ci(release): cap bundle jobs at 30 minutes

[senamakel]

Run 37000249529 (v0.7.3) failed in 'Module bundle (macos-26-x86_64)': the hosted runner lost communication with GitHub while installing the Rust toolchain and the job was reaped after ~45 min. Infra flake, not a code or linker issue. This adds timeout-minutes: 30 so a hung runner fails fast; recovery stays the existing_tag dispatch.

Summary by CodeRabbit

• Chores
  • Native bundle builds now stop automatically after 30 minutes.

[tinysweeper]

Tiny Sweeper review

Tiny Sweeper reviewed this change across 6 lane(s) and found 0 active actionable finding(s). Detailed lane evidence and any incomplete work are listed below.

State: Incomplete
Priority: none
Reviewed head: 9df74063dead
Updated: 1790944422 (Unix time)

Review snapshot

Change surface	Files	Review signal	Count
Production	0	Active findings	0
Tests	0	Noted findings	0
Documentation	0	Resolved findings	0
Configuration	1	Pending checks/questions	2

Completeness: Incomplete
Test assessment: No supported feature-to-test mapping was available; this does not mean tests are absent or passed.

What changed

The review could not produce a supported behavioral summary; inspect the cited changed surface and lane details below.

Features

None identified with supported citations.

Tests

No supported feature-to-test mapping was produced. Test execution is not inferred.

Findings

No active actionable findings.

Could not review: .github/workflows/release.yml

Before merge

• Complete the critique review for .github/workflows/release.yml.
• Complete the security review for .github/workflows/release.yml.

Agent review details

critique

• Conclusion: Neutral
• Scope reviewed: incomplete; unanswered: .github/workflows/release.yml
• Lane summary: Reviewed 0 files; 0 findings. 1 file could not be reviewed: .github/workflows/release.yml.

security

• Conclusion: Neutral
• Scope reviewed: incomplete; unanswered: .github/workflows/release.yml
• Lane summary: Reviewed 0 files; 0 findings. 1 file could not be reviewed: .github/workflows/release.yml.

tests

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: No behavioural change: nothing outside documentation, configuration and tests.

commits

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: Nothing sensitive found in what this pull request commits.

description

• Conclusion: Success
• Scope reviewed: all assigned evidence
• Lane summary: _Code retrieval was unavailable (model: ladder embeddings returned 402 Payment Required: {"error":"Insufficient USD or Diem balance to complete request. Visit https://venice\.ai/settings/api to add credits."}), so this review saw the diff alone._ _1 memory call(s) failed (model: cortex: v1/answer: timed out after 20s), so this review saw part of what the engine holds._

e2e

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: No behavioural change: nothing outside documentation, configuration and tests.

Evidence and run details

• Models: deepseek/deepseek-v4-flash
• Spend: $0.001047
• Tokens: 7699 input · 1969 output · 0 cached · 0 embedding

Head	State	Pass summary
9df74063dead	incomplete	0 active finding(s), 0 resolved finding(s) (at 1790944422)

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-02T12:32:23.072002Z	9df7406	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: a9a4cf08-f195-4d8a-85e4-8a704fb6ceb7

📥 Commits

Reviewing files that changed from the base of the PR and between d642784 and 9df7406.

📒 Files selected for processing (1)

• .github/workflows/release.yml

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The release workflow sets a 30-minute timeout for native bundle matrix jobs. Comments describe rebuilding artifacts through the existing_tag path.

Changes

Native bundle release jobs

Layer / File(s)	Summary
Set native bundle job timeout .github/workflows/release.yml	Native bundle matrix jobs have a 30-minute timeout. Comments describe rebuilding artifacts through the existing_tag path.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to 9df74

Hung bundle jobs will fail sooner, and the existing-tag recovery path can rerun bundle and release work. No supported normal build requiring more than the new limit is established.

Architecture Summary

Architecture risk: 🔵 Low · up to 9df74

The changed surface does not map to a changed system, dependency edge, entrypoint, or external dependency.

Changed systems: None identified.

Architecture concerns
No architecture-level concerns identified.

Review details

Before / after behavior

• observed — Modified behavior in .github/workflows/release.yml: Added a 30-minute timeout to each native bundle matrix job; the preceding comments describe the timeout and recovery through existing_tag.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the main change: adding a 30-minute limit to release bundle jobs.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

_{A rabbit checks the release clock,
Thirty minutes marks each job.
If bundles need another run,
existing_tag can begin again.
Then off I hop beneath the moon.}

_{Comment @coderabbitai help to get the list of available commands.}

[tinysweeper]

tinysweeper found nothing blocking, but could not review everything, so this is not an approval: .github/workflows/release.yml.

             $0.0010 · 7,699 in / 1,969 out · 0 cached (0%) · deepseek/deepseek-v4-flash
description: $0.0007 · 6,421 in / 491 out   · 0 cached (0%) · deepseek/deepseek-v4-flash