···2222 id-token: write # niks3 push
2323 actions: read # workers watch the farm job
24242525-# The farm's iroh endpoint id is fixed, so only one run at a time; a newer
2626-# push replaces a running build.
2525+# The farm's iroh endpoint id is fixed, so only one run at a time. A push to
2626+# master replaces a running build (an older master state or an update-pkgs
2727+# verification, which retries). Dispatched runs (update-pkgs verifying a PR,
2828+# manual runs) never cancel a running build; they wait as the group's pending
2929+# run.
2730concurrency:
2831 group: farm
2929- cancel-in-progress: true
3232+ cancel-in-progress: ${{ github.event_name == 'push' }}
30333134env:
3235 # must match the worker matrix below