Check Third-Party Packager Compatibility workflow (CalebBell/ht)

The Check Third-Party Packager Compatibility workflow from CalebBell/ht, explained and optimized by Latchkey.

CI health: C - fair

Run this on Latchkey for self-healing, caching, and up to 58% lower cost.

Grade your own workflow free or run it on Latchkey →

Source: CalebBell/ht.github/workflows/build_third_party_packagers.ymlLicense MITView source

What it does

This is the Check Third-Party Packager Compatibility workflow from the CalebBell/ht repository, a real project running GitHub Actions. It is shown here with attribution under its MIT license.

Below, Latchkey shows a faster, safer version produced by its optimization engine.

The workflow

workflow (.yml)

name: Check Third-Party Packager Compatibility

on:
  push:
    branches: [release]
  pull_request:
    branches: [master, release]

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: ${{ github.ref != 'refs/heads/master' && github.ref != 'refs/heads/release' }}

jobs:
  build:
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        python-version: ['3.13']
        os: [windows-latest, ubuntu-latest, macos-15-intel, macos-latest]
        packager: [pyinstaller, cxfreeze, nuitka]

    steps:
    - uses: actions/checkout@v4

    - name: Set up Python ${{ matrix.python-version }}
      uses: actions/setup-python@v5
      with:
        python-version: ${{ matrix.python-version }}

    - name: Install uv
      uses: astral-sh/setup-uv@v7
      with:
        enable-cache: true
        cache-dependency-glob: "pyproject.toml"

    - name: Install just
      uses: extractions/setup-just@v2

    # https://stackoverflow.com/questions/69250165/github-action-windows-runner-how-to-remove-all-sh-exe-from-path/69251820#69251820
    # https://github.com/actions/runner-images/issues/7253#issuecomment-1500121978
    # https://github.com/actions/runner-images/discussions/6049
    - name: Remove windows bash
      if: runner.os == 'Windows'
      shell: bash
      run: rm 'C:/Windows/System32/bash.exe'

    - name: Test ${{ matrix.packager }}
      if: runner.os != 'Windows'
      run: |
        just test-${{ matrix.packager }}

The same workflow, on Latchkey

Estimated ~20% faster on cache hits, plus fewer wasted runs and a safer supply chain. Added and changed lines are highlighted.

name: Check Third-Party Packager Compatibility
 
on:
  push:
    branches: [release]
  pull_request:
    branches: [master, release]
 
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: ${{ github.ref != 'refs/heads/master' && github.ref != 'refs/heads/release' }}
 
jobs:
  build:
    timeout-minutes: 30
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        python-version: ['3.13']
        os: [windows-latest, ubuntu-latest, macos-15-intel, macos-latest]
        packager: [pyinstaller, cxfreeze, nuitka]
 
    steps:
    - uses: actions/checkout@v4
 
    - name: Set up Python ${{ matrix.python-version }}
      uses: actions/setup-python@v5
      with:
        cache: 'pip'
        python-version: ${{ matrix.python-version }}
 
    - name: Install uv
      uses: astral-sh/setup-uv@v7
      with:
        enable-cache: true
        cache-dependency-glob: "pyproject.toml"
 
    - name: Install just
      uses: extractions/setup-just@v2
 
    # https://stackoverflow.com/questions/69250165/github-action-windows-runner-how-to-remove-all-sh-exe-from-path/69251820#69251820
    # https://github.com/actions/runner-images/issues/7253#issuecomment-1500121978
    # https://github.com/actions/runner-images/discussions/6049
    - name: Remove windows bash
      if: runner.os == 'Windows'
      shell: bash
      run: rm 'C:/Windows/System32/bash.exe'
 
    - name: Test ${{ matrix.packager }}
      if: runner.os != 'Windows'
      run: |
        just test-${{ matrix.packager }}

What changed

Cache dependency installs on the setup step so they are served from cache.
Add a job timeout so a hung step cannot burn hours of runner time.

2 third-party actions are referenced by a movable tag. Pin them to the commit SHA (Latchkey resolves and applies this automatically) so a repointed tag cannot change what runs.

This workflow runs 1 job (12 with the matrix expanded) per trigger. On Latchkey the same minutes cost up to 58% less than GitHub-hosted, with zero queue time.

Actions used in this workflow

actions/checkout actions/setup-python astral-sh/setup-uv