ci: add build timeout to all jobs

.github/workflows/build.yml

@@ -2,7 +2,7 @@
 # SPDX-License-Identifier: AGPL-3.0-or-later
 # SPDX-ArtifactOfProjectHomePage: https://github.com/Second-Hand-Friends/kleinanzeigen-bot
 #
-# https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions
+# https://docs.github.com/en/actions/writing-workflows/workflow-syntax-for-github-actions
 name: Build
 
 on:
@@ -79,6 +79,7 @@ jobs:
           PUBLISH_RELEASE: true
 
     runs-on: ${{ matrix.os }} # https://github.com/actions/runner-images#available-images
+    timeout-minutes: 10
 
     steps:
     - name: "Show: GitHub context"
@@ -252,6 +253,7 @@ jobs:
   publish-release:
   ###########################################################
     runs-on: ubuntu-latest
+    timeout-minutes: 5
     needs: 
       - build
     if: (github.ref_name == 'main' || github.ref_name == 'release') && !github.event.act
@@ -385,6 +387,7 @@ jobs:
     needs: build
     if: github.event_name == 'pull_request' && github.actor == 'dependabot[bot]'
     runs-on: ubuntu-latest
+    timeout-minutes: 5
 
     permissions:
       contents: write
@@ -404,6 +407,7 @@ jobs:
     needs: build
     if: github.event_name == 'pull_request' && github.actor == 'kleinanzeigen-bot-tu[bot]' && github.head_ref == 'dependencies/pdm'
     runs-on: ubuntu-latest
+    timeout-minutes: 5
 
     permissions:
       contents: write

.github/workflows/codeql-analysis.yml

@@ -30,7 +30,7 @@ defaults:
     shell: bash
 
 env:
-  PYTHON_VERSION: "3.12"
+  PYTHON_VERSION: "3.13.2"
 
 jobs:
 
@@ -38,6 +38,7 @@ jobs:
   analyze:
   ###########################################################
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     permissions:
       security-events: write
 

.github/workflows/stale.yml

@@ -1,4 +1,4 @@
-# https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions
+# https://docs.github.com/en/actions/writing-workflows/workflow-syntax-for-github-actions
 name: Stale issues
 
 on:
@@ -14,6 +14,7 @@ permissions:
 jobs:
   stale:
     runs-on: ubuntu-latest
+    timeout-minutes: 10
 
     steps:
     - name: Git checkout

.github/workflows/update-python-deps.yml

@@ -2,7 +2,7 @@
 # SPDX-License-Identifier: AGPL-3.0-or-later
 # SPDX-ArtifactOfProjectHomePage: https://github.com/Second-Hand-Friends/kleinanzeigen-bot/
 #
-# https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions
+# https://docs.github.com/en/actions/writing-workflows/workflow-syntax-for-github-actions
 name: Update Python Dependencies
 
 on:
@@ -25,6 +25,7 @@ jobs:
   update-python-deps:
   ###########################################################
     runs-on: ubuntu-latest
+    timeout-minutes: 10
 
     steps:
     - name: "Show: GitHub context"
@@ -38,7 +39,7 @@ jobs:
 
 
     - name: Generate GitHub Access Token
-      uses: tibdex/github-app-token@v2 #https://github.com/tibdex/github-app-token
+      uses: tibdex/github-app-token@v2  # https://github.com/tibdex/github-app-token
       id: generate_token
       # see https://github.com/peter-evans/create-pull-request/blob/main/docs/concepts-guidelines.md#authenticating-with-github-app-generated-tokens
       with: