Improve Bazel cache behavior: restrict writes to pushes and add optional disk-cache input for QNX workflow

.github/workflows/copyright.yml

@@ -30,11 +30,12 @@ jobs:
         uses: actions/checkout@v4.2.2
 
       - name: Setup Bazel with shared caching
-        uses: bazel-contrib/setup-bazel@0.14.0
+        uses: bazel-contrib/setup-bazel@0.18.0
         with:
-          disk-cache: true
-          repository-cache: true
+          disk-cache: false
+          repository-cache: false
           bazelisk-cache: true
+          cache-save: ${{ github.event_name == 'push' }}
 
       - name: Run Copyright Check
         run: |

.github/workflows/docs-verify.yml

@@ -57,11 +57,12 @@ jobs:
           echo "pip_cache=${BASE}/pip" >> "$GITHUB_OUTPUT"
 
       - name: Setup Bazel
-        uses: bazel-contrib/setup-bazel@0.14.0
+        uses: bazel-contrib/setup-bazel@0.18.0
         with:
           disk-cache: false
           repository-cache: false
           bazelisk-cache: true
+          cache-save: ${{ github.event_name == 'push' }}
 
       - name: Prepare cache dirs
         shell: bash

.github/workflows/docs.yml

@@ -80,11 +80,12 @@ jobs:
           echo "pip_cache=${BASE}/pip" >> "$GITHUB_OUTPUT"
 
       - name: Setup Bazel
-        uses: bazel-contrib/setup-bazel@0.14.0
+        uses: bazel-contrib/setup-bazel@0.18.0
         with:
           disk-cache: false
           repository-cache: false
           bazelisk-cache: true
+          cache-save: ${{ github.event_name == 'push' }}
 
       - name: Prepare cache dirs
         shell: bash

.github/workflows/format.yml

@@ -29,11 +29,12 @@ jobs:
         uses: actions/checkout@v4.2.2
 
       - name: Setup Bazel with shared caching
-        uses: bazel-contrib/setup-bazel@0.14.0
+        uses: bazel-contrib/setup-bazel@0.18.0
         with:
-          disk-cache: true
-          repository-cache: true
+          disk-cache: false
+          repository-cache: false
           bazelisk-cache: true
+          cache-save: ${{ github.event_name == 'push' }}
 
 
       - name: Run Formatting Check

.github/workflows/license-check.yml

@@ -44,11 +44,12 @@ jobs:
           repository: ${{ github.event.pull_request.head.repo.full_name || github.repository }}
 
       - name: Setup Bazel with shared caching
-        uses: bazel-contrib/setup-bazel@0.14.0
+        uses: bazel-contrib/setup-bazel@0.18.0
         with:
           disk-cache: true
           repository-cache: true
           bazelisk-cache: true
+          cache-save: ${{ github.event_name == 'push' }}
 
       - name: Run License Check via Bazel
         run: |

.github/workflows/qnx-build.yml

@@ -36,6 +36,11 @@ on:
         required: false
         default: "workflow-approval"
         type: string
+      bazel-disk-cache:
+        description: "Enable Bazel disk cache on GitHub. The value can be a string to use as cache key for separating workflows"
+        required: false
+        default: "true"
+        type: string
     secrets:
       score-qnx-license:
         description: "Base64-encoded QNX license content"
@@ -64,11 +69,12 @@ jobs:
           repository: ${{ github.event.pull_request.head.repo.full_name || github.repository }}
 
       - name: Setup Bazel with shared caching
-        uses: bazel-contrib/setup-bazel@0.14.0
+        uses: bazel-contrib/setup-bazel@0.18.0
         with:
-          disk-cache: true
+          disk-cache: ${{ inputs.bazel-disk-cache }}
           repository-cache: true
           bazelisk-cache: true
+          cache-save: ${{ github.event_name == 'push' }}
 
       - name: Prepare QNX license
         env:

.github/workflows/static-analysis.yml

@@ -31,11 +31,12 @@ jobs:
         uses: actions/checkout@v4.2.2
 
       - name: Setup Bazel with shared caching
-        uses: bazel-contrib/setup-bazel@0.14.0
+        uses: bazel-contrib/setup-bazel@0.18.0
         with:
           disk-cache: true
           repository-cache: true
           bazelisk-cache: true
+          cache-save: ${{ github.event_name == 'push' }}
 
       - name: Run Static Analysis via Bazel
         run: |

.github/workflows/tests.yml

@@ -35,11 +35,12 @@ jobs:
           repository: ${{ github.event.pull_request.head.repo.full_name || github.repository }}
 
       - name: Setup Bazel with shared caching
-        uses: bazel-contrib/setup-bazel@0.14.0
+        uses: bazel-contrib/setup-bazel@0.18.0
         with:
           disk-cache: true
           repository-cache: true
           bazelisk-cache: true
+          cache-save: ${{ github.event_name == 'push' }}
 
       - name: Run Tests via Bazel
         run: |

README.md

@@ -308,18 +308,20 @@ To improve performance and reduce redundant downloads across workflow runs, the
 
 ```yaml
 - name: Setup Bazel with shared caching
-  uses: bazel-contrib/setup-bazel@0.14.0
+  uses: bazel-contrib/setup-bazel@0.18.0
   with:
     disk-cache: true
     repository-cache: true
     bazelisk-cache: true
+    cache-save: ${{ github.event_name == 'push' }}
 ```
 
 ### Benefits
 
 - **`disk-cache`**: Stores compiled Bazel outputs across jobs.
 - **`repository-cache`**: Caches external dependencies (e.g., modules, WORKSPACE fetches).
 - **`bazelisk-cache`**: Avoids re-downloading Bazel binaries.
+- **`cache-save`**: Saves the cache only on push events to avoid unnecessary cache updates (e.g., from pull requests).
 
 This setup significantly reduces CI build time and improves reuse across different workflows.