Changelog

Step insight and flaky tests

• Every step in every job carries a timing, and each run is compared against its own history per workflow and matrix leg. Slower-than-usual steps are called out on the run.
• JUnit, TAP and CTRF reports are discovered in the job workspace with no workflow change. A test that disagreed with itself at one commit is named on the pull request as one warning — never a second failure.

Provenance and reproduction

• Every push leaves a verdict for every workflow file, including the ones that ran nothing, naming the filter that said no as the workflow wrote it.
• A failed job prints the exact command to reproduce it locally, with every secret named and never carried.

Gates, environments, schedules and OIDC

• concurrency groups with cancel-in-progress, at run and job level.
• environment with required reviewers, wait timers and branch policies.
• on: schedule, on: workflow_run and on: repository_dispatch.
• permissions, fully resolved, and id-token: write for short-lived cloud credentials.
• Remote reusable workflows.

Artifacts

• actions/upload-artifact and actions/download-artifact (v4), with retention.

Cache

• actions/cache and everything built on @actions/cache, with the same key and restore-key semantics.

Larger runners

• Named sizes pristine-2core, pristine-4core and pristine-8core, each with an -x64 variant, included in every plan.