Configure action timeouts and artifact retention duration

.github/workflows/audit-dependencies.yml

@@ -9,6 +9,7 @@ on:
 jobs:
   audit-dependencies:
     runs-on: ubuntu-latest
+    timeout-minutes: 5
     steps:
       - name: Checkout
         uses: actions/checkout@v3

.github/workflows/test-and-build.yml

@@ -5,7 +5,11 @@ on:
   pull_request:
 jobs:
   test:
+    # Don't run for pull requests from this repository to avoid duplicate builds (push also triggers build).
+    if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name != github.event.pull_request.base.repo.full_name
+    name: "Test and Build"
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     permissions:
       contents: write
     steps:
@@ -47,19 +51,21 @@ jobs:
         with:
           name: build
           path: dist/
-
+          retention-days: ${{ github.ref == 'refs/heads/main' && 7 || 1 }}
+
   call_version:
     if: github.ref == 'refs/heads/main'
     name: "Publish or create version PR"
     uses: "./.github/workflows/version.yml"
     needs: test
     secrets:
       NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-              
+
   deploy:
+    if: github.ref == 'refs/heads/main'
     runs-on: ubuntu-latest
+    timeout-minutes: 5
     needs: test
-    if: github.ref == 'refs/heads/main'
     steps:
       - name: Checkout
         uses: actions/checkout@v3

.github/workflows/version.yml

@@ -10,6 +10,7 @@ jobs:
   version:
     runs-on: ubuntu-latest
     permissions: write-all
+    timeout-minutes: 15
     steps:
       - name: Checkout
         uses: actions/checkout@v3