In reply to @shine:proqqul.net
why do workflows require approval to run? is that a new thing?

Nah, it's in libgit2's sha1dc:

   9643  Total number in stack (recursive counted multiple, when >=5):
   9644          225       sha1_compression_states  (in libgit2.1.9.0.dylib) + 0  [0x10bffb2c0]
   9645          216       sha1_process  (in libgit2.1.9.0.dylib) + 98  [0x10bffc922]
   9646          193       ubc_check  (in libgit2.1.9.0.dylib) + 0  [0x10bfff780]
   9647          190       sha1_process  (in libgit2.1.9.0.dylib) + 129  [0x10bffc941]
   9648          185       git_hash_sha1_update  (in libgit2.1.9.0.dylib) + 14  [0x10bffb21e]
   9649          177       SHA1DCUpdate  (in libgit2.1.9.0.dylib) + 143  [0x10bffc85f]
   9650          173       _platform_memmove$VARIANT$Haswell  (in libsystem_platform.dylib) + 0  [0x7ff815ba69c0]
   9651          138       git_odb_read  (in libgit2.1.9.0.dylib) + 245  [0x10c064055]
   9652          137       git_odb__hashobj  (in libgit2.1.9.0.dylib) + 214  [0x10c061686]
   9653          135       git_hash_vec  (in libgit2.1.9.0.dylib) + 143  [0x10bfec95f]
   9654          129       odb_read_1  (in libgit2.1.9.0.dylib) + 190  [0x10c06415e]

Performance evaluating ffmpeg.outPath:

version cpuTime totalBytes
2.18.0  0.7706810235977173      239063920
2.19.0  0.6556280255317688      237453216
2.20.0  0.6005399823188782      221187424
2.21.0  0.6103590130805969      219954112
2.22.0  0.6383659839630127      221675008
2.23.0  0.6425349712371826      221675040
2.24.0  0.6011530160903931      221674208
2.25.0  0.500432014465332       214758096
2.26.0  0.5055519938468933      214758096
2.26.0  0.4858900010585785      214758096
2.28.0  0.5660200119018555      214758240
2.29.0  0.5035560131072998      214746848
2.30.0  0.5135070085525513      169822960
2.31.0  0.624688982963562       169822960
2.32.0  0.6163859963417053      130878112
2.33.0  0.5727580189704895      131258912