From fba0f852130cd0fdf12e6c164e97cb0d23f5176c Mon Sep 17 00:00:00 2001
From: Matthew Jackson <1085847+MattJackson@users.noreply.github.com>
Date: Sun, 11 Oct 2026 05:54:10 +0000
Subject: [PATCH] fleet: render the busbar-release plugin template
 (23713103556d)

busbar-release plugin heal busbar-store-postgres: template/ at 23713103556dae96388c928457935ea21dac7d09, busbar pin 7356bbfb6baeb0e9245a59dc74f8b4bfadb2c5a4 (unchanged), dependency policy at busbar 7356bbfb6baeb0e9245a59dc74f8b4bfadb2c5a4, plugins.yaml at busbar 477c11d3d99655cf9c7c4de34a10093c860b48c1.
---
 .github/workflows/ci.yml                | 14 ++++++++++++--
 .github/workflows/consumer-verify.yml   |  4 ++--
 .github/workflows/dependabot-bundle.yml |  2 +-
 3 files changed, 15 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d13d168..5b7367b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -6,14 +6,24 @@
 name: ci
 
 on:
+  # A tree is tested once: on its pull request into dev and on the push that lands it on dev. qa and
+  # main take dev's commits by pull request whose head is that tested commit: the checks it carries
+  # from dev's run satisfy the ruleset, and nothing re-tests it. Any other head: run this by hand
+  # (workflow_dispatch) on its branch.
   push:
-    branches: [dev, qa, main]
+    branches: [dev]
   pull_request:
-    branches: [dev, qa, main]
+    branches: [dev]
   workflow_dispatch: {}
   # release.yml runs this file on the tagged commit before it publishes.
   workflow_call: {}
 
+# A newer push to a pull request cancels its older run (only the newest commit can merge); a push to
+# dev, a dispatch and release.yml's call run to the end.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event_name == 'pull_request' && github.ref || github.sha }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
 permissions:
   contents: read
 
diff --git a/.github/workflows/consumer-verify.yml b/.github/workflows/consumer-verify.yml
index 71f5bfc..04869ff 100644
--- a/.github/workflows/consumer-verify.yml
+++ b/.github/workflows/consumer-verify.yml
@@ -1,12 +1,12 @@
 # RENDERED by `busbar-release plugin heal busbar-store-postgres` from GetBusbar/busbar-release template/; a hand
-# edit is overwritten by the next sync. Daily: does the newest
+# edit is overwritten by the next sync. Weekly: does the newest
 # PUBLISHED release still work for a user (busbar's plugin-consumer-verify.yml)? A publish-time check
 # cannot see an artifact that rots afterwards; release.yml verifies each release as it publishes.
 name: consumer-verify
 
 on:
   schedule:
-    - cron: "10 9 * * *"
+    - cron: "10 9 * * 1"
   workflow_dispatch:
     inputs:
       version:
diff --git a/.github/workflows/dependabot-bundle.yml b/.github/workflows/dependabot-bundle.yml
index 0e32ef6..b0d820e 100644
--- a/.github/workflows/dependabot-bundle.yml
+++ b/.github/workflows/dependabot-bundle.yml
@@ -13,7 +13,7 @@ on:
     types: [opened, synchronize]
     branches: [dev]
   schedule:
-    - cron: "23 5 * * *"
+    - cron: "23 5 * * 1"
   workflow_dispatch:
 permissions:
   contents: write