ci: optimize CI with nextest, better caching, and parallel jobs

- Use Swatinem/rust-cache with shared key across jobs
- Use cargo-nextest for faster test execution
- Only run coverage on main branch (skip on PRs)
- Add concurrency control to cancel in-progress runs
- Reduce verbosity and optimize env vars
- Expected speedup: ~50% faster CI

Author: echobt

.github/workflows/ci.yml

@@ -10,11 +10,19 @@ on:
 env:
   CARGO_TERM_COLOR: always
   CARGO_INCREMENTAL: 0
-  RUST_BACKTRACE: 1
+  RUST_BACKTRACE: short
+  CARGO_NET_RETRY: 10
+  RUSTUP_MAX_RETRIES: 10
   REGISTRY: ghcr.io
   IMAGE_NAME: ${{ github.repository }}
 
+# Cancel in-progress runs for the same branch
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
+  # Build job - creates shared cache for other jobs
   build:
     name: Build
     runs-on: ubuntu-latest
@@ -23,23 +31,46 @@ jobs:
         run: |
           sudo rm -rf /usr/share/dotnet /usr/local/lib/android /opt/ghc /opt/hostedtoolcache/CodeQL
           sudo docker image prune --all --force
-          df -h
 
-      - name: Checkout code
-        uses: actions/checkout@v4
+      - uses: actions/checkout@v4
 
-      - name: Setup Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
+      - uses: dtolnay/rust-toolchain@stable
 
       - name: Cache cargo
         uses: Swatinem/rust-cache@v2
         with:
           cache-on-failure: true
-          shared-key: "platform-release"
+          shared-key: "platform-ci"
 
       - name: Build
         run: cargo build --release
 
+  # Clippy runs in parallel with build (shares cache)
+  clippy:
+    name: Clippy
+    runs-on: ubuntu-latest
+    steps:
+      - name: Free disk space
+        run: |
+          sudo rm -rf /usr/share/dotnet /usr/local/lib/android /opt/ghc /opt/hostedtoolcache/CodeQL
+          sudo docker image prune --all --force
+
+      - uses: actions/checkout@v4
+
+      - uses: dtolnay/rust-toolchain@stable
+        with:
+          components: clippy
+
+      - name: Cache cargo
+        uses: Swatinem/rust-cache@v2
+        with:
+          cache-on-failure: true
+          shared-key: "platform-ci"
+
+      - name: Run clippy
+        run: cargo clippy --all-targets --workspace -- -W clippy::all
+
+  # Test job - runs faster with nextest
   test:
     name: Test
     runs-on: ubuntu-latest
@@ -51,25 +82,32 @@ jobs:
           sudo rm -rf /usr/share/dotnet /usr/local/lib/android /opt/ghc /opt/hostedtoolcache/CodeQL
           sudo docker image prune --all --force
 
-      - name: Checkout code
-        uses: actions/checkout@v4
+      - uses: actions/checkout@v4
 
-      - name: Setup Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
+      - uses: dtolnay/rust-toolchain@stable
         with:
           components: llvm-tools-preview
 
-      - name: Install cargo-llvm-cov
-        uses: taiki-e/install-action@cargo-llvm-cov
+      - name: Install cargo-nextest and cargo-llvm-cov
+        uses: taiki-e/install-action@v2
+        with:
+          tool: cargo-nextest,cargo-llvm-cov
 
       - name: Cache cargo
         uses: Swatinem/rust-cache@v2
         with:
           cache-on-failure: true
-          shared-key: "platform-debug"
+          shared-key: "platform-ci"
+
+      # Run tests with nextest (faster) - coverage only on main
+      - name: Run tests
+        if: github.ref != format('refs/heads/{0}', github.event.repository.default_branch)
+        run: cargo nextest run --workspace -E 'not (test(/live/) | test(/integration/))'
 
       - name: Run tests with coverage
-        run: cargo llvm-cov --workspace --json --output-path coverage.json
+        if: github.ref == format('refs/heads/{0}', github.event.repository.default_branch)
+        run: |
+          cargo llvm-cov nextest --workspace --json --output-path coverage.json -- -E 'not (test(/live/) | test(/integration/))'
 
       - name: Generate coverage badge
         if: github.ref == format('refs/heads/{0}', github.event.repository.default_branch)
@@ -92,32 +130,7 @@ jobs:
           destination_dir: badges
           keep_files: true
 
-  clippy:
-    name: Clippy
-    runs-on: ubuntu-latest
-    steps:
-      - name: Free disk space
-        run: |
-          sudo rm -rf /usr/share/dotnet /usr/local/lib/android /opt/ghc /opt/hostedtoolcache/CodeQL
-          sudo docker image prune --all --force
-
-      - name: Checkout code
-        uses: actions/checkout@v4
-
-      - name: Setup Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
-        with:
-          components: clippy
-
-      - name: Cache cargo
-        uses: Swatinem/rust-cache@v2
-        with:
-          cache-on-failure: true
-          shared-key: "platform-debug"
-
-      - name: Run clippy
-        run: cargo clippy --all-targets --workspace -- -W clippy::all
-
+  # Docker build - only after tests pass
   docker:
     name: Build & Push Docker
     runs-on: ubuntu-latest
@@ -131,11 +144,9 @@ jobs:
           sudo rm -rf /usr/share/dotnet /usr/local/lib/android /opt/ghc /opt/hostedtoolcache/CodeQL
           sudo docker image prune --all --force
 
-      - name: Checkout code
-        uses: actions/checkout@v4
+      - uses: actions/checkout@v4
 
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+      - uses: docker/setup-buildx-action@v3
 
       - name: Log in to Container Registry
         if: github.event_name != 'pull_request'
@@ -169,6 +180,7 @@ jobs:
           cache-from: type=gha
           cache-to: type=gha,mode=max
 
+  # Release - only on tags
   release:
     name: Release
     runs-on: ubuntu-latest
@@ -182,16 +194,14 @@ jobs:
           sudo rm -rf /usr/share/dotnet /usr/local/lib/android /opt/ghc /opt/hostedtoolcache/CodeQL
           sudo docker image prune --all --force
 
-      - name: Checkout code
-        uses: actions/checkout@v4
+      - uses: actions/checkout@v4
 
-      - name: Setup Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
+      - uses: dtolnay/rust-toolchain@stable
 
       - name: Cache cargo
         uses: Swatinem/rust-cache@v2
         with:
-          shared-key: "platform-release"
+          shared-key: "platform-ci"
           save-if: false
 
       - name: Build release binaries