ci: build only latest-per-major on fork pushes

Author: fdcastel

.github/workflows/ci.yaml

@@ -3,6 +3,9 @@ name: ci
 # Build and run all tests.
 # - Triggers: All pushes and pull requests on any branch.
 # - Runs on: All repositories (including forks)
+#
+# Forks (non-dispatch): build only the latest release per major Firebird version.
+# Official repo or workflow_dispatch: full build of all versions.
 
 on:
   push:
@@ -28,8 +31,25 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
+  determine-scope:
+    runs-on: ubuntu-latest
+    outputs:
+      latest-per-major: ${{ steps.scope.outputs.latest-per-major }}
+    steps:
+      - name: Determine build scope
+        id: scope
+        run: |
+          IS_OFFICIAL="${{ github.repository == 'FirebirdSQL/firebird-docker' }}"
+          IS_DISPATCH="${{ github.event_name == 'workflow_dispatch' }}"
+          if [[ "$IS_OFFICIAL" == "true" || "$IS_DISPATCH" == "true" ]]; then
+            echo "latest-per-major=false" >> $GITHUB_OUTPUT
+          else
+            echo "latest-per-major=true" >> $GITHUB_OUTPUT
+          fi
+
   build-and-test:
     if: ${{ !(github.repository == 'FirebirdSQL/firebird-docker' && github.ref == 'refs/heads/master') }}
+    needs: determine-scope
     strategy:
       fail-fast: false
       matrix:
@@ -56,6 +76,7 @@ jobs:
           $params = @{}
           if ('${{ inputs.version-filter }}') { $params['VersionFilter'] = '${{ inputs.version-filter }}' }
           if ('${{ inputs.distro-filter }}') { $params['DistributionFilter'] = '${{ inputs.distro-filter }}' }
+          if ('${{ needs.determine-scope.outputs.latest-per-major }}' -eq 'true') { $params['LatestPerMajor'] = $true }
           Invoke-Build Build @params
 
       - name: Test
@@ -64,6 +85,7 @@ jobs:
           $params = @{}
           if ('${{ inputs.version-filter }}') { $params['VersionFilter'] = '${{ inputs.version-filter }}' }
           if ('${{ inputs.distro-filter }}') { $params['DistributionFilter'] = '${{ inputs.distro-filter }}' }
+          if ('${{ needs.determine-scope.outputs.latest-per-major }}' -eq 'true') { $params['LatestPerMajor'] = $true }
           Invoke-Build Test @params
 
       - name: Run tag unit tests

AGENTS.md

@@ -45,7 +45,7 @@ Invoke-Build Build -VersionFilter 5 -DistributionFilter bookworm  # Filtered
 - `AGENTS.md` — This file
 
 ## CI/CD
-- `ci.yaml` — Build+test on push/PR. Full matrix (amd64 + arm64) on all repos. Filtered via workflow_dispatch inputs.
+- `ci.yaml` — Build+test on push/PR. Full matrix (amd64 + arm64) on all repos. Forks: latest release per major version only. Official repo or `workflow_dispatch`: all versions. Filtered via workflow_dispatch inputs.
 - `publish.yaml` — Official repo only. Build+test+push to Docker Hub.
 - `snapshot.yaml` — Snapshot pre-release images from FirebirdSQL/snapshots.
 

DECISIONS.md

@@ -50,11 +50,11 @@ Decisions made during the v2 rewrite, with rationale.
 
 **Rationale:** Firebird 3 depends on `libncurses5`, which was removed from Ubuntu Noble. Rather than special-casing in code, we declare blocked combinations in config.
 
-## D-008: Uniform CI scope
+## D-008: Fork CI scope — latest release per major version
 
-**Decision:** All repositories (forks and official) run the same full build matrix on every push/PR, including both amd64 and arm64.
+**Decision:** On forks (non-official repo, non-`workflow_dispatch`), CI builds and tests only the latest release of each major Firebird version (e.g. 5.0.3, 4.0.6, 3.0.13). The official repository always performs a full build of all versions.
 
-**Rationale:** Consistent CI ensures contributors catch the same failures as the official repo. Public repos have unlimited GitHub Actions minutes, so fork-scoping provides no meaningful savings while adding code complexity.
+**Rationale:** A full matrix (17 versions × 4 distros × 2 arches) takes 17+ minutes on forks where contributors verify a single change. The latest of each major is sufficient to catch regressions across the version range. The official repo and manual `workflow_dispatch` runs always build everything. Controlled via the `LatestPerMajor` switch in `firebird-docker.build.ps1`.
 
 ## D-009: No QEMU in CI
 

firebird-docker.build.ps1

@@ -1,6 +1,7 @@
 param(
     [string]$VersionFilter,       # Filter by version (e.g. '3', '4.0', '5.0.2').
     [string]$DistributionFilter,  # Filter by image distribution (e.g. 'bookworm', 'bullseye', 'jammy').
+    [switch]$LatestPerMajor,      # Build/test only the latest release of each major Firebird version.
 
     [string]$TestFilter,          # Filter by test name (e.g., 'FIREBIRD_USER_can_create_user'). Used only in the 'Test' task.
 
@@ -180,6 +181,11 @@ task FilteredAssets LoadAssets, {
             Select-Object -Property 'version','releases',@{Name = 'tags'; Expression = { [PSCustomObject]@{ "$DistributionFilter" = $_.tags.$DistributionFilter } } }
     }
 
+    if ($LatestPerMajor) {
+        # Keep only the first (latest) entry per major version
+        $result = $result | Group-Object { ([version]$_.version).Major } | ForEach-Object { $_.Group[0] }
+    }
+
     if (-not $result) {
         Write-Error "No assets found matching the specified filters."
         exit 1