fix: apply GitHub Actions workflow improvements and fixes

Author: d-oit

.github/workflows/auto-fix.yml

@@ -3,7 +3,6 @@ name: Auto-fix Code Quality Issues
 # Least privilege permissions for auto-fix
 permissions:
   contents: write
-  pull-requests: write
 
 on:
   push:
@@ -19,6 +18,7 @@ jobs:
   auto-fix:
     name: Auto-fix Formatting and Clippy Issues
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     if: ${{ !contains(github.event.head_commit.message, '[skip auto-fix]') }}
 
     steps:
@@ -28,7 +28,7 @@ jobs:
         fetch-depth: 0
 
     - name: Install Rust
-      uses: dtolnay/rust-toolchain@5d458579430fc14a04a08a1e7d3694f545e91ce6
+      uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9
       with:
         components: rustfmt, clippy
 
@@ -87,15 +87,13 @@ jobs:
           git add .
 
           # Create detailed commit message
-          FORMAT_NEEDED="${FORMAT_NEEDED_VAR}"
-          CLIPPY_NEEDED="${CLIPPY_NEEDED_VAR}"
           COMMIT_MSG="auto-fix: apply code quality fixes [skip auto-fix]"
-          if [ "$FORMAT_NEEDED" = "true" ]; then
+          if [ "$FORMAT_NEEDED_VAR" = "true" ]; then
             COMMIT_MSG="$COMMIT_MSG
 
         - Apply cargo fmt formatting"
           fi
-          if [ "$CLIPPY_NEEDED" = "true" ]; then
+          if [ "$CLIPPY_NEEDED_VAR" = "true" ]; then
             COMMIT_MSG="$COMMIT_MSG
 
         - Apply clippy suggestions"

.github/workflows/changelog-sync.yml

@@ -12,17 +12,19 @@ on:
         default: false
 
 concurrency:
-  group: changelog-sync-${{ github.ref || 'workflow-dispatch' }}
+  group: changelog-sync-${{ github.ref_name || github.event.repository.default_branch || 'main' }}
   cancel-in-progress: false
 
 permissions:
   contents: write
   pull-requests: write
+  actions: write
 
 jobs:
   sync-changelog:
     name: Sync Changelog with Releases
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     steps:
     - name: Checkout code
       uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
@@ -51,7 +53,7 @@ jobs:
           echo "Version $VERSION already exists in changelog, updating..."
           
             # Extract the current entry and replace it
-            python3 << 'EOF'
+          python3 << EOF
             import re
             import sys
             
@@ -146,7 +148,7 @@ jobs:
           echo "Adding new version $VERSION to changelog..."
           
           # Add new entry after [Unreleased] section
-          python3 << 'EOF'
+                python3 << EOF
           import re
           
           tag_name = "$TAG_NAME"
@@ -199,7 +201,7 @@ jobs:
               echo "Adding $version to changelog..."
               
               # Add basic entry (detailed sync will happen on next release event)
-               python3 << 'EOF'
+            python3 << EOF
                import re
                
                version = "$version"
@@ -267,6 +269,7 @@ jobs:
     name: Update Release Descriptions
     runs-on: ubuntu-latest
     needs: sync-changelog
+    timeout-minutes: 15
     if: github.event_name == 'workflow_dispatch' && github.event.inputs.sync_all == 'true'
     steps:
     - name: Checkout code

.github/workflows/docs.yml

@@ -86,10 +86,18 @@ jobs:
     steps:
     - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
 
-    - name: Install Rust
-      uses: dtolnay/rust-toolchain@5d458579430fc14a04a08a1e7d3694f545e91ce6
+     - name: Install Rust
+       uses: dtolnay/rust-toolchain@5d458579430fc14a04a08a1e7d3694f545e91ce6
+
+     - name: Cache cargo registry
+       uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830
+       with:
+         path: |
+           ~/.cargo/registry
+           ~/.cargo/git
+         key: ${{ runner.os }}-cargo-docs-${{ hashFiles('**/Cargo.lock') }}
 
-    - name: Check documentation
+     - name: Check documentation
       run: cargo doc --no-deps --workspace --document-private-items
 
     - name: Comment on PR if docs issues

.github/workflows/enhanced-ci.yml

@@ -10,10 +10,8 @@ on:
   pull_request:
     branches: [main, develop]
   schedule:
-    # Weekly on Sunday at 2 AM UTC for security scans
-      - cron: '0 2 * * 0'
-    # Weekly on Monday at 2 AM UTC for performance benchmarks
-      - cron: '0 2 * * 1'
+    - cron: '0 2 * * 0'  # Weekly on Sunday at 2 AM UTC for security scans
+    - cron: '0 2 * * 1'  # Weekly on Monday at 2 AM UTC for performance benchmarks
   workflow_dispatch:
 
 # Concurrency controls to prevent overlapping runs
@@ -556,8 +554,8 @@ jobs:
       - name: Check documentation
         run: |
           if [ ! -d "target/doc" ]; then
-        echo "❌ Documentation build failed"
-        exit 1
+            echo "❌ Documentation build failed"
+            exit 1
           fi
           echo "✅ Documentation built successfully"
 
@@ -588,16 +586,16 @@ jobs:
         uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b
         with:
           script: |
-        github.rest.issues.createComment({
-          issue_number: context.issue.number,
-          owner: context.repo.owner,
-          repo: context.repo.repo,
-          body: '🚨 **Code Review Issues Detected**\n\n' +
-            'Clippy found warnings or errors that need to be addressed:\n\n' +
-            '```bash\ncargo clippy --all-targets --all-features -- -D warnings\n```\n\n' +
-            'Please fix these issues before merging. You can run:\n' +
-            '```bash\ncargo clippy --fix --allow-dirty\n```'
-        })
+            github.rest.issues.createComment({
+              issue_number: context.issue.number,
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              body: '🚨 **Code Review Issues Detected**\n\n' +
+                'Clippy found warnings or errors that need to be addressed:\n\n' +
+                '```bash\ncargo clippy --all-targets --all-features -- -D warnings\n```\n\n' +
+                'Please fix these issues before merging. You can run:\n' +
+                '```bash\ncargo clippy --fix --allow-dirty\n```'
+            })
 
   # Final CI status aggregation
   ci-complete:

.github/workflows/monitor.yml

@@ -17,18 +17,22 @@ concurrency:
   cancel-in-progress: false
 
 jobs:
-  monitor:
-    runs-on: ubuntu-latest
-    permissions:
-      issues: write
-      contents: read
-      actions: read
-      security-events: write
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955
+   monitor:
+     runs-on: ubuntu-latest
+     timeout-minutes: 10
+     permissions:
+       issues: write
+       contents: read
+       actions: read
+       security-events: write
+     steps:
+       - name: Checkout repository
+         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
 
-      - name: List recent workflow runs
+       - name: Install jq
+         run: sudo apt-get update && sudo apt-get install -y jq
+
+       - name: List recent workflow runs
         run: |
           # Calculate date 24 hours ago in ISO 8601 format
           since=$(date -u -d '24 hours ago' +%Y-%m-%dT%H:%M:%SZ)
@@ -54,8 +58,8 @@ jobs:
 
       - name: Check for failures in monitored workflows
         run: |
-          # Define monitored workflows (without .yml extension)
-          workflows=("Auto-fix Code Quality Issues" "CI" "Deploy Docs" "Release Build")
+           # Define monitored workflows (without .yml extension)
+           workflows=("Auto-fix Code Quality Issues" "Enhanced CI/CD" "Deploy Docs" "Release Management")
           
           failures=()