ci(OMN-12736): harden migration freeze checkout timeout

[jonahgabriel]

Summary

• OMN-12736: harden the Migration Freeze Check merge_group path after run 27058639824 / job 79867549855 spent the full 5m budget in actions/checkout@v6 fetching gh-readonly-queue/dev/pr-1881 and skipped the freeze script.
• Raise the migration-freeze job timeout from 5m to 15m.
• Bound the checkout step at 10m, keep shallow fetch-depth: 2, and make fetch-tags: false explicit. The freeze script remains unchanged and required.
• Extend focused CI workflow resilience coverage for the new timeout/fetch settings.

Verification

• uv run pytest tests/ci/test_ci_workflow_resilience.py -q
• uv run ruff format --check tests/ci/test_ci_workflow_resilience.py
• uv run ruff check tests/ci/test_ci_workflow_resilience.py
• git diff --check

Evidence

OMN-12736

Evidence-Source: OCC#2254

Evidence-Ticket: OMN-12736

This is a CI-only workflow-hardening change (.github/workflows + focused CI resilience test); it ships no runtime contract, node, handler, topic, or migration. The Evidence-Source above (OCC#2254, merged to OCC main at e3a7974c) carries the OMN-12736 contract; the Receipt Gate (OMN-10419) resolves the merged OCC PR to its merge commit on OCC main.

Notes

• No merge or deploy performed.

Summary by CodeRabbit

• Chores

  • Enhanced CI job timeout configurations and checkout behavior for improved stability.

• Tests

  • Updated CI resilience test suite to validate timeout settings and checkout parameters.

[coderabbitai]

PR changed again? Review this PR in Change Stack to compare snapshots and stay oriented.

📝 Walkthrough

Walkthrough

The PR hardens the migration-freeze CI job for merge_group runs by increasing its timeout to 15 minutes, adding a 10-minute timeout to the checkout step, and configuring checkout with shallow fetch (depth 2) while disabling tag fetching. Tests are updated to verify these new timeout and fetch constraints.

Changes

Migration-freeze job timeout and checkout bounds

Layer / File(s)	Summary
Bounded migration-freeze job timeout and checkout .github/workflows/ci.yml, tests/ci/test_ci_workflow_resilience.py	Job-level timeout increased and per-step checkout timeout added with restricted fetch options (depth 2, tags disabled). Test updated from shallow checkout validation to bounded-checkout assertions verifying job timeout, step timeout, and fetch configuration.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~5 minutes

Poem

A rabbit hops through merge_group flows,
With bounded timeouts, the CI knows—
Fetch shallow, fetch swift, no tags to store,
The workflow's tighter than before! 🐇⏰

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Title check	✅ Passed	The title accurately summarizes the main change: hardening the migration freeze checkout timeout configuration with increased timeouts and stricter fetch settings.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch jonah/omn-12736-migration-freeze-checkout-hardening

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}