gh-actions

# Optimal GitHub Actions Production-tested patterns + 2025-2026 best practices. ## Quick Start: Which Workflow? | Need | Template | Reference | |------|----------|-----------| | CI on push/PR | `ci.yml` | [CI-CORE](references/CI-CORE.md) | | Release on tag | `release.yml` | [RELEASE-BUILD](references/RELEASE-BUILD.md) | | Nightly fuzz/bench | `fuzz.yml` | [TESTING](references/TESTING.md) | | Dependency updates | `dependabot.yml` | [DEPENDABOT](references/DEPENDABOT.md) | --- ## Core Patterns (Every Workflow) ```yaml on: push: branches: [main] pull_request: workflow_dispatch: concurrency: group: ${{ github.workflow }}-${{ github.ref }} cancel-in-progress: true # false for releases permissions: contents: read # Minimal by default jobs: build: timeout-minutes: 30 # Never use default 6h ``` --- ## Language Quick Reference | Language | Setup | Template | |----------|-------|----------| | **Rust** | `dtolnay/rust-toolchain@stable` | [TEMPLATE-RUST](references/TEMPLATE-RUST.md) | | **Go** | `actions/setup-go@v6` | [TEMPLATE-GO](references/TEMPLATE-GO.md) | | **TypeScript** | `oven-sh/setup-bun@v2` | [TEMPLATE-TS](references/TEMPLATE-TS.md) | | **Bash** | — | [TEMPLATE-BASH](references/TEMPLATE-BASH.md) | | **Python** | `astral-sh/setup-uv@v7` | [TEMPLATE-PYTHON](references/TEMPLATE-PYTHON.md) | --- ## Cross-Platform Matrix (Native ARM 2025+) ```yaml strategy: fail-fast: false matrix: include: - os: ubuntu-latest # Linux x6...