Update release workflows for Python 3.14, Intel macOS runner, etc

Add Python 3.14 to release workflows and update cibuildwheel to a release
that uses 3.14-final.

Use the new macos-15-intel.
Separate manylinux and musllinux jobs.
Move all wheel building to GitHub Actions.

Cirrus CI's macos-sonoma-base's default Python can no longer run current
cibuildwheel (which requires Python 3.11), so it is time to move the ARM
wheels to be built on GitHub Actions, now that that supports both Linux
and macOS on ARM.

Author: jmarshall

.cirrus.yml

@@ -17,90 +17,3 @@ freebsd_ci_task:
 
   test_script: |
     PYTHONPATH="$(echo $PWD/build/lib.*)" pytest
-
-
-build_wheels_task:
-  only_if: $CIRRUS_BRANCH =~ "release/.*" || $CIRRUS_TAG =~ "v0\..*"
-
-  matrix:
-    - compute_engine_instance:
-        image_project: cirrus-images
-        image: family/docker-builder-arm64
-        architecture: arm64
-        platform: linux
-      matrix:
-        - name: Build ARM Linux py3.8-9 wheels
-          env:
-            CIBW_BUILD: "cp38-* cp39-*"
-        - name: Build ARM Linux py3.10-11 wheels
-          env:
-            CIBW_BUILD: "cp310-* cp311-*"
-        - name: Build ARM Linux py3.12-13 wheels
-          env:
-            CIBW_BUILD: "cp312-* cp313-*"
-
-    - name: Build ARM macOS wheels
-      macos_instance:
-        image: ghcr.io/cirruslabs/macos-sonoma-base:latest
-      env:
-        CIBW_BUILD: "cp39-* cp310-* cp311-* cp312-* cp313-*"
-
-  alias: build_wheels
-
-  env:
-    CIRRUS_CLONE_DEPTH: 1
-
-    VENV: $HOME/relenv
-    PATH: $VENV/bin:$PATH
-
-    CIBW_BUILD_VERBOSITY: 1
-
-    # Avoid linking with non-system library libdeflate.dylib
-    CIBW_ENVIRONMENT_MACOS: HTSLIB_CONFIGURE_OPTIONS="--without-libdeflate"
-
-    CIBW_MANYLINUX_AARCH64_IMAGE: manylinux_2_28
-    CIBW_MUSLLINUX_AARCH64_IMAGE: musllinux_1_2
-
-  install_script: |
-    python3 -m venv $VENV
-    pip3 install cibuildwheel==2.23.3
-
-  build_script: |
-    cibuildwheel
-
-  wheels_artifacts:
-    path: wheelhouse/*.whl
-
-upload_pypi_task:
-  only_if: $CIRRUS_BRANCH =~ "release/.*" || $CIRRUS_TAG =~ "v0\..*"
-  depends_on: build_wheels
-
-  name: Publish ARM wheels
-
-  container:
-    image: python:latest
-
-  env:
-    CIRRUS_CLONE_DEPTH: 1
-    API_BASEURL: https://api.cirrus-ci.com/v1
-    TWINE_USERNAME: __token__
-
-  install_script: |
-    python3 -m pip install twine
-
-  get_artifacts_script: |
-    curl -sSLO $API_BASEURL/artifact/build/$CIRRUS_BUILD_ID/wheels.zip
-    unzip -q wheels.zip
-
-  upload_script: |
-    case "$CIRRUS_TAG" in
-    v0.*)
-        export TWINE_REPOSITORY=pypi TWINE_PASSWORD=$PYPI_TOKEN ;;
-    *)
-        export TWINE_REPOSITORY=testpypi TWINE_PASSWORD=$TESTPYPI_TOKEN ;;
-    esac
-
-    echo Uploading wheels to $TWINE_REPOSITORY...
-
-    python3 -m twine check wheelhouse/*.whl
-    python3 -m twine upload --disable-progress-bar wheelhouse/*.whl

.github/workflows/release.yaml

@@ -9,11 +9,13 @@ on:
 
 jobs:
   build_wheels:
-    runs-on: ${{ matrix.os }}
+    runs-on: ${{ matrix.kind == 'macos' && (matrix.arch == 'arm' && 'macos-latest' || 'macos-15-intel')
+                                        || (matrix.arch == 'arm' && 'ubuntu-24.04-arm' || 'ubuntu-latest') }}
     strategy:
       matrix:
-        os: [ubuntu-latest, macos-13]
-        build: ["cp38-* cp39-*", "cp310-* cp311-*", "cp312-* cp313-*"]
+        kind: [many, musl, macos]
+        arch: [arm, intel]
+        build: ["cp38-* cp39-*", "cp310-* cp311-*", "cp312-* cp313-* cp314-*"]
         x64image: [manylinux_2_28]
         nametag: [none]
 
@@ -27,25 +29,27 @@ jobs:
       - name: Checkout pysam
         uses: actions/checkout@v5
 
-      - name: Check platform ${{ matrix.os }} is the expected architecture
-        run:  devtools/check-platform.sh ${{ matrix.os }}
+      - name: Check platform is the expected ${{ matrix.arch }} architecture
+        run:  devtools/check-platform.sh ${{ matrix.arch }}
 
       - name: Build wheels
-        uses: pypa/cibuildwheel@v2.23.3
+        uses: pypa/cibuildwheel@v3.3.0
         env:
           CIBW_BUILD: ${{ matrix.build }}
+          CIBW_SKIP_LINUX: ${{ matrix.kind == 'many' && '*-musllinux_*' || '*-manylinux_*' }}
+          CIBW_SKIP_MACOS: cp38-macosx_arm64
+
           CIBW_BUILD_VERBOSITY: 1
 
           # Avoid linking with non-system library libdeflate.dylib
           CIBW_ENVIRONMENT_MACOS: HTSLIB_CONFIGURE_OPTIONS="--without-libdeflate"
 
-          CIBW_ARCHS_LINUX: x86_64
-          CIBW_ARCHS_MACOS: x86_64
+          CIBW_ARCHS: native
 
           CIBW_MANYLINUX_X86_64_IMAGE:  ${{ matrix.x64image }}
-          CIBW_MANYLINUX_I686_IMAGE:    manylinux2014
           CIBW_MANYLINUX_AARCH64_IMAGE: manylinux_2_28
           CIBW_MUSLLINUX_X86_64_IMAGE:  musllinux_1_2
+          CIBW_MUSLLINUX_AARCH64_IMAGE: musllinux_1_2
 
       - name: Check wheelhouse
         run:  devtools/artifactname.py wheelhouse/*.whl >> $GITHUB_ENV

devtools/check-platform.sh

@@ -1,21 +1,11 @@
 #!/bin/sh -e
 
-case $1 in
-    ubuntu-*-arm)  expected=arm ;;
-    macos-13)      expected=x86_64 ;;
-    ubuntu-*)      expected=x86_64 ;;
-    macos-*)       expected=arm ;;
-    windows-*)     expected=x86_64 ;;
-    *)
-	echo Unknown platform $1 >&2
-	exit 2
-	;;
-esac
+expected=$1
 
 arch=$(uname -m)
 case $arch in
     arm*|aarch*)  actual=arm ;;
-    x86*)         actual=x86_64 ;;
+    x86*)         actual=intel ;;
     *)
 	echo Unrecognized uname result $arch >&2
 	exit 2