@rightkit/git 0.2.20 → 0.2.21

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rightkit/git",
-  "version": "0.2.20",
+  "version": "0.2.21",
   "description": "Public-repo-only GitHub Actions workflow layer: templates, visibility gate, sync/drift/adopt/uninstall for right-git.",
   "license": "MIT OR Apache-2.0",
   "type": "module",

package/render.test.mjs

@@ -51,11 +51,19 @@ test("rust-hybrid ci renders its pinned package manager and gate", () => {
   assert.match(content, /version: 11\.24\.0/);
   assert.match(content, /components: rustfmt, clippy/);
   assert.doesNotMatch(content, /toolchain:/);
+  assert.match(content, /group: \$\{\{ github\.workflow \}\}-\$\{\{ github\.ref \}\}/);
+  assert.match(content, /cancel-in-progress: true/);
   assert.match(content, /bash \.\/scripts\/gate\.sh/);
   assert.match(content, /os: \["windows-latest"\]/);
   assert.doesNotMatch(content, /ubuntu-latest|macos-latest/);
 });
 
+test("ordinary CI templates cancel superseded runs on the same ref", () => {
+  const generic = renderAllLanes(FULL_MANIFEST, "/repos/widgets").ci;
+  assert.match(generic, /group: \$\{\{ github\.workflow \}\}-\$\{\{ github\.ref \}\}/);
+  assert.match(generic, /cancel-in-progress: true/);
+});
+
 test("rust-hybrid ci preserves a declared macOS-only lane", () => {
   const manifest = {
     ...FULL_MANIFEST,

package/templates/ci.yml

@@ -7,6 +7,9 @@ on:
     branches: [main]
 permissions:
   contents: read
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
 # F5 fix: `private-repo-guard` carries no job-level `if`, so it always runs.
 # Its one step's own `if` fires only when the repo is private, and `exit 1`
 # then fails the JOB (loud, visible, non-zero) rather than the previous

package/templates/profiles/rust-hybrid/ci.yml

@@ -7,6 +7,9 @@ on:
     branches: [main]
 permissions:
   contents: read
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
 jobs:
   private-repo-guard:
     runs-on: ubuntu-24.04