ci(windows): pin to windows-2022 to dodge VS18 cmake/aws-lc-sys breakage

windows-latest currently aliases to the windows-2025 image, which ships
Visual Studio 2026 preview (VS18 / MSVC 14.50). cmake-rs (used by
aws-lc-sys, pulled in transitively via rustls -> aws-lc-rs) can't
resolve a generator for VS18, and MSVC 14.50's vcruntime_c11_stdatomic.h
demands /std:c11 which the aws-lc-sys build script doesn't pass. The
result is a deterministic failure at `dx bundle` on windows-latest.

Pin all three workflows to windows-2022 (VS17) until the toolchain
catches up.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: mattdjenkinson

.github/workflows/bundle.yml

@@ -25,7 +25,10 @@ jobs:
       fail-fast: false
       matrix:
         # PRs run linux only as a smoke check; main/tag/manual runs cover all three OSes.
-        os: ${{ fromJSON(github.event_name == 'pull_request' && '["ubuntu-latest"]' || '["macos-latest","ubuntu-latest","windows-latest"]') }}
+        # windows-2022 (not windows-latest): windows-latest aliases to VS18 preview,
+        # whose MSVC 14.50 headers + cmake-rs can't resolve a Visual Studio generator
+        # for aws-lc-sys, breaking `dx bundle`. Revisit once the ecosystem catches up.
+        os: ${{ fromJSON(github.event_name == 'pull_request' && '["ubuntu-latest"]' || '["macos-latest","ubuntu-latest","windows-2022"]') }}
 
     env:
       BUILD_N0DES_API_SECRET: ${{ secrets.N0DES_API_SECRET }}

.github/workflows/ci.yml

@@ -12,7 +12,9 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [macos-latest, ubuntu-latest, windows-latest]
+        # windows-2022 (not windows-latest) — see bundle.yml: windows-latest's VS18
+        # preview breaks the aws-lc-sys cmake build via rustls.
+        os: [macos-latest, ubuntu-latest, windows-2022]
 
     steps:
       - uses: actions/checkout@v4

.github/workflows/manual-release.yml

@@ -19,7 +19,9 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [macos-latest, ubuntu-latest, windows-latest]
+        # windows-2022 (not windows-latest) — see bundle.yml: windows-latest's VS18
+        # preview breaks the aws-lc-sys cmake build via rustls.
+        os: [macos-latest, ubuntu-latest, windows-2022]
 
     env:
       BUILD_N0DES_API_SECRET: ${{ secrets.N0DES_API_SECRET }}