ci: fix workflow checks and drop unused CI success job

.github/workflows/cont_integration.yml

@@ -25,7 +25,7 @@ env:
 
 jobs:
   build-test:
-    name: Build and test (${{ matrix.rust }}, ${{ matrix.features }})
+    name: ${{ matrix.rust == 'msrv' && 'Build' || 'Build and test' }} (${{ matrix.rust }}, ${{ matrix.features }})
     runs-on: ubuntu-latest
     timeout-minutes: 45
     strategy:
@@ -142,7 +142,7 @@ jobs:
 
   signed-commits:
     name: Signed commits
-    # PRs only; push/workflow_dispatch skip this job (treated as skipped by CI success).
+    # PRs only; push/workflow_dispatch skip this job.
     if: github.event_name == 'pull_request'
     runs-on: ubuntu-latest
     timeout-minutes: 5
@@ -157,40 +157,3 @@ jobs:
           BASE_SHA: ${{ github.event.pull_request.base.sha }}
           HEAD_SHA: ${{ github.event.pull_request.head.sha }}
         run: ./ci/check-signed-commits.sh "$BASE_SHA" "$HEAD_SHA"
-
-  CI-success:
-    name: CI success
-    # Always evaluate results so failed or cancelled jobs cannot skip the required check.
-    if: ${{ always() }}
-    needs: [build-test, fmt, clippy, docs, signed-commits]
-    runs-on: ubuntu-latest
-    timeout-minutes: 5
-    steps:
-      - name: Require all needed jobs
-        env:
-          BUILD_TEST: ${{ needs.build-test.result }}
-          FMT: ${{ needs.fmt.result }}
-          CLIPPY: ${{ needs.clippy.result }}
-          DOCS: ${{ needs.docs.result }}
-          SIGNED_COMMITS: ${{ needs.signed-commits.result }}
-        run: |
-          failed=0
-          check() {
-            printf '%s: %s\n' "$1" "$2"
-            if [ "$2" != success ]; then
-              failed=1
-            fi
-          }
-          # PR-only job: skipped on push is OK.
-          check_pr_only() {
-            printf '%s: %s\n' "$1" "$2"
-            if [ "$2" != success ] && [ "$2" != skipped ]; then
-              failed=1
-            fi
-          }
-          check build-test "$BUILD_TEST"
-          check fmt "$FMT"
-          check clippy "$CLIPPY"
-          check docs "$DOCS"
-          check_pr_only signed-commits "$SIGNED_COMMITS"
-          exit "$failed"

.github/workflows/latest_deps.yml

@@ -2,8 +2,7 @@ name: Latest dependencies
 
 # Weekly compatibility check: `cargo update` the whole graph and build/test
 # on the current stable compiler. A failure here can be caused by a new rustc
-# or by new dependency releases; it is informational and not part of the
-# required CI success aggregate.
+# or by new dependency releases; it is informational only.
 
 on:
   schedule:

.github/workflows/workflow_checks.yml

@@ -1,7 +1,7 @@
 name: Workflow checks
 
-# Actionlint plus blocking Zizmor. SARIF is also uploaded for the security
-# dashboard; reporting failures are nonblocking and cannot hide findings.
+# Blocking Zizmor. SARIF is also uploaded for the security dashboard;
+# reporting failures are nonblocking and cannot hide findings.
 
 on:
   pull_request:
@@ -30,16 +30,12 @@ jobs:
         with:
           persist-credentials: false
 
-      - name: Install Actionlint and Zizmor
+      - name: Install Zizmor
         uses: taiki-e/install-action@d438492cf8a250514fa2d34b30bc3c0dc37c65ff # v2.87.8
         with:
-          tool: actionlint@1.7.12,zizmor@1.30.0
-
-      - name: Actionlint
-        run: actionlint
+          tool: zizmor@1.30.0
 
       - name: Zizmor
-        if: '!cancelled()'
         run: zizmor --format=github .
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}