Skip to content

ci(bazel): harden detect matching + cap matrix concurrency #425

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
balajinvda merged 2 commits into from
Jul 24, 2026
+14 −5
Merged

ci(bazel): harden detect matching + cap matrix concurrency #425

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
ca16617
ci(bazel): harden detect matching + cap matrix concurrency
balajinvda Jul 24, 2026
830e395
ci(bazel): cap docker lane concurrency + rename the merge-gate job
balajinvda Jul 24, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 14 additions & 5 deletions .github/workflows/bazel.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -183,7 +183,7 @@ jobs:
# changeset is never under-tested.
#
# A change to this workflow itself revalidates everything.
if printf '%s\n' "$changed" | grep -q '^\.github/workflows/bazel\.yml$'; then
if grep -q '^\.github/workflows/bazel\.yml$' <<<"$changed"; then
run_all=true
fi

Expand All @@ -193,7 +193,7 @@ jobs:
if [ "$run_all" != "true" ]; then
while IFS='|' read -r _id path _tests_skip component_kind _ci_lane; do
component_kind="$(echo "$component_kind" | xargs)"
if [ "$component_kind" = "java-framework" ] && printf '%s\n' "$changed" | grep -q "^${path}/"; then
if [ "$component_kind" = "java-framework" ] && grep -q "^${path}/" <<<"$changed"; then
java_framework_changed=true
break
fi
Expand Down Expand Up @@ -266,9 +266,9 @@ jobs:
# treats them as full-build triggers, so gate root on them
# explicitly; otherwise a root-global .bzl change selects zero rows
# and passes without running Bazel.
if [ "$hit" != "true" ] && printf '%s\n' "$changed" | grep -qE '^[^/]+\.bzl$'; then hit=true; fi
if [ "$hit" != "true" ] && grep -qE '^[^/]+\.bzl$' <<<"$changed"; then hit=true; fi
else
if printf '%s\n' "$changed" | grep -q "^${path}/"; then hit=true; fi
if grep -q "^${path}/" <<<"$changed"; then hit=true; fi
fi
# A framework change schedules every registered Java service.
if [ "$hit" != "true" ] && [ "$java_framework_changed" = "true" ] && [ "$component_kind" = "java-service" ]; then
Expand Down Expand Up @@ -319,6 +319,12 @@ jobs:
password: ${{ secrets.GITHUB_TOKEN }}
strategy:
fail-fast: false
# Cap concurrent rows. A full matrix otherwise starts ~20 jobs at once,
# and every runner pulls actions/checkout from codeload.github.com in the
# same instant, tripping GitHub's action-download rate limit (HTTP 429 in
# "Set up job"). Batching keeps the download burst under that limit;
# change-aware scheduling already keeps most PRs well below the cap.
max-parallel: 8
matrix:
subtree: ${{ fromJSON(needs.detect.outputs.matrix) }}
steps:
Expand Down Expand Up @@ -663,6 +669,9 @@ jobs:
runs-on: ubuntu-latest
strategy:
fail-fast: false
# Cap concurrency here too (see the bazel job) so the docker-host rows
# do not add to the simultaneous actions/checkout burst.
max-parallel: 4
matrix:
subtree: ${{ fromJson(needs.detect.outputs.matrix_docker) }}
steps:
Expand Down Expand Up @@ -722,7 +731,7 @@ jobs:
retention-days: 14

bazel-verification:
name: bazel verification
name: bazel required checks
needs: [detect, bazel, bazel-docker]
if: ${{ always() }}
runs-on: ubuntu-latest
Expand Down
Loading