From f167df6579390b3bac8316e6943a2aedbdb22bae Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 27 Jul 2026 11:56:52 +0000
Subject: [PATCH 1/2] Initial plan


From f68259b9dd76e9ae9fd2a242b82caee4de584af7 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 27 Jul 2026 12:01:59 +0000
Subject: [PATCH 2/2] ci: cancel superseded runs to cut Actions minutes

---
 .github/workflows/links.yml | 6 ++++++
 .github/workflows/lint.yml  | 6 ++++++
 .github/workflows/pages.yml | 8 ++++++++
 3 files changed, 20 insertions(+)

diff --git a/.github/workflows/links.yml b/.github/workflows/links.yml
index c22556d..b972e22 100644
--- a/.github/workflows/links.yml
+++ b/.github/workflows/links.yml
@@ -16,6 +16,12 @@ on:
 permissions:
   contents: read
 
+# Cancel superseded link-check runs when a branch is re-pushed. Scheduled and
+# PR runs use distinct refs, so the weekly link-rot job is unaffected.
+concurrency:
+  group: links-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   links:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 6b26d19..c66023b 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -10,6 +10,12 @@ on:
 permissions:
   contents: read
 
+# Cancel superseded lint runs when a branch is re-pushed (e.g. Renovate
+# automerge, bot PRs) to avoid burning minutes on stale commits.
+concurrency:
+  group: lint-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   lint:
     uses: DevSecNinja/.github/.github/workflows/lint.yml@27fd66740c629ea38380dcd3bf93e7bc74c54247 # v1.9.0
diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml
index 37f1bac..c9c10e5 100644
--- a/.github/workflows/pages.yml
+++ b/.github/workflows/pages.yml
@@ -20,6 +20,14 @@ on:
 permissions:
   contents: read
 
+# Cancel superseded PR preview builds when a branch is re-pushed (common with
+# Renovate automerge and bot PRs). Grouping by ref keeps production deploys on
+# main isolated; cancel-in-progress is limited to pull requests so an in-flight
+# production deploy is never interrupted.
+concurrency:
+  group: pages-${{ github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
 jobs:
   pages:
     uses: DevSecNinja/.github/.github/workflows/pages.yml@27fd66740c629ea38380dcd3bf93e7bc74c54247 # v1.9.0