From 2fecd483ed8436782f513e9e8d3bddf213892142 Mon Sep 17 00:00:00 2001
From: rainxchzed <undefineduser087@gmail.com>
Date: Sun, 3 May 2026 23:57:10 +0500
Subject: [PATCH] Add CODEOWNERS and validateAnnouncements step to CI

---
 .github/CODEOWNERS       | 10 ++++++++++
 .github/workflows/ci.yml | 14 +++++++++++++-
 2 files changed, 23 insertions(+), 1 deletion(-)
 create mode 100644 .github/CODEOWNERS

diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
new file mode 100644
index 0000000..36208e8
--- /dev/null
+++ b/.github/CODEOWNERS
@@ -0,0 +1,10 @@
+# Maintainer review required for changes to:
+# - workflow files (production deploy logic + secrets handling)
+# - announcement content (user-facing trusted channel)
+#
+# Codeowner rules apply only when the matching branch ruleset has
+# "Require review from Code Owners" enabled. Without that, this file is
+# documentation only.
+
+/.github/                          @rainxchzed
+/src/main/resources/announcements/ @rainxchzed
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9fd8a7d..c0160c4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -6,6 +6,15 @@ on:
   pull_request:
     branches: [main]
 
+# Cancel an in-flight PR run when the author pushes a new commit; main runs
+# never cancel each other.
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -28,7 +37,10 @@ jobs:
           restore-keys: gradle-${{ runner.os }}-
 
       - name: Compile
-        run: ./gradlew compileKotlin --no-daemon
+        run: ./gradlew compileKotlin compileTestKotlin --no-daemon
+
+      - name: Validate announcements
+        run: ./gradlew validateAnnouncements --no-daemon
 
       - name: Test
         run: ./gradlew test --no-daemon