ci(release): all tested arch×linkage artifacts, backends-consistent naming

build_release now mirrors build_test: Linux (x86_64, aarch64), Windows (x86_64,
arm64), macOS (x86_64, arm64, universal), each shared AND static — so the published
artifacts equal the validated set. Artifact names follow anira-project/backends:
anira-<ver>-<OS>-<arch>-<linkage>.zip (Linux=aarch64, Win/mac=arm64, +macOS-universal);
the Android bundle is renamed anira-<ver>-Android-static.zip (it ships static
per-ABI find_package trees). Static auto-disables LibTorch (shared-only upstream),
so a -static desktop zip carries ONNX Runtime + LiteRT.

install action: package by runner OS (not hardcoded x86_64 names) so every leg zips,
and skip macOS codesign when the build produced no .dylib (static).

Author: vackva

.github/actions/install/action.yml

@@ -69,28 +69,33 @@ runs:
         p12-file-base64: ${{ inputs.DEV_ID_APP_CERT }}
         p12-password: ${{ inputs.DEV_ID_APP_PWD }}
 
-    # Codesigning all the libraries
+    # Codesigning the shared libraries. A static build ships no .dylib (anira is a .a),
+    # so glob with nullglob and skip when there is nothing to sign.
     - name: codesign (macOS)
       shell: bash
-      if: ${{ matrix.os == 'macOS-latest' }}
+      if: ${{ startsWith(matrix.os, 'macOS') }}
       run: |
-        # codesign all libs
-        codesign --force -s "${{ inputs.DEV_ID_APP }}" -v ${{ steps.declare_artefact_variables.outputs.PACKAGE_DIR }}/lib/*.dylib --deep --strict --options=runtime --timestamp;
-    
-    # Zip the artefact
+        shopt -s nullglob
+        dylibs=(${{ steps.declare_artefact_variables.outputs.PACKAGE_DIR }}/lib/*.dylib)
+        if [ ${#dylibs[@]} -gt 0 ]; then
+          codesign --force -s "${{ inputs.DEV_ID_APP }}" -v "${dylibs[@]}" --deep --strict --options=runtime --timestamp
+        else
+          echo "static build — no .dylib to codesign"
+        fi
+
+    # Zip the artefact (keyed on the runner OS, so every arch/linkage leg packages).
     - name: zip artefacts
       working-directory: ${{github.workspace}}/artefacts
       shell: bash
       run: |
-        if [ "${{ matrix.name }}" == "Linux-x86_64" ]; then
-        zip -r ${{ steps.declare_artefact_variables.outputs.PRODUCT_NAME }}.zip ${{ steps.declare_artefact_variables.outputs.PRODUCT_NAME }}/
-        elif [ "${{ matrix.os }}" == "macOS-latest" ]; then
-        zip -vr ${{ steps.declare_artefact_variables.outputs.PRODUCT_NAME }}.zip ${{ steps.declare_artefact_variables.outputs.PRODUCT_NAME }}/ -x "*.DS_Store"
-        elif [ "${{ matrix.name }}" == "Windows-x86_64" ]; then
-        pwsh -command "Compress-Archive -Path '${{ steps.declare_artefact_variables.outputs.PRODUCT_NAME }}/' -DestinationPath '${{ steps.declare_artefact_variables.outputs.PRODUCT_NAME }}.zip'"
+        P="${{ steps.declare_artefact_variables.outputs.PRODUCT_NAME }}"
+        if [[ "${{ matrix.os }}" == windows* ]]; then
+          pwsh -command "Compress-Archive -Path '$P/' -DestinationPath '$P.zip'"
+        elif [[ "${{ matrix.os }}" == macOS* ]]; then
+          zip -vr "$P.zip" "$P/" -x "*.DS_Store"
         else
-        echo "Unknown OS";
-        fi;
+          zip -r "$P.zip" "$P/"
+        fi
     
     - name: upload artifact
       uses: actions/upload-artifact@v4

.github/workflows/on_tag.yml

@@ -24,15 +24,26 @@ jobs:
     strategy:
       fail-fast: false # show all errors for each platform (vs. cancel jobs on error)
       matrix:
+        # Every desktop platform/arch, both shared and static — mirroring what
+        # build_test validates, so the published artifacts == the tested set. Arch
+        # tokens match the anira-project/backends naming (Linux=aarch64, Win/mac=arm64,
+        # plus macOS-universal). Static auto-disables LibTorch (shared-only upstream),
+        # so a *-static zip ships ONNX Runtime + LiteRT only.
         include:
-          - name: Linux-x86_64
-            os: ubuntu-latest
-          - name: macOS-x86_64
-            os: macOS-latest
-          - name: macOS-arm64
-            os: macOS-latest
-          - name: Windows-x86_64
-            os: windows-latest
+          - { name: Linux-x86_64-shared,      os: ubuntu-latest,    shared: ON }
+          - { name: Linux-x86_64-static,      os: ubuntu-latest,    shared: OFF }
+          - { name: Linux-aarch64-shared,     os: ubuntu-24.04-arm, shared: ON }
+          - { name: Linux-aarch64-static,     os: ubuntu-24.04-arm, shared: OFF }
+          - { name: Windows-x86_64-shared,    os: windows-latest,   shared: ON }
+          - { name: Windows-x86_64-static,    os: windows-latest,   shared: OFF }
+          - { name: Windows-arm64-shared,     os: windows-11-arm,   shared: ON }
+          - { name: Windows-arm64-static,     os: windows-11-arm,   shared: OFF }
+          - { name: macOS-x86_64-shared,      os: macOS-latest,     shared: ON }
+          - { name: macOS-x86_64-static,      os: macOS-latest,     shared: OFF }
+          - { name: macOS-arm64-shared,       os: macOS-latest,     shared: ON }
+          - { name: macOS-arm64-static,       os: macOS-latest,     shared: OFF }
+          - { name: macOS-universal-shared,   os: macOS-latest,     shared: ON }
+          - { name: macOS-universal-static,   os: macOS-latest,     shared: OFF }
     runs-on: ${{ matrix.os }}
     steps:
       - name: get repo and submodules
@@ -47,7 +58,7 @@ jobs:
         with:
           BUILD_TYPE: Release
           CMAKE_BUILD_PARALLEL_LEVEL: 4
-          CMAKE_BUILD_ARGS: "-DBUILD_SHARED_LIBS=ON -DANIRA_WITH_INSTALL=ON"
+          CMAKE_BUILD_ARGS: "-DBUILD_SHARED_LIBS=${{ matrix.shared }} -DANIRA_WITH_INSTALL=ON"
       - name: install
         id: install
         uses: ./.github/actions/install
@@ -135,7 +146,7 @@ jobs:
         run: |
           VERSION="$(git describe --tags --abbrev=0 2>/dev/null | sed 's/^v//')"
           [ -z "$VERSION" ] && VERSION="0.0.0"
-          PRODUCT="anira-${VERSION}-Android"
+          PRODUCT="anira-${VERSION}-Android-static"  # static find_package trees per ABI
           for ABI in arm64-v8a x86_64; do
             cmake -B "build-${ABI}" -G Ninja \
               -DCMAKE_TOOLCHAIN_FILE=$ANDROID_NDK_LATEST_HOME/build/cmake/android.toolchain.cmake \