Merge revised environment publishing into V10 ABI extensions

Author: cloutiertyler

.github/workflows/attach-artifacts.yml

@@ -9,7 +9,8 @@ on:
 
 jobs:
   upload-assets:
-    runs-on: spacetimedb-linux
+    # This only downloads existing artifacts and attaches them to a GitHub release.
+    runs-on: spacetimedb-linux-small
     permissions:
       contents: write  # needed to modify releases
 
@@ -60,4 +61,3 @@ jobs:
           gh release upload "$RELEASE_TAG" ./* \
             --repo "$GITHUB_REPOSITORY" \
             --clobber
-

.github/workflows/check-merge-labels.yml

@@ -10,7 +10,8 @@ permissions: read-all
 jobs:
   label_checks:
     name: Check merge labels
-    runs-on: spacetimedb-linux
+    # This only inspects event labels and performs no checkout or build.
+    runs-on: spacetimedb-linux-small
     steps:
       - if: github.event_name == 'pull_request' && contains(github.event.pull_request.labels.*.name, 'do not merge')
         run: |

.github/workflows/check-pr-base.yml

@@ -13,7 +13,8 @@ concurrency:
 jobs:
   check_base_ref:
     name: Based on `master`
-    runs-on: spacetimedb-linux
+    # This only evaluates the event base ref and performs no build.
+    runs-on: spacetimedb-linux-small
     steps:
       - id: not_based_on_master
         if: |
@@ -26,7 +27,8 @@ jobs:
   release_dependencies:
     if: ${{ github.event_name == 'pull_request' }}
     name: Check release dependencies
-    runs-on: spacetimedb-linux
+    # This builds a small CI helper and inspects release metadata and git history.
+    runs-on: spacetimedb-linux-small
     permissions:
       contents: read
       pull-requests: read

.github/workflows/ci.yml

@@ -24,7 +24,8 @@ permissions:
 jobs:
   merge_queue_noop:
     name: Merge queue no-op/reuse
-    runs-on: spacetimedb-linux
+    # This compares git trees and builds only the small workflow-coordinator helper.
+    runs-on: spacetimedb-linux-small
     permissions:
       actions: write
       contents: read
@@ -560,7 +561,8 @@ jobs:
           - name: Windows 2/4
           - name: Windows 3/4
           - name: Windows 4/4
-    runs-on: spacetimedb-linux
+    # These no-op jobs only preserve required smoketest check names after CI reuse.
+    runs-on: spacetimedb-linux-small
     steps:
       - name: Skip duplicate merge queue smoketest
         run: echo "Merge queue commit has the same tree as the PR head; smoketest already ran for the PR."
@@ -759,7 +761,8 @@ jobs:
   codeowners_check:
     if: ${{ github.event_name == 'pull_request' }}
     name: CODEOWNERS check
-    runs-on: spacetimedb-linux
+    # This builds a small CI helper and checks changed paths and GitHub reviews.
+    runs-on: spacetimedb-linux-small
     permissions:
       contents: read
       pull-requests: read
@@ -824,7 +827,8 @@ jobs:
     needs: [merge_queue_noop]
     if: ${{ needs.merge_queue_noop.outputs.skip != 'true' }}
     name: Check that packages are publishable
-    runs-on: spacetimedb-linux
+    # This builds a small CI helper and validates package metadata without compiling the workspace.
+    runs-on: spacetimedb-linux-small
     permissions: read-all
     env:
       RUST_BACKTRACE: full
@@ -855,7 +859,8 @@ jobs:
     strategy:
       matrix:
         include:
-          - { target: x86_64-unknown-linux-gnu, runner: spacetimedb-linux }
+          # The Linux update-flow test uses released artifacts and builds only its small CI driver.
+          - { target: x86_64-unknown-linux-gnu, runner: spacetimedb-linux-small }
           - { target: aarch64-apple-darwin, runner: macos-latest }
           - { target: x86_64-pc-windows-msvc, runner: windows-latest }
     runs-on: ${{ matrix.runner }}
@@ -905,7 +910,8 @@ jobs:
           - { target: x86_64-unknown-linux-gnu }
           - { target: aarch64-apple-darwin }
           - { target: x86_64-pc-windows-msvc }
-    runs-on: spacetimedb-linux
+    # These no-op jobs only preserve required update-flow check names after CI reuse.
+    runs-on: spacetimedb-linux-small
     steps:
       - name: Skip duplicate merge queue update test
         run: echo "Merge queue commit has the same tree as the PR head; update-flow already ran for the PR."
@@ -1067,7 +1073,8 @@ jobs:
     needs: [merge_queue_noop, lints, upload-build-artifacts-linux]
     # Skip if this is an external contribution.
     # The license secrets will be empty, so the step would fail anyway.
-    if: ${{ needs.merge_queue_noop.outputs.skip != 'true' && (github.event_name != 'pull_request' || !github.event.pull_request.head.repo.fork) }}
+    #if: ${{ needs.merge_queue_noop.outputs.skip != 'true' && (github.event_name != 'pull_request' || !github.event.pull_request.head.repo.fork) }}
+    if: false
     permissions:
       contents: read
       checks: write
@@ -1206,7 +1213,8 @@ jobs:
     needs: [merge_queue_noop, lints]
     # Skip if this is an external contribution.
     # The license secrets will be empty, so the step would fail anyway.
-    if: ${{ needs.merge_queue_noop.outputs.skip != 'true' && (github.event_name != 'pull_request' || !github.event.pull_request.head.repo.fork) }}
+    #if: ${{ needs.merge_queue_noop.outputs.skip != 'true' && (github.event_name != 'pull_request' || !github.event.pull_request.head.repo.fork) }}
+    if: false
     permissions:
       contents: read
     runs-on: spacetimedb-unity-runner
@@ -1266,6 +1274,7 @@ jobs:
     if: ${{ needs.merge_queue_noop.outputs.skip != 'true' }}
     permissions:
       contents: read
+    # The .NET packaging, Godot project build, and integration test make this too heavy for a small runner.
     runs-on: spacetimedb-linux
     env:
       ARTIFACT_SUFFIX: linux
@@ -1368,6 +1377,7 @@ jobs:
   csharp-testsuite:
     needs: [merge_queue_noop, lints, upload-build-artifacts-linux]
     if: ${{ needs.merge_queue_noop.outputs.skip != 'true' }}
+    # The C# SDK build and tests saturated the small runner's CPU, so keep this on the main runner.
     runs-on: spacetimedb-linux
     timeout-minutes: 30
     env:
@@ -1485,7 +1495,8 @@ jobs:
     needs: [merge_queue_noop]
     if: ${{ needs.merge_queue_noop.outputs.skip != 'true' }}
     name: Verify global.json files are symlinks
-    runs-on: spacetimedb-linux
+    # This builds a small CI helper and checks symlink policy without building SpacetimeDB.
+    runs-on: spacetimedb-linux-small
     permissions:
       contents: read
     env:
@@ -1529,7 +1540,8 @@ jobs:
     needs: [merge_queue_noop]
     if: ${{ needs.merge_queue_noop.outputs.skip != 'true' }}
     name: Check smoketests/mod.rs is complete
-    runs-on: spacetimedb-linux
+    # This builds a tiny source-scanning helper and does not compile or run smoketests.
+    runs-on: spacetimedb-linux-small
     permissions:
       contents: read
     env:
@@ -1565,6 +1577,7 @@ jobs:
     needs: [merge_queue_noop]
     if: ${{ needs.merge_queue_noop.outputs.skip != 'true' }}
     name: Docs build
+    # Building the documentation site nearly saturated a small runner and used substantial memory.
     runs-on: spacetimedb-linux
     env:
       RUST_BACKTRACE: full

.github/workflows/cla-gate.yml

@@ -17,7 +17,8 @@ permissions:
 jobs:
   publish-cla-gate-status:
     name: CLA status
-    runs-on: spacetimedb-linux
+    # This only evaluates GitHub status metadata and publishes a commit status.
+    runs-on: spacetimedb-linux-small
     if: github.event_name != 'status' || github.event.context == 'license/cla'
 
     steps:

.github/workflows/discord-posts.yml

@@ -11,7 +11,8 @@ permissions:
 
 jobs:
   resolvePush:
-    runs-on: spacetimedb-linux
+    # This only resolves GitHub event metadata and performs no checkout or build.
+    runs-on: spacetimedb-linux-small
     outputs:
       is_pr_merge: ${{ steps.resolve.outputs.is_pr_merge }}
       is_external: ${{ steps.resolve.outputs.is_external }}
@@ -80,7 +81,8 @@ jobs:
 
   discordNotification:
     needs: resolvePush
-    runs-on: spacetimedb-linux
+    # This only queries pull-request checks and posts a Discord notification.
+    runs-on: spacetimedb-linux-small
     if: needs.resolvePush.outputs.is_pr_merge == 'true'
     env:
       GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -157,7 +159,8 @@ jobs:
     needs:
       - resolvePush
       - discordNotification
-    runs-on: spacetimedb-linux
+    # This failure path only posts a Discord notification.
+    runs-on: spacetimedb-linux-small
     if: ${{ always() && (needs.resolvePush.result == 'failure' || needs.discordNotification.result == 'failure') }}
     steps:
       - name: Send failure notification
@@ -172,7 +175,8 @@ jobs:
 
   warnDirectPush:
     needs: resolvePush
-    runs-on: spacetimedb-linux
+    # This only formats commit metadata and posts a Discord warning.
+    runs-on: spacetimedb-linux-small
     if: needs.resolvePush.outputs.is_pr_merge != 'true'
     steps:
       - name: Warn about non-PR push
@@ -197,7 +201,8 @@ jobs:
 
   invokePrivate:
     needs: resolvePush
-    runs-on: spacetimedb-linux
+    # This only dispatches the private workflow through the GitHub API.
+    runs-on: spacetimedb-linux-small
     if: needs.resolvePush.outputs.is_pr_merge == 'true'
     permissions:
       contents: read

.github/workflows/docs-publish.yaml

@@ -10,7 +10,8 @@ on:
 
 jobs:
   build:
-    runs-on: spacetimedb-linux
+    # This builds and uploads the documentation site, not SpacetimeDB binaries.
+    runs-on: spacetimedb-linux-small
     steps:
       - name: Checkout repository
         uses: actions/checkout@v3

.github/workflows/docs-update-llms.yaml

@@ -14,7 +14,8 @@ on:
 
 jobs:
   update-llms:
-    runs-on: spacetimedb-linux
+    # This builds documentation assets and updates one generated text file.
+    runs-on: spacetimedb-linux-small
     steps:
       - name: Checkout repository
         uses: actions/checkout@v3

.github/workflows/internal-tests.yml

@@ -27,7 +27,8 @@ jobs:
     # Skip if this is an external contribution. GitHub secrets will be empty, so the step would fail anyway.
     if: ${{ (github.event_name == 'pull_request' || (github.event_name == 'push' && github.ref == 'refs/heads/master'))
       && (github.event_name != 'pull_request' || !github.event.pull_request.head.repo.fork) }}
-    runs-on: spacetimedb-linux
+    # This builds small workflow helpers, dispatches private CI, and waits for its result.
+    runs-on: spacetimedb-linux-small
     env:
       TARGET_OWNER: clockworklabs
       TARGET_REPO: SpacetimeDBPrivate

.github/workflows/llm-benchmark-periodic.yml

@@ -50,7 +50,8 @@ concurrency:
 jobs:
   prepare_matrix:
     name: Prepare benchmark matrix
-    runs-on: spacetimedb-linux
+    # This only parses workflow inputs into a JSON matrix and performs no benchmark work.
+    runs-on: spacetimedb-linux-small
     outputs:
       languages: ${{ steps.matrix.outputs.languages }}
     steps: