Skip to content

[pull] master from curl:master - #1662

Merged
pull[bot] merged 6 commits into
AraHaan:masterfrom
curl:master
Sep 30, 2026
Merged

pull[bot] merged 6 commits into
AraHaan:masterfrom
curl:master

Conversation

@pull

@pull pull Bot commented Sep 30, 2026 •

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

Homebrew libssh2 1.11.1_6 revision backported a patch which disabled
legacy algorithms by default, without re-enabling them manually. This
effectively disabled MD5, breaking runtests relying on it. Fix by
disabling these tests when using Homebrew libssh2.

Fixing, in 'CM address-sanitizer H3 c-ares' CI job:
```
FAIL 664: 'SFTP correct host key' SFTP, server key check
FAIL 665: 'SCP correct host key' SCP, server key check
FAIL 2007: 'SFTP quote rmdir command with trailing junk' SFTP, --quote
```
Ref: https://github.com/curl/curl/actions/runs/36691471709/job/109812874116#step:50:4471

Refs:
https://github.com/libssh2/libssh2/commit/b89858b83d68d7e29e0c5b0bb803f8a68271710c.patch
Homebrew/homebrew-core@ebe712b
Homebrew/homebrew-core#311239

Bug: #23181 (comment)

Closes #23182
The hash is not material to the test itself, use the modern alternative
to allow running it with MD5 support disabled.

Follow-up to a418f3f #23182
Follow-up to 53a3b21 #20883

Closes #23184
pyrefly does not tend to "break" Python code, thus remove the pin and
let it auto-update via Linuxbrew to avoid the disuption of manual
version bumps.

Assisted-by: Dan Fandrich
Ref: #23152 (comment)
Follow-up to 5c58f89 #23152

Closes #23180
Each `install:` combination results in a separate (and fairly large)
cache entry. There are ~12 of them before this commit, in the 100-200 MB
size range each. Reduce the number of cache entries by installing
commonly used packages for all jobs. But, each installed package comes
with a size overhead in the cache entry and a significant time to
install them, even if unused in an actual job (because the cache holds
the raw package tarballs, which still need to be installed in each job
run). Thus, keep the list of commonly used packages minimal, and install
the rest of the packages in an separate `pacman` step, without using the
cache. These packages include the build tools (autotools, cmake), and
extra, not commonly used packages that a job may need in addition.

This reduces the number of cache blobs to 4, one per MSYS2 environment,
while a slight, tolerable rise in install times.

Since some packages are now installed, but not intended to be used, we
need to make sure auto-detections don't pick them up. (existing configs
already complied with this.)

Also:
- update logic that relied on the per-package `install:` list to decide
  which SSH backend is used. Use the `config:` line instead.
- tried installing builds tools in the default install list. This turned
  out to cause much overhead in wasted size and install time.

All in all, this balancing act is painful and difficult to maintain, I
wish the MSYS2 Action would cache the _installed_ directory, thus
avoiding the lengthy install step for installed/cached packages. This
would allow to install everything from cache with good performance,
still save bandwidth and server load for MSYS2, while simplifying
things. Pending upstream issue about such feature:
msys2/setup-msys2#575

Slight downside is that mutually exclusive packages cannot be installed,
namely libssh2 vs. libssh2-wincng. Not currently used. In the future
(once the WinCNG stabilizing fix reaches a release) the variants can be
spread across envs to cover both without adding new cache blobs:
```diff
-mingw-w64-${{ matrix.env }}-libssh2
+${{ matrix.env == 'ucrt-x86_64' && format('mingw-w64-{0}-libssh2-wincng', matrix.env) || format('mingw-w64-{0}-libssh2', matrix.env) }}
```

Follow-up to 66313cc #16629

Closes #23155
To inherit MSYS2 environment, which is now pre-installed on Windows
ARM64 runners.

Saving ~30s in the MSYS2 install step.

Ref: https://github.com/actions/runner-images/blob/main/images/windows/Windows11-Arm64-Readme.md
Follow-up to be718da #17067
Follow-up to 27d2469 #16429

Closes #23190
No release in 6 months, no commit in 5 months. Lots of debt and a
matching number of local workarounds.

Ref: https://github.com/rhysd/actionlint
Follow-up to 60dd72b #19373

Closes #23194
@pull pull Bot locked and limited conversation to collaborators Sep 30, 2026
@pull pull Bot added the ⤵️ pull label Sep 30, 2026
@pull
pull Bot merged commit 410e444 into AraHaan:master Sep 30, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant