Skip to content

staging: verify SHA pins (windows) - #3

Closed
Ozy311 wants to merge 2 commits into
masterfrom
ci/windows-portable-zip
Closed

staging: verify SHA pins (windows)#3
Ozy311 wants to merge 2 commits into
masterfrom
ci/windows-portable-zip

Conversation

@Ozy311

@Ozy311 Ozy311 commented Aug 2, 2026

Copy link
Copy Markdown
Member

Trigger only.

Ozy311 and others added 2 commits August 2, 2026 20:47
Reproduces the toolchain the release zip is already built with by hand -- native
Windows, MSYS2 MINGW64 -- so the artifact matches what users already run rather
than introducing a second, differently-linked build.

workflow_dispatch builds any ref; a published release gets the zip attached to
it automatically. DLLs are collected from ldd output rather than a hand-kept
list, and the run fails if any runtime DLL is missing from the zip.

Three things the clean-room CI environment forced out into the open, each
commented at its site in the workflow:

  * The source cannot be checked out on Windows by Git for Windows at all:
    flarq_doxygen/user_src_doc/aux/ is a reserved device name and is rejected
    while the index loads, so the clone is done from inside MSYS2 instead.
  * fldigi.exe needs -lwinmm (timeBeginPeriod / timeEndPeriod in cw, rtty, fsk,
    scamp and util) but m4/build.m4 adds it only to FLARQ_BUILD_LDADD, so it
    links on a dev box only via another library's transitive dependency.
  * --without-hamlib matches what the published zips have always contained.

Verified: run 30765649105 produced fldigi-4.2.13-tci-win64.zip in 11 minutes,
containing every file the hand-built 4.2.11 zip ships.

Co-authored-by: Don @ cloaked.agency <don@cloaked.agency>
Matches the supply-chain practice used across the AetherSDR workflows: a
mutable tag like @v4 can be repointed at any commit by whoever owns the action.

Co-authored-by: Don @ cloaked.agency <don@cloaked.agency>
@Ozy311

Ozy311 commented Aug 2, 2026

Copy link
Copy Markdown
Member Author

Staging only — verified SHA pins build green.

@Ozy311 Ozy311 closed this Aug 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant