ci: optimize GitHub Actions workflows

.github/workflows/ci.yml

@@ -4,9 +4,25 @@ on:
   push:
     branches:
       - main
+    paths:
+      - 'src/**'
+      - 'scripts/**'
+      - 'package.json'
+      - 'pnpm-lock.yaml'
+      - '.github/workflows/ci.yml'
   pull_request:
     branches:
       - main
+    paths:
+      - 'src/**'
+      - 'scripts/**'
+      - 'package.json'
+      - 'pnpm-lock.yaml'
+      - '.github/workflows/ci.yml'
+
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
 
 permissions:
   contents: read
@@ -15,6 +31,7 @@ permissions:
 jobs:
   build:
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     steps:
       - uses: actions/checkout@v4
 

.github/workflows/codeql.yml

@@ -4,39 +4,45 @@ on:
   push:
     branches:
       - main
+    paths:
+      - 'src/**'
+      - 'scripts/**'
+      - 'package.json'
+      - '.github/workflows/codeql.yml'
   pull_request:
     branches:
       - main
+    paths:
+      - 'src/**'
+      - 'scripts/**'
+      - 'package.json'
+      - '.github/workflows/codeql.yml'
   schedule:
     - cron: '0 0 * * 1'
 
 jobs:
   analyze:
     name: Analyze
     runs-on: ubuntu-latest
+    timeout-minutes: 30
     permissions:
       actions: read
       contents: read
       security-events: write
 
-    strategy:
-      fail-fast: false
-      matrix:
-        language: ['javascript-typescript']
-
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v3
         with:
-          languages: ${{ matrix.language }}
+          languages: javascript-typescript
 
       - name: Autobuild
         uses: github/codeql-action/autobuild@v3
 
       - name: Perform CodeQL Analysis
         uses: github/codeql-action/analyze@v3
         with:
-          category: '/language:${{matrix.language}}'
+          category: '/language:javascript-typescript'

.github/workflows/dependency-review.yml

@@ -7,6 +7,7 @@ permissions:
 jobs:
   dependency-review:
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     steps:
       - name: Checkout Repository
         uses: actions/checkout@v4

.github/workflows/publish.yml

@@ -2,7 +2,7 @@ name: Publish
 
 on:
   schedule:
-    - cron: '0 2 * * *'
+    - cron: '0 2 * * 1,3,5'
   workflow_dispatch:
   repository_dispatch:
     types: [extension-released, azd-web-core-updated]
@@ -15,11 +15,12 @@ permissions:
 
 concurrency:
   group: 'publish'
-  cancel-in-progress: false
+  cancel-in-progress: true
 
 jobs:
   publish:
     runs-on: ubuntu-latest
+    timeout-minutes: 20
     environment:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}

.github/workflows/spellcheck.yml

@@ -4,16 +4,29 @@ on:
   push:
     branches:
       - main
+    paths:
+      - 'src/**'
+      - '**/*.md'
+      - 'package.json'
+      - '.cspell.json'
+      - '.github/workflows/spellcheck.yml'
   pull_request:
     branches:
       - main
+    paths:
+      - 'src/**'
+      - '**/*.md'
+      - 'package.json'
+      - '.cspell.json'
+      - '.github/workflows/spellcheck.yml'
 
 permissions:
   contents: read
 
 jobs:
   spellcheck:
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     steps:
       - uses: actions/checkout@v4