fix(release): queue Docker publications

.github/actionlint.yaml

@@ -29,3 +29,10 @@ paths:
       - 'constant expression "false" in condition'
       # actionlint's built-in runner label allowlist lags Blacksmith additions.
       - 'label "blacksmith-16vcpu-[^"]+" is unknown\.'
+  # GitHub Actions supports concurrency.queue, but actionlint does not yet model it.
+  .github/workflows/docker-release.yml:
+    ignore:
+      - 'unexpected key "queue" for "concurrency" section'
+  .github/workflows/docker-channel-promote.yml:
+    ignore:
+      - 'unexpected key "queue" for "concurrency" section'

.github/workflows/docker-channel-promote.yml

@@ -104,6 +104,7 @@ jobs:
     concurrency:
       group: docker-release-publish
       cancel-in-progress: false
+      queue: max
     permissions:
       contents: read
       packages: write

.github/workflows/docker-release.yml

@@ -21,6 +21,7 @@ on:
 concurrency:
   group: ${{ github.event_name == 'workflow_dispatch' && format('docker-release-manual-{0}', inputs.tag) || 'docker-release-publish' }}
   cancel-in-progress: false
+  queue: max
 
 env:
   FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true"

src/dockerfile.test.ts

@@ -524,8 +524,10 @@ describe("Dockerfile", () => {
     const promoteWorkflow = await readFile(dockerChannelPromoteWorkflowPath, "utf8");
 
     expect(releaseWorkflow).not.toContain("promote-channel");
+    expect(releaseWorkflow).toContain("queue: max");
     expect(promoteWorkflow).toContain("Docker channel promotion must be dispatched from main");
     expect(promoteWorkflow).toContain("group: docker-release-publish");
+    expect(promoteWorkflow).toContain("queue: max");
     expect(promoteWorkflow).toContain("environment: docker-release");
     expect(promoteWorkflow).toContain("node scripts/docker-channel-promote.mjs");
     expect(promoteWorkflow).toContain('--image "${GHCR_IMAGE}"');