perf: parallelize container image builds in release workflow

[Mossaka]

Summary

• Split the monolithic build-and-release job into 6 jobs: setup, build-squid, build-agent, build-api-proxy, build-agent-act, and release
• All 4 container image builds now run in parallel after the version extraction setup job
• The release job (binaries, changelog, GitHub Release) waits for all image builds to complete
• Preserves all existing behavior: multi-arch platforms, cache settings, no-cache flags, cosign signing, SBOM generation

Motivation

With ARM64 QEMU emulation added in #869, each multi-arch image build takes several minutes. Running all 4 sequentially made the release workflow unnecessarily slow. Parallelizing the builds cuts total time from ~4x single-build-time down to ~1x (the slowest build).

Job dependency graph

setup ──┬── build-squid ────────┐
        ├── build-agent ────────┤
        ├── build-api-proxy ────┼── release
        └── build-agent-act ────┘

Test plan

• Verify YAML syntax is valid
• Confirm all action SHAs match the original workflow
• Confirm version outputs are correctly passed between jobs via needs.setup.outputs.*
• Verify each build job has its own GHCR login, buildx, QEMU (where needed), and cosign setup
• Verify agent-act skips QEMU (amd64-only)
• Trigger a test release to validate end-to-end

🤖 Generated with Claude Code

[github-actions]

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

[github-actions]

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

[github-actions]

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

[github-actions]

✅ Coverage Check Passed

Overall Coverage

Metric	Base	PR	Delta
Lines	82.71%	82.86%	📈 +0.15%
Statements	82.63%	82.78%	📈 +0.15%
Functions	82.74%	82.74%	➡️ +0.00%
Branches	74.78%	74.88%	📈 +0.10%

📁 Per-file Coverage Changes (1 files)

File	Lines (Before → After)	Statements (Before → After)
src/docker-manager.ts	84.1% → 84.7% (+0.56%)	83.4% → 83.9% (+0.54%)

---

Coverage comparison generated by scripts/ci/compare-coverage.ts

[Copilot]

Pull request overview

This PR refactors the release GitHub Actions workflow to reduce total release time by parallelizing container image builds while keeping release artifacts and GitHub Release creation gated on all builds completing.

Changes:

• Split the previous single build-and-release job into setup, 4 parallel image build jobs, and a final release job.
• Route version information through needs.setup.outputs.* so all downstream jobs consistently tag images and releases.
• Move the Node/TypeScript build steps to the release job (images build independently from the repo’s TypeScript build outputs).

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[github-actions]

Bun Build Test Results

Project	Install	Tests	Status
elysia	✅	1/1	PASS
hono	✅	1/1	PASS

Overall: PASS

All Bun projects built and tested successfully with Bun v1.3.9.

AI generated by Build Test Bun

[github-actions]

Smoke Test Results

✅ GitHub MCP: Retrieved 2 merged PRs

• feat: add ARM64 multi-architecture container builds #869: feat: add ARM64 multi-architecture container builds
• feat: add AWF_ONE_SHOT_TOKEN_DEBUG env var for silent-by-default logging #864: feat: add AWF_ONE_SHOT_TOKEN_DEBUG env var for silent-by-default logging

✅ Playwright: Verified github.com title contains "GitHub"
✅ File Writing: Created test file successfully
✅ Bash Tool: Verified file content

Status: PASS

cc @Mossaka (PR author)

AI generated by Smoke Copilot

[github-actions]

Go Build Test Results

Project	Download	Tests	Status
color	✅	1/1	PASS
env	✅	1/1	PASS
uuid	✅	1/1	PASS

Overall: PASS ✅

All Go projects built and tested successfully.

AI generated by Build Test Go

[github-actions]

Node.js Build Test Results

Project	Install	Tests	Status
clsx	✅	PASS	PASS
execa	✅	PASS	PASS
p-limit	✅	PASS	PASS

Overall: PASS ✅

All Node.js test projects built and tested successfully.

AI generated by Build Test Node.js

[github-actions]

Smoke Test Results

Last 2 merged PRs:

• feat: add ARM64 multi-architecture container builds #869: feat: add ARM64 multi-architecture container builds
• feat: add AWF_ONE_SHOT_TOKEN_DEBUG env var for silent-by-default logging #864: feat: add AWF_ONE_SHOT_TOKEN_DEBUG env var for silent-by-default logging

✅ GitHub MCP: PASS
✅ Playwright: PASS (title: "GitHub · Change is constant. GitHub keeps you ahead. · GitHub")
✅ File Writing: PASS
✅ Bash Tool: PASS

Overall: PASS

AI generated by Smoke Claude

[github-actions]

.NET Build Test Results ✅

Project	Restore	Build	Run	Status
hello-world	✅	✅	✅	PASS
json-parse	✅	✅	✅	PASS

Overall: PASS

All .NET projects successfully restored, built, and executed.

AI generated by Build Test .NET

[github-actions]

Deno Build Test Results

Project	Tests	Status
oak	1/1	✅ PASS
std	1/1	✅ PASS

Overall: ✅ PASS

All Deno tests completed successfully.

AI generated by Build Test Deno

[github-actions]

C++ Build Test Results

Project	CMake	Build	Status
fmt	✅	✅	PASS
json	✅	✅	PASS

Overall: PASS ✅

All C++ projects built successfully.

AI generated by Build Test C++

[github-actions]

Rust Build Test Results

Project	Build	Tests	Status
fd	✅	1/1	PASS
zoxide	✅	1/1	PASS

Overall: PASS ✅

All Rust projects built successfully and all tests passed.

AI generated by Build Test Rust

[github-actions]

Java Build Test Results

Project	Compile	Tests	Status
gson	✅	1/1	PASS
caffeine	✅	1/1	PASS

Overall: PASS

All Java projects compiled and tested successfully through the AWF firewall.

AI generated by Build Test Java

[github-actions]

feat: add ARM64 multi-architecture container builds | feat: add AWF_ONE_SHOT_TOKEN_DEBUG env var for silent-by-default logging
GitHub MCP ✅
Safeinputs GH ✅
Playwright ✅
Tavily search ❌
File write ✅
Bash cat ✅
Discussion comment ✅
Build ✅
Overall status: FAIL

AI generated by Smoke Codex