ci: tighten concurrency, bump actions/checkout to v5

.github/workflows/ci.yml

@@ -1,6 +1,11 @@
 name: CI
 
 on: [push, pull_request]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
 jobs:
   build-windows:
     runs-on: windows-latest
@@ -15,7 +20,7 @@ jobs:
           mingw-w64-x86_64-cmake
           mingw-w64-x86_64-openssl
           mingw-w64-x86_64-gcc
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       with:
         submodules: recursive
     - shell: msys2 {0}
@@ -29,10 +34,9 @@ jobs:
       run: |
         brew update
         brew install openssl autoconf
-        brew link openssl --force
         pkg-config --cflags openssl
         pkg-config --libs openssl
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       with:
         submodules: recursive
     - name: make
@@ -59,7 +63,7 @@ jobs:
       run: |
         sudo apt-get update
         sudo apt-get install -y libssl-dev autoconf
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       with:
         submodules: recursive
     - name: make
@@ -100,7 +104,7 @@ jobs:
       run: |
         sudo apt-get update
         sudo apt-get install -y libssl-dev autoconf
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       with:
         submodules: recursive
     - name: DB-focused tests

.github/workflows/deploy-docs.yml

@@ -3,23 +3,28 @@ on:
   push:
     branches:
       - master
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 permissions:
   contents: write
 jobs:
   deploy-gh-pages:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
       - name: 设置 Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
-          node-version: 23
+          node-version: 22
           cache: npm
-          cache-dependency-path: '**/package-lock.json'
+          cache-dependency-path: docs/package-lock.json
 
       - name: 安装依赖
         working-directory: ./docs

.github/workflows/docker.yml

@@ -6,6 +6,10 @@
   release:
     types: [ published ]
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -19,7 +23,7 @@
         variant: [alpine, slim]
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           submodules: recursive
 
@@ -70,9 +74,11 @@
           tags:   ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
   clean:
+    needs: build
+    if: github.ref == 'refs/heads/master' || github.event_name == 'release'
     runs-on: ubuntu-latest
     steps:
       - name: ghcr.io cleanup action
         uses: dataaxiom/ghcr-cleanup-action@v1
         with:
           delete-untagged: true