From 1694653172abe99ebd1b64a4be3d27c36418783f Mon Sep 17 00:00:00 2001
From: Felix Hummert <44832414+FlexOr2@users.noreply.github.com>
Date: Thu, 12 Nov 2026 17:48:18 +0100
Subject: [PATCH 1/2] Move the quality pins to v0.12.0 and limit the CI jobs to
 15 minutes

quality v0.12.0 adds the job-timeout rule, which turns a repository red
for any judged job without timeout-minutes of at most 15. The gate.yml
and codeql.yml callers and the pinned check command in AGENTS.md move to
the v0.12.0 commit together, so the gate and the local check agree.

The check job takes about 7.5 minutes on main and gets a 15-minute limit;
the front job takes about 1 minute and gets 10. Neither needs a
quality/baseline.toml job-limit entry.

Serves #1236.

Co-Authored-By: Claude Haiku 5.5 <noreply@anthropic.com>
---
 .github/workflows/ci.yml     | 6 +++++-
 .github/workflows/codeql.yml | 2 +-
 AGENTS.md                    | 2 +-
 3 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d150dcb1..ec3a3ac2 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -20,6 +20,8 @@ concurrency:
 jobs:
   check:
     runs-on: ubuntu-latest
+    # Measured about 7.5 minutes on main.
+    timeout-minutes: 15
     env:
       # Placeholder the compose file interpolates; the real one lives in the uncommitted .env.
       DOCKER_GID: "127"
@@ -298,6 +300,8 @@ jobs:
   # tests/test_litellm_front.py (about 50 MB of images). It re-runs on every Traefik bump.
   front:
     runs-on: ubuntu-latest
+    # Measured about 1 minute on main.
+    timeout-minutes: 10
     env:
       DOCKER_GID: "127"
       EDGE_FRONT_CASES: "1"
@@ -321,7 +325,7 @@ jobs:
     permissions:
       contents: read
       actions: read
-    uses: overnightworks/quality/.github/workflows/gate.yml@9ced0f5cee689f2c70fb1467513b943484bd65a5 # v0.11.1
+    uses: overnightworks/quality/.github/workflows/gate.yml@be32abeb120d29f75ee7ea456d6e510ae001de04 # v0.12.0
     with:
       coverage-artifact: coverage
     secrets:
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 74a1018c..e3b0c760 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -28,6 +28,6 @@ jobs:
       security-events: write
       contents: read
       actions: read
-    uses: overnightworks/quality/.github/workflows/codeql.yml@9ced0f5cee689f2c70fb1467513b943484bd65a5  # v0.11.1
+    uses: overnightworks/quality/.github/workflows/codeql.yml@be32abeb120d29f75ee7ea456d6e510ae001de04  # v0.12.0
     with:
       languages: '["actions", "python"]'
diff --git a/AGENTS.md b/AGENTS.md
index 1bf9f200..68297e0c 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -9,7 +9,7 @@ the one scanner, and it reads `sonar-project.properties` and the tests job's
 `coverage` artifact.
 
 Before pushing, after the last merge of main, a builder or fixer runs the gate's pinned check:
-`uvx --from "git+https://github.com/overnightworks/quality@9ced0f5cee689f2c70fb1467513b943484bd65a5" quality check`
+`uvx --from "git+https://github.com/overnightworks/quality@be32abeb120d29f75ee7ea456d6e510ae001de04" quality check`
 Its closing line starts with `✓ clean`.
 
 ## Rules

From 991072ec0ade70dd126d27836448a56e81d9b1ef Mon Sep 17 00:00:00 2001
From: Felix Hummert <44832414+FlexOr2@users.noreply.github.com>
Date: Thu, 12 Nov 2026 17:57:35 +0100
Subject: [PATCH 2/2] Drop the measured run times from the job limits

The comments on the check and front job limits stated run times measured
on main. Recent main runs of check took 7.4 to 11.3 minutes, so the
figure was already wrong, and such numbers go stale. The timeouts stay.

Work-Item: #1236

Co-Authored-By: Claude Haiku 5.5 <noreply@anthropic.com>
---
 .github/workflows/ci.yml | 2 --
 1 file changed, 2 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ec3a3ac2..eb01d425 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -20,7 +20,6 @@ concurrency:
 jobs:
   check:
     runs-on: ubuntu-latest
-    # Measured about 7.5 minutes on main.
     timeout-minutes: 15
     env:
       # Placeholder the compose file interpolates; the real one lives in the uncommitted .env.
@@ -300,7 +299,6 @@ jobs:
   # tests/test_litellm_front.py (about 50 MB of images). It re-runs on every Traefik bump.
   front:
     runs-on: ubuntu-latest
-    # Measured about 1 minute on main.
     timeout-minutes: 10
     env:
       DOCKER_GID: "127"