Track Cargo.lock for reproducible Docker builds

Author: Dennis P

.github/workflows/release-sdk-flutter.yml

@@ -29,6 +29,11 @@ jobs:
         working-directory: sdks/flutter/dart
         run: dart pub get
 
+      - name: Set up pub.dev credentials
+        run: |
+          mkdir -p ~/.config/dart
+          echo '${{ secrets.PUB_CREDENTIALS }}' > ~/.config/dart/pub-credentials.json
+
       - name: Validate pub.dev score (dry run)
         working-directory: sdks/flutter/dart
         run: dart pub publish --dry-run

.github/workflows/release-sdk-nodejs.yml

@@ -33,11 +33,11 @@ jobs:
             artifact: checkgate.linux-x64-musl.node
             cross: true
 
-          # Linux arm64 (musl — Alpine) — cross-compile via napi-rs cross toolchain
+          # Linux arm64 (musl — Alpine) — zig linker required, no musl aarch64 gcc in napi-cross
           - os: ubuntu-latest
             target: aarch64-unknown-linux-musl
             artifact: checkgate.linux-arm64-musl.node
-            cross: true
+            zig: true
 
           # macOS x64 — cross-compile natively from arm64 runner
           - os: macos-latest
@@ -75,10 +75,22 @@ jobs:
         working-directory: sdks/nodejs
         run: npm install -g @napi-rs/cli
 
+      - name: Install Zig (musl aarch64 only)
+        if: matrix.zig == true
+        uses: goto-bus-stop/setup-zig@v2
+        with:
+          version: 0.13.0
+
+      - name: Install cargo-zigbuild (musl aarch64 only)
+        if: matrix.zig == true
+        run: cargo install cargo-zigbuild
+
       - name: Build native binary
         working-directory: sdks/nodejs
         run: |
-          if [ "${{ matrix.cross }}" = "true" ]; then
+          if [ "${{ matrix.zig }}" = "true" ]; then
+            napi build --platform --release --target ${{ matrix.target }} --zig
+          elif [ "${{ matrix.cross }}" = "true" ]; then
             napi build --platform --release --target ${{ matrix.target }} --use-napi-cross
           else
             napi build --platform --release --target ${{ matrix.target }}

.gitignore

@@ -1,6 +1,5 @@
 # Rust
 target/
-Cargo.lock
 
 # Node / pnpm
 dashboard/node_modules/