From 8142d2f1ad3fc02c0a2bf335334de1aa41c996bb Mon Sep 17 00:00:00 2001
From: Patrick Buckley <buckleypm@gmail.com>
Date: Thu, 2 Apr 2026 17:23:01 -0700
Subject: [PATCH] fix: add concurrency groups to publish workflows

Multiple CI completions for the same commit (tag push + branch push)
caused duplicate publish and docker runs. Concurrency group keyed on
head_sha ensures only one publish runs per commit.
---
 .github/workflows/docker-publish.yml | 4 ++++
 .github/workflows/publish.yml        | 4 ++++
 2 files changed, 8 insertions(+)

diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index 6f1eb5a8..87c7aa89 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -5,6 +5,10 @@ on:
     workflows: ["CI"]
     types: [completed]
 
+concurrency:
+  group: docker-${{ github.event.workflow_run.head_sha }}
+  cancel-in-progress: true
+
 permissions:
   contents: read
   packages: write
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 30467dcf..0c96d1ba 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -5,6 +5,10 @@ on:
     workflows: ["CI"]
     types: [completed]
 
+concurrency:
+  group: publish-${{ github.event.workflow_run.head_sha }}
+  cancel-in-progress: true
+
 permissions:
   contents: write
   id-token: write