Skip to content

ci(platforms): separate primary merge gates and bind candidate profiles #314

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
itlezy merged 8 commits into from
Nov 11, 2026
Merged

ci(platforms): separate primary merge gates and bind candidate profiles #314

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
1df0bca
ci(platforms): isolate optional outcomes and bind candidate profiles …
Nov 9, 2026
dee716a
fix(ci): preserve platform proof and qualification deadlines (RUST-CI…
Nov 11, 2026
72b31c4
ci(platforms): explain required aggregate boundary (RUST-CI-035)
Nov 11, 2026
0c10989
refactor(ci): share native package and smoke recipes (RUST-CI-035)
Nov 11, 2026
470ce15
ci: explicitly cache dependency crates only (Build #37)
Nov 10, 2026
f9b5e9a
ci(platforms): bind merged profile provider and optional cache (RUST-…
Nov 11, 2026
b98249d
fix(ci): initialize hosted musl target before packaging (RUST-CI-035)
Nov 11, 2026
8867e28
ci(platforms): pin verified native-source link fix (RUST-CI-035)
Nov 11, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
108 changes: 14 additions & 94 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,8 +17,8 @@ permissions:
env:
CARGO_TERM_COLOR: always
RUST_BACKTRACE: 1
EMULEBB_BUILD_REF: 3135ee1d106637871d884e5f628bcd4ca596863c
EMULEBB_ANDROID_BUILD_REF: 3135ee1d106637871d884e5f628bcd4ca596863c
EMULEBB_BUILD_REF: 995d13f350c8342437fdb3122d2a271696ac6e29
EMULEBB_ANDROID_BUILD_REF: 995d13f350c8342437fdb3122d2a271696ac6e29
EMULEBB_BUILD_TESTS_REF: 20a007f34d88b99c40d456cfe1dce3d0537ba00d
EMULEBB_TOOLING_REF: 856e0499d12e281697618cc81a0b09805e96f59e
# Pin the native NAT sources linked by the sys crates.
Expand Down Expand Up @@ -184,6 +184,8 @@ jobs:

- name: Cache cargo build
uses: Swatinem/rust-cache@d1527c8f67ef9af357290475d4af4b0fab8f12e0 # v2.9.3
with:
cache-workspace-crates: false
env:
CARGO_TARGET_DIR: ${{ runner.temp }}/emulebb-rust-out/builds/rust/target

Expand Down Expand Up @@ -222,15 +224,13 @@ jobs:
name: build+test (${{ matrix.runner }})
needs: [single-active-pr, workflow-lint]
runs-on: ${{ matrix.runner }}
# WHY: the cold Intel macOS build reached the old deadline while tests
# were still passing; retain the full suite with a bounded larger budget.
timeout-minutes: ${{ matrix.runner == 'macos-15-intel' && 120 || 45 }}
timeout-minutes: 45
env:
EMULEBB_WORKSPACE_ROOT: ${{ github.workspace }}
strategy:
fail-fast: false
matrix:
runner: [ubuntu-24.04-arm, windows-latest, windows-11-arm, macos-15-intel, macos-15]
runner: [ubuntu-24.04-arm, windows-latest, windows-11-arm]
steps:
- name: Checkout emulebb-rust
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
Expand Down Expand Up @@ -278,6 +278,8 @@ jobs:

- name: Cache cargo build
uses: Swatinem/rust-cache@d1527c8f67ef9af357290475d4af4b0fab8f12e0 # v2.9.3
with:
cache-workspace-crates: false
env:
CARGO_TARGET_DIR: ${{ runner.temp }}/emulebb-rust-out/builds/rust/target

Expand Down Expand Up @@ -405,7 +407,9 @@ jobs:
env:
EMULEBB_WORKSPACE_OUTPUT_ROOT: ${{ runner.temp }}/emulebb-rust-out
CARGO_TARGET_DIR: ${{ runner.temp }}/emulebb-rust-out/builds/rust/target
run: python -B -m emule_workspace package-emulebb-rust-linux-ci --libc musl --architecture ${{ matrix.architecture }} --release-version "$RELEASE_VERSION" --test-scope full --smoke
run: |
mkdir -p "$CARGO_TARGET_DIR"
python -B -m emule_workspace package-emulebb-rust-linux-ci --libc musl --architecture ${{ matrix.architecture }} --release-version "$RELEASE_VERSION" --test-scope full --smoke
- name: Retain tested musl package
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
with:
Expand All @@ -425,90 +429,6 @@ jobs:
if-no-files-found: warn
retention-days: 14

build-android:
name: Android compile+ELF (${{ matrix.abi }})
needs: [single-active-pr, workflow-lint]
runs-on: ubuntu-24.04
timeout-minutes: 60
strategy:
fail-fast: false
matrix:
abi: [arm64-v8a, x86_64]
env:
EMULEBB_WORKSPACE_ROOT: ${{ github.workspace }}
EMULEBB_RUST_REPO: ${{ github.workspace }}
EMULEBB_TOOLING_REPO: ${{ github.workspace }}/.ci/emulebb-tooling
MINIUPNP_ROOT: ${{ github.workspace }}/.ci/emulebb-miniupnp
PCPNATPMP_ROOT: ${{ github.workspace }}/.ci/emulebb-libpcpnatpmp
steps:
- name: Checkout emulebb-rust
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Checkout pinned Android orchestration
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
repository: emulebb/emulebb-build
ref: ${{ env.EMULEBB_ANDROID_BUILD_REF }}
path: .ci/emulebb-build
- name: Checkout pinned product documentation
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
repository: emulebb/emulebb-tooling
ref: ${{ env.EMULEBB_TOOLING_REF }}
path: .ci/emulebb-tooling
- name: Checkout pinned MiniUPnP source
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
repository: emulebb/emulebb-miniupnp
ref: ${{ env.MINIUPNP_REF }}
path: .ci/emulebb-miniupnp
- name: Checkout pinned PCP/NAT-PMP source
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
repository: emulebb/emulebb-libpcpnatpmp
ref: ${{ env.PCPNATPMP_REF }}
path: .ci/emulebb-libpcpnatpmp
- name: Set up Python
uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
with:
python-version: "3.15.2"
- name: Install pinned workspace CLI dependencies
run: python -m pip install click==8.4.1 pydantic==2.14.3
- name: Set up pinned Docker
uses: docker/setup-docker-action@7ec28a010822b4626af4874f9448a4b05ac6f3e5 # v5.6.0
with:
version: v29.6.1
daemon-config: '{"features":{"containerd-snapshotter":true}}'
- name: Set up pinned Buildx
uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069
with:
version: v0.35.0
driver: docker
use: false
- name: Run the local Android compile and ELF gate
working-directory: .ci/emulebb-build
env:
EMULEBB_WORKSPACE_OUTPUT_ROOT: ${{ runner.temp }}/emulebb-rust-out
CARGO_TARGET_DIR: ${{ runner.temp }}/emulebb-rust-out/builds/rust/target
run: |
mkdir -p "$CARGO_TARGET_DIR"
python -B -m emule_workspace validate-rust-android-ci --abi ${{ matrix.abi }}
- name: Retain Android compilation evidence
if: always()
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
with:
name: ci-evidence-android-${{ matrix.abi }}-${{ github.sha }}-${{ github.run_attempt }}
path: |
${{ runner.temp }}/emulebb-rust-out/reports/android-toolchain/
${{ runner.temp }}/emulebb-rust-out/reports/rust-android/
if-no-files-found: warn
retention-days: 14

rest-openapi:
name: live REST/OpenAPI conformance
needs: build-linux
Expand Down Expand Up @@ -705,10 +625,12 @@ jobs:
if-no-files-found: warn
retention-days: 14

# WHY: separate optional workflows let this merge aggregate finish while
# macOS or Android validation remains pending or reports a platform failure.
required-ci:
name: Required CI
if: ${{ always() }}
needs: [single-active-pr, workflow-lint, build-linux, build-test, build-musl, build-android, rest-openapi, quality, supply-chain]
needs: [single-active-pr, workflow-lint, build-linux, build-test, build-musl, rest-openapi, quality, supply-chain]
runs-on: ubuntu-24.04
timeout-minutes: 5
steps:
Expand All @@ -720,7 +642,6 @@ jobs:
BUILD_LINUX_RESULT: ${{ needs.build-linux.result }}
BUILD_TEST_RESULT: ${{ needs.build-test.result }}
BUILD_MUSL_RESULT: ${{ needs.build-musl.result }}
BUILD_ANDROID_RESULT: ${{ needs.build-android.result }}
REST_OPENAPI_RESULT: ${{ needs.rest-openapi.result }}
QUALITY_RESULT: ${{ needs.quality.result }}
SUPPLY_CHAIN_RESULT: ${{ needs.supply-chain.result }}
Expand All @@ -732,7 +653,6 @@ jobs:
"$BUILD_LINUX_RESULT" \
"$BUILD_TEST_RESULT" \
"$BUILD_MUSL_RESULT" \
"$BUILD_ANDROID_RESULT" \
"$REST_OPENAPI_RESULT" \
"$QUALITY_RESULT" \
"$SUPPLY_CHAIN_RESULT"; do
Expand Down
Loading
Loading