ci: add SPM build CI jobs and visionOS platform support

Saadnajmi · claude · Saadnajmi · commit d1b4bcdf01e2 · 2026-03-25T22:54:34.000-05:00
Add a new reusable workflow (microsoft-build-spm.yml) that tests SPM
builds for ios, macos, and visionos on every PR. Wire it into the PR
gate job in microsoft-pr.yml.

Also add visionos/visionos-simulator as supported platforms in the
ios-prebuild CLI so CI and local builds can target visionOS.

Co-Authored-By: Claude Opus 4.6 &lt;noreply@anthropic.com&gt;
diff --git a/.github/workflows/microsoft-build-spm.yml b/.github/workflows/microsoft-build-spm.yml
@@ -0,0 +1,73 @@
+name: Build SPM
+
+on:
+  workflow_call:
+
+jobs:
+  build-hermes:
+    name: "Build Hermes"
+    runs-on: macos-15
+    timeout-minutes: 90
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          filter: blob:none
+          fetch-depth: 0
+
+      - name: Setup toolchain
+        uses: ./.github/actions/microsoft-setup-toolchain
+        with:
+          node-version: '22'
+          platform: macos
+
+      - name: Install npm dependencies
+        run: yarn install
+
+      - name: Build Hermes from source
+        working-directory: packages/react-native
+        run: node scripts/ios-prebuild.js -s -f Debug
+
+      - name: Upload Hermes artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: hermes-artifacts
+          path: packages/react-native/.build/artifacts/hermes
+          retention-days: 1
+
+  build-spm:
+    name: "${{ matrix.platform }}"
+    needs: build-hermes
+    runs-on: macos-26
+    timeout-minutes: 60
+    strategy:
+      fail-fast: false
+      matrix:
+        platform: [ios, macos, visionos]
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          filter: blob:none
+          fetch-depth: 0
+
+      - name: Setup toolchain
+        uses: ./.github/actions/microsoft-setup-toolchain
+        with:
+          node-version: '22'
+          platform: ${{ matrix.platform }}
+
+      - name: Install npm dependencies
+        run: yarn install
+
+      - name: Download Hermes artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: hermes-artifacts
+          path: packages/react-native/.build/artifacts/hermes
+
+      - name: Setup SPM workspace (using prebuilt Hermes)
+        working-directory: packages/react-native
+        run: node scripts/ios-prebuild.js -s -f Debug
+
+      - name: Build SPM (${{ matrix.platform }})
+        working-directory: packages/react-native
+        run: node scripts/ios-prebuild.js -b -f Debug -p ${{ matrix.platform }}
diff --git a/.github/workflows/microsoft-pr.yml b/.github/workflows/microsoft-pr.yml
@@ -132,6 +132,11 @@ jobs:
     permissions: {}
     uses: ./.github/workflows/microsoft-build-rntester.yml
 
+  build-spm:
+    name: "Build SPM"
+    permissions: {}
+    uses: ./.github/workflows/microsoft-build-spm.yml
+
   test-react-native-macos-init:
     name: "Test react-native-macos init"
     permissions: {}
@@ -156,6 +161,7 @@ jobs:
       - yarn-constraints
       - javascript-tests
       - build-rntester
+      - build-spm
       - test-react-native-macos-init
       # - react-native-test-app-integration
     steps:
diff --git a/packages/react-native/scripts/ios-prebuild/cli.js b/packages/react-native/scripts/ios-prebuild/cli.js
@@ -19,15 +19,19 @@ const platforms /*: $ReadOnlyArray<Platform> */ = [
   'ios-simulator',
   'macos', // [macOS]
   'mac-catalyst',
+  'visionos', // [macOS]
+  'visionos-simulator', // [macOS]
 ];
 
 // CI can't use commas in cache keys, so 'macOS,variant=Mac Catalyst' was creating troubles
 // This map that converts from platforms to valid Xcodebuild destinations.
 const platformToDestination /*: $ReadOnly<{|[Platform]: Destination|}> */ = {
   ios: 'iOS',
   'ios-simulator': 'iOS Simulator',
-  'macos': 'macOS', // [macOS]
+  macos: 'macOS', // [macOS]
   'mac-catalyst': 'macOS,variant=Mac Catalyst',
+  visionos: 'xrOS', // [macOS]
+  'visionos-simulator': 'xrOS Simulator', // [macOS]
 };
 
 const cli = yargs
diff --git a/packages/react-native/scripts/ios-prebuild/hermes.js b/packages/react-native/scripts/ios-prebuild/hermes.js
@@ -180,10 +180,17 @@ async function prepareHermesArtifactsAsync(
     // enables the fallback to hermesCommitAtMergeBase() when no prebuilt artifacts exist.
     let allowBuildFromSource = false;
     if (!process.env.HERMES_VERSION) {
-      const packageJsonPath = path.resolve(__dirname, '..', '..', 'package.json');
+      const packageJsonPath = path.resolve(
+        __dirname,
+        '..',
+        '..',
+        'package.json',
+      );
       const mappedVersion = findMatchingHermesVersion(packageJsonPath);
       if (mappedVersion != null) {
-        hermesLog(`Using mapped upstream version for Hermes lookup: ${mappedVersion}`);
+        hermesLog(
+          `Using mapped upstream version for Hermes lookup: ${mappedVersion}`,
+        );
         resolvedVersion = mappedVersion;
       } else {
         allowBuildFromSource = true;
@@ -209,7 +216,11 @@ async function prepareHermesArtifactsAsync(
       return artifactsPath;
     }
 
-    const sourceType = await hermesSourceType(resolvedVersion, buildType, allowBuildFromSource);
+    const sourceType = await hermesSourceType(
+      resolvedVersion,
+      buildType,
+      allowBuildFromSource,
+    );
     localPath = await resolveSourceFromSourceType(
       sourceType,
       resolvedVersion,
@@ -536,15 +547,84 @@ async function buildFromHermesCommit(
   artifactsPath /*: string */,
 ) /*: Promise<string> */ {
   const {commit, timestamp} = hermesCommitAtMergeBase();
-  abort(
-    `[Hermes] No prebuilt Hermes artifacts available for version "${version}".\n` +
-      `Hermes commit at merge base with facebook/react-native: ${commit} (timestamp: ${timestamp})\n` +
-      `To resolve, either:\n` +
-      `  1. Set HERMES_ENGINE_TARBALL_PATH to a local Hermes tarball path\n` +
-      `  2. Set HERMES_VERSION to an upstream RN version with published artifacts (e.g., HERMES_VERSION=nightly)\n` +
-      `  3. Build Hermes from commit ${commit} and provide the tarball path via HERMES_ENGINE_TARBALL_PATH`,
+  hermesLog(
+    `Building Hermes from source at commit ${commit} (merge base timestamp: ${timestamp})`,
   );
-  return ''; // unreachable
+
+  const HERMES_GITHUB_URL = 'https://github.com/facebook/hermes.git';
+  const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'hermes-build-'));
+  const hermesDir = path.join(tmpDir, 'hermes');
+
+  try {
+    // Clone Hermes at the identified commit
+    hermesLog(`Cloning Hermes at commit ${commit}...`);
+    execSync(`git clone --depth 1 ${HERMES_GITHUB_URL} "${hermesDir}"`, {
+      stdio: 'inherit',
+      timeout: 300000,
+    });
+    execSync(`git -C "${hermesDir}" fetch --depth 1 origin ${commit}`, {
+      stdio: 'inherit',
+      timeout: 120000,
+    });
+    execSync(`git -C "${hermesDir}" checkout ${commit}`, {
+      stdio: 'inherit',
+    });
+
+    // The build-ios-framework.sh script runs from the hermes directory.
+    // It sources build-apple-framework.sh which sets HERMES_PATH relative to itself,
+    // but we override it to point to the cloned Hermes repo.
+    const reactNativeRoot = path.resolve(__dirname, '..', '..');
+    const buildScript = path.join(
+      reactNativeRoot,
+      'sdks',
+      'hermes-engine',
+      'utils',
+      'build-ios-framework.sh',
+    );
+
+    hermesLog(`Building Hermes frameworks (${buildType})...`);
+    execSync(`bash "${buildScript}"`, {
+      cwd: hermesDir,
+      stdio: 'inherit',
+      timeout: 3600000, // 60 minutes
+      env: {
+        ...process.env,
+        BUILD_TYPE: buildType,
+        HERMES_PATH: hermesDir,
+        JSI_PATH: path.join(hermesDir, 'API', 'jsi'),
+        REACT_NATIVE_PATH: reactNativeRoot,
+        // Deployment targets matching react-native-macos minimums
+        IOS_DEPLOYMENT_TARGET: '15.1',
+        MAC_DEPLOYMENT_TARGET: '14.0',
+        XROS_DEPLOYMENT_TARGET: '1.0',
+        RELEASE_VERSION: version,
+      },
+    });
+
+    // Create tarball from the destroot (same structure as Maven artifacts)
+    const tarballName = `hermes-ios-${buildType.toLowerCase()}.tar.gz`;
+    const tarballPath = path.join(artifactsPath, tarballName);
+    hermesLog('Creating Hermes tarball from build output...');
+    execSync(`tar -czf "${tarballPath}" -C "${hermesDir}" destroot`, {
+      stdio: 'inherit',
+    });
+
+    hermesLog(`Hermes built from source and packaged at ${tarballPath}`);
+    return tarballPath;
+  } catch (e) {
+    abort(
+      `[Hermes] Failed to build Hermes from source at commit ${commit}.\n` +
+        `Error: ${e.message}\n` +
+        `To resolve, either:\n` +
+        `  1. Set HERMES_ENGINE_TARBALL_PATH to a local Hermes tarball path\n` +
+        `  2. Set HERMES_VERSION to an upstream RN version with published artifacts\n` +
+        `  3. Build Hermes manually from commit ${commit} and provide the tarball path via HERMES_ENGINE_TARBALL_PATH`,
+    );
+    return ''; // unreachable
+  } finally {
+    // Clean up
+    fs.rmSync(tmpDir, {recursive: true, force: true});
+  }
 }
 // macOS]
 
diff --git a/packages/react-native/scripts/ios-prebuild/types.js b/packages/react-native/scripts/ios-prebuild/types.js
@@ -13,13 +13,17 @@ export type Platform =
   'ios' |
   'ios-simulator' |
   'macos' |
-  'mac-catalyst';
+  'mac-catalyst' |
+  'visionos' |
+  'visionos-simulator';
 
 export type Destination =
   'iOS' |
   'iOS Simulator' |
   'macOS' |
-  'macOS,variant=Mac Catalyst';
+  'macOS,variant=Mac Catalyst' |
+  'xrOS' |
+  'xrOS Simulator';
 
 export type BuildFlavor = 'Debug' | 'Release';
 */
diff --git a/packages/react-native/sdks/hermes-engine/utils/build-apple-framework.sh b/packages/react-native/sdks/hermes-engine/utils/build-apple-framework.sh
@@ -12,7 +12,7 @@ CURR_SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd -P)"
 IMPORT_HERMESC_PATH=${HERMES_OVERRIDE_HERMESC_PATH:-$PWD/build_host_hermesc/ImportHermesc.cmake}
 BUILD_TYPE=${BUILD_TYPE:-Debug}
 
-HERMES_PATH="$CURR_SCRIPT_DIR/.."
+HERMES_PATH=${HERMES_PATH:-"$CURR_SCRIPT_DIR/.."}
 REACT_NATIVE_PATH=${REACT_NATIVE_PATH:-$CURR_SCRIPT_DIR/../../..}
 
 NUM_CORES=$(sysctl -n hw.ncpu)
