build: unify production crates and vendor the patched shell

Assisted-by: SurmAgent:OpenAI
2026-11-11 22:04:16 +00:00
parent f5e1d7aed5
commit 586bae953d
863 changed files with 141121 additions and 14090 deletions
@@ -0,0 +1,77 @@
+name: "Install script"
+
+on:
+  pull_request:
+    paths:
+      - "scripts/install/**"
+      - ".github/workflows/install-script.yaml"
+  push:
+    branches: ["main"]
+    paths:
+      - "scripts/install/**"
+      - ".github/workflows/install-script.yaml"
+  # Weekly, to catch release changes (e.g., renamed assets) that break the script.
+  schedule:
+    - cron: "0 6 * * 1"
+  workflow_dispatch: null
+
+permissions: {}
+
+# Only allow one run of the workflow per branch / PR at a time.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  test:
+    name: "Test (${{ matrix.name }})"
+
+    permissions:
+      contents: read
+      attestations: read # needed for `gh attestation verify`
+
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - name: "linux-x86_64"
+            os: ubuntu-26.04
+          - name: "linux-aarch64"
+            os: ubuntu-26.04-arm
+          - name: "macos-aarch64"
+            os: macos-latest
+          - name: "macos-x86_64"
+            os: macos-26-intel
+          # musl + busybox userland, no gh.
+          - name: "alpine"
+            os: ubuntu-26.04
+            container: "alpine:3"
+            prepare: "apk add --no-cache bash curl"
+          # glibc too old for the gnu build; exercises the musl fallback.
+          - name: "almalinux-8"
+            os: ubuntu-26.04
+            container: "almalinux:8"
+
+    runs-on: ${{ matrix.os }}
+    container: ${{ matrix.container }}
+    timeout-minutes: 15
+
+    steps:
+      - name: "Install container prerequisites"
+        if: ${{ matrix.prepare }}
+        shell: sh # bash may not be installed yet
+        run: ${{ matrix.prepare }}
+
+      - name: "Checkout repository"
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+
+      - name: "Install uv"
+        uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
+
+      - name: "Run tests"
+        shell: bash
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: uvx 'pytest==8.*' -p no:cacheprovider -v scripts/install/tests