From 94212b9d4ae210f7d7b5fa1fe53c36819b8cc4a0 Mon Sep 17 00:00:00 2001
From: Claude Code <claude@siax.io>
Date: Wed, 11 Nov 2026 00:31:41 +0100
Subject: [PATCH] =?UTF-8?q?ci:=20N6-komplett=20concurrency=20och=20push-fi?=
 =?UTF-8?q?lter=20(r=C3=B6d=20tr=C3=A5d,=20jobbstorm=20=C2=A74=E2=80=935)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Enligt server-config ci/jobbstorm-2026-11-10 §4–5:
- masterplan-lock.yml: push bara på main (pull_request täcker feature-grenar,
  ingen dubbelkörning) och kanonisk grupp ${{ gitea.workflow }}-${{ gitea.ref }}.
  Gruppen ${{ github.head_ref || github.ref }} slog inte ihop push- och
  PR-körningen (refs/heads/<gren> mot <gren>), jobbstorm orsak C.
- ci.yml, security.yml: kanonisk grupp ${{ gitea.workflow }}-${{ gitea.ref }}.

Bara concurrency och push-filter ändras (workflow-diff-guard.py ok=true).
Grenskyddet kräver sedan bara "masterplan-lock / check (pull_request)",
som fortsatt rapporteras på varje PR (regel b).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 .gitea/workflows/ci.yml              | 3 ++-
 .gitea/workflows/masterplan-lock.yml | 5 +++--
 .gitea/workflows/security.yml        | 3 ++-
 3 files changed, 7 insertions(+), 4 deletions(-)

diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 27edcb062..963a8e6cd 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -5,8 +5,9 @@ on:
     branches: ["main"]
   workflow_dispatch:
 
+# N6 (server-config ci/jobbstorm-2026-11-10 §4): en ny commit på samma PR/gren avbryter den inaktuella körningen.
 concurrency:
-  group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
+  group: ${{ gitea.workflow }}-${{ gitea.ref }}
   cancel-in-progress: true
 
 jobs:
diff --git a/.gitea/workflows/masterplan-lock.yml b/.gitea/workflows/masterplan-lock.yml
index 6565d8a59..713f68d76 100644
--- a/.gitea/workflows/masterplan-lock.yml
+++ b/.gitea/workflows/masterplan-lock.yml
@@ -8,12 +8,13 @@ name: masterplan-lock
 
 on:
   push:
-    branches: ["**"]
+    branches: [main]
   pull_request:
   workflow_dispatch:
 
+# N6 (server-config ci/jobbstorm-2026-11-10 §4): en ny commit på samma PR/gren avbryter den inaktuella körningen.
 concurrency:
-  group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
+  group: ${{ gitea.workflow }}-${{ gitea.ref }}
   cancel-in-progress: true
 
 jobs:
diff --git a/.gitea/workflows/security.yml b/.gitea/workflows/security.yml
index 5ab24d3c3..f442d3979 100644
--- a/.gitea/workflows/security.yml
+++ b/.gitea/workflows/security.yml
@@ -27,8 +27,9 @@ on:
   schedule:
     - cron: "17 2 * * *"
 permissions: { contents: read }
+# N6 (server-config ci/jobbstorm-2026-11-10 §4): en ny commit på samma PR/gren avbryter den inaktuella körningen.
 concurrency:
-  group: security-${{ github.ref }}
+  group: ${{ gitea.workflow }}-${{ gitea.ref }}
   cancel-in-progress: true
 
 jobs:
-- 
2.54.0