ci: improvements

Author: evansims

.github/workflows/canary.yml

@@ -32,7 +32,7 @@ env:
 jobs:
   # Compute canary version from release-please manifest
   version:
-    name: Compute Version
+    name: Version
     runs-on: ubuntu-latest
     outputs:
       version: ${{ steps.version.outputs.version }}
@@ -65,7 +65,7 @@ jobs:
 
   # Create GitHub pre-release
   create-release:
-    name: Create Pre-Release
+    name: Release
     needs: version
     runs-on: ubuntu-latest
     permissions:
@@ -107,7 +107,7 @@ jobs:
 
   # Build release binaries for multiple platforms
   build-binaries:
-    name: Build Binaries (${{ matrix.target }})
+    name: Build (${{ matrix.target }})
     needs: [version, create-release]
     runs-on: ${{ matrix.os }}
     permissions:
@@ -213,7 +213,7 @@ jobs:
 
   # Build and push Docker images
   build-docker:
-    name: Build Docker (${{ matrix.platform }})
+    name: Docker (${{ matrix.platform }})
     needs: [version, create-release]
     strategy:
       fail-fast: false
@@ -284,7 +284,7 @@ jobs:
 
   # Merge platform-specific images into multi-arch manifest
   merge-docker:
-    name: Create Multi-Arch Manifest
+    name: Docker Manifest
     runs-on: ubuntu-latest
     needs: [version, build-docker]
     steps:
@@ -331,7 +331,7 @@ jobs:
 
   # Generate SBOM for Docker image
   sbom-docker:
-    name: Generate Docker SBOM
+    name: Docker SBOM
     runs-on: ubuntu-latest
     needs: [version, merge-docker]
     steps:

.github/workflows/ci.yml

@@ -29,7 +29,7 @@ env:
 jobs:
   # Validate conventional commit messages
   commits:
-    name: Commit Messages
+    name: Commits
     runs-on: ubuntu-latest
     # Only run on pull requests - push to main is already validated
     if: github.event_name == 'pull_request'
@@ -68,7 +68,7 @@ jobs:
 
   # Check code formatting
   fmt:
-    name: Formatting
+    name: Format
     runs-on: ubuntu-latest
     steps:
       - name: Harden the runner (Audit all outbound calls)
@@ -126,7 +126,7 @@ jobs:
 
   # Check for unused dependencies
   udeps:
-    name: Unused Dependencies
+    name: Dependencies
     runs-on: ubuntu-latest
     env:
       RUSTFLAGS: "-C codegen-units=16 -C link-arg=-fuse-ld=mold"
@@ -258,7 +258,7 @@ jobs:
 
   # Code coverage (nightly only to reduce CI costs)
   coverage:
-    name: Code Coverage
+    name: Coverage
     needs: test
     runs-on: ubuntu-latest
     if: github.event_name == 'schedule'
@@ -314,7 +314,7 @@ jobs:
 
   # Build documentation
   docs:
-    name: Documentation
+    name: Docs
     runs-on: ubuntu-latest
     env:
       RUSTFLAGS: "-C codegen-units=16 -C link-arg=-fuse-ld=mold"
@@ -351,7 +351,7 @@ jobs:
 
   # Overall status check
   ci-success:
-    name: CI Success
+    name: Status
     needs: [commits, fmt, clippy, udeps, msrv, test, coverage, docs]
     runs-on: ubuntu-latest
     if: always()

.github/workflows/cleanup.yml

@@ -13,7 +13,7 @@ permissions:
 
 jobs:
   cleanup:
-    name: Cleanup Old Pre-releases
+    name: Cleanup
     runs-on: ubuntu-latest
     steps:
       - name: Harden the runner (Audit all outbound calls)

.github/workflows/codeql.yml

@@ -19,7 +19,7 @@ permissions:
 
 jobs:
   changes:
-    name: Detect Changes
+    name: Changes
     runs-on: ubuntu-latest
     if: github.actor != 'dependabot[bot]'
     permissions:
@@ -49,8 +49,8 @@ jobs:
             actions:
               - '.github/workflows/**'
 
-  analyze-rust:
-    name: Analyze Rust
+  rust:
+    name: Rust
     needs: changes
     if: needs.changes.outputs.rust == 'true'
     runs-on: ubuntu-latest
@@ -77,8 +77,8 @@ jobs:
         with:
           category: "/language:rust"
 
-  analyze-actions:
-    name: Analyze Actions
+  actions:
+    name: Actions
     needs: changes
     if: needs.changes.outputs.actions == 'true'
     runs-on: ubuntu-latest

.github/workflows/container.yml

@@ -118,8 +118,8 @@ jobs:
           retention-days: 1
 
   # Merge platform-specific images into multi-arch manifest
-  merge:
-    name: Create Multi-Arch Manifest
+  manifest:
+    name: Manifest
     runs-on: ubuntu-latest
     needs: build
     if: github.event_name != 'pull_request'
@@ -177,9 +177,9 @@ jobs:
 
   # Generate SBOM after manifest is created
   sbom:
-    name: Generate SBOM
+    name: SBOM
     runs-on: ubuntu-latest
-    needs: merge
+    needs: manifest
     if: github.event_name != 'pull_request'
     steps:
       - name: Harden the runner (Audit all outbound calls)
@@ -218,8 +218,8 @@ jobs:
 
   # Scan container for vulnerabilities
   scan:
-    name: Scan Container
-    needs: merge
+    name: Scan
+    needs: manifest
     runs-on: ubuntu-latest
     if: github.event_name != 'pull_request'
     permissions:

.github/workflows/nightly-release.yml .github/workflows/nightly.yml.github/workflows/nightly-release.yml renamed to .github/workflows/nightly.yml

@@ -1,6 +1,6 @@
 # yaml-language-server: $schema=https://www.schemastore.org/github-workflow.json
 
-name: Nightly Release
+name: Nightly
 
 on:
   schedule:
@@ -25,7 +25,7 @@ env:
 jobs:
   # Check if there are changes since the last nightly
   check-changes:
-    name: Check for Changes
+    name: Changes
     runs-on: ubuntu-latest
     outputs:
       should_run: ${{ steps.check.outputs.should_run }}
@@ -76,7 +76,7 @@ jobs:
 
   # Compute nightly version from release-please manifest
   version:
-    name: Compute Version
+    name: Version
     needs: check-changes
     if: needs.check-changes.outputs.should_run == 'true'
     runs-on: ubuntu-latest
@@ -111,7 +111,7 @@ jobs:
 
   # Create GitHub pre-release
   create-release:
-    name: Create Pre-Release
+    name: Release
     needs: version
     runs-on: ubuntu-latest
     permissions:
@@ -154,7 +154,7 @@ jobs:
 
   # Build release binaries for multiple platforms
   build-binaries:
-    name: Build Binaries (${{ matrix.target }})
+    name: Build (${{ matrix.target }})
     needs: [version, create-release]
     runs-on: ${{ matrix.os }}
     permissions:
@@ -260,7 +260,7 @@ jobs:
 
   # Build and push Docker images
   build-docker:
-    name: Build Docker (${{ matrix.platform }})
+    name: Docker (${{ matrix.platform }})
     needs: [version, create-release]
     strategy:
       fail-fast: false
@@ -331,7 +331,7 @@ jobs:
 
   # Merge platform-specific images into multi-arch manifest
   merge-docker:
-    name: Create Multi-Arch Manifest
+    name: Docker Manifest
     runs-on: ubuntu-latest
     needs: [version, build-docker]
     steps:
@@ -378,7 +378,7 @@ jobs:
 
   # Generate SBOM for Docker image
   sbom-docker:
-    name: Generate Docker SBOM
+    name: Docker SBOM
     runs-on: ubuntu-latest
     needs: [version, merge-docker]
     steps:
@@ -413,7 +413,7 @@ jobs:
 
   # Cleanup old nightly releases (keep last 7)
   cleanup:
-    name: Cleanup Old Nightlies
+    name: Cleanup
     runs-on: ubuntu-latest
     needs: [sbom-docker]
     steps:

.github/workflows/pr-title.yml

@@ -10,8 +10,8 @@ permissions:
   pull-requests: write
 
 jobs:
-  normalize-bot-titles:
-    name: Normalize Bot PR Titles
+  normalize:
+    name: Normalize
     runs-on: ubuntu-latest
     # Only run for bot PRs with non-conventional titles
     if: >

.github/workflows/release-please.yml

@@ -40,7 +40,7 @@ jobs:
 
   # Trigger stable release workflow when release-please creates a release
   release:
-    name: Trigger Release
+    name: Release
     needs: release-please
     if: ${{ needs.release-please.outputs.release_created == 'true' }}
     uses: ./.github/workflows/release.yml

.github/workflows/release.yml

@@ -36,7 +36,7 @@ env:
 jobs:
   # Determine version from trigger source
   prepare:
-    name: Prepare Release
+    name: Prepare
     runs-on: ubuntu-latest
     outputs:
       version: ${{ steps.version.outputs.version }}
@@ -70,7 +70,7 @@ jobs:
 
   # Create GitHub release (only for workflow_dispatch; release-please creates its own)
   create-release:
-    name: Create Release
+    name: Release
     needs: prepare
     runs-on: ubuntu-latest
     if: github.event_name == 'workflow_dispatch'
@@ -92,7 +92,7 @@ jobs:
 
   # Build release binaries for multiple platforms
   build-binaries:
-    name: Build Binaries (${{ matrix.target }})
+    name: Build (${{ matrix.target }})
     needs: prepare
     runs-on: ${{ matrix.os }}
     permissions:
@@ -211,7 +211,7 @@ jobs:
 
   # Aggregate hashes for SLSA provenance
   aggregate-hashes:
-    name: Aggregate Hashes
+    name: Hashes
     needs: [prepare, build-binaries]
     runs-on: ubuntu-latest
     outputs:
@@ -239,7 +239,7 @@ jobs:
 
   # Generate SLSA provenance for binaries
   provenance:
-    name: Generate SLSA Provenance
+    name: Provenance
     needs: [prepare, build-binaries, aggregate-hashes]
     permissions:
       actions: read
@@ -253,7 +253,7 @@ jobs:
 
   # Build and push Docker images to both Docker Hub and GitHub Container Registry
   build-docker:
-    name: Build Docker (${{ matrix.platform }})
+    name: Docker (${{ matrix.platform }})
     needs: prepare
     strategy:
       fail-fast: false
@@ -323,7 +323,7 @@ jobs:
 
   # Merge platform-specific images into multi-arch manifest and push to both registries
   merge-docker:
-    name: Create Multi-Arch Manifest
+    name: Docker Manifest
     runs-on: ubuntu-latest
     needs: [prepare, build-docker]
     permissions:
@@ -414,7 +414,7 @@ jobs:
 
   # Generate SBOM for Docker image
   sbom-docker:
-    name: Generate Docker SBOM
+    name: Docker SBOM
     runs-on: ubuntu-latest
     needs: [prepare, merge-docker]
     permissions:
@@ -454,7 +454,7 @@ jobs:
 
   # Publish crates to crates.io
   publish-crates:
-    name: Publish to crates.io
+    name: Publish
     needs: [prepare, build-binaries]
     runs-on: ubuntu-latest
     environment: release