Testing: cancel superseded PR CI runs via concurrency groups

.github/workflows/android_gradle.yml

@@ -7,8 +7,8 @@ on:
     branches: [ 'master' ]
 
 concurrency:
-  group: android-${{ github.head_ref || github.ref }}
-  cancel-in-progress: true
+  group: android-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
 
 jobs:
   build_wolfssljni:

.github/workflows/android_gradle_fipsready.yml

@@ -7,8 +7,8 @@ on:
     branches: [ 'master' ]
 
 concurrency:
-  group: android-fips-${{ github.head_ref || github.ref }}
-  cancel-in-progress: true
+  group: android-fips-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
 
 jobs:
   build_wolfssljni_fipsready:

.github/workflows/check-file-lists.yml

@@ -4,6 +4,11 @@ on:
   pull_request:
     branches: [ '*' ]
 
+# Cancel superseded in-progress runs for the same PR.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
 jobs:
   check-file-lists:
     runs-on: ubuntu-latest

.github/workflows/comment-style-check.yml

@@ -8,6 +8,11 @@ on:
       - '**/*.c'
       - '**/*.h'
 
+# Cancel superseded in-progress runs for the same PR.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
 jobs:
   check-comment-style:
     runs-on: ubuntu-latest

.github/workflows/fips-ready-dual-provider.yml

@@ -6,6 +6,12 @@ on:
   pull_request:
     branches: [ 'master' ]
 
+# Cancel superseded in-progress runs for the same PR. Runs
+# triggered by push events are never cancelled.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
 jobs:
   dual-provider-fips-test:
     runs-on: ubuntu-latest

.github/workflows/java-module-test.yml

@@ -6,6 +6,12 @@ on:
   pull_request:
     branches: [ '*' ]
 
+# Cancel superseded in-progress runs for the same PR. Runs
+# triggered by push events are never cancelled.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
 jobs:
   # Test Java 9+ module support (JPMS)
   # Verifies that module-info.java is properly compiled and the resulting

.github/workflows/jni-patched-ci.yml

@@ -11,6 +11,12 @@ on:
   pull_request:
     branches: [ 'master' ]
 
+# Cancel superseded in-progress runs for the same PR. Runs
+# triggered by push events are never cancelled.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
 jobs:
   resolve_wolfssl_ref:
     runs-on: ubuntu-latest

.github/workflows/line-length-check.yml

@@ -4,6 +4,11 @@ on:
   pull_request:
     branches: [ '*' ]
 
+# Cancel superseded in-progress runs for the same PR.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
 jobs:
   line-length-check:
     runs-on: ubuntu-latest

.github/workflows/linux-32bit.yml

@@ -6,6 +6,12 @@ on:
   pull_request:
     branches: [ 'master' ]
 
+# Cancel superseded in-progress runs for the same PR. Runs
+# triggered by push events are never cancelled.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
 jobs:
   # Linux 32-bit build using Zulu x86 JDK
   # Tests JNI pointer handling and 32-bit specific code paths

.github/workflows/main.yml

@@ -6,6 +6,12 @@ on:
   pull_request:
     branches: [ 'master' ]
 
+# Cancel superseded in-progress runs for the same PR. Runs
+# triggered by push events are never cancelled.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
 jobs:
   # Oracle JDK (Linux, Mac)
   linux-oracle:

.github/workflows/scan-build.yml

@@ -6,6 +6,12 @@ on:
   pull_request:
     branches: [ '*' ]
 
+# Cancel superseded in-progress runs for the same PR. Runs
+# triggered by push events are never cancelled.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
 jobs:
   scan-build:
     runs-on: ubuntu-latest

.github/workflows/spotbugs.yml

@@ -8,6 +8,11 @@ on:
       - 'build.xml'
       - 'spotbugs-exclude.xml'
 
+# Cancel superseded in-progress runs for the same PR.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
 jobs:
   spotbugs:
     runs-on: ubuntu-latest

.github/workflows/stable-wolfssl-releases.yml

@@ -4,6 +4,11 @@ on:
   pull_request:
     branches: [ 'master' ]
 
+# Cancel superseded in-progress runs for the same PR.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
 jobs:
   # First job: dynamically fetch the last 3 stable wolfSSL release tags
   get-stable-releases:

.github/workflows/undefined-sanitizer.yml

@@ -6,6 +6,12 @@ on:
   pull_request:
     branches: [ 'master' ]
 
+# Cancel superseded in-progress runs for the same PR. Runs
+# triggered by push events are never cancelled.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
 jobs:
   # Run UBSan build and test on Linux only for undefined behavior detection
   ubsan: