From 467d02b1dd873509fe5c08218018fb6ee992e73f Mon Sep 17 00:00:00 2001 From: Daniel Han Date: Wed, 29 Jul 2026 05:06:42 +0000 Subject: [PATCH] Re-assert toolchain absence after the desktop .deb pulls its dependencies --- .github/workflows/desktop-app-clean-machine-ci.yml | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/.github/workflows/desktop-app-clean-machine-ci.yml b/.github/workflows/desktop-app-clean-machine-ci.yml index 88dd51303a..e5746a2343 100644 --- a/.github/workflows/desktop-app-clean-machine-ci.yml +++ b/.github/workflows/desktop-app-clean-machine-ci.yml @@ -362,6 +362,18 @@ jobs: echo "BIN=$BIN" >> "$GITHUB_ENV" echo "binary: $BIN" + # The strip runs before this, but `apt-get install ./dl/*.deb` then pulls the + # bundle's DECLARED dependencies, so a release that adds git, cmake or a compiler + # to that list puts one back in /usr/bin and both required Linux rows still pass. + # `absent` ran only beforehand, so re-run it here, before the bundled installer. + # The current dependency closure is 65 packages of runtime libs and no toolchain, + # so this is green today and only a new dependency can turn it red. + - name: Re-assert the toolchain is still absent after the package install + if: ${{ github.event_name != 'workflow_dispatch' || inputs.strip_toolchain }} + run: | + set -a; . ./clean-machine.env; set +a + bash .github/scripts/clean-machine-assert.sh absent + - name: Run the bundled installer, the path first launch takes run: | set -a; [ -f ./clean-machine.env ] && . ./clean-machine.env; set +a