ci: configure timeouts for all jobs (#4685)

.github/workflows/automatic-approval.yml

@@ -8,6 +8,7 @@ permissions: {}
 jobs:
   approve-automatic-prs:
     runs-on: ubuntu-latest
+    timeout-minutes: 2
     if: github.actor_id == 158783068 || github.actor_id == 190541745 || github.actor_id == 210161987 # Id of renovate bot and crowdin bot see https://api.github.com/users/homarr-renovate%5Bbot%5D and https://api.github.com/users/homarr-crowdin%5Bbot%5D and https://api.github.com/users/homarr-update-contributors%5Bbot%5D
     steps:
       - name: Checkout code

.github/workflows/code-quality.yml

@@ -23,6 +23,7 @@ env:
 jobs:
   lint:
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     steps:
       - uses: actions/checkout@v6
 
@@ -38,6 +39,7 @@ jobs:
 
   format:
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     steps:
       - uses: actions/checkout@v6
 
@@ -49,6 +51,7 @@ jobs:
 
   typecheck:
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     steps:
       - uses: actions/checkout@v6
 
@@ -60,6 +63,7 @@ jobs:
 
   test:
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     steps:
       - uses: actions/checkout@v6
 
@@ -77,6 +81,7 @@ jobs:
 
   e2e:
     runs-on: ubuntu-latest
+    timeout-minutes: 15
 
     steps:
       - uses: actions/checkout@v6
@@ -101,6 +106,7 @@ jobs:
 
   build:
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     steps:
       - uses: actions/checkout@v6
       - name: Setup

.github/workflows/conventions-semantic-pull-requests.yml

@@ -13,7 +13,8 @@ permissions:
 jobs:
   validate-pull-request-title:
     runs-on: ubuntu-latest
+    timeout-minutes: 1
     steps:
       - uses: amannn/action-semantic-pull-request@v6
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/crowdin-schedule-download.yml

@@ -10,6 +10,7 @@ permissions:
 
 jobs:
   download-crowdin-translations:
+    timeout-minutes: 5
     runs-on: ubuntu-latest
 
     steps:

.github/workflows/crowdin-upload.yml

@@ -14,6 +14,7 @@ jobs:
     # Don't run this action if the downloaded translations are being pushed
     if: "!contains(github.event.head_commit.message, 'chore(lang)')"
     runs-on: ubuntu-latest
+    timeout-minutes: 5
 
     steps:
       - name: Checkout

.github/workflows/deployment-docker-image.yml

@@ -32,6 +32,7 @@ jobs:
   release:
     name: Create tag and release
     runs-on: ubuntu-latest
+    timeout-minutes: 5
     env:
       SKIP_RELEASE: ${{ github.event_name == 'workflow_dispatch' || github.ref_name == 'dev' }}
     outputs:
@@ -112,6 +113,7 @@ jobs:
     name: Build docker image for amd64
     needs: release
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     outputs:
       digest: ${{ steps.build.outputs.digest }}
     steps:
@@ -150,6 +152,7 @@ jobs:
     name: Build docker image for arm64
     needs: release
     runs-on: ubuntu-24.04-arm
+    timeout-minutes: 20
     outputs:
       digest: ${{ steps.build.outputs.digest }}
     steps:
@@ -188,6 +191,7 @@ jobs:
     name: Extract amd64 asset from docker image
     needs: [release, build-amd64]
     runs-on: ubuntu-latest
+    timeout-minutes: 2
     steps:
       - name: Extract amd64
         if: needs.release.outputs.skipped == 'false'
@@ -203,6 +207,7 @@ jobs:
     name: Extract arm64 asset from docker image
     needs: [release, build-arm64]
     runs-on: ubuntu-24.04-arm
+    timeout-minutes: 2
     steps:
       - name: Extract arm64
         if: needs.release.outputs.skipped == 'false'
@@ -217,6 +222,7 @@ jobs:
     name: Complete deployment and notify
     needs: [release, build-amd64, build-arm64, extract-asset-amd64, extract-asset-arm64]
     runs-on: ubuntu-latest
+    timeout-minutes: 5
     env:
       NEXT_VERSION: ${{ needs.release.outputs.version }}
       DEPLOY_LATEST: ${{ github.ref_name == 'main' }}

.github/workflows/deployment-weekly-release.yml

@@ -18,6 +18,7 @@ permissions:
 jobs:
   create-and-merge-pr:
     runs-on: ubuntu-latest
+    timeout-minutes: 2
     steps:
       - name: Discord notification
         if: ${{ github.events.inputs.send-notifications }}

.github/workflows/on-pr-renovate-validate.yml

@@ -11,6 +11,7 @@ on:
 jobs:
   renovate-validate:
     runs-on: ubuntu-latest
+    timeout-minutes: 2
     steps:
       - uses: actions/checkout@v6
       - run: |

.github/workflows/on-release.yml

@@ -8,6 +8,7 @@ jobs:
   trigger-docs-release:
     name: Trigger Documentation Release
     runs-on: ubuntu-latest
+    timeout-minutes: 2
     steps:
       - name: Obtain token
         id: obtainToken
@@ -39,6 +40,7 @@ jobs:
   update-bug-report-template:
     name: Update Bug Report Template
     runs-on: ubuntu-latest
+    timeout-minutes: 5
     steps:
       - name: Obtain token
         id: obtainToken

.github/workflows/skip-renovate-stability-days.yml

@@ -10,6 +10,7 @@ jobs:
     if: ${{ !startsWith(github.head_ref, 'renovate/') }}
     name: Skip Stability Days
     runs-on: ubuntu-latest
+    timeout-minutes: 1
     steps:
       - name: Add status check
         env:

.github/workflows/update-contributors.yml

@@ -14,6 +14,7 @@ permissions:
 jobs:
   update-contributors:
     runs-on: ubuntu-latest
+    timeout-minutes: 2
     strategy:
       matrix:
         node-version: [22]

.github/workflows/update-integration-list.yml

@@ -17,6 +17,7 @@ jobs:
       group: update-integration
       cancel-in-progress: false
     runs-on: ubuntu-latest
+    timeout-minutes: 5
     steps:
       - name: Obtain token
         id: obtainToken