Added timeout handling to avoid getting stuck when a website or service is not responding to a request

[RaMaTHA]

Summary

This PR adds timeout handling for HTTP/HTTPS requests to prevent builds from hanging indefinitely when a remote service is unreachable or unresponsive.

Problem

While testing in an isolated environment, I noticed that HTTP requests made by the CLI do not have a timeout configured. If the target service cannot be reached, the request may wait indefinitely, causing the build to hang.

This became visible when running the CLI on a runner that is not capable of performing outbound HTTP requests. In this scenario, the build gets stuck waiting for a response that will never arrive.

Affected endpoint

One example where this occurs is the request to:

https://containers.dev/static/devcontainer-control-manifest.json

handled in: src/spec-configuration/controlManifest.ts

Solution

A timeout has been added to the HTTP request to ensure the process fails gracefully instead of hanging indefinitely when the service is unavailable.

[abdurriq]

Hello @RaMaTHA, thank you for your contribution! I agree that this is an annoying issue, but I worry that the approach in this PR will mask genuine errors or network issues, particularly because it does not throw an exception when failing. I also found that there are more idiomatic approaches now to cancelling node-http requests, such as the ones mentioned in this SO thread: https://stackoverflow.com/a/55021202

If you could implement the timeout mentioned in that thread (which applies to the connection part only), and throw an exception when timing out, I think this could be acceptable.

[RaMaTHA]

Hello @abdurriq, thank you for your fast response.

I have had a look at your suggestion regarding the timeout handling as mentioned in the SO thread you provided, and I agree that implementing a timeout for the connection part only is a better way of doing it. I have adjusted the code accordingly.

[chrmarti]

Left a comment, maybe a flag to skip downloading the manifest would be more targeted.

[RaMaTHA]

@chrmarti thanks for your feedback. I have changed the timeout handling according to your feedback.
Instead of a http timeout handling, we now have the option to completely skip the download.

[RaMaTHA]

Hi @chrmarti, is there any update on that topic?