From e4a3b98e0cbd7dd8cfc225df1be51939e90c9ea8 Mon Sep 17 00:00:00 2001
From: Michael Panchenko <--get>
Date: Thu, 3 Jul 2025 18:01:03 +0200
Subject: [PATCH 1/2] GH: don't run docker build on PRs, disable publish for
 now

---
 .github/workflows/docker.yml   | 2 --
 .github/workflows/publish.yaml | 7 +++++--
 2 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 9e9d0ed1..e1be6b86 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -4,8 +4,6 @@ on:
   push:
     branches: [ main ]
     tags: [ 'v*' ]
-  pull_request:
-    branches: [ main ]
 
 env:
   REGISTRY: ghcr.io
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index ded9968a..ee6a8177 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -1,8 +1,11 @@
 name: Upload Python Package
 
 on:
-  release:
-    types: [created]
+  workflow_dispatch:  # Manual trigger only - workflow disabled from auto-running
+
+#on:
+#  release:
+#    types: [created]
 
 jobs:
   deploy:

From 9028a02f8fc4e2561e3fcbcf83d0002f15dae65d Mon Sep 17 00:00:00 2001
From: Michael Panchenko <--get>
Date: Fri, 4 Jul 2025 12:49:46 +0200
Subject: [PATCH 2/2] GH: add timeouts

---
 .github/workflows/codespell.yml      | 1 +
 .github/workflows/docker.yml         | 1 +
 .github/workflows/lint_and_docs.yaml | 1 +
 .github/workflows/pytest.yml         | 1 +
 4 files changed, 4 insertions(+)

diff --git a/.github/workflows/codespell.yml b/.github/workflows/codespell.yml
index b2316674..6df6169c 100644
--- a/.github/workflows/codespell.yml
+++ b/.github/workflows/codespell.yml
@@ -15,6 +15,7 @@ jobs:
   codespell:
     name: Check for spelling errors
     runs-on: ubuntu-latest
+    timeout-minutes: 2
 
     steps:
       - name: Checkout
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index e1be6b86..a89e7fd6 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -12,6 +12,7 @@ env:
 jobs:
   build-and-push:
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     permissions:
       contents: read
       packages: write
diff --git a/.github/workflows/lint_and_docs.yaml b/.github/workflows/lint_and_docs.yaml
index 03cdad94..daef60c8 100644
--- a/.github/workflows/lint_and_docs.yaml
+++ b/.github/workflows/lint_and_docs.yaml
@@ -6,6 +6,7 @@ on:
 jobs:
   check:
     runs-on: ubuntu-latest
+    timeout-minutes: 5
     permissions:
       id-token: write
       pages: write
diff --git a/.github/workflows/pytest.yml b/.github/workflows/pytest.yml
index 14f38131..e510b722 100644
--- a/.github/workflows/pytest.yml
+++ b/.github/workflows/pytest.yml
@@ -14,6 +14,7 @@ jobs:
   cpu:
     name: Tests on ${{ matrix.os }}
     runs-on: ${{ matrix.os }}
+    timeout-minutes: 15
     if: "!contains(github.event.head_commit.message, 'ci skip')"
     strategy:
       fail-fast: false