gha/upgrade linux-64 manylinux image

[swap357]

closes: #1342

The linux-64 wheel build fails with -

++ bash mini3.sh -b -f -p /root/miniconda3
Installer requires GLIBC >=2.28, but system has 2.17.

This is because miniconda now requires glibc version > glibc available on container image - manylinux2014_x86_64

Checking build practices for manylinux builds on -

• cibuildwheel and
• https://quay.io/repository/pypa/manylinux_2_28_x86_64?tab=tags&tag=latest
  found that they use newer manylinux_2_28_x86_64 for x86_64 builds.
  This PR replaces manylinux2014_x86_64 with manylinux_2_28_x86_64:2025.09.19-1 on linux-64 wheel build workflow.

The llvmdev build used by workflow is built using older manylinux2014_x86_64 container and hence there is ABI mismatch. To resolve that, conditionally update -
export CXXFLAGS="-D_GLIBCXX_USE_CXX11_ABI=0 ${CXXFLAGS}"
for linux-64 builds.

[esc]

One question one comment.

[esc]

numba-hatchery uses this too: https://github.com/numba/numba-hatchery/blob/main/compile.sh#L50

[swap357]

Yes, I actually got it from there. The python container image we use there has similar newer GLIBC and is ABI-incompatible to GLIBC on manylinux2014 image which was used to build llvmdev.

[esc]

question: do we need manylinux_2_28_x86_64:2025.09.19-1 explicitly or would it be ok to use just manylinux_2_28_x86_64?

[swap357]

I pinned it to version cibuildwheel uses. The pinning is mostly so that we won't have silent or hard to trace failures. If latest image updates to a newer toolchain with ABI changes, it could error llvmlite builds or silently break numba builds.

[esc]

would it make sense to rebuild llvmdev?

[swap357]

would it make sense to rebuild llvmdev?

Yes ideally. We should make the change to use new image for all 3 builds - llvmdev, llvmlite and numba. I can open PRs to update on all three. The condition to use older ABI is patch to make it work without re-building llvmdev.

[swap357]

#1346 solves the main branch build issue with a cleaner way.
This PR would warrant more broader changes to llvmdev and numba builds as well and require testing llvmdev->llvmlite->numba. Hence, putting this change on hold for now until required.

[esc]

#1346 solves the main branch build issue with a cleaner way. This PR would warrant more broader changes to llvmdev and numba builds as well and require testing llvmdev->llvmlite->numba. Hence, putting this change on hold for now until required.

OK, I merged #1346 and placed this one in the 0.47.0rc1 milestone.