Skip to content

Add server cross-compile and macOS desktop build CI jobs#369

Merged
wesbillman merged 3 commits into
mainfrom
harden-ci
Apr 20, 2026
Merged

Add server cross-compile and macOS desktop build CI jobs#369
wesbillman merged 3 commits into
mainfrom
harden-ci

Conversation

@wesbillman
Copy link
Copy Markdown
Collaborator

Summary

  • Restore server cross-compilation CI job for x86_64-unknown-linux-musl and aarch64-unknown-linux-musl targets using cross@0.2.5 — catches musl linking issues that native Ubuntu builds miss
  • Restore full macOS desktop Tauri build CI job (unsigned) — validates the Tauri bundle actually compiles, replacing the stub-binary cargo check approach
  • Add desktop-release-build justfile target for local unsigned builds with configurable target triple
  • Add sidecar placeholder stubs to staging justfile target to prevent Tauri compile-time validation failures

These restore build capabilities accidentally deleted in PR #360.

What's NOT in this PR

  • No signing, notarization, or release publishing
  • No artifact uploads
  • No changes to existing jobs
  • No path filters (can add later if macOS runner costs spike)

Test plan

  • CI passes on this PR (server cross-compile + macOS desktop build jobs run green)
  • Verify just desktop-release-build works locally on macOS
  • Verify just staging no longer fails on sidecar validation

🤖 Generated with Claude Code

Restore build capabilities deleted in PR #360: server cross-compilation
for x86_64/aarch64 musl targets and macOS desktop Tauri build. Also adds
desktop-release-build justfile target for local unsigned builds.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Comment thread .github/workflows/ci.yml Fixed
Comment thread .github/workflows/ci.yml Fixed
Comment thread .github/workflows/ci.yml Fixed
wesbillman and others added 2 commits April 20, 2026 11:02
- Add save-if to rust-cache in both new jobs to prevent cache poisoning
  from fork PRs (only save cache on main branch)
- Update taiki-e/install-action SHA to match current v2 tag

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
…ings

zizmor flags Swatinem/rust-cache as a cache poisoning vector regardless
of save-if. These are validation-only jobs where caching is nice-to-have,
not critical. Can re-add with actions/cache if build times are painful.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@wesbillman wesbillman merged commit fa5a0b7 into main Apr 20, 2026
13 checks passed
@wesbillman wesbillman deleted the harden-ci branch April 20, 2026 18:52
fsola-sq added a commit that referenced this pull request Apr 20, 2026
…-binding

* origin/main:
  fix(desktop): eliminate agent startup beachball (#374)
  fix(desktop): resolve agent command path for DMG builds (#372)
  fix(desktop): remove stale sprout-admin prereq, add sidecar tooling (#371)
  Add server cross-compile and macOS desktop build CI jobs (#369)
  Fix forum post card bugs on desktop and mobile (#370)
  fix(desktop): kill WebSocket flood and fix Markdown <p><div> nesting (#368)
  perf: caching, batched DM resolution, bounded audit, global kind index (#367)
  fix: staging to generate stubs as needed (#366)
  chore(deps): update rust crate axum to v0.8.9 (#365)
  chore(deps): update dependency @tanstack/react-router to v1.168.22 (#364)
  feat(desktop): autoscroll thread sidebar for new replies (#363)
  fix(desktop): eliminate 10+ second UI freeze on startup (#361)
  feat(desktop): bundle sprout-acp and sprout-mcp-server as Tauri sidecars (#362)
  Remove release pipeline from public repo (#360)

Amp-Thread-ID: https://ampcode.com/threads/T-019dab7a-5979-7401-83a1-509b9adfe4a0
Co-authored-by: Amp <amp@ampcode.com>

# Conflicts:
#	crates/sprout-relay/src/state.rs
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants