[frederic-tingaud-sonarsource]

Part of CLP-959

concurrency.queue defaults to single, which allows only one run to sit in pending.
With cancel-in-progress: false the running job is protected, but as soon as a third run
joins the group the pending run is silently cancelled: it never executes, nothing retries
it, and no failure is reported anywhere.

This PR makes the queueing policy explicit in every concurrency block of this repository.

Workflow	queue	Rationale
.github/workflows/build.yml	inverse expression	Per-commit build/deploy: nothing may be dropped on the default branch, while PR builds must still supersede each other.

Why queue is an expression here

cancel-in-progress in build.yml is an expression, and GitHub rejects
queue: max combined with cancel-in-progress: true with a workflow validation error.
That error does fire for expressions, not just the literal true — so a plain queue: max
would have stopped PR runs from starting at all.

Setting queue to the exact logical inverse of the cancel expression keeps the pair valid in
both states:

Branch	cancel-in-progress	queue	Effect
default branch	false	max	every commit's run is kept and queued
PR branch	true	single	superseded PR builds are cancelled, exactly as before

Verified empirically on SonarSource/core-languages-tooling with throwaway probe workflows
(branch since deleted):

• queue: max + cancel-in-progress: <expr → true> → run created 0 jobs, "workflow file issue"
• cancel-in-progress: <expr → false> + queue: <expr → 'max'> → success
• cancel-in-progress: <expr → true> + queue: <expr → 'single'> → success
• cancel-in-progress: <expr → true> + queue: <expr → 'max'> → 0 jobs (proves the queue expression is genuinely evaluated, not ignored)

🤖 Generated with Claude Code

[hashicorp-vault-sonar-prod]

CLP-964

[gitar-bot]

Code Review ✅ Approved

🟡 Medium risk · Workflow concurrency now retains default-branch runs and supersedes PR runs

Makes concurrency queueing policy explicit across workflows to prevent pending runs from being silently cancelled. Uses conditional expressions to keep queue and cancel-in-progress compatible on both default and PR branches. No issues found.

Review coverage

🧪 Functional validation No results

📋 Rules No rules evaluated

🤖 Auto-approval Not enabled · Set up

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Counting what did not apply, without listing it.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[sonarqube-next]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube

[guillaume-dequenne]

LGTM