Optimize CI/CD workflows: add timeouts, reduce overhead, improve caching

[Copilot]

Optimize CI/CD workflows for faster feedback cycles and reduced execution overhead in this zero-dependency package.

Changes

Timeout Limits

• Add timeout-minutes: 10 to CI, linter, and publish workflow jobs for fast failure
• Add timeout-minutes: 15 to CodeQL workflow job (increased to provide adequate time for security analysis)

Workflow Optimizations

• linter.yml: Cache ~/.npm directory to avoid re-downloading ESLint packages on every run
  • Uses manual versioning (eslint-v1) for controlled cache invalidation
  • Added Node.js setup step for proper caching integration
• publish.yml: Consolidate npm upgrade and version verification into single step

Dependabot Configuration

• Keep npm checks at monthly frequency (more conservative approach)
• Reduce npm open-pull-requests-limit from 5 to 2
• Maintain monthly GitHub Actions updates at existing 5 PR limit

# Before: separate steps
- name: "Upgrade npm for OIDC support"
  run: npm install -g npm@latest
- name: "Verify npm version"
  run: |
    NPM_VERSION=$(npm --version)
    # ... verification logic

# After: consolidated
- name: "Upgrade npm and verify OIDC support"
  run: |
    npm install -g npm@latest
    NPM_VERSION=$(npm --version)
    # ... verification logic

Original prompt

To improve the CI/CD workflow for the zero-dependency package repository mobilemind/text2datauri, the following tasks must be performed:\n\n1. Place explicit 10-minute timeout limits on all workflow jobs to ensure that they fail fast and provide quicker feedback cycles.\n2. Reduce execution overhead by consolidating redundant steps within the workflow files. If there are multiple steps that perform similar tasks or unnecessary operations, they should be combined or removed, ensuring no loss of functionality.\n3. Optimize the job configurations to speed up execution (e.g., reusing setup processes, minimizing job dependencies, and using caching wherever applicable).\n4. Revise the dependabot configuration for a zero-dependency package:\n - Verify that updates for any dev-only tools (like linters) are configured appropriately.\n - Ensure the configuration avoids unnecessary dependency checks.\n\nThe optimized workflow and configuration should maintain readability and ensure compatibility across relevant environments.

This pull request was created from Copilot chat.

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[mobilemind]

I prefer monthly checks as more conservative.

[Copilot]

I prefer monthly checks as more conservative.

Reverted to monthly checks in commit 764ce22. The interval is now back to monthly as originally configured.

[Copilot]

Pull request overview

This PR optimizes CI/CD workflows for a zero-dependency package by adding timeout limits, consolidating redundant workflow steps, and implementing caching strategies to reduce execution time.

Key Changes:

• Added 10-minute timeout limits to all workflow jobs (ci.yml, linter.yml, codeql-analysis.yml, publish.yml)
• Consolidated npm upgrade and verification steps in publish.yml into a single step
• Added Node.js setup and npm caching to linter.yml to speed up ESLint installation

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
.github/workflows/ci.yml	Added 10-minute timeout to build job
.github/workflows/linter.yml	Added timeout, Node.js setup, and npm caching for ESLint dependencies
.github/workflows/codeql-analysis.yml	Added 10-minute timeout to analyze job
.github/workflows/publish.yml	Added timeout and consolidated npm upgrade/verification into single step
.github/dependabot.yml	Reduced npm open-pull-requests-limit from 5 to 2

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[mobilemind]

Looks good to me. Let's merge it.

[mobilemind]

I'd like a minor change.

[mobilemind]

Looks good to me.

[mobilemind]

Approved

[mobilemind]

Approved