feat(linux): vendor static deps for portable shared libraries

.bazelignore

@@ -1,4 +1,11 @@
-bazel-bin
+.git
+node_modules
 bazel-out
+bazel-bin
 bazel-testlogs
-node_modules
+.cache
+.idea
+.vscode
+.cxx
+build-*
+build

.bazelrc

@@ -2,9 +2,10 @@
 startup --host_jvm_args=-DBAZEL_TRACK_SOURCE_DIRECTORIES=1
 
 common --enable_platform_specific_config
-# TODO: remove once bazel flips this flag
-common --incompatible_disallow_empty_glob
+
+# TODO: remove once issues with yanked versions are resolved
+common --allow_yanked_versions=rules_cc@0.1.0
 
 coverage --experimental_ui_max_stdouterr_bytes=10485760
 
-common:macos --linkopt=-L/opt/homebrew/lib
+common:macos --linkopt=-L/opt/homebrew/lib

.bazelversion

@@ -1 +1 @@
-7.3.1
+8.0.0

.clang-tidy

@@ -1,23 +1,23 @@
 ---
 Checks: [
-    android-*,	
+    android-*,
     boost-*,
     bugprone-*,
-    clang-analyzer-core*,	
-    clang-analyzer-cplusplus*,	
-    clang-analyzer-deadcode*,	
-    clang-analyzer-optin.cplusplus*,	
-    clang-analyzer-optin.performance.Padding,	
-    clang-analyzer-security*,	
+    clang-analyzer-core*,
+    clang-analyzer-cplusplus*,
+    clang-analyzer-deadcode*,
+    clang-analyzer-optin.cplusplus*,
+    clang-analyzer-optin.performance.Padding,
+    clang-analyzer-security*,
     clang-diagnostic-*,
     cppcoreguidelines-avoid-goto,
     cppcoreguidelines-no-malloc,
     google-*,
     llvm-*,
-    misc-*,	
-    modernize-*,	
-    performance-*,	
-    portability-*,	
+    misc-*,
+    modernize-*,
+    performance-*,
+    portability-*,
     readability-*,
     -bugprone-branch-clone,
     -bugprone-easily-swappable-parameters,
@@ -113,10 +113,13 @@ Checks: [
     -performance-enum-size,
     -misc-include-cleaner,
     -readability-redundant-inline-specifier,
-    -readability-avoid-nested-conditional-operator
+    -readability-avoid-nested-conditional-operator,
+    -readability-math-missing-parentheses,
+    -readability-enum-initial-value,
+    -boost-use-ranges
 ]
 WarningsAsErrors: '*'
 HeaderFilterRegex: '.*'
-CheckOptions:	
-  - key:   performance-unnecessary-value-param.AllowedTypes	
+CheckOptions:
+  - key:   performance-unnecessary-value-param.AllowedTypes
     value: 'exception_ptr'

.gitattributes

@@ -0,0 +1,3 @@
+# Avoid line conversions between Unix (LF) and Windows (CRLF)
+
+test/fixtures/storage/assets/* binary

.github/ISSUE_TEMPLATE/config.yml

@@ -6,4 +6,3 @@ contact_links:
   - name: "💬 Chat with us on Slack"
     url: https://slack.openstreetmap.us/
     about: "Join #maplibre-native on the Open Street Map Slack"
-

.github/actions/android-build-and-upload-render-test/action.yml

@@ -22,4 +22,4 @@ runs:
         if-no-files-found: error
         path: |
           ./render-test/android/RenderTestsApp-${{ inputs.flavor }}.apk
-          ./render-test/android/RenderTests-${{ inputs.flavor }}.apk
+          ./render-test/android/RenderTests-${{ inputs.flavor }}.apk

.github/actions/get-pr-number/action.yml

@@ -16,4 +16,4 @@ runs:
 
     - id: cat
       run: echo pr-number="$(cat ./pr_number)" >> $GITHUB_OUTPUT
-      shell: bash
+      shell: bash

.github/actions/install-sccache/action.yml

@@ -0,0 +1,8 @@
+name: install-sccache
+description: "Install sccache"
+runs:
+  using: "composite"
+  steps:
+  - name: Install sccache
+    run: ${{ github.action_path }}/install-sccache
+    shell: bash

.github/actions/install-sccache/install-sccache

@@ -0,0 +1,7 @@
+#!/bin/bash
+
+curl -LO https://github.com/mozilla/sccache/releases/download/v0.10.0/sccache-v0.10.0-x86_64-unknown-linux-musl.tar.gz
+tar -xzf sccache-v0.10.0-x86_64-unknown-linux-musl.tar.gz
+sudo mv sccache-v0.10.0-x86_64-unknown-linux-musl/sccache /usr/bin/sccache
+sudo chmod +x /usr/bin/sccache
+rm -rf sccache-v0.10.0-x86_64-unknown-linux-musl*

.github/actions/save-pr-number/action.yml

@@ -10,7 +10,8 @@ runs:
           echo "${{ github.event.number }}" > ./pr_number
 
       - name: Upload pr_number
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: pr-number
-          path: ./pr_number
+          path: ./pr_number
+          overwrite: true

.github/actions/setup-android-ci/action.yml

@@ -0,0 +1,41 @@
+name: setup-android-ci
+description: "Sets up Android CI environment"
+runs:
+  using: "composite"
+  steps:
+    - name: Free Disk Space (Ubuntu)
+      if: startsWith(runner.name, 'GitHub Actions')
+      uses: jlumbroso/free-disk-space@main
+      with:
+        tool-cache: true
+        android: false
+        dotnet: true
+        haskell: true
+        large-packages: true
+        docker-images: true
+        swap-storage: false
+
+    - name: Validate VERSION
+      run: .github/scripts/validate-version.sh platform/android/VERSION
+      working-directory: .
+      shell: bash
+
+    - run: echo "cmake.dir=$(dirname "$(dirname "$(command -v cmake)")")" >> local.properties
+      shell: bash
+
+    - uses: actions/setup-java@v4
+      with:
+        distribution: "temurin"
+        java-version: "17"
+
+    - name: restore-gradle-cache
+      uses: actions/cache@v4
+      env:
+        cache-name: gradle-v1
+      with:
+        path: ~/.gradle
+        key: ${{ env.cache-name }}-${{ hashFiles('platform/android/buildSrc/src/main/kotlin/maplibre.dependencies.gradle.kts') }}-${{ hashFiles('platform/android/build.gradle.kts') }}-${{ hashFiles('platform/android/local.properties') }}-${{ hashFiles('platform/android/gradle/wrapper/gradle-wrapper.properties') }}
+        restore-keys: |
+          - ${{ env.cache-name }}
+
+    - uses: ./.github/actions/install-sccache

.github/changed-files.yml

@@ -1,5 +1,6 @@
 linux:
   - 'src/**'
+  - 'rustutils/**'
   - 'test/**'
   - 'render-test/**'
   - 'expression-test/**'
@@ -8,10 +9,25 @@ linux:
   - 'vendor/**'
   - 'CMakeLists.txt'
   - 'metrics/linux-gcc8-release-style.json'
-  - 'WORKSPACE'
+  - 'MODULE.bazel'
   - 'BUILD.bazel'
   - '.bazelrc'
   - '.bazelversion'
+  - '.bazelignore'
+  - '!**/*.md'
+windows:
+  - '.github/workflows/windows-ci.yml'
+  - 'src/**'
+  - 'include/**'
+  - 'platform/default/**'
+  - 'platform/windows/**'
+  - 'expression-test/**'
+  - 'render-test/**'
+  - 'test/**'
+  - 'metrics/**'
+  - 'vendor/**'
+  - '.gitmodules'
+  - '!**/*.md'
 ios:
   - 'platform/ios/**'
   - 'platform/darwin/**'
@@ -27,12 +43,13 @@ ios:
   - 'test/**'
   - 'vendor/**'
   - '.gitmodules'
-  - '!**/*.md'
-  - 'WORKSPACE'
+  - 'MODULE.bazel'
   - 'BUILD.bazel'
   - '.bazelrc'
   - '.bazelversion'
+  - '.bazelignore'
   - 'pnpm-lock.yaml'
+  - '!**/*.md'
 android:
   - 'CMakeLists.txt'
   - 'platform/android/**'
@@ -48,4 +65,4 @@ android:
   - 'test/**'
   - 'vendor/**'
   - '.gitmodules'
-  - '!**/*.md'
+  - '!**/*.md'

.github/renovate.json

@@ -1,3 +1,12 @@
 {
-  "enabledManagers": ["gradle-wrapper", "bazel"]
-}
+  "enabledManagers": ["gradle-wrapper", "bazel", "bazel-module", "bazelisk"],
+  "packageRules": [
+    {
+      "matchManagers": ["bazel", "bazel-module"],
+      "groupName": "bazel"
+    }
+  ],
+  "ignoreDeps": ["cxx.rs"],
+  "schedule": "* * 1,15 * *",
+  "dependencyDashboard": true
+}

.github/scripts/check-job-skipped.ts

@@ -0,0 +1,30 @@
+import * as core from "@actions/core";
+import { Octokit } from "@octokit/rest";
+
+async function run() {
+  const octokit = new Octokit({ auth: process.env.GITHUB_TOKEN });
+
+  const run_id = process.env.TEST_RUN_ID;
+  if (!run_id) throw new Error("TEST_RUN_ID not set");
+
+  const { data } = await octokit.rest.actions.listJobsForWorkflowRun({
+    owner: 'maplibre',
+    repo: 'maplibre-native',
+    run_id: parseInt(run_id)
+  });
+
+  const jobName = process.env.JOB_NAME;
+  if (!jobName) throw new Error("JOB_NAME not set");
+
+  const job = data.jobs.find(({name}) => name.startsWith(jobName));
+  if (!job) throw new Error(`job with name ${jobName} not found in workflow run with id ${run_id}`);
+
+  core.setOutput('was_skipped', job.conclusion === 'skipped');
+  core.setOutput('was_skipped_or_cancelled', job.conclusion === 'skipped' || job.conclusion === 'cancelled');
+}
+
+try {
+  await run();
+} catch (err) {
+  core.setFailed(err instanceof Error ? err.message: `${err}`);
+}

.github/scripts/ensure-tag.sh

@@ -0,0 +1,41 @@
+#!/bin/bash
+
+if [ $# -lt 1 ] || [ $# -gt 2 ]; then
+  echo "Usage: $0 <tag> [<commit-sha>]"
+  echo "  <tag>        Git tag name to create or verify"
+  echo "  <commit-sha> Optional commit SHA to use (defaults to HEAD)"
+  echo ""
+  echo "This script will:"
+  echo "  - Check if the tag exists and matches the specified commit"
+  echo "  - Create and push the tag if it doesn't exist"
+  echo "  - Exit with error if tag exists but points to different commit"
+  exit 1
+fi
+
+tag=$1
+commit_sha=${2:-$(git rev-parse HEAD)}
+
+if [ -z "$(git config user.name)" ]; then
+  git config user.name "MapLibre Team"
+fi
+
+if [ -z "$(git config user.email)" ]; then
+  git config user.email "team@maplibre.org"
+fi
+
+if git rev-parse "$tag" >/dev/null 2>&1; then
+  tag_sha=$(git rev-parse "$tag^{commit}")
+  if [ "$tag_sha" = "$commit_sha" ]; then
+    echo "✅ Tag $tag exists and matches specified commit SHA."
+    exit 0
+  else
+    echo "::error::❌ Tag $tag exists but points to a different commit."
+    echo "  Expected: $commit_sha"
+    echo "  Actual:   $tag_sha"
+    exit 1
+  fi
+else
+  git tag -a "$tag" -m "Publish $tag" "$commit_sha"
+  git push origin "$tag"
+  echo "✅ Created tag $tag for commit $commit_sha."
+fi