From 7759bb3a70d7f8caed00dd79c7103732668fa3f3 Mon Sep 17 00:00:00 2001
From: oc-tmueller <323649642+oc-tmueller@users.noreply.github.com>
Date: Fri, 13 Nov 2026 10:43:33 +0100
Subject: [PATCH] ci: [stable-8.2] cancel superseded PR runs and cap matrix
 parallelism

Backport of #13453 (337fca968e). The org shares 60 standard GitHub-hosted
runners across all repos, and PRs against stable-8.2 fan out the same
unbounded matrices without cancelling superseded runs.

- Concurrency group per PR (non-PR events keyed on their run id).
- max-parallel on the largest matrices, same caps as master.
- No coverage changes: this branch has none of the coverage steps that
  #13453 moved to !cancelled().

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: oc-tmueller <323649642+oc-tmueller@users.noreply.github.com>
---
 .github/workflows/acceptance-tests.yml | 9 +++++++++
 .github/workflows/check-licenses.yml   | 6 ++++++
 .github/workflows/web-tests.yml        | 6 ++++++
 3 files changed, 21 insertions(+)

diff --git a/.github/workflows/acceptance-tests.yml b/.github/workflows/acceptance-tests.yml
index a22cbc4ff476..cc703c9e97a6 100644
--- a/.github/workflows/acceptance-tests.yml
+++ b/.github/workflows/acceptance-tests.yml
@@ -4,6 +4,12 @@ on:
   pull_request:
   workflow_dispatch:
 
+# Pull request runs cancel their predecessor on the same PR. Every other
+# event gets its own group, so pushes and scheduled runs never cancel each other.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.run_id }}
+  cancel-in-progress: true
+
 jobs:
   detect-changes:
     name: detect-changes
@@ -173,6 +179,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false
+      max-parallel: 8
       matrix:
         suite:
           # contract & locks
@@ -356,6 +363,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false
+      max-parallel: 4
       matrix:
         suite:
           - "coreApiAuth,coreApiCapabilities,coreApiFavorites,coreApiMain,coreApiVersions"
@@ -439,6 +447,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false
+      max-parallel: 4
       matrix:
         include:
           - suite: part-1
diff --git a/.github/workflows/check-licenses.yml b/.github/workflows/check-licenses.yml
index 952ce2fc4ddb..a5fc2486aecb 100644
--- a/.github/workflows/check-licenses.yml
+++ b/.github/workflows/check-licenses.yml
@@ -4,6 +4,12 @@ on:
   push:
     branches: [master, stable-*]
 
+# Pull request runs cancel their predecessor on the same PR. Every other
+# event gets its own group, so pushes and scheduled runs never cancel each other.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.run_id }}
+  cancel-in-progress: true
+
 jobs:
   license-check:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/web-tests.yml b/.github/workflows/web-tests.yml
index 6dd709076fa0..4a02d825bcbd 100644
--- a/.github/workflows/web-tests.yml
+++ b/.github/workflows/web-tests.yml
@@ -5,6 +5,12 @@ on:
   push:
     branches: [master, stable-*]
 
+# Pull request runs cancel their predecessor on the same PR. Every other
+# event gets its own group, so pushes and scheduled runs never cancel each other.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.run_id }}
+  cancel-in-progress: true
+
 jobs:
   detect-web-changes:
     name: detect-web-changes