extends Pick<JobTemplate, "variables"> {
     image: string;
     workflow?: {
-        rules: GitlabRule[];
         name?: string;
+        auto_cancel?: GitlabAutoCancel;
+        rules: GitlabWorkflowRule[];
         variables?: Record<string, string>;
     };
     stages: string[];

package/dist/skills/catladder-pipelines/SKILL.md

@@ -37,6 +37,38 @@ Generated layout:
 Stages: setup → test → build → deploy → verify (post-deploy checks),
 plus stop jobs for review-app teardown.
 
+## Superseded pipelines are cancelled
+
+Pushing a new commit cancels the pipeline of the previous one, so the
+runners are not busy with results nobody will read.
+
+| Pipeline | On a new commit |
+|---|---|
+| `mr` | cancelled |
+| `mainBranch` (dev) | cancelled, except a release already running |
+| `taggedRelease` | **runs through** — never cancelled |
+| agent runs (`trigger`) | **runs through** — never cancelled |
+
+- **GitHub**: the generated MR workflow sets `concurrency` with
+  `cancel-in-progress: true`.
+- **GitLab**: generated `workflow:auto_cancel:on_new_commit:
+  interruptible`, with per-rule `none` for tags and agent runs. Every
+  job carries an explicit `interruptible`, jobs that must finish
+  (release jobs, agent jobs) carry `interruptible: false`.
+
+**GitLab requires the project setting too.** The generated YAML only
+tunes *how* redundant pipelines are cancelled — it does not switch the
+feature on. If old pipelines keep running, check **Settings > CI/CD >
+General pipelines > Auto-cancel redundant pipelines**; with that
+checkbox off nothing is ever cancelled. (`catladder project-doctor`
+does not check this.)
+
+**Adding a hand-written GitLab job?** Set `interruptible` explicitly.
+GitLab defaults it to `false`, and a non-interruptible job that has
+started keeps *itself* alive — under gitlab's own default
+(`conservative`, which catladder overrides) it would shield the whole
+pipeline from cancellation.
+
 ## Review-app auto-stop and pinning (GitLab)
 
 GitLab review environments stop automatically after 1 week, dev