Skip to content

ci: raise the security audit timeout to 20 minutes - #284

Merged
elkaix merged 3 commits into
mainfrom
ci/security-audit-timeout
Sep 4, 2026
Merged

ci: raise the security audit timeout to 20 minutes#284
elkaix merged 3 commits into
mainfrom
ci/security-audit-timeout

Conversation

@elkaix

@elkaix elkaix commented Sep 4, 2026

Copy link
Copy Markdown
Member

What

Raise timeout-minutes of the Security audit job from 10 to 20.

Why

Run 33834950909 was cancelled at the 10-minute limit: pnpm/action-setup alone took 7 minutes on a slow runner, so pnpm audit never finished. The audit itself needs about a minute; the budget only has to absorb slow tool downloads.

No changeset: CI-only change, nothing user-facing.

Summary by CodeRabbit

  • Chores
    • Security audit and dependency review checks now have a 20-minute time limit, allowing more time to complete.

@coderabbitai

coderabbitai Bot commented Sep 4, 2026

Copy link
Copy Markdown

Review Change Stack

Warning

Review limit reached

Next included review available in 28 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available. Your 95 included PR review attempts over the past 7 days set your current allowance at 1 review per hour.

Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available.
You're only billed for reviews past your plan's rate limits ($0.25/file).

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Team

Run ID: 3ab5904d-1243-40c6-96f4-b5b0a4052697

📥 Commits

Reviewing files that changed from the base of the PR and between 87a3a8a and 48141cb.

📒 Files selected for processing (1)
  • .github/workflows/security.yml

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Team

Run ID: e69e511d-3046-42f0-9c9c-359601be887d

📥 Commits

Reviewing files that changed from the base of the PR and between 30f8e2d and 87a3a8a.

📒 Files selected for processing (1)
  • .github/workflows/security.yml

Included review availability: 0 reviews are currently available. Your included PR review attempts over the past 7 days set your current allowance at 1 review per hour.


📝 Walkthrough

Walkthrough

The security workflow increases the timeouts for the audit and dependency-review jobs from 10 minutes to 20 minutes.

Changes

Security workflow

Layer / File(s) Summary
Increase security job timeouts
.github/workflows/security.yml
The audit and dependency-review jobs now have 20-minute timeouts.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 87a3a

The security audit and dependency-review jobs are allowed more time to complete on slow runners, reducing avoidable CI cancellations without changing application behavior.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Description check ⚠️ Warning The description clearly explains the change, reason, and absence of a changeset. It does not include the required Related Issue, Problem, What changed, and Checklist sections from the repository templ… Add the required template sections. Include a linked issue, or state why no issue applies; map the current What and Why details to Problem and What changed; and complete the Checklist, including the changeset and documentation items.
✅ Passed checks (4 passed)
Check name Status Explanation
Title check ✅ Passed The title uses the allowed ci: prefix, stays within 72 characters, uses imperative mood, and accurately describes the timeout change.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Full details: Description check

Explanation

The description clearly explains the change, reason, and absence of a changeset. It does not include the required Related Issue, Problem, What changed, and Checklist sections from the repository template.


Comment @coderabbitai help to get the list of available commands.

@pkg-pr-new

pkg-pr-new Bot commented Sep 4, 2026

Copy link
Copy Markdown
pnpm dlx https://pkg.pr.new/@pymodel/pythinker-code@48141cb
npx https://pkg.pr.new/@pymodel/pythinker-code@48141cb

commit: 48141cb

@elkaix
elkaix enabled auto-merge (squash) September 4, 2026 06:22
@elkaix
elkaix merged commit 4cd21a5 into main Sep 4, 2026
24 checks passed
@elkaix
elkaix deleted the ci/security-audit-timeout branch September 4, 2026 06:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant