ci: cancel superseded runs on every workflow, keyed on branch

Seven workflows had no concurrency group at all, so successive pushes to a dev branch stacked up full matrix builds. Keying on head_ref/ref_name rather than github.ref also stops a branch with an open pull request from running two sets of jobs.

Author: arr2036

.github/workflows/ci-deb.yml

@@ -11,6 +11,17 @@ on:
   schedule:
     - cron: '0 20 * * *'
 
+#
+#  Cancel any in-flight or queued run of this workflow on the same branch
+#  when a new commit lands, so only the newest commit gets tested. head_ref
+#  names the source branch on pull_request events and ref_name covers push
+#  events, so keying on either rather than on github.ref stops a branch with
+#  an open pull request from running two full sets of jobs.
+#
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref_name }}
+  cancel-in-progress: true
+
 env:
   DEBIAN_FRONTEND: noninteractive
 

.github/workflows/ci-freebsd.yml

@@ -9,6 +9,17 @@ on:
       - debug-fuzzer-**
   pull_request:
 
+#
+#  Cancel any in-flight or queued run of this workflow on the same branch
+#  when a new commit lands, so only the newest commit gets tested. head_ref
+#  names the source branch on pull_request events and ref_name covers push
+#  events, so keying on either rather than on github.ref stops a branch with
+#  an open pull request from running two full sets of jobs.
+#
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref_name }}
+  cancel-in-progress: true
+
 env:
   HOSTAPD_BUILD_DIR: eapol_test.ci
   HOSTAPD_GIT_TAG: hostap_2_11

.github/workflows/ci-macos.yml

@@ -10,12 +10,14 @@ on:
   pull_request:
 
 #
-#  Cancel any in-flight or queued run of this workflow on the same
-#  ref when a new commit lands. Replaces fkirc/skip-duplicate-actions
-#  for the "don't waste CI on a stale push" use case.
+#  Cancel any in-flight or queued run of this workflow on the same branch
+#  when a new commit lands, so only the newest commit gets tested. head_ref
+#  names the source branch on pull_request events and ref_name covers push
+#  events, so keying on either rather than on github.ref stops a branch with
+#  an open pull request from running two full sets of jobs.
 #
 concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref_name }}
   cancel-in-progress: true
 
 env:

.github/workflows/ci-multi-server-tests.yml

@@ -31,6 +31,17 @@ on:
     #  Daily at 2pm EST (7pm UTC) - full test set, not just CI subset.
     - cron: '0 19 * * *'
 
+#
+#  Cancel any in-flight or queued run of this workflow on the same branch
+#  when a new commit lands, so only the newest commit gets tested. head_ref
+#  names the source branch on pull_request events and ref_name covers push
+#  events, so keying on either rather than on github.ref stops a branch with
+#  an open pull request from running two full sets of jobs.
+#
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref_name }}
+  cancel-in-progress: true
+
 jobs:
   multi-server-tests:
     runs-on: self-hosted

.github/workflows/ci-rpm.yml

@@ -11,6 +11,17 @@ on:
   schedule:
     - cron: '0 20 * * *'
 
+#
+#  Cancel any in-flight or queued run of this workflow on the same branch
+#  when a new commit lands, so only the newest commit gets tested. head_ref
+#  names the source branch on pull_request events and ref_name covers push
+#  events, so keying on either rather than on github.ref stops a branch with
+#  an open pull request from running two full sets of jobs.
+#
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref_name }}
+  cancel-in-progress: true
+
 jobs:
 
   #

.github/workflows/ci-sanitizers.yml

@@ -10,12 +10,14 @@ on:
   pull_request:
 
 #
-#  Cancel any in-flight or queued run of this workflow on the same
-#  ref when a new commit lands. Replaces fkirc/skip-duplicate-actions
-#  for the "don't waste CI on a stale push" use case.
+#  Cancel any in-flight or queued run of this workflow on the same branch
+#  when a new commit lands, so only the newest commit gets tested. head_ref
+#  names the source branch on pull_request events and ref_name covers push
+#  events, so keying on either rather than on github.ref stops a branch with
+#  an open pull request from running two full sets of jobs.
 #
 concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref_name }}
   cancel-in-progress: true
 
 env:

.github/workflows/ci.yml

@@ -10,12 +10,14 @@ on:
   pull_request:
 
 #
-#  Cancel any in-flight or queued run of this workflow on the same
-#  ref when a new commit lands. Replaces fkirc/skip-duplicate-actions
-#  for the "don't waste CI on a stale push" use case.
+#  Cancel any in-flight or queued run of this workflow on the same branch
+#  when a new commit lands, so only the newest commit gets tested. head_ref
+#  names the source branch on pull_request events and ref_name covers push
+#  events, so keying on either rather than on github.ref stops a branch with
+#  an open pull request from running two full sets of jobs.
 #
 concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref_name }}
   cancel-in-progress: true
 
 env:

.github/workflows/docker-crossbuild.yml

@@ -6,6 +6,17 @@ on:
       - coverity_scan
   workflow_dispatch:
 
+#
+#  Cancel any in-flight or queued run of this workflow on the same branch
+#  when a new commit lands, so only the newest commit gets tested. head_ref
+#  names the source branch on pull_request events and ref_name covers push
+#  events, so keying on either rather than on github.ref stops a branch with
+#  an open pull request from running two full sets of jobs.
+#
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref_name }}
+  cancel-in-progress: true
+
 env:
   CI: 1
   GH_ACTIONS: 1

.github/workflows/docker-service.yml

@@ -6,6 +6,17 @@ on:
       - coverity_scan
   workflow_dispatch:
 
+#
+#  Cancel any in-flight or queued run of this workflow on the same branch
+#  when a new commit lands, so only the newest commit gets tested. head_ref
+#  names the source branch on pull_request events and ref_name covers push
+#  events, so keying on either rather than on github.ref stops a branch with
+#  an open pull request from running two full sets of jobs.
+#
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref_name }}
+  cancel-in-progress: true
+
 env:
   CI: 1
   GH_ACTIONS: 1

.github/workflows/documentation.yml

@@ -23,6 +23,17 @@ on:
   schedule:
     - cron: '1 20 * * *'
 
+#
+#  Cancel any in-flight or queued run of this workflow on the same branch
+#  when a new commit lands, so only the newest commit gets tested. head_ref
+#  names the source branch on pull_request events and ref_name covers push
+#  events, so keying on either rather than on github.ref stops a branch with
+#  an open pull request from running two full sets of jobs.
+#
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref_name }}
+  cancel-in-progress: true
+
 jobs:
   build-docs:
     if: github.repository_owner == 'FreeRADIUS'