CI: Add clang22 tests and constant-time tests

Signed-off-by: Matthias J. Kannwischer <matthias@zerorisc.com>

Author: mkannwischer

.github/workflows/ci.yml

@@ -74,7 +74,7 @@ jobs:
                name: 'ubuntu-latest (aarch64)',
                arch: aarch64,
                mode: native,
-              nix_shell: ci
+               nix_shell: ci
              }}
           - {external: true,
              target: {
@@ -288,6 +288,13 @@ jobs:
            c23: True
            opt: all
            examples: true
+         - name: clang-22
+           shell: clang22
+           darwin: True
+           c17: True
+           c23: True
+           opt: all
+           examples: true
          # CPU flags are not correctly passed to the zig assembler
          # https://github.com/ziglang/zig/issues/23576
          # We therefore only test the C backend

.github/workflows/ct-tests.yml

@@ -29,6 +29,7 @@ jobs:
           - valgrind-varlat_clang19
           - valgrind-varlat_clang20
           - valgrind-varlat_clang21
+          - valgrind-varlat_clang22
           - valgrind-varlat_gcc48
           - valgrind-varlat_gcc49
           - valgrind-varlat_gcc7
@@ -65,7 +66,7 @@ jobs:
           valgrind_flags: --variable-latency-errors=yes
       - name:  Build and run test (-Ofast)
         # -Ofast got deprecated in clang19; -O3 -ffast-math should be used instead
-        if: ${{ matrix.nix-shell != 'valgrind-varlat_clang19' &&  matrix.nix-shell !=  'valgrind-varlat_clang20' && matrix.nix-shell !=  'valgrind-varlat_clang21'}}
+        if: ${{ matrix.nix-shell != 'valgrind-varlat_clang19' &&  matrix.nix-shell !=  'valgrind-varlat_clang20' && matrix.nix-shell !=  'valgrind-varlat_clang21' && matrix.nix-shell !=  'valgrind-varlat_clang22'}}
         uses: ./.github/actions/ct-test
         with:
           cflags: -Ofast -DMLD_CONFIG_KEYGEN_PCT

flake.lock

@@ -52,6 +52,8 @@
             inherit system;
             overlays = [
               (_:_: {
+                clang_22 = pkgs-unstable.clang_22;
+
                 # From 24.05 (dropped in 25.11)
                 gcc48 = pkgs-2405.gcc48;
                 gcc49 = pkgs-2405.gcc49;
@@ -182,6 +184,7 @@
           devShells.clang19 = util.mkShellWithCC' pkgs.clang_19;
           devShells.clang20 = util.mkShellWithCC' pkgs.clang_20;
           devShells.clang21 = util.mkShellWithCC' pkgs.clang_21;
+          devShells.clang22 = util.mkShellWithCC' pkgs.clang_22;
 
           devShells.zig0_12 = util.mkShellWithCC' (zigWrapCC pkgs.zig_0_12);
           devShells.zig0_13 = util.mkShellWithCC' (zigWrapCC pkgs.zig_0_13);
@@ -206,6 +209,7 @@
           devShells.valgrind-varlat_clang19 = util.mkShellWithCC_valgrind' pkgs.clang_19;
           devShells.valgrind-varlat_clang20 = util.mkShellWithCC_valgrind' pkgs.clang_20;
           devShells.valgrind-varlat_clang21 = util.mkShellWithCC_valgrind' pkgs.clang_21;
+          devShells.valgrind-varlat_clang22 = util.mkShellWithCC_valgrind' pkgs.clang_22;
           devShells.valgrind-varlat_gcc48 = util.mkShellWithCC_valgrind' pkgs.gcc48;
           devShells.valgrind-varlat_gcc49 = util.mkShellWithCC_valgrind' pkgs.gcc49;
           devShells.valgrind-varlat_gcc7 = util.mkShellWithCC_valgrind' pkgs.gcc7;