fix(ci): close docs-deploy freshness race, add test for freshness gate

Queue instead of cancel in the docs-deploy concurrency group so a stale
run that already passed check-freshness can never kill a fresher run's
in-progress deploy before skipping itself as stale. Also extract the
freshness-check shell logic into a standalone, tested script so the
dispatch-bypass and output contract can't regress silently.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
rusackas
2026-08-03 22:59:09 -07:00
co-authored by Claude Opus 4.8
parent f4b89b6d0d
commit eceb7e2355
4 changed files with 179 additions and 31 deletions
@@ -45,5 +45,8 @@ jobs:
- name: Run Script
run: bash .github/workflows/github-action-validator.sh
- name: Test docs-deploy freshness gate
run: bash .github/workflows/scripts/check-docs-deploy-freshness.test.sh
- name: Check for security issues on GHA workflows
uses: zizmorcore/zizmor-action@6599ee8b7a49aef6a770f63d261d214911a7ce02 # v0.6.0