Merge branch 'main' into xcodebuild_setup

Author: xiazhvera

.github/actions/check-submodules/dist/index.js

@@ -11535,6 +11535,14 @@ const { isUint8Array, isArrayBuffer } = __nccwpck_require__(8253)
 const { File: UndiciFile } = __nccwpck_require__(3041)
 const { parseMIMEType, serializeAMimeType } = __nccwpck_require__(4322)
 
+let random
+try {
+  const crypto = __nccwpck_require__(7598)
+  random = (max) => crypto.randomInt(0, max)
+} catch {
+  random = (max) => Math.floor(Math.random(max))
+}
+
 let ReadableStream = globalThis.ReadableStream
 
 /** @type {globalThis['File']} */
@@ -11620,7 +11628,7 @@ function extractBody (object, keepalive = false) {
     // Set source to a copy of the bytes held by object.
     source = new Uint8Array(object.buffer.slice(object.byteOffset, object.byteOffset + object.byteLength))
   } else if (util.isFormDataLike(object)) {
-    const boundary = `----formdata-undici-0${`${Math.floor(Math.random() * 1e11)}`.padStart(11, '0')}`
+    const boundary = `----formdata-undici-0${`${random(1e11)}`.padStart(11, '0')}`
     const prefix = `--${boundary}\r\nContent-Disposition: form-data`
 
     /*! formdata-polyfill. MIT License. Jimmy Wärting <https://jimmy.warting.se/opensource> */
@@ -25739,6 +25747,14 @@ module.exports = require("net");
 
 /***/ }),
 
+/***/ 7598:
+/***/ ((module) => {
+
+"use strict";
+module.exports = require("node:crypto");
+
+/***/ }),
+
 /***/ 8474:
 /***/ ((module) => {
 
@@ -27685,8 +27701,8 @@ const checkSubmodules = async function () {
                 const isOnMain = await isAncestor(diff.thisCommit, 'origin/main', submodule.path);
                 if (!isOnMain) {
                     if (/^(aws-lc)$/.test(submodule.name)) {
-                        // for aws-lc we also use fips-2022-11-02 branch for FIPS support.
-                        const isOnFIPS = await isAncestor(diff.thisCommit, 'origin/fips-2022-11-02', submodule.path);
+                        // for aws-lc, we may use a branch for FIPS support.
+                        const isOnFIPS = await isAncestor(diff.thisCommit, 'origin/fips-2024-09-27', submodule.path);
                         if (!isOnFIPS) {
                             core.setFailed(`Submodule ${submodule.name} is using a branch`);
                             return;

.github/actions/check-submodules/index.js

@@ -144,8 +144,8 @@ const checkSubmodules = async function () {
                 const isOnMain = await isAncestor(diff.thisCommit, 'origin/main', submodule.path);
                 if (!isOnMain) {
                     if (/^(aws-lc)$/.test(submodule.name)) {
-                        // for aws-lc we also use fips-2022-11-02 branch for FIPS support.
-                        const isOnFIPS = await isAncestor(diff.thisCommit, 'origin/fips-2022-11-02', submodule.path);
+                        // for aws-lc, we may use a branch for FIPS support.
+                        const isOnFIPS = await isAncestor(diff.thisCommit, 'origin/fips-2024-09-27', submodule.path);
                         if (!isOnFIPS) {
                             core.setFailed(`Submodule ${submodule.name} is using a branch`);
                             return;

.github/actions/check-submodules/package-lock.json

@@ -11535,6 +11535,14 @@ const { isUint8Array, isArrayBuffer } = __nccwpck_require__(8253)
 const { File: UndiciFile } = __nccwpck_require__(3041)
 const { parseMIMEType, serializeAMimeType } = __nccwpck_require__(4322)
 
+let random
+try {
+  const crypto = __nccwpck_require__(7598)
+  random = (max) => crypto.randomInt(0, max)
+} catch {
+  random = (max) => Math.floor(Math.random(max))
+}
+
 let ReadableStream = globalThis.ReadableStream
 
 /** @type {globalThis['File']} */
@@ -11620,7 +11628,7 @@ function extractBody (object, keepalive = false) {
     // Set source to a copy of the bytes held by object.
     source = new Uint8Array(object.buffer.slice(object.byteOffset, object.byteOffset + object.byteLength))
   } else if (util.isFormDataLike(object)) {
-    const boundary = `----formdata-undici-0${`${Math.floor(Math.random() * 1e11)}`.padStart(11, '0')}`
+    const boundary = `----formdata-undici-0${`${random(1e11)}`.padStart(11, '0')}`
     const prefix = `--${boundary}\r\nContent-Disposition: form-data`
 
     /*! formdata-polyfill. MIT License. Jimmy Wärting <https://jimmy.warting.se/opensource> */
@@ -25739,6 +25747,14 @@ module.exports = require("net");
 
 /***/ }),
 
+/***/ 7598:
+/***/ ((module) => {
+
+"use strict";
+module.exports = require("node:crypto");
+
+/***/ }),
+
 /***/ 8474:
 /***/ ((module) => {
 

.github/actions/release-tag/package-lock.json

@@ -152,7 +152,7 @@ jobs:
 
   upload-ci-script:
     name: Upload container ci script
-    runs-on: ubuntu-2024
+    runs-on: ubuntu-24.04
 
     steps:
     - uses: aws-actions/configure-aws-credentials@v4

.github/actions/release-tag/packed/index.js

@@ -297,7 +297,7 @@ jobs:
         - musllinux-1-1-x64
 
     needs: package
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-22.04 # temporarily downgrade to old ubuntu as 24.04 likes to segfault in the middle of the build 
     steps:
     - uses: aws-actions/configure-aws-credentials@v4
       with:

.github/workflows/create-release.yml

@@ -572,6 +572,12 @@ class PKG_TOOLS(Enum):
         'yum_compiler_packages': ['gcc', 'gcc-c++'],
 
         'versions': {
+            'default': {
+                '!c': "gcc",
+                '!cxx': "g++",
+                '!compiler_packages': [],
+                '!apt_compiler_packages': [],
+            },
             '4.8': {
                 # ASan has been broken on 4.8 GCC version distributed on Ubuntu
                 # and will unlikely to get fixed upstream. so turn it off.