Skip to content

ci(release): speed up package publishing #453

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
abimaelmartell merged 1 commit into from
Aug 21, 2026
+64 −25
Merged

ci(release): speed up package publishing #453

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -319,7 +319,7 @@ jobs:
with:
workspaces: |
wasm -> target
key: wasm
shared-key: wasm

- name: Check WebAssembly bindings
run: cargo check --manifest-path wasm/Cargo.toml --target wasm32-unknown-unknown
Expand Down
5 changes: 5 additions & 0 deletions .github/workflows/publish-crate.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -95,6 +95,11 @@ jobs:
with:
toolchain: "1.98.0" # keep in sync with rust-toolchain.toml

- name: Cache cargo
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
with:
key: crate-publish

- name: Verify package
run: cargo publish --dry-run

Expand Down
13 changes: 7 additions & 6 deletions .github/workflows/publish-pypi.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -84,23 +84,23 @@ jobs:
needs: check-version
if: needs.check-version.outputs.changed == 'true' && needs.check-version.outputs.published == 'false'
name: Build ${{ matrix.target }}
runs-on: ${{ matrix.os }}
runs-on: ${{ matrix.runner }}
strategy:
fail-fast: false
matrix:
include:
- os: ubuntu-latest
- runner: blacksmith-8vcpu-ubuntu-2404
target: x86_64-unknown-linux-gnu
- os: ubuntu-latest
- runner: blacksmith-8vcpu-ubuntu-2404
target: aarch64-unknown-linux-gnu
docker-options: -e CFLAGS_aarch64_unknown_linux_gnu=-D__ARM_ARCH=8
# macos-13 was retired by GitHub; macos-15-intel is the remaining
# Intel runner label (available through 2027).
- os: macos-15-intel
- runner: macos-15-intel
target: x86_64-apple-darwin
- os: macos-14
- runner: blacksmith-6vcpu-macos-15
target: aarch64-apple-darwin
- os: windows-latest
- runner: blacksmith-8vcpu-windows-2025
target: x86_64-pc-windows-msvc
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
Expand All @@ -115,6 +115,7 @@ jobs:
target: ${{ matrix.target }}
args: --release --out dist
manylinux: auto
sccache: true
# The manylinux AArch64 GCC omits this macro while preprocessing
# ring's assembly. AArch64 is ARMv8 by definition.
docker-options: ${{ matrix.docker-options }}
Expand Down
41 changes: 37 additions & 4 deletions .github/workflows/publish-wasm.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -65,14 +65,13 @@ jobs:
echo "published=false" >> "$GITHUB_OUTPUT"
fi

publish:
name: Build and publish
build:
name: Build package
needs: check-version
if: needs.check-version.outputs.changed == 'true' && needs.check-version.outputs.package_exists == 'true' && needs.check-version.outputs.published == 'false'
runs-on: ubuntu-latest
runs-on: blacksmith-4vcpu-ubuntu-2404
permissions:
contents: read
id-token: write
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

Expand All @@ -82,6 +81,13 @@ jobs:
toolchain: "1.98.0" # keep in sync with rust-toolchain.toml
targets: wasm32-unknown-unknown

- name: Cache cargo
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
with:
workspaces: |
wasm -> target
shared-key: wasm

- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
with:
node-version: '24'
Expand Down Expand Up @@ -111,5 +117,32 @@ jobs:
- name: Inspect package contents
run: npm pack --dry-run ./wasm/pkg

- name: Upload package
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: wasm-package
path: wasm/pkg
if-no-files-found: error

publish:
name: Publish to npm
needs: [check-version, build]
if: needs.check-version.outputs.changed == 'true' && needs.check-version.outputs.package_exists == 'true' && needs.check-version.outputs.published == 'false'
runs-on: ubuntu-latest
permissions:
contents: read
id-token: write
steps:
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
with:
node-version: '24'
registry-url: 'https://registry.npmjs.org'

- name: Download package
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
with:
name: wasm-package
path: wasm/pkg

- name: Publish package
run: npm publish ./wasm/pkg --provenance --access public
28 changes: 14 additions & 14 deletions .github/workflows/publish.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -58,29 +58,29 @@ jobs:
needs: check-version
if: needs.check-version.outputs.changed == 'true'
name: Build ${{ matrix.target }}
runs-on: ${{ matrix.os }}
runs-on: ${{ matrix.runner }}
strategy:
fail-fast: false
matrix:
include:
- os: ubuntu-latest
- runner: blacksmith-8vcpu-ubuntu-2404
target: x86_64-unknown-linux-gnu
# napi-cross builds gnu targets against an old glibc sysroot for
# broad distro compatibility; musl targets cross-compile with
# zig via cargo-zigbuild (napi's -x flag).
- os: ubuntu-latest
- runner: blacksmith-8vcpu-ubuntu-2404
target: aarch64-unknown-linux-gnu
build-flags: --use-napi-cross
cflags: -D__ARM_ARCH=8
- os: ubuntu-latest
- runner: blacksmith-8vcpu-ubuntu-2404
target: x86_64-unknown-linux-musl
build-flags: -x
- os: ubuntu-latest
- runner: blacksmith-8vcpu-ubuntu-2404
target: aarch64-unknown-linux-musl
build-flags: -x
- os: macos-14
- runner: blacksmith-6vcpu-macos-15
target: aarch64-apple-darwin
- os: windows-latest
- runner: blacksmith-8vcpu-windows-2025
target: x86_64-pc-windows-msvc
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
Expand Down Expand Up @@ -154,22 +154,22 @@ jobs:
smoke-test:
name: Smoke test ${{ matrix.target }}
needs: [check-version, build]
runs-on: ${{ matrix.os }}
runs-on: ${{ matrix.runner }}
strategy:
fail-fast: false
matrix:
include:
- os: ubuntu-latest
- runner: blacksmith-2vcpu-ubuntu-2404
target: x86_64-unknown-linux-gnu
- os: ubuntu-latest
- runner: blacksmith-2vcpu-ubuntu-2404
target: x86_64-unknown-linux-musl
- os: ubuntu-24.04-arm
- runner: blacksmith-2vcpu-ubuntu-2404-arm
target: aarch64-unknown-linux-gnu
- os: ubuntu-24.04-arm
- runner: blacksmith-2vcpu-ubuntu-2404-arm
target: aarch64-unknown-linux-musl
- os: macos-14
- runner: blacksmith-6vcpu-macos-15
target: aarch64-apple-darwin
- os: windows-latest
- runner: blacksmith-2vcpu-windows-2025
target: x86_64-pc-windows-msvc
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
Expand Down