ci: drop full history fetch from lint and lockfile jobs

Biome, tsc and the i18n/lockfile scripts only read the working tree, so a shallow clone is enough. Also run checkout and Bun setup in parallel in update-issue-form for consistency.
ci(lint): move PR title validation to its own workflow
2026-07-05 20:12:51 +01:00 · 2026-07-05 15:11:21 +02:00 · 2026-07-05 15:10:59 +02:00 · 2026-07-05 15:10:34 +02:00 · 2026-07-05 03:22:49 +02:00 · 2026-07-05 03:22:42 +02:00
7 changed files with 331 additions and 291 deletions
--- a/.github/workflows/build-apps.yml
+++ b/.github/workflows/build-apps.yml
@@ -30,6 +30,7 @@ jobs:
      actions: write # dispatch artifact-comment.yml to refresh the PR comment

    steps:
+      - parallel:
          - name: 🗑️ Free Disk Space
            uses: BRAINSia/free-disk-space@7048ffbf50819342ac964ef3998a51c2564a8a75 # v2.1.3
            with:
@@ -56,19 +57,6 @@ jobs:
              # renovate: datasource=npm depName=bun
              bun-version: "1.3.14"

-      - name: 💾 Cache Bun dependencies
-        uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
-        with:
-          path: ~/.bun/install/cache
-          key: ${{ runner.os }}-${{ runner.arch }}-bun-${{ hashFiles('bun.lock') }}
-          restore-keys: |
-            ${{ runner.os }}-${{ runner.arch }}-bun-
-
-      - name: 📦 Install dependencies and reload submodules
-        run: |
-          bun install --frozen-lockfile
-          bun run submodule-reload
-
          - name: ☕ Set up JDK 17
            # ubuntu-26.04 defaults to JDK 25, which breaks the RN/AGP native build
            # (Kotlin falls back to JVM_23, the foojay toolchain + CMake configure
@@ -78,6 +66,15 @@ jobs:
              distribution: temurin
              java-version: "17"

+      - parallel:
+          - name: 💾 Cache Bun dependencies
+            uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+            with:
+              path: ~/.bun/install/cache
+              key: ${{ runner.os }}-${{ runner.arch }}-bun-${{ hashFiles('bun.lock') }}
+              restore-keys: |
+                ${{ runner.os }}-${{ runner.arch }}-bun-
+
          - name: 💾 Cache Gradle global
            uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
            with:
@@ -88,6 +85,11 @@ jobs:
              restore-keys: |
                ${{ runner.os }}-${{ runner.arch }}-gradle-

+      - name: 📦 Install dependencies and reload submodules
+        run: |
+          bun install --frozen-lockfile
+          bun run submodule-reload
+
      - name: 🛠️ Generate project files
        run: bun run prebuild

@@ -130,6 +132,7 @@ jobs:
      actions: write # dispatch artifact-comment.yml to refresh the PR comment

    steps:
+      - parallel:
          - name: 🗑️ Free Disk Space
            uses: BRAINSia/free-disk-space@7048ffbf50819342ac964ef3998a51c2564a8a75 # v2.1.3
            with:
@@ -156,19 +159,6 @@ jobs:
              # renovate: datasource=npm depName=bun
              bun-version: "1.3.14"

-      - name: 💾 Cache Bun dependencies
-        uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
-        with:
-          path: ~/.bun/install/cache
-          key: ${{ runner.os }}-${{ runner.arch }}-bun-${{ hashFiles('bun.lock') }}
-          restore-keys: |
-            ${{ runner.os }}-${{ runner.arch }}-bun-
-
-      - name: 📦 Install dependencies and reload submodules
-        run: |
-          bun install --frozen-lockfile
-          bun run submodule-reload
-
          - name: ☕ Set up JDK 17
            # ubuntu-26.04 defaults to JDK 25, which breaks the RN/AGP native build
            # (Kotlin falls back to JVM_23, the foojay toolchain + CMake configure
@@ -178,6 +168,15 @@ jobs:
              distribution: temurin
              java-version: "17"

+      - parallel:
+          - name: 💾 Cache Bun dependencies
+            uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+            with:
+              path: ~/.bun/install/cache
+              key: ${{ runner.os }}-${{ runner.arch }}-bun-${{ hashFiles('bun.lock') }}
+              restore-keys: |
+                ${{ runner.os }}-${{ runner.arch }}-bun-
+
          - name: 💾 Cache Gradle global
            uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
            with:
@@ -188,6 +187,11 @@ jobs:
              restore-keys: |
                ${{ runner.os }}-${{ runner.arch }}-gradle-

+      - name: 📦 Install dependencies and reload submodules
+        run: |
+          bun install --frozen-lockfile
+          bun run submodule-reload
+
      - name: 🛠️ Generate project files
        run: bun run prebuild:tv

@@ -229,6 +233,7 @@ jobs:
      actions: write # dispatch artifact-comment.yml to refresh the PR comment

    steps:
+      - parallel:
          - name: 📥 Checkout code
            uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
            with:
@@ -243,6 +248,19 @@ jobs:
              # renovate: datasource=npm depName=bun
              bun-version: "1.3.14"

+          - name: 🔧 Setup Xcode
+            uses: maxim-lobanov/setup-xcode@ed7a3b1fda3918c0306d1b724322adc0b8cc0a90 # v1
+            with:
+              # renovate: datasource=custom.xcode depName=xcode versioning=loose
+              xcode-version: "26.5"
+
+          - name: 🏗️ Setup EAS
+            uses: expo/expo-github-action@eab7a230208c952974db8c3245cfd78402c7b385 # main
+            with:
+              eas-version: latest
+              token: ${{ secrets.EXPO_TOKEN }}
+              eas-cache: true
+
      - name: 💾 Cache Bun dependencies
        uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
        with:
@@ -259,19 +277,6 @@ jobs:
      - name: 🛠️ Generate project files
        run: bun run prebuild

-      - name: 🔧 Setup Xcode
-        uses: maxim-lobanov/setup-xcode@ed7a3b1fda3918c0306d1b724322adc0b8cc0a90 # v1
-        with:
-          # renovate: datasource=custom.xcode depName=xcode versioning=loose
-          xcode-version: "26.5"
-
-      - name: 🏗️ Setup EAS
-        uses: expo/expo-github-action@eab7a230208c952974db8c3245cfd78402c7b385 # main
-        with:
-          eas-version: latest
-          token: ${{ secrets.EXPO_TOKEN }}
-          eas-cache: true
-
      - name: 🚀 Build iOS app
        env:
          EXPO_TV: 0
@@ -301,6 +306,7 @@ jobs:
      actions: write # dispatch artifact-comment.yml to refresh the PR comment

    steps:
+      - parallel:
          - name: 📥 Checkout code
            uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
            with:
@@ -315,6 +321,12 @@ jobs:
              # renovate: datasource=npm depName=bun
              bun-version: "1.3.14"

+          - name: 🔧 Setup Xcode
+            uses: maxim-lobanov/setup-xcode@ed7a3b1fda3918c0306d1b724322adc0b8cc0a90 # v1
+            with:
+              # renovate: datasource=custom.xcode depName=xcode versioning=loose
+              xcode-version: "26.5"
+
      - name: 💾 Cache Bun dependencies
        uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
        with:
@@ -331,12 +343,6 @@ jobs:
      - name: 🛠️ Generate project files
        run: bun run prebuild

-      - name: 🔧 Setup Xcode
-        uses: maxim-lobanov/setup-xcode@ed7a3b1fda3918c0306d1b724322adc0b8cc0a90 # v1
-        with:
-          # renovate: datasource=custom.xcode depName=xcode versioning=loose
-          xcode-version: "26.5"
-
      - name: 🚀 Build iOS app
        env:
          EXPO_TV: 0
@@ -368,6 +374,7 @@ jobs:
      actions: write # dispatch artifact-comment.yml to refresh the PR comment

    steps:
+      - parallel:
          - name: 📥 Checkout code
            uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
            with:
@@ -382,6 +389,19 @@ jobs:
              # renovate: datasource=npm depName=bun
              bun-version: "1.3.14"

+          - name: 🔧 Setup Xcode
+            uses: maxim-lobanov/setup-xcode@ed7a3b1fda3918c0306d1b724322adc0b8cc0a90 # v1
+            with:
+              # renovate: datasource=custom.xcode depName=xcode versioning=loose
+              xcode-version: "26.5"
+
+          - name: 🏗️ Setup EAS
+            uses: expo/expo-github-action@eab7a230208c952974db8c3245cfd78402c7b385 # main
+            with:
+              eas-version: latest
+              token: ${{ secrets.EXPO_TOKEN }}
+              eas-cache: true
+
      - name: 💾 Cache Bun dependencies
        uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
        with:
@@ -398,19 +418,6 @@ jobs:
      - name: 🛠️ Generate project files
        run: bun run prebuild:tv

-      - name: 🔧 Setup Xcode
-        uses: maxim-lobanov/setup-xcode@ed7a3b1fda3918c0306d1b724322adc0b8cc0a90 # v1
-        with:
-          # renovate: datasource=custom.xcode depName=xcode versioning=loose
-          xcode-version: "26.5"
-
-      - name: 🏗️ Setup EAS
-        uses: expo/expo-github-action@eab7a230208c952974db8c3245cfd78402c7b385 # main
-        with:
-          eas-version: latest
-          token: ${{ secrets.EXPO_TOKEN }}
-          eas-cache: true
-
      - name: 🚀 Build iOS app
        env:
          EXPO_TV: 1
@@ -438,6 +445,7 @@ jobs:
      actions: write # dispatch artifact-comment.yml to refresh the PR comment

    steps:
+      - parallel:
          - name: 📥 Checkout code
            uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
            with:
@@ -452,6 +460,12 @@ jobs:
              # renovate: datasource=npm depName=bun
              bun-version: "1.3.14"

+          - name: 🔧 Setup Xcode
+            uses: maxim-lobanov/setup-xcode@ed7a3b1fda3918c0306d1b724322adc0b8cc0a90 # v1
+            with:
+              # renovate: datasource=custom.xcode depName=xcode versioning=loose
+              xcode-version: "26.5"
+
      - name: 💾 Cache Bun dependencies
        uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
        with:
@@ -468,12 +482,6 @@ jobs:
      - name: 🛠️ Generate project files
        run: bun run prebuild:tv

-      - name: 🔧 Setup Xcode
-        uses: maxim-lobanov/setup-xcode@ed7a3b1fda3918c0306d1b724322adc0b8cc0a90 # v1
-        with:
-          # renovate: datasource=custom.xcode depName=xcode versioning=loose
-          xcode-version: "26.5"
-
      - name: 🚀 Build iOS app
        env:
          EXPO_TV: 1
--- a/.github/workflows/check-lockfile.yml
+++ b/.github/workflows/check-lockfile.yml
@@ -18,13 +18,13 @@ jobs:
      contents: read

    steps:
+      - parallel:
          - name: 📥 Checkout repository
            uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
            with:
              ref: ${{ github.event.pull_request.head.sha || github.sha }}
              show-progress: false
              submodules: recursive
-          fetch-depth: 0

          - name: 🍞 Setup Bun
            uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
--- a/.github/workflows/detect-duplicate.yml
+++ b/.github/workflows/detect-duplicate.yml
@@ -20,6 +20,7 @@ jobs:
      issues: write
      contents: read
    steps:
+      - parallel:
          - name: 📥 Checkout repository
            uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0

--- a/.github/workflows/linting.yml
+++ b/.github/workflows/linting.yml
@@ -2,7 +2,7 @@ name: 🚦 Security & Quality Gate

 on:
  pull_request:
-    types: [opened, edited, synchronize, reopened]
+    types: [opened, synchronize, reopened]
    branches: [develop, master]
  workflow_dispatch:
  push:
@@ -11,39 +11,11 @@ on:
 permissions:
  contents: read

+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
-  validate_pr_title:
-    name: "📝 Validate PR Title"
-    if: github.event_name == 'pull_request'
-    runs-on: ubuntu-26.04
-    permissions:
-      pull-requests: write
-      contents: read
-    steps:
-      - uses: amannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50 # v6.1.1
-        id: lint_pr_title
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-      - uses: marocchino/sticky-pull-request-comment@0ea0beb66eb9baf113663a64ec522f60e49231c0 # v3.0.4
-        if: always() && (steps.lint_pr_title.outputs.error_message != null)
-        with:
-          header: pr-title-lint-error
-          message: |
-            Hey there and thank you for opening this pull request! 👋🏼
-            We require pull request titles to follow the [Conventional Commits specification](https://www.conventionalcommits.org/en/v1.0.0/).
-
-            **Error details:**
-            ```
-            ${{ steps.lint_pr_title.outputs.error_message }}
-            ```
-
-      - if: ${{ steps.lint_pr_title.outputs.error_message == null }}
-        uses: marocchino/sticky-pull-request-comment@0ea0beb66eb9baf113663a64ec522f60e49231c0 # v3.0.4
-        with:
-          header: pr-title-lint-error
-          delete: true
-
  dependency-review:
    name: 🔍 Vulnerable Dependencies
    runs-on: ubuntu-26.04
@@ -67,12 +39,12 @@ jobs:
    name: 🚑 Expo Doctor Check
    runs-on: ubuntu-26.04
    steps:
+      - parallel:
          - name: 🛒 Checkout repository
            uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
            with:
              ref: ${{ github.event.pull_request.head.sha || github.sha }}
              submodules: recursive
-          fetch-depth: 0

          - name: 🍞 Setup Bun
            uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
@@ -80,6 +52,14 @@ jobs:
              # renovate: datasource=npm depName=bun
              bun-version: "1.3.14"

+      - name: 💾 Cache Bun dependencies
+        uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+        with:
+          path: ~/.bun/install/cache
+          key: ${{ runner.os }}-${{ runner.arch }}-bun-${{ hashFiles('bun.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-${{ runner.arch }}-bun-
+
      - name: 📦 Install dependencies (bun)
        run: bun install --frozen-lockfile

@@ -103,18 +83,12 @@ jobs:
          - "i18n:check"

    steps:
+      - parallel:
          - name: "📥 Checkout PR code"
            uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
            with:
              ref: ${{ github.event.pull_request.head.sha || github.sha }}
              submodules: recursive
-          fetch-depth: 0
-
-      - name: "🟢 Setup Node.js"
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
-        with:
-          # renovate: datasource=node-version depName=node versioning=node
-          node-version: "24.18.0"

          - name: "🍞 Setup Bun"
            uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
@@ -122,6 +96,14 @@ jobs:
              # renovate: datasource=npm depName=bun
              bun-version: "1.3.14"

+      - name: 💾 Cache Bun dependencies
+        uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+        with:
+          path: ~/.bun/install/cache
+          key: ${{ runner.os }}-${{ runner.arch }}-bun-${{ hashFiles('bun.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-${{ runner.arch }}-bun-
+
      - name: "📦 Install dependencies"
        run: bun install --frozen-lockfile

--- a/.github/workflows/pr-title.yml
+++ b/.github/workflows/pr-title.yml
@@ -0,0 +1,45 @@
+name: 📝 PR Title
+
+on:
+  pull_request:
+    types: [opened, edited, synchronize, reopened]
+    branches: [develop, master]
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  validate_pr_title:
+    name: "📝 Validate PR Title"
+    runs-on: ubuntu-26.04
+    permissions:
+      pull-requests: write
+      contents: read
+    steps:
+      - uses: amannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50 # v6.1.1
+        id: lint_pr_title
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - uses: marocchino/sticky-pull-request-comment@0ea0beb66eb9baf113663a64ec522f60e49231c0 # v3.0.4
+        if: always() && (steps.lint_pr_title.outputs.error_message != null)
+        with:
+          header: pr-title-lint-error
+          message: |
+            Hey there and thank you for opening this pull request! 👋🏼
+            We require pull request titles to follow the [Conventional Commits specification](https://www.conventionalcommits.org/en/v1.0.0/).
+
+            **Error details:**
+            ```
+            ${{ steps.lint_pr_title.outputs.error_message }}
+            ```
+
+      - if: ${{ steps.lint_pr_title.outputs.error_message == null }}
+        uses: marocchino/sticky-pull-request-comment@0ea0beb66eb9baf113663a64ec522f60e49231c0 # v3.0.4
+        with:
+          header: pr-title-lint-error
+          delete: true
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -13,6 +13,8 @@ name: 🚀 Release (EAS build + submit)
 concurrency:
  group: release-${{ github.ref }}
  cancel-in-progress: false
+  # Queue successive releases in order instead of dropping the extra pending run.
+  queue: max

 on:
  push:
@@ -63,6 +65,7 @@ jobs:
            artifact_name: streamyfin-android-tv-apk

    steps:
+      - parallel:
          - name: 📥 Checkout code
            uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
            with:
@@ -76,6 +79,13 @@ jobs:
              # renovate: datasource=npm depName=bun
              bun-version: "1.3.14"

+          - name: 🏗️ Setup EAS
+            uses: expo/expo-github-action@eab7a230208c952974db8c3245cfd78402c7b385 # main
+            with:
+              eas-version: latest
+              token: ${{ secrets.EXPO_TOKEN }}
+              eas-cache: true
+
      - name: 💾 Cache Bun dependencies
        uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
        with:
@@ -89,13 +99,6 @@ jobs:
          bun install --frozen-lockfile
          bun run submodule-reload

-      - name: 🏗️ Setup EAS
-        uses: expo/expo-github-action@eab7a230208c952974db8c3245cfd78402c7b385 # main
-        with:
-          eas-version: latest
-          token: ${{ secrets.EXPO_TOKEN }}
-          eas-cache: true
-
      # tvOS uses credentialsSource: local — restore the gitignored
      # credentials.json + cert + provisioning profiles from secrets.
      - name: 🔐 Restore tvOS signing credentials
--- a/.github/workflows/update-issue-form.yml
+++ b/.github/workflows/update-issue-form.yml
@@ -25,6 +25,7 @@ jobs:
      contents: write
      pull-requests: write
    steps:
+      - parallel:
          - name: 📥 Checkout repository
            uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
            with:
Author	SHA1	Message	Date
Gauvain	c54131307c	ci: drop full history fetch from lint and lockfile jobs Biome, tsc and the i18n/lockfile scripts only read the working tree, so a shallow clone is enough. Also run checkout and Bun setup in parallel in update-issue-form for consistency.	2026-07-05 15:11:21 +02:00
Gauvain	2df9d37f34	ci(lint): move PR title validation to its own workflow Job-level 'edited' skips left matrix checks with an unexpanded ${{ matrix.command }} name and required checks stuck in Expected. Filtering at the trigger level removes the phantom run entirely: title edits now only run the PR title check.	2026-07-05 15:10:59 +02:00
Gauvain	b211b2356c	ci: restore main branch comments on expo-github-action pins	2026-07-05 15:10:34 +02:00
Gauvain	211657b042	ci(lint): stop re-running heavy jobs on PR title edits The quality gate ran its full matrix on every PR edit event even though title/body edits cannot change the code: only validate_pr_title needs them. Gate the heavy jobs on action != 'edited', add the missing concurrency group (Renovate PRs currently run the whole gate twice per commit), cache Bun dependencies like the other workflows, drop the unused setup-node step, and run checkout/Bun setup in parallel.	2026-07-05 03:22:49 +02:00
Gauvain	1b51342888	ci: run independent setup steps in parallel Use the GitHub Actions parallel-steps feature (2026-06-25) to group setup steps with no dependency between them: checkout, toolchains (Bun/JDK/Xcode), the EAS CLI install and the disk-space cleanup now run concurrently, and the Bun/Gradle cache restores overlap. On the iOS jobs, Xcode/EAS setup previously ran after the ~2 min prebuild despite not needing it. Also in release.yml: queue successive release runs in order (queue: max) instead of dropping the extra pending run, and fix the expo-github-action pin comment (the pinned SHA is tag v9.0.0, not main).	2026-07-05 03:22:42 +02:00