Update release workflows for Python 3.14, Intel macOS runner, etc

Add Python 3.14 to release workflows and update cibuildwheel to a release
that uses 3.14-final. Use the new macos-15-intel image instead of macos-13,
which is obsolete.

Reorganise the build matrix to separate the manylinux and musllinux jobs
so they run in parallel.

Move all wheel building to GitHub Actions: Cirrus CI's macos-sonoma-base's
default Python can no longer run current cibuildwheel (which requires 3.11),
so it is time to move the ARM wheels to be built on GitHub Actions, now that
that supports both Linux and macOS on ARM.

Author: jmarshall

.cirrus.yml

@@ -17,90 +17,3 @@ freebsd_ci_task:
 
   test_script: |
     PYTHONPATH="$(echo $PWD/build/lib.*)" pytest
-
-
-build_wheels_task:
-  only_if: $CIRRUS_BRANCH =~ "release/.*" || $CIRRUS_TAG =~ "v0\..*"
-
-  matrix:
-    - compute_engine_instance:
-        image_project: cirrus-images
-        image: family/docker-builder-arm64
-        architecture: arm64
-        platform: linux
-      matrix:
-        - name: Build ARM Linux py3.8-9 wheels
-          env:
-            CIBW_BUILD: "cp38-* cp39-*"
-        - name: Build ARM Linux py3.10-11 wheels
-          env:
-            CIBW_BUILD: "cp310-* cp311-*"
-        - name: Build ARM Linux py3.12-13 wheels
-          env:
-            CIBW_BUILD: "cp312-* cp313-*"
-
-    - name: Build ARM macOS wheels
-      macos_instance:
-        image: ghcr.io/cirruslabs/macos-sonoma-base:latest
-      env:
-        CIBW_BUILD: "cp39-* cp310-* cp311-* cp312-* cp313-*"
-
-  alias: build_wheels
-
-  env:
-    CIRRUS_CLONE_DEPTH: 1
-
-    VENV: $HOME/relenv
-    PATH: $VENV/bin:$PATH
-
-    CIBW_BUILD_VERBOSITY: 1
-
-    # Avoid linking with non-system library libdeflate.dylib
-    CIBW_ENVIRONMENT_MACOS: HTSLIB_CONFIGURE_OPTIONS="--without-libdeflate"
-
-    CIBW_MANYLINUX_AARCH64_IMAGE: manylinux_2_28
-    CIBW_MUSLLINUX_AARCH64_IMAGE: musllinux_1_2
-
-  install_script: |
-    python3 -m venv $VENV
-    pip3 install cibuildwheel==2.23.3
-
-  build_script: |
-    cibuildwheel
-
-  wheels_artifacts:
-    path: wheelhouse/*.whl
-
-upload_pypi_task:
-  only_if: $CIRRUS_BRANCH =~ "release/.*" || $CIRRUS_TAG =~ "v0\..*"
-  depends_on: build_wheels
-
-  name: Publish ARM wheels
-
-  container:
-    image: python:latest
-
-  env:
-    CIRRUS_CLONE_DEPTH: 1
-    API_BASEURL: https://api.cirrus-ci.com/v1
-    TWINE_USERNAME: __token__
-
-  install_script: |
-    python3 -m pip install twine
-
-  get_artifacts_script: |
-    curl -sSLO $API_BASEURL/artifact/build/$CIRRUS_BUILD_ID/wheels.zip
-    unzip -q wheels.zip
-
-  upload_script: |
-    case "$CIRRUS_TAG" in
-    v0.*)
-        export TWINE_REPOSITORY=pypi TWINE_PASSWORD=$PYPI_TOKEN ;;
-    *)
-        export TWINE_REPOSITORY=testpypi TWINE_PASSWORD=$TESTPYPI_TOKEN ;;
-    esac
-
-    echo Uploading wheels to $TWINE_REPOSITORY...
-
-    python3 -m twine check wheelhouse/*.whl
-    python3 -m twine upload --disable-progress-bar wheelhouse/*.whl

.github/workflows/release.yaml

@@ -9,16 +9,19 @@ on:
 
 jobs:
   build_wheels:
-    runs-on: ${{ matrix.os }}
+    runs-on: ${{ matrix.kind == 'macos' && (matrix.arch == 'arm' && 'macos-latest' || 'macos-15-intel')
+                                        || (matrix.arch == 'arm' && 'ubuntu-24.04-arm' || 'ubuntu-latest') }}
     strategy:
       matrix:
-        os: [ubuntu-latest, macos-13]
-        build: ["cp38-* cp39-*", "cp310-* cp311-*", "cp312-* cp313-*"]
+        kind: [macos, many, musl]
+        arch: [arm, intel]
+        build: ["cp38-* cp39-*", "cp310-* cp311-*", "cp312-* cp313-* cp314-*"]
         x64image: [manylinux_2_28]
         nametag: [none]
 
         include:
-          - os: ubuntu-latest
+          - kind: many
+            arch: intel
             build: "cp38-manylinux_x86_64"
             x64image: manylinux2014
             nametag: focal
@@ -27,25 +30,26 @@ jobs:
       - name: Checkout pysam
         uses: actions/checkout@v5
 
-      - name: Check platform ${{ matrix.os }} is the expected architecture
-        run:  devtools/check-platform.sh ${{ matrix.os }}
+      - name: Check platform is the expected ${{ matrix.arch }} architecture
+        run:  devtools/check-platform.sh ${{ matrix.arch }}
 
       - name: Build wheels
-        uses: pypa/cibuildwheel@v2.23.3
+        uses: pypa/cibuildwheel@v3.3.0
         env:
           CIBW_BUILD: ${{ matrix.build }}
+          CIBW_SKIP:  ${{ matrix.kind == 'many' && '*-musllinux_*' || '*-manylinux_*' }} cp38-macosx_arm64
+
           CIBW_BUILD_VERBOSITY: 1
 
           # Avoid linking with non-system library libdeflate.dylib
           CIBW_ENVIRONMENT_MACOS: HTSLIB_CONFIGURE_OPTIONS="--without-libdeflate"
 
-          CIBW_ARCHS_LINUX: x86_64
-          CIBW_ARCHS_MACOS: x86_64
+          CIBW_ARCHS: native
 
           CIBW_MANYLINUX_X86_64_IMAGE:  ${{ matrix.x64image }}
-          CIBW_MANYLINUX_I686_IMAGE:    manylinux2014
           CIBW_MANYLINUX_AARCH64_IMAGE: manylinux_2_28
           CIBW_MUSLLINUX_X86_64_IMAGE:  musllinux_1_2
+          CIBW_MUSLLINUX_AARCH64_IMAGE: musllinux_1_2
 
       - name: Check wheelhouse
         run:  devtools/artifactname.py wheelhouse/*.whl >> $GITHUB_ENV

devtools/check-platform.sh

@@ -1,21 +1,11 @@
 #!/bin/sh -e
 
-case $1 in
-    ubuntu-*-arm)  expected=arm ;;
-    macos-13)      expected=x86_64 ;;
-    ubuntu-*)      expected=x86_64 ;;
-    macos-*)       expected=arm ;;
-    windows-*)     expected=x86_64 ;;
-    *)
-	echo Unknown platform $1 >&2
-	exit 2
-	;;
-esac
+expected=$1
 
 arch=$(uname -m)
 case $arch in
     arm*|aarch*)  actual=arm ;;
-    x86*)         actual=x86_64 ;;
+    x86*)         actual=intel ;;
     *)
 	echo Unrecognized uname result $arch >&2
 	exit 2