Merge with upstream main branch

.github/actions/install-rust/action.yml

@@ -28,7 +28,7 @@ runs:
         elif [ "${{ inputs.toolchain }}" = "msrv" ]; then
           echo "version=1.$msrv.0" >> "$GITHUB_OUTPUT"
         elif [ "${{ inputs.toolchain }}" = "wasmtime-ci-pinned-nightly" ]; then
-          echo "version=nightly-2025-02-20" >> "$GITHUB_OUTPUT"
+          echo "version=nightly-2025-04-03" >> "$GITHUB_OUTPUT"
         else
           echo "version=${{ inputs.toolchain }}" >> "$GITHUB_OUTPUT"
         fi

.github/workflows/ci-cron-trigger.yml

@@ -0,0 +1,53 @@
+name: "Cron triggers for CI"
+on:
+  schedule:
+    # “At 02:34 on Monday.”
+    #
+    # https://crontab.guru/#34_2_*_*_1
+    #
+    # This is used to perform a weekly run of CI for all release branches,
+    # ideally in off-work-hours to not clog up the queue.
+    - cron: '34 2 * * 1'
+
+    # "At 02:34 on Sunday and every day-of-week from Tuesday through Saturday"
+    #
+    # https://crontab.guru/#34_2_*_*_0,2-6
+    #
+    # This is used to perform a daily run of CI for the `main` branch to prime
+    # caches for github actions and the merge queue. Note that this frequency
+    # doesn't overlap the above schedule to avoid triggering two builds on the
+    # same day.
+    - cron: '34 2 * * 0,2-6'
+
+  # Allow manually triggering this request via a button
+  workflow_dispatch:
+
+permissions:
+  issues: write
+  actions: write
+
+jobs:
+  run:
+    if: "github.repository == 'bytecodealliance/wasmtime' || !github.event.schedule"
+    name: Trigger release branch CI
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          submodules: true
+          fetch-depth: 0
+
+      # Always trigger a CI run on the `main` branch to prime GHA caches.
+      - run: gh workflow run main.yml --ref main
+        name: Trigger main branch CI daily
+        env:
+          GH_TOKEN: ${{ github.token }}
+
+      # If this is a once-a-week run then additionally trigger CI for release
+      # branches to ensure that the CI there is kept up-to-date.
+      - run: rustc ci/trigger-release-branch-ci.rs
+      - run: ./trigger-release-branch-ci
+        name: Trigger release branch CI weekly
+        env:
+          GH_TOKEN: ${{ github.token }}
+        if: "github.event.schedule == '34 2 * * 1' || !github.event.schedule"

.github/workflows/main.yml

@@ -9,11 +9,6 @@ on:
     - main
     - 'release-*'
 
-  # Run full CI on the `main` branch once a day to prime the GitHub Actions
-  # caches used by PRs and the merge queue.
-  schedule:
-  - cron: '13 4 * * *'
-
   # This is the CI that runs for PRs-to-merge.
   merge_group:
 
@@ -26,6 +21,9 @@ on:
     # uploads as well as publication to crates.io.
     - 'release-*'
 
+  # Allow manually triggering this request via a button or another workflow.
+  workflow_dispatch:
+
 defaults:
   run:
     shell: bash
@@ -393,6 +391,7 @@ jobs:
               -p wasmtime-cli --no-default-features --features compile
               -p wasmtime-cli --no-default-features --features compile,cranelift
               -p wasmtime-cli --no-default-features --features compile,cranelift,component-model
+              -p wasmtime-cli --no-default-features --features objdump
               -p wasmtime-cli --all-features
               -p wasmtime-cli --features component-model
 
@@ -401,6 +400,11 @@ jobs:
               -p cranelift-codegen --benches
               -p cranelift-codegen --no-default-features --features std,unwind,pulley
 
+          - name: cranelift-entity
+            checks: |
+              -p cranelift-entity --no-default-features
+              -p cranelift-entity --no-default-features --features enable-serde
+
           - name: wasmtime-bench-api
             checks: |
               -p wasmtime-bench-api
@@ -650,7 +654,7 @@ jobs:
     strategy:
       fail-fast: true
       matrix:
-        os: [ubuntu-latest, macos-latest, windows-latest]
+        os: [ubuntu-24.04, macos-14, windows-2025]
 
     steps:
     - uses: actions/checkout@v4
@@ -808,10 +812,10 @@ jobs:
   test_wasi_nn:
     strategy:
       matrix:
-        feature: ["openvino", "onnx"]
-        os: ["ubuntu-latest", "windows-latest"]
+        feature: ["openvino"]
+        os: ["ubuntu-24.04", "windows-2025"]
         include:
-          - os: windows-latest
+          - os: windows-2025
             feature: winml
     name: Test wasi-nn (${{ matrix.feature }}, ${{ matrix.os }})
     runs-on: ${{ matrix.os }}
@@ -879,7 +883,12 @@ jobs:
       with:
         submodules: true
     - uses: ./.github/actions/install-rust
-    - run: rustup target add wasm32-wasip1 wasm32-unknown-unknown
+    - run: |
+        rustup target add wasm32-wasip1 wasm32-unknown-unknown
+        cd /tmp
+        curl -OL https://github.com/WebAssembly/wasi-sdk/releases/download/wasi-sdk-24/wasi-sdk-24.0-x86_64-linux.tar.gz
+        tar -xzf wasi-sdk-24.0-x86_64-linux.tar.gz
+        mv wasi-sdk-24.0-x86_64-linux wasi-sdk
     - run: |
         sudo apt-get update && sudo apt-get install -y gdb lldb-15 llvm
         # workaround for https://bugs.launchpad.net/ubuntu/+source/llvm-defaults/+bug/1972855
@@ -889,6 +898,7 @@ jobs:
         cargo test --release --test all -- --ignored --test-threads 1 debug::
       env:
         LLDB: lldb-15 # override default version, 14
+        WASI_SDK_PATH: /tmp/wasi-sdk
 
     # common logic to cancel the entire run if this job fails
     - uses: ./.github/actions/cancel-on-failure
@@ -1262,3 +1272,29 @@ jobs:
         }
         EOF
       if: steps.tag.outputs.push_tag == 'yes'
+
+  # File an issue on the repo if this run failed and was triggered via
+  # `workflow_dispatch`, which mostly means that
+  # `.github/workflows/trigger-release-branch-ci.yml` will file issues on
+  # failure so we get to see a notification when a build fails for a historical
+  # release branch.
+  file-issue-on-error:
+    name: File an issue if this build failed and was cron-triggered
+    runs-on: ubuntu-latest
+    needs: ci-status
+    if: |
+      always()
+      && needs.ci-status.result != 'success'
+      && github.event_name == 'workflow_dispatch'
+    permissions:
+      issues: write
+    steps:
+    - uses: actions/github-script@v7
+      with:
+        script: |
+          github.rest.issues.create({
+            owner: context.repo.owner,
+            repo: context.repo.repo,
+            title: `Failed CI build for ${context.ref}`,
+            body: `See https://github.com/${context.repo.owner}/${context.repo.repo}/actions/runs/${context.runId}`,
+          })