can1357 915f45821f ci: cross-compiled and signed every macos build on linux ...

- Added a hermetic darwin cc toolchain for linux exec hosts (LLVM 23.1.3 clang + ld64.lld) against MacOSX27.0.sdk, unpacked from Apple's Command Line Tools package by bazel/toolchains/darwin/extract_pkg.py.
- Built the Apple Foundation Models bridge with the pinned swift.org Swift 6.4.0 Linux toolchain behind a new toolchain type; mac hosts keep the detected Xcode Swift, and the AppKit helpers now compile with the resolved cc toolchain.
- Shared bazel/toolchains/llvm.bzl between the msvc and darwin toolchains and pinned --macos_minimum_os=12.0 on every host.
- Stamped signed darwin addons on any host by refreshing their ad-hoc page hashes in place instead of shelling out to codesign, and linked both darwin addons with an ad-hoc signature.
- Built darwin addons in native_addons_cross and darwin binaries in release_binary; scripts/ci-macos-sign.sh now signs with rcodesign (Developer ID + notarization with credentials, ad hoc without) and release_smoke_darwin runs both binaries on macos-15.
- Removed the macOS build legs, the darwin cache warm jobs, the bazel-natives action and the hosted disk-cache path of bazel-cache; renamed //:natives-linux-all to //:natives-all.

2026-10-06 19:27:27 +02:00

..

BUILD.bazel

ci: cross-compiled and signed every macos build on linux

2026-10-06 19:27:27 +02:00