From 036e871da72422f7016bf01681b2c1b6e49a32c2 Mon Sep 17 00:00:00 2001
From: caigee-cmd <210803857+caigee-cmd@users.noreply.github.com>
Date: Tue, 20 Oct 2026 09:42:05 +0800
Subject: [PATCH] =?UTF-8?q?ci:=20=E6=94=B6=E7=B4=A7=E6=9D=83=E9=99=90?=
 =?UTF-8?q?=E3=80=81=E5=B9=B6=E5=8F=91=E5=8F=96=E6=B6=88=E3=80=81=E8=B6=85?=
 =?UTF-8?q?=E6=97=B6=EF=BC=8C=E5=B9=B6=E6=A0=A1=E9=AA=8C=E5=86=85=E5=B5=8C?=
 =?UTF-8?q?=E5=89=8D=E7=AB=AF=E4=BA=A7=E7=89=A9?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/ci.yml | 18 +++++++++++++++++-
 1 file changed, 17 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2700edec..214bbb59 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -5,8 +5,16 @@ on:
     branches: [main]
   pull_request:
 
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
 jobs:
   go:
+    timeout-minutes: 30
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -27,6 +35,7 @@ jobs:
         run: ./scripts/build-updater-assets.sh "$RUNNER_TEMP/updater-assets"
 
   windows-host:
+    timeout-minutes: 30
     runs-on: windows-latest
     steps:
       - uses: actions/checkout@v4
@@ -61,6 +70,7 @@ jobs:
           if ($Failed) { exit 1 }
 
   worker:
+    timeout-minutes: 15
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -71,6 +81,7 @@ jobs:
         working-directory: worker
 
   frontend:
+    timeout-minutes: 15
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -83,10 +94,14 @@ jobs:
         working-directory: frontend
       - run: npm run lint
         working-directory: frontend
-      - run: npm run build
+      - name: Build and sync embedded console assets
+        run: npm run sync
         working-directory: frontend
+      - name: Check internal/webui/static is up to date
+        run: git diff --exit-code --stat internal/webui/static && test -z "$(git status --porcelain internal/webui/static)"
 
   container:
+    timeout-minutes: 30
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -108,6 +123,7 @@ jobs:
           cache-to: type=gha,mode=max
 
   secrets:
+    timeout-minutes: 15
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4