Skip malloctrim variant for Ruby >= 3.3 and target Ruby 4.0.2

Ruby 3.3+ natively includes malloc_trim, making the malloctrim variant
unnecessary. This removes 42 CI jobs (162 → 120) and significantly
reduces disk space needed during the publish step, which was failing
with "no space left on device" after adding Ruby 4.0.

Adds a config-driven variant_exclusions feature (similar to the existing
distribution_exclusions) so future exclusions can be declared in
config.yml without code changes.

Also updates the Ruby 4.0 target from 4.0.0 to 4.0.2.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: 2 people

.github/workflows/ci-cd-build-packages-1.yml

@@ -88,7 +88,7 @@ jobs:
 
   <%- distributions.each do |distribution| %>
   <%- ruby_package_versions_for_distro(distribution).each do |ruby_package_version| -%>
-  <%- variants.each do |variant| -%>
+  <%- variants_for_ruby_version(ruby_package_version).each do |variant| -%>
   <%- unindent(2) do %>
     build_ruby_<%= slug(distribution[:name]) %>-<%= slug(ruby_package_version[:id]) %>-<%= slug(variant[:name]) %>:
       name: 'Ruby [<%= distribution[:name] %>/<%= ruby_package_version[:id] %>/<%= variant[:name] %>]'
@@ -218,7 +218,7 @@ jobs:
       <%- unindent(2) do %>
         - build_jemalloc_<%= slug(distribution[:name]) %>
         <%- ruby_package_versions_for_distro(distribution).each do |ruby_package_version| %>
-        <%- variants.each do |variant| -%>
+        <%- variants_for_ruby_version(ruby_package_version).each do |variant| -%>
         - build_ruby_<%= slug(distribution[:name]) %>-<%= slug(ruby_package_version[:id]) %>-<%= slug(variant[:name]) %>
         <%- end -%>
         <%- end %>
@@ -300,7 +300,7 @@ jobs:
         if: |
           false
           <%- ruby_package_versions_for_distro(distribution).each do |ruby_package_version| -%>
-          <%- variants.each do |variant| -%>
+          <%- variants_for_ruby_version(ruby_package_version).each do |variant| -%>
             || (needs.build_ruby_<%= slug(distribution[:name]) %>-<%= slug(ruby_package_version[:id]) %>-<%= slug(variant[:name]) %>.result != 'success'
               && (needs.build_ruby_<%= slug(distribution[:name]) %>-<%= slug(ruby_package_version[:id]) %>-<%= slug(variant[:name]) %>.result != 'skipped'
                 || contains(inputs.necessary_jobs, ';Build Ruby [<%= distribution[:name] %>/<%= ruby_package_version[:id] %>/<%= variant[:name] %>];')))

.github/workflows/ci-cd-build-packages-2.yml

@@ -470,13 +470,13 @@ jobs:
   ### Sources ###
 
 
-  download_ruby_source_4_0_0:
-    name: Download Ruby source [4.0.0]
+  download_ruby_source_4_0_2:
+    name: Download Ruby source [4.0.2]
     runs-on: ubuntu-24.04
     permissions:
       id-token: write
     environment: test
-    if: contains(inputs.necessary_jobs, ';Download Ruby source 4.0.0;')
+    if: contains(inputs.necessary_jobs, ';Download Ruby source 4.0.2;')
     steps:
       - uses: actions/checkout@v4
       - uses: azure/login@v2
@@ -496,12 +496,12 @@ jobs:
       - name: Download
         run: ./internal-scripts/ci-cd/download-ruby-sources/download.sh
         env:
-          RUBY_VERSION: 4.0.0
+          RUBY_VERSION: 4.0.2
 
       - name: Archive artifact
         run: ./internal-scripts/ci-cd/upload-artifact.sh
         env:
-          ARTIFACT_NAME: ruby-src-4.0.0
+          ARTIFACT_NAME: ruby-src-4.0.2
           ARTIFACT_PATH: output
           CI_ARTIFACTS_BUCKET: ${{ vars.CI_ARTIFACTS_BUCKET }}
   download_ruby_source_3_4_8:
@@ -964,7 +964,7 @@ jobs:
       - build_docker_image_ubuntu_22_04
       - build_docker_image_ubuntu_24_04
       - build_docker_image_utility
-      - download_ruby_source_4_0_0
+      - download_ruby_source_4_0_2
       - download_ruby_source_3_4_8
       - download_ruby_source_3_3_10
       - download_ruby_source_3_2_9
@@ -1141,17 +1141,17 @@ jobs:
           path: artifacts
 
 
-      - name: Download Ruby source artifact [4.0.0] from Google Cloud
+      - name: Download Ruby source artifact [4.0.2] from Google Cloud
         run: ./internal-scripts/ci-cd/download-artifact.sh
         env:
-          ARTIFACT_NAME: ruby-src-4.0.0
+          ARTIFACT_NAME: ruby-src-4.0.2
           ARTIFACT_PATH: artifacts
           CLEAR: true
           CI_ARTIFACTS_BUCKET: ${{ vars.CI_ARTIFACTS_BUCKET }}
-      - name: Archive Ruby source artifact [4.0.0] to Github
+      - name: Archive Ruby source artifact [4.0.2] to Github
         uses: actions/upload-artifact@v4
         with:
-          name: ruby-src-4.0.0
+          name: ruby-src-4.0.2
           path: artifacts
           compression-level: 0
       - name: Download Ruby source artifact [3.4.8] from Google Cloud
@@ -1300,9 +1300,9 @@ jobs:
         run: 'false'
         if: |
           false
-            || (needs.download_ruby_source_4_0_0.result != 'success'
-              && (needs.download_ruby_source_4_0_0.result != 'skipped'
-                || contains(inputs.necessary_jobs, ';Download Ruby source 4.0.0;')))
+            || (needs.download_ruby_source_4_0_2.result != 'success'
+              && (needs.download_ruby_source_4_0_2.result != 'skipped'
+                || contains(inputs.necessary_jobs, ';Download Ruby source 4.0.2;')))
             || (needs.download_ruby_source_3_4_8.result != 'success'
               && (needs.download_ruby_source_3_4_8.result != 'skipped'
                 || contains(inputs.necessary_jobs, ';Download Ruby source 3.4.8;')))