ci(actions): pin runners and cancel superseded PR runs

[seonghobae]

변경

• LifeOS 소유 hosted job을 ubuntu-24.04로 고정합니다.
• CI, AppGuardrail, Commercial Readiness의 PR 실행을 workflow명-repository-PR번호로 묶고 같은 PR의 이전 head만 취소합니다.
• push, schedule, workflow_dispatch는 github.run_id로 격리하며 취소하지 않습니다.
• release/build/deploy 실행의 cancel-in-progress: false 계약을 유지합니다.
• 기본 브랜치에 없는 source workflow 등록 112개를 비활성화했습니다. GitHub 동적 CodeQL workflow 2개는 유지했습니다.
• 중앙 required workflow와 겹치는 기본 브랜치 workflow, 불필요한 matrix는 없었습니다. readiness/종료 확인 sleep은 실제 프로세스 상태 확인에 필요해 유지했습니다.

검증

• actionlint .github/workflows/appguardrail.yml .github/workflows/ci.yml .github/workflows/commercial-readiness.yml
• node --test packages/commercial-readiness/src/workflow-contract.test.mjs — 6 passed
• git diff --check

제품 코드는 변경하지 않았습니다. 보호 병합이나 새 automation은 수행하지 않습니다.

[devin-ai-integration]

Note

This report is out of date. Scroll down for Devin Review's latest report on this PR.

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

[coderabbitai]

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

• @coderabbitai resume to resume automatic reviews.
• @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

• ▶️ Resume reviews
• 🔍 Trigger review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Team

Run ID: 6bbcbfba-6f1d-4ca7-9cfd-99d6b0a9cebb

📥 Commits

Reviewing files that changed from the base of the PR and between 38621b1 and 5b81154.

📒 Files selected for processing (1)

• .github/workflows/appguardrail.yml

🚧 Files skipped from review as they are similar to previous changes (1)

• .github/workflows/appguardrail.yml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

GitHub Actions 워크플로의 호스티드 실행 러너를 ubuntu-24.04로 고정했습니다. AppGuardrail의 YAML 값 표기와 Commercial Readiness의 경로 필터도 변경했습니다. 러너 계약 테스트는 모든 대상 러너 값을 검증하도록 강화했습니다.

Changes

실행 러너 고정

Layer / File(s)	Summary
워크플로 실행 러너 업데이트 .github/workflows/appguardrail.yml, .github/workflows/ci.yml, .github/workflows/commercial-readiness.yml, .github/workflows/deploy.yml	지정된 작업의 runs-on 값을 ubuntu-24.04로 변경했습니다. AppGuardrail의 YAML 따옴표 형식을 변경하고 Commercial Readiness의 경로 제외 필터를 제거했습니다.
실행 러너 계약 검증 packages/commercial-readiness/src/workflow-contract.test.mjs	CI의 다섯 개 작업과 여섯 개 워크플로의 모든 호스티드 러너가 정확히 ubuntu-24.04인지 검증합니다. 다른 러너 값은 파일 경로와 함께 보고합니다.

Estimated code review effort: 2 (Simple) | ~10 minutes

Merge Risk: ⚪ Minimal · up to 5b811

This change pins owned hosted workflow runners to Ubuntu 24.04 and adds workflow contract coverage. No current merge-readiness risk is established by the supplied evidence.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 1…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	제목은 워크플로 러너를 ubuntu-24.04로 고정하는 주요 변경을 정확히 설명합니다. 다만 제공된 변경 요약에는 대체된 PR 실행 취소 변경이 명시되지 않았습니다.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/pin-ci-runner-image-v1

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}