ci: set job timeouts (#3366)

Signed-off-by: Alexander Droste <[email protected]>

Author: 0ax1

.github/workflows/bench-pr.yml

@@ -18,6 +18,7 @@ permissions:
 jobs:
   label_trigger:
     runs-on: ubuntu-latest
+    timeout-minutes: 120
     if: ${{ contains(github.event.head_commit.message, '[benchmark]') || github.event.label.name == 'benchmark' && github.event_name == 'pull_request' }}
     steps:
       # We remove the benchmark label first so that the workflow can be re-triggered.
@@ -27,6 +28,7 @@ jobs:
 
   build-duckdb:
     needs: label_trigger
+    timeout-minutes: 120
     runs-on:
       - runs-on=${{ github.run_id }}
       - family=c6id.8xlarge
@@ -63,6 +65,7 @@ jobs:
 
   bench:
     needs: build-duckdb
+    timeout-minutes: 120
     runs-on:
       - runs-on=${{ github.run_id }}
       - family=c6id.8xlarge

.github/workflows/bench.yml

@@ -16,6 +16,7 @@ permissions:
 jobs:
   commit-metadata:
     runs-on: ubuntu-latest
+    timeout-minutes: 120
     steps:
       - uses: actions/checkout@v4
         with:
@@ -35,6 +36,7 @@ jobs:
           bash scripts/cat-s3.sh vortex-benchmark-results-database commits.json new-commit.json
 
   build-duckdb:
+    timeout-minutes: 120
     runs-on:
       - runs-on=${{ github.run_id }}
       - family=c6id.8xlarge
@@ -71,6 +73,7 @@ jobs:
 
   bench:
     needs: build-duckdb
+    timeout-minutes: 120
     runs-on:
       - runs-on=${{ github.run_id }}
       - family=c6id.8xlarge

.github/workflows/ci.yml

@@ -23,12 +23,14 @@ env:
 jobs:
   lint-toml:
     runs-on: ubuntu-latest
+    timeout-minutes: 120
     steps:
       - uses: actions/checkout@v4
       - uses: spiraldb/actions/.github/actions/[email protected]
 
   validate-workflow-yaml:
     runs-on: ubuntu-latest
+    timeout-minutes: 120
     steps:
       - uses: actions/checkout@v4
         with:
@@ -44,6 +46,7 @@ jobs:
   python-lint:
     name: "Python (lint)"
     runs-on: ubuntu-latest
+    timeout-minutes: 120
     steps:
       - uses: actions/checkout@v4
         with:
@@ -60,6 +63,7 @@ jobs:
   python-test:
     name: "Python (test)"
     runs-on: ubuntu-latest
+    timeout-minutes: 120
     env:
       RUST_LOG: "info,uv=debug"
     steps:
@@ -120,6 +124,7 @@ jobs:
 
   rust-docs:
     name: "Rust (docs)"
+    timeout-minutes: 120
     runs-on:
       - runs-on=${{ github.run_id }}
       - family=m7i+m7i-flex+m7a
@@ -139,6 +144,7 @@ jobs:
 
   build-rust:
     name: "Rust build (${{matrix.config.name}})"
+    timeout-minutes: 120
     runs-on:
       - runs-on=${{ github.run_id }}
       - family=m7i+m7i-flex+m7a
@@ -191,6 +197,7 @@ jobs:
 
   build-duckdb:
     name: "DuckDB extension build"
+    timeout-minutes: 120
     runs-on:
       - runs-on=${{ github.run_id }}
       - family=m7i+m7i-flex+m7a
@@ -220,6 +227,7 @@ jobs:
 
   check-min-deps:
     name: "Check build with minimal dependencies"
+    timeout-minutes: 120
     runs-on:
       - runs-on=${{ github.run_id }}
       - family=m7i+m7i-flex+m7a
@@ -239,6 +247,7 @@ jobs:
 
   rust-lint:
     name: "Rust (lint)"
+    timeout-minutes: 120
     runs-on:
       - runs-on=${{ github.run_id }}
       - family=m7i+m7i-flex+m7a
@@ -262,6 +271,7 @@ jobs:
 
   rust-lint-no-default:
     name: "Rust (lint, no default)"
+    timeout-minutes: 120
     runs-on:
       - runs-on=${{ github.run_id }}
       - family=m7i+m7i-flex+m7a
@@ -284,6 +294,7 @@ jobs:
 
   rust-test:
     name: "Rust (tests)"
+    timeout-minutes: 120
     runs-on:
       - runs-on=${{ github.run_id }}
       - family=m7i+m7i-flex+m7a
@@ -338,6 +349,7 @@ jobs:
   build-java:
     name: "Java"
     runs-on: ubuntu-latest
+    timeout-minutes: 120
     steps:
       - name: Checkout sources
         uses: actions/checkout@v4
@@ -352,6 +364,7 @@ jobs:
 
   bench-codspeed:
     name: Benchmark with Codspeed
+    timeout-minutes: 120
     runs-on:
       - runs-on=${{ github.run_id }}
       - family=c6id.8xlarge
@@ -393,6 +406,7 @@ jobs:
   license-check-and-audit-check:
     name: License Check and Audit Check
     runs-on: ubuntu-latest
+    timeout-minutes: 120
     strategy:
       matrix:
         checks:
@@ -411,6 +425,7 @@ jobs:
   wasm-integration:
     name: "wasm-integration"
     runs-on: ubuntu-latest
+    timeout-minutes: 120
     steps:
       - uses: rui314/setup-mold@v1
       - uses: actions/checkout@v4
@@ -427,6 +442,7 @@ jobs:
   miri:
     name: "miri"
     runs-on: ubuntu-latest
+    timeout-minutes: 120
     env:
       MIRIFLAGS: -Zmiri-strict-provenance -Zmiri-symbolic-alignment-check -Zmiri-backtrace=full -Zmiri-disable-isolation
       RUSTFLAGS: "-A warnings"
@@ -449,6 +465,7 @@ jobs:
   generated-files:
     name: "Check generated proto/fbs files are up to date"
     runs-on: ubuntu-latest
+    timeout-minutes: 120
     steps:
       - uses: actions/checkout@v4
         with:

.github/workflows/docs.yml

@@ -14,6 +14,7 @@ permissions:
 jobs:
   build:
     runs-on: ubuntu-latest
+    timeout-minutes: 120
     steps:
       - uses: actions/checkout@v4
         with:
@@ -38,6 +39,7 @@ jobs:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}
     runs-on: ubuntu-latest
+    timeout-minutes: 120
     needs: build
     steps:
       # Note, since we provide the job with a CloudFlare scoped API token, we run it in a separate job that doesn't

.github/workflows/fuzz.yml

@@ -8,6 +8,7 @@ on:
 jobs:
   io_fuzz:
     name: 'IO Fuzz'
+    timeout-minutes: 180
     runs-on:
       - runs-on=${{ github.run_id }}
       - family=c7i.4xlarge
@@ -54,6 +55,7 @@ jobs:
 
   ops_fuzz:
     name: 'Array Operations Fuzz'
+    timeout-minutes: 180
     runs-on:
       - runs-on=${{ github.run_id }}
       - family=c7i.4xlarge

.github/workflows/generate-benchmarks-s3.yml

@@ -16,6 +16,7 @@ permissions:
 jobs:
   generate_files:
     name: Generate S3 TPCH and clickbench files
+    timeout-minutes: 120
     runs-on:
       - runs-on=${{ github.run_id }}
       - family=m7i.2xlarge

.github/workflows/publish.yml

@@ -10,6 +10,7 @@ on:
 jobs:
   publish-rust:
     runs-on: ubuntu-latest
+    timeout-minutes: 120
     needs: [ prepare-python, prepare-java ]
     steps:
       - uses: actions/checkout@v4
@@ -41,6 +42,7 @@ jobs:
 
   prepare-python:
     runs-on: ${{ matrix.target.runs-on }}
+    timeout-minutes: 120
     strategy:
       fail-fast: false
       matrix:
@@ -104,6 +106,7 @@ jobs:
   publish-python:
     needs: [ prepare-python, publish-rust ]
     runs-on: ubuntu-latest
+    timeout-minutes: 120
     permissions:
       id-token: write  # IMPORTANT: mandatory for trusted publishing
     environment:
@@ -128,6 +131,7 @@ jobs:
 
   prepare-java:
     runs-on: ${{ matrix.target.runs-on }}
+    timeout-minutes: 120
     strategy:
       fail-fast: false
       matrix:
@@ -155,6 +159,7 @@ jobs:
   publish-java:
     needs: [ prepare-java, publish-rust ]
     runs-on: ubuntu-latest
+    timeout-minutes: 120
     env:
       # Picked up by gradle-git-version
       GIT_VERSION: ${{ github.event.release.tag_name || github.event.inputs.version }}

.github/workflows/sql-benchmarks.yml

@@ -12,6 +12,7 @@ on:
 
 jobs:
   build-duckdb:
+    timeout-minutes: 120
     runs-on:
       - runs-on=${{ github.run_id }}
       - family=c6id.8xlarge
@@ -48,6 +49,7 @@ jobs:
 
   bench:
     needs: build-duckdb
+    timeout-minutes: 120
     # S3 is shared state here, and we want to make sure only one of each job runs at a time
     concurrency:
       group: ${{ github.workflow }}-${{ github.ref_name }}-${{matrix.id}}

.github/workflows/sql-pr.yml

@@ -15,6 +15,7 @@ permissions:
 jobs:
   label_trigger:
     runs-on: ubuntu-latest
+    timeout-minutes: 120
     if: ${{ contains(github.event.head_commit.message, '[benchmark-sql]') || github.event.label.name == 'benchmark-sql' && github.event_name == 'pull_request' }}
     steps:
       # We remove the benchmark label first so that the workflow can be re-triggered.