ci: bare-rn bundle prep, Pods cache, exclude workflow file from build hash

- bundle job now runs `yarn prepare` before bundling bare-rn so
  react-native-executorch-bare-resource-fetcher's lib/ exists for metro
  (Expo apps don't need it; expo export resolves workspace deps directly).
- iOS composite caches CocoaPods recipes + installed Pods keyed by Podfile.lock,
  saving ~3-5 min per cell on cache hits.
- compute-app-hash.js excludes .github/workflows/build-apps.yml from the
  content hash. Workflow edits still trigger the matrix, but each cell hits
  its existing marker and skips. Build-behavior workflow edits (with:,
  runs-on:, env:) need a manual cache clear via the UI.

Author: msluszniak

.github/actions/build-ios-app/action.yml

@@ -67,6 +67,17 @@ runs:
         rm -rf ios
         npx expo prebuild --platform ios --no-install
 
+    - name: Cache CocoaPods
+      if: steps.cache.outputs.cache-hit != 'true'
+      uses: actions/cache@v4
+      with:
+        path: |
+          ~/Library/Caches/CocoaPods
+          ${{ inputs.app-path }}/ios/Pods
+        key: ${{ runner.os }}-pods-${{ inputs.filter-name }}-${{ hashFiles(format('{0}/ios/Podfile.lock', inputs.app-path)) }}
+        restore-keys: |
+          ${{ runner.os }}-pods-${{ inputs.filter-name }}-
+
     - name: Install CocoaPods dependencies
       if: steps.cache.outputs.cache-hit != 'true'
       working-directory: ${{ inputs.app-path }}/ios

.github/workflows/build-apps.yml

@@ -172,6 +172,12 @@ jobs:
       - name: Skip notice
         if: steps.cache.outputs.cache-hit == 'true'
         run: echo "Skipping bundle — bundle-${{ matrix.platform }}-${{ matrix.app }} already passed at this content hash."
+      - name: Build workspace packages
+        if: steps.cache.outputs.cache-hit != 'true' && matrix.app == 'bare-rn'
+        run: yarn workspaces foreach --all --topological-dev run prepare
+      - name: Build workspace packages
+        if: steps.cache.outputs.cache-hit != 'true' && matrix.app == 'bare-rn'
+        run: yarn workspaces foreach --all --topological-dev run prepare
       - name: Bundle JS for ${{ matrix.platform }}
         if: steps.cache.outputs.cache-hit != 'true'
         working-directory: apps/${{ matrix.app }}

scripts/compute-app-hash.js

@@ -10,6 +10,18 @@ const crypto = require('crypto');
 const yaml = require('js-yaml');
 const picomatch = require('picomatch');
 
+// Files that the per-app filters reference for trigger purposes but that
+// should not invalidate cached build markers. The workflow file itself sits in
+// core-shared so editing it triggers CI on every app, but the vast majority of
+// edits are orchestration (filter paths, matrix shape, concurrency, triggers)
+// and don't change build behavior. Excluding it from the hash means workflow
+// edits re-run the matrix but each cell hits its existing marker and skips.
+//
+// Caveat: workflow edits that DO change build behavior — `with:` inputs to a
+// composite, `runs-on:`, an `env:` var, an action's pinned version — won't be
+// caught here. Force-clear caches via the GitHub Actions UI when you make one.
+const HASH_EXCLUDE = new Set(['.github/workflows/build-apps.yml']);
+
 const filterName = process.argv[2];
 if (!filterName) {
   console.error('Usage: compute-app-hash.js <filter-name>');
@@ -44,7 +56,9 @@ const lines = cp
   .split('\n')
   .filter((line) => {
     const tabIdx = line.indexOf('\t');
-    return tabIdx !== -1 && matchAny(line.slice(tabIdx + 1));
+    if (tabIdx === -1) return false;
+    const path = line.slice(tabIdx + 1);
+    return !HASH_EXCLUDE.has(path) && matchAny(path);
   })
   .sort();