fix: iOS CI performance — hashFiles caching, macOS-26 runner, xcbeautify (#919)

Author: boorad

.claude/rules/ci-caching.xml

@@ -38,23 +38,25 @@
   </rule>
 
   <rule severity="CRITICAL" enforcement="BLOCKING">
-    <name>Cache Key Design — Immutable Keys</name>
-    <description>GitHub Actions caches are IMMUTABLE — cache/save fails if the key already exists</description>
+    <name>Cache Key Design — Content-Addressed Keys</name>
+    <description>Use hashFiles() for cache keys so identical inputs produce cache hits</description>
     <problem>
-      actions/cache/save cannot overwrite an existing cache entry. Using static keys
-      (e.g. runner.os-gradle) means the first save succeeds, but every subsequent save
-      fails with "Unable to reserve cache with key X, another job may be creating this cache."
-      Caches become permanently stale.
+      GitHub Actions caches are immutable — once saved, a key cannot be overwritten.
+      Using github.run_id makes keys unique per run, so the primary key NEVER hits on
+      restore. Every build falls through to restore-keys and gets a stale cache that
+      xcodebuild/Gradle must then re-validate, which can be slower than a clean build.
     </problem>
     <guidelines>
-      <guideline>Save key MUST be unique per run: prefix-${{ github.run_id }}</guideline>
-      <guideline>Restore uses exact key + restore-keys prefix fallback to get the latest</guideline>
+      <guideline>Use hashFiles() of lock files for cache keys (Podfile.lock, Gemfile.lock, bun.lock)</guideline>
+      <guideline>Include Xcode version in DerivedData key suffix (e.g. -xcode26.2)</guideline>
+      <guideline>Use actions/cache@v5 (unified) instead of separate cache/restore + cache/save</guideline>
+      <guideline>Use restore-keys for DerivedData (partial hits useful), NOT for Pods (stale Pods break builds)</guideline>
       <guideline>Don't use version suffixes (v2, v3) — purge with gh cache delete --all</guideline>
       <guideline>Old cache entries are evicted automatically by GitHub's LRU policy</guideline>
     </guidelines>
     <example>
-      Restore: key=runner.os-gradle-${{ github.run_id }}, restore-keys=runner.os-gradle-
-      Save:    key=runner.os-gradle-${{ github.run_id }}
+      Pods: key=runner.os-pods-${{ hashFiles('example/ios/Podfile.lock', 'example/Gemfile.lock') }}
+      DD:   key=runner.os-dd-${{ hashFiles('...lockfiles...') }}-xcode26.2, restore-keys=runner.os-dd-
     </example>
   </rule>
 

.github/workflows/e2e-ios-test.yml

@@ -25,7 +25,7 @@ on:
 
 jobs:
   e2e-tests-ios:
-    runs-on: macos-15
+    runs-on: macOS-26
     env:
       OUTPUT_DIR: ~/output
       USE_CCACHE: '1'
@@ -41,6 +41,9 @@ jobs:
           sudo xcode-select -s "/Applications/Xcode_26.2.app/Contents/Developer"
           xcodebuild -version
 
+      - name: Install xcbeautify
+        run: brew install xcbeautify
+
       - name: Setup ccache
         uses: hendrikmuhs/ccache-action@v1.2
         with:
@@ -75,24 +78,23 @@ jobs:
 
       - name: Restore CocoaPods cache
         id: pods-cache
-        uses: actions/cache/restore@v5
+        uses: actions/cache@v5
         with:
           path: |
             example/ios/Pods
             ~/.cocoapods/repos
             ~/Library/Caches/CocoaPods
             packages/react-native-quick-crypto/ios/libsodium-stable
             packages/react-native-quick-crypto/deps
-          key: ${{ runner.os }}-pods-${{ github.run_id }}
-          restore-keys: |
-            ${{ runner.os }}-pods-
+            packages/react-native-quick-crypto/OpenSSL.xcframework
+          key: ${{ runner.os }}-pods-${{ hashFiles('example/ios/Podfile.lock', 'example/Gemfile.lock') }}
 
       - name: Restore DerivedData cache
         id: dd-cache
-        uses: actions/cache/restore@v5
+        uses: actions/cache@v5
         with:
           path: ${{ env.DERIVED_DATA_PATH }}
-          key: ${{ runner.os }}-dd-${{ github.run_id }}
+          key: ${{ runner.os }}-dd-${{ hashFiles('example/ios/Podfile.lock', 'example/Gemfile.lock', 'bun.lock') }}-xcode26.2
           restore-keys: |
             ${{ runner.os }}-dd-
 
@@ -102,24 +104,32 @@ jobs:
 
       - name: Install CocoaPods
         working-directory: ./example
-        run: bun pods
+        run: RCT_USE_RN_DEP=1 RCT_USE_PREBUILT_RNCORE=1 bundle exec pod install --project-directory=ios
 
       - name: Build iOS App
         working-directory: ./example
         run: |
-          echo "Building iOS app with xcodebuild..."
           set -o pipefail
           xcodebuild \
             CC=clang CPLUSPLUS=clang++ LD=clang LDPLUSPLUS=clang++ \
             -derivedDataPath ios/build \
+            -UseModernBuildSystem=YES \
             -workspace ios/QuickCryptoExample.xcworkspace \
             -scheme QuickCryptoExample \
             -sdk iphonesimulator \
             -configuration Debug \
             -destination "platform=iOS Simulator,name=${{ env.DEVICE_NAME }}" \
+            -showBuildTimingSummary \
             ONLY_ACTIVE_ARCH=YES \
             CODE_SIGNING_ALLOWED=NO \
-            build > $HOME/output/ios-build.log 2>&1
+            build 2>&1 | tee $HOME/output/ios-build.log | xcbeautify --renderer github-actions
+
+      - name: Show Build Timing Summary
+        if: always()
+        run: |
+          if [ -f "$HOME/output/ios-build.log" ]; then
+            sed -n '/Build Timing Summary/,/^\*\* BUILD/p' "$HOME/output/ios-build.log"
+          fi
 
       - name: Show ccache stats
         if: always()
@@ -229,25 +239,6 @@ jobs:
             ${{ env.OUTPUT_DIR }}/screenshots/*.png
           retention-days: 5
 
-      - name: Save CocoaPods cache
-        if: always()
-        uses: actions/cache/save@v5
-        with:
-          path: |
-            example/ios/Pods
-            ~/.cocoapods/repos
-            ~/Library/Caches/CocoaPods
-            packages/react-native-quick-crypto/ios/libsodium-stable
-            packages/react-native-quick-crypto/deps
-          key: ${{ runner.os }}-pods-${{ github.run_id }}
-
-      - name: Save DerivedData cache
-        if: always()
-        uses: actions/cache/save@v5
-        with:
-          path: ${{ env.DERIVED_DATA_PATH }}
-          key: ${{ runner.os }}-dd-${{ github.run_id }}
-
       - name: Exit with Test Result
         if: always()
         run: |