[anish-sujanani]

Add timeout-minutes to jobs that have none

Addresses PM_GH_REPO_024 — Workflow jobs must declare a timeout.

A job with no timeout-minutes inherits GitHub's default of 360 minutes, so a hung job
holds a runner for six hours before the platform stops it. This bounds 1 job;
worst case for this repo drops from 360 runner-minutes to 5.

Proposed values

Workflow	Job	Successful runs sampled	p50	p90	max	timeout-minutes
publish_pypi.yml	deploy	0	—	—	—	5

1 of 1 job had no successful run retained by the Actions API, so no measurement is shown. Those values come from reading the steps — dependency install, container build, infrastructure apply, or a declared retry/polling budget — not from a guess.

How these were calculated

timeout-minutes = min(350, max(3, ceil(m x slowest SUCCESSFUL run)))
    m = 2.0 under 30m   1.5 for 30-120m   1.3 above 120m

• Source: GET /repos/{owner}/{repo}/actions/runs/{id}/jobs, per-job started_at to
  completed_at over the 50 most recent completed runs of each workflow. That is the same
  clock timeout-minutes uses: it starts when the job begins executing and excludes queue
  and runner-acquisition time, so it will read lower than the run duration shown in the
  Actions tab.
• Only successful runs were counted. Cancelled and failed runs measure when someone hit
  cancel or when a job died, not how long the work takes.
• Floor of 5 rather than 3 for any job that installs dependencies or runs a build or test
  suite. A 3-minute floor killed a legitimate job in CI earlier in this rollout.
• 350 cap because GitHub-hosted runners hard-stop at 360, so anything above it is decorative.

Verification

• The parsed YAML is identical before and after with timeout-minutes stripped from both
  trees, so nothing else moved.
• The diff adds only timeout-minutes: lines and deletes nothing.
• actionlint reports the same findings before and after.
• Re-running the tool refuses every job, so the change is idempotent.

Break risk

A timeout can only stop a job that exceeds it. If any value is tighter than you want, say so
and I will raise it — a loose bound still fixes the finding.

[nitpickybot]

Adds timeout-minutes: 5 to the single deploy job in publish_pypi.yml. Small, low-risk hardening change; a PyPI build-and-publish job normally finishes well under 5 minutes. No issues found.

Review Scope

• Mode: Full pull request
• Range: Full pull request through ee67af57b40dba560d923fc936a1452cccc3d687
• Current range coverage: Complete
• Cumulative pull request coverage: Complete

---

This review is complete for the current scope. Addressing all critical and warning findings above satisfies the review; suggestions are optional. Request another review only if subsequent changes introduce new behavior or materially expand the pull request's scope.