[codex] Optimize iOS CI workflows

.github/workflows/codeql.yml

@@ -1,74 +1,75 @@
-# removed for now
+name: CodeQL
 
-# name: CodeQL
+on:
+    push:
+        branches:
+            - main
+        paths:
+            - "Symi/**"
+            - "SymiTests/**"
+            - "Symi.xcodeproj/**"
+            - ".github/workflows/codeql.yml"
+    pull_request:
+        branches:
+            - main
+        paths:
+            - "Symi/**"
+            - "SymiTests/**"
+            - "Symi.xcodeproj/**"
+            - ".github/workflows/codeql.yml"
+    schedule:
+        - cron: "23 4 * * 1"
+    workflow_dispatch:
 
-# on:
-#   push:
-#     branches:
-#       - main
-#     paths:
-#       - 'Symi/**'
-#       - 'SymiTests/**'
-#       - 'Symi.xcodeproj/**'
-#       - '.github/workflows/codeql.yml'
-#   pull_request:
-#     branches:
-#       - main
-#     paths:
-#       - 'Symi/**'
-#       - 'SymiTests/**'
-#       - 'Symi.xcodeproj/**'
-#       - '.github/workflows/codeql.yml'
-#   schedule:
-#     - cron: '23 4 * * 1'
-#   workflow_dispatch:
+jobs:
+    analyze:
+        name: Analyze (Swift)
+        runs-on: macos-26
+        timeout-minutes: 45
+        permissions:
+            actions: read
+            contents: read
+            security-events: write
+        env:
+            CODEQL_DESTINATION: platform=macOS,arch=arm64,variant=Mac Catalyst
 
-# jobs:
-#   analyze:
-#     name: Analyze (Swift)
-#     runs-on: macos-26
-#     timeout-minutes: 45
-#     permissions:
-#       actions: read
-#       contents: read
-#       security-events: write
-#     env:
-#       CODEQL_DESTINATION: platform=macOS,arch=arm64,variant=Mac Catalyst
+        strategy:
+            fail-fast: false
+            matrix:
+                language:
+                    - swift
 
-#     strategy:
-#       fail-fast: false
-#       matrix:
-#         language:
-#           - swift
+        steps:
+            - name: Checkout
+              uses: actions/checkout@v6
 
-#     steps:
-#       - name: Checkout
-#         uses: actions/checkout@v6
+            - name: Xcode 26.4 auswählen
+              uses: maxim-lobanov/setup-xcode@v1
+              with:
+                  xcode-version: "26.4"
 
-#       - name: Xcode 26.4 auswählen
-#         uses: maxim-lobanov/setup-xcode@v1
-#         with:
-#           xcode-version: '26.4'
+            - name: Xcode-Version ausgeben
+              run: |
+                  xcodebuild -version
+                  xcode-select -p
 
-#       - name: CodeQL initialisieren
-#         uses: github/codeql-action/init@v4
-#         with:
-#           languages: ${{ matrix.language }}
-#           build-mode: manual
+            - name: CodeQL initialisieren
+              uses: github/codeql-action/init@v4
+              with:
+                  languages: ${{ matrix.language }}
+                  build-mode: manual
 
-#       - name: Swift Packages auflösen
-#         run: xcodebuild -resolvePackageDependencies -project Symi.xcodeproj -scheme Symi
+            - name: Swift Packages auflösen
+              run: xcodebuild -resolvePackageDependencies -project Symi.xcodeproj -scheme Symi
 
-#       - name: App für CodeQL bauen
-#         run: |
-#           xcodebuild build \
-#             -project Symi.xcodeproj \
-#             -scheme Symi \
-#             -destination "${CODEQL_DESTINATION}" \
-#             -derivedDataPath "${RUNNER_TEMP}/DerivedData" \
-#             CODE_SIGNING_ALLOWED=NO
+            - name: App für CodeQL bauen
+              run: |
+                  xcodebuild build \
+                    -project Symi.xcodeproj \
+                    -scheme Symi \
+                    -destination "${CODEQL_DESTINATION}" \
+                    -derivedDataPath "${RUNNER_TEMP}/DerivedData" \
+                    CODE_SIGNING_ALLOWED=NO
 
-#       - name: CodeQL analysieren
-#         uses: github/codeql-action/analyze@v4
-
-null
+            - name: CodeQL analysieren
+              uses: github/codeql-action/analyze@v4

.github/workflows/ios-app-store.yml

@@ -5,6 +5,10 @@ on:
     tags:
       - 'v*'
 
+concurrency:
+  group: app-store-release
+  cancel-in-progress: false
+
 jobs:
   detect-release-changes:
     runs-on: ubuntu-latest
@@ -27,7 +31,7 @@ jobs:
 
           printf 'Geänderte Dateien:\n%s\n' "${changed_files}"
 
-          if printf '%s\n' "${changed_files}" | grep -Eq '^(Symi/|SymiUITests/|Symi\.xcodeproj/|fastlane/|Gemfile$|Gemfile\.lock$|\.ruby-version$|\.github/workflows/ios-app-store\.yml$)'; then
+          if printf '%s\n' "${changed_files}" | grep -Eq '^(Symi/|SymiUITests/|Symi\.xcodeproj/|fastlane/|Gemfile$|Gemfile\.lock$|\.ruby-version$|docs/(Xcode-Cloud|Teststrategie-und-Release-Checkliste)\.md$|\.github/workflows/ios-app-store\.yml$)'; then
             echo "should_deploy=true" >> "$GITHUB_OUTPUT"
           else
             echo "should_deploy=false" >> "$GITHUB_OUTPUT"
@@ -53,7 +57,6 @@ jobs:
       MATCH_PASSWORD: ${{ secrets.MATCH_PASSWORD }}
       MATCH_GIT_BRANCH: ${{ secrets.MATCH_GIT_BRANCH }}
       MATCH_GIT_BASIC_AUTHORIZATION: ${{ secrets.MATCH_GIT_BASIC_AUTHORIZATION }}
-      SCREENSHOT_IOS_VERSION: '26.4'
       SNAPSHOT_SIMULATOR_WAIT_FOR_BOOT_TIMEOUT: '10'
       FASTLANE_SKIP_UPDATE_CHECK: '1'
       CI: '1'
@@ -63,6 +66,11 @@ jobs:
         with:
           fetch-depth: 0
 
+      - name: Xcode 26.4 auswählen
+        uses: maxim-lobanov/setup-xcode@v1
+        with:
+          xcode-version: '26.4'
+
       - name: Release-Secrets validieren
         run: |
           missing=()
@@ -89,11 +97,6 @@ jobs:
           fi
         shell: bash
 
-      - name: Xcode 26.4 auswählen
-        uses: maxim-lobanov/setup-xcode@v1
-        with:
-          xcode-version: '26.4'
-
       - name: Xcode-Version ausgeben
         run: |
           xcodebuild -version