ci: pin solana-cli-version to 3.1.14, document rate-limit cause

The 'stable' resolver in setup-anchor / setup-solana queries the unauthenticated GitHub Releases API for anza-xyz/agave, which 429s once CI runs at any meaningful volume. After 5 retries it returns empty and the subsequent install curl 404s, leaving CI without solana installed at all - this is what was breaking main and what was making this PR red. Pinning to 3.1.14 (current value of 'stable') makes CI deterministic. The 'beta' canary jobs in native/pinocchio/solana-asm are intentionally left floating.

Author: mikemaccana-edwardbot

.github/workflows/anchor.yml

@@ -138,8 +138,10 @@ jobs:
       - uses: heyAyushh/setup-anchor@v4.999
         with:
           anchor-version: 1.0.0
-          # Sometimes Anza's stable resolves to a release whose binaries aren't published yet
-          solana-cli-version: stable
+          # Pinned because setup-anchor's resolver for 'stable' hits the
+          # unauthenticated GitHub API and frequently 429s, leaving CI without
+          # solana installed. Bump alongside anchor-version.
+          solana-cli-version: 3.1.14
       - name: Install Surfpool
         run: curl -sL https://run.surfpool.run/ | bash
       - name: Display Versions

.github/workflows/native.yml

@@ -222,8 +222,10 @@ jobs:
       - name: Setup Solana Stable
         uses: heyAyushh/setup-solana@v5.9
         with:
-          # Sometimes Anza's stable resolves to a release whose binaries aren't published yet
-          solana-cli-version: stable
+          # Pinned because setup-anchor's resolver for 'stable' hits the
+          # unauthenticated GitHub API and frequently 429s, leaving CI without
+          # solana installed. Bump alongside anchor-version.
+          solana-cli-version: 3.1.14
       - name: Build and Test with Stable
         run: |
           source build_and_test.sh

.github/workflows/pinocchio.yml

@@ -222,8 +222,10 @@ jobs:
       - name: Setup Solana Stable
         uses: heyAyushh/setup-solana@v5.9
         with:
-          # Sometimes Anza's stable resolves to a release whose binaries aren't published yet
-          solana-cli-version: stable
+          # Pinned because setup-anchor's resolver for 'stable' hits the
+          # unauthenticated GitHub API and frequently 429s, leaving CI without
+          # solana installed. Bump alongside anchor-version.
+          solana-cli-version: 3.1.14
       - name: Build and Test with Stable
         run: |
           source build_and_test.sh

.github/workflows/quasar.yml

@@ -197,8 +197,10 @@ jobs:
       - name: Setup Solana Stable
         uses: heyAyushh/setup-solana@v5.9
         with:
-          # Sometimes Anza's stable resolves to a release whose binaries aren't published yet
-          solana-cli-version: stable
+          # Pinned because setup-anchor's resolver for 'stable' hits the
+          # unauthenticated GitHub API and frequently 429s, leaving CI without
+          # solana installed. Bump alongside anchor-version.
+          solana-cli-version: 3.1.14
       - name: Install Quasar CLI
         # Pinned to quasar rev 3d6fb0d8 (the HEAD this migration was written
         # against, immediately after PRs #195 + #196). The next merged PR

.github/workflows/solana-asm.yml

@@ -188,8 +188,10 @@ jobs:
       - name: Setup Solana Stable
         uses: heyAyushh/setup-solana@v5.9
         with:
-          # Sometimes Anza's stable resolves to a release whose binaries aren't published yet
-          solana-cli-version: stable
+          # Pinned because setup-anchor's resolver for 'stable' hits the
+          # unauthenticated GitHub API and frequently 429s, leaving CI without
+          # solana installed. Bump alongside anchor-version.
+          solana-cli-version: 3.1.14
       - name: Build and Test with Stable
         run: |
           source build_and_test.sh