karafka-rdkafka 0.21.0 → 0.22.0.rc1

data/.github/workflows/ci_linux_ubuntu_x86_64_gnu_complementary.yml

@@ -1,294 +0,0 @@
-# CI Strategy: Complementary Testing for Ubuntu Precompiled Binaries and Extended Compatibility
-#
-# This workflow runs complementary tests that don't need to block PRs but are essential
-# for catching regressions in precompiled binary distribution, edge case Ruby versions,
-# and system library compatibility. It complements the main CI by testing scenarios
-# that are stable-but-critical on a nightly schedule.
-#
-# WHY COMPLEMENTARY TESTING:
-# - Precompiled binary testing is stable (rarely breaks from code changes)
-# - Edge Ruby versions (3.1, 3.5-preview, JRuby) need testing but shouldn't block PRs
-# - Integration specs test OS library compatibility, which changes with system updates
-# - These tests catch regressions from external changes (system libs, Ruby updates)
-# - Running every 3 days to prevent these slower tests from blocking PR velocity
-# - Manual triggering allows testing workflow changes before they go into schedule
-#
-# PRECOMPILED BINARY TESTING (build_precompiled + specs_precompiled):
-# - Tests static library distribution works across Ubuntu versions
-# - Validates precompiled libraries don't have unexpected system dependencies
-# - Ensures binary compatibility between different Ubuntu LTS versions
-# - Tests SSL/TLS connectivity with precompiled binaries
-# - Validates that removing build tools doesn't break precompiled usage
-#
-# EXTENDED COMPATIBILITY TESTING:
-# - Edge case Ruby versions: 3.1, 3.5.0-preview1, JRuby-10.0
-# - Integration specs testing system library compatibility
-# - Both compilation and precompiled flows for comprehensive coverage
-# - Cross-platform compatibility validation
-#
-# SCHEDULING STRATEGY:
-# - Runs every 3 days at 2 AM to catch system/library changes from base image updates
-# - Triggers on workflow file changes to validate CI modifications
-# - Manual dispatch available for ad-hoc regression testing
-# - Separate artifact naming prevents interference with main CI
-#
-# This approach ensures comprehensive coverage while keeping PR CI fast and focused
-# on code-related issues rather than infrastructure/system regressions.
-
-name: CI Linux Complementary Ubuntu x86_64 GNU
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
-
-on:
-  schedule:
-    - cron: '0 2 */3 * *'
-  workflow_dispatch:
-  push:
-    paths:
-      - '.github/workflows/ci_linux_ubuntu_x86_64_gnu_complementary.yml'
-    branches: [ main, master ]
-  pull_request:
-    paths:
-      - '.github/workflows/ci_linux_ubuntu_x86_64_gnu_complementary.yml'
-    branches: [ main, master ]
-
-permissions:
-  contents: read
-
-env:
-  BUNDLE_RETRY: 6
-  BUNDLE_JOBS: 4
-
-jobs:
-  build_precompiled:
-    timeout-minutes: 30
-    # We precompile on older Ubuntu and check compatibility by running specs since we aim to
-    # release only one precompiled version for all supported Ubuntu versions
-    # This is why we do not want Renovate to update it automatically
-    runs-on: ubuntu-22.04 # renovate: ignore
-    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-        with:
-          fetch-depth: 0
-      - name: Install build dependencies
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y --no-install-recommends \
-            build-essential \
-            gcc \
-            g++ \
-            make \
-            tar \
-            gzip \
-            wget \
-            curl \
-            file \
-            pkg-config \
-            autoconf \
-            automake \
-            libtool \
-            python3 \
-            git \
-            ca-certificates \
-            patch \
-            libsasl2-dev \
-            libssl-dev \
-            zlib1g-dev \
-            libzstd-dev \
-            bison \
-            flex \
-            perl \
-            binutils-dev
-      - name: Cache build-tmp directory
-        uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
-        with:
-          path: ext/build-tmp
-          key: build-tmp-${{ runner.os }}-${{ hashFiles('ext/*.sh', 'ext/Rakefile') }}-v2
-      - name: Build precompiled librdkafka.so
-        run: |
-          cd ext
-          ./build_linux_x86_64_gnu.sh
-      - name: Upload precompiled library
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
-        with:
-          name: librdkafka-precompiled-ubuntu-complementary
-          path: ext/
-          retention-days: 1
-
-  specs_install:
-    timeout-minutes: 50
-    strategy:
-      fail-fast: false
-      matrix:
-        ruby:
-          - '3.5.0-preview1'
-          - '3.4'
-          - '3.3'
-          - '3.2'
-          - '3.1'
-          - 'jruby-10.0'
-        ubuntu-version: ['22.04', '24.04']
-        include:
-          - ruby: '3.4'
-            coverage: 'true'
-          - ruby: 'jruby-10.0'
-            continue-on-error: true
-    runs-on: ubuntu-${{ matrix.ubuntu-version }}
-    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-        with:
-          fetch-depth: 0
-      - name: Set up Ruby
-        uses: ruby/setup-ruby@2a7b30092b0caf9c046252510f9273b4875f3db9 # v1.254.0
-        with:
-          ruby-version: ${{matrix.ruby}}
-          bundler-cache: false
-      - name: Start Kafka with Docker Compose
-        run: |
-          ./ext/generate-ssl-certs.sh
-          docker compose -f docker-compose-ssl.yml up -d
-          echo "Waiting for Kafka to be ready..."
-
-          sleep 10
-
-          echo "=== Container status ==="
-          docker compose ps kafka
-
-          for i in {1..30}; do
-            echo "=== Attempt $i/30 ==="
-
-            echo "Testing kafka-topics command..."
-            if docker compose exec -T kafka kafka-topics --bootstrap-server localhost:9092 --list >/dev/null 2>&1; then
-              echo "Kafka topics command succeeded!"
-              break
-            else
-              echo "Kafka topics command failed (exit code: $?)"
-            fi
-
-            echo "Sleeping 2 seconds..."
-            sleep 2
-          done
-      - name: Install dependencies
-        env:
-          RDKAFKA_EXT_PATH: ${{ github.workspace }}/ext
-        continue-on-error: ${{ matrix.continue-on-error || false }}
-        run: |
-          bundle install
-      - name: Build gem with mini_portile
-        continue-on-error: ${{ matrix.continue-on-error || false }}
-        run: |
-          set -e
-          cd ext && bundle exec rake
-          cd ..
-      - name: Run all specs in SSL (compiled flow)
-        env:
-          RDKAFKA_EXT_PATH: ${{ github.workspace }}/ext
-          KAFKA_SSL_ENABLED: "true"
-        continue-on-error: ${{ matrix.continue-on-error || false }}
-        run: |
-          bundle exec rspec
-
-      - name: Run integration specs (compiled flow)
-        continue-on-error: ${{ matrix.continue-on-error || false }}
-        run: |
-          for file in $(ls spec/integrations/*_spec.rb); do
-            echo "Running $file with Ruby ${{ matrix.ruby }}";
-            bundle exec ruby "$file" || exit 1;
-          done
-
-  specs_precompiled:
-    timeout-minutes: 30
-    needs: build_precompiled
-    strategy:
-      fail-fast: false
-      matrix:
-        ruby:
-          - '3.5.0-preview1'
-          - '3.4'
-          - '3.3'
-          - '3.2'
-          - '3.1'
-        ubuntu-version: ['22.04', '24.04']
-
-    runs-on: ubuntu-${{ matrix.ubuntu-version }}
-    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-        with:
-          fetch-depth: 0
-      - name: Download precompiled library
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
-        with:
-          name: librdkafka-precompiled-ubuntu-complementary
-          path: ext/
-      - name: Set up Ruby
-        uses: ruby/setup-ruby@2a7b30092b0caf9c046252510f9273b4875f3db9 # v1.254.0
-        with:
-          ruby-version: ${{ matrix.ruby }}
-          bundler-cache: false
-      - name: Start Kafka with Docker Compose
-        run: |
-          ./ext/generate-ssl-certs.sh
-          docker compose -f docker-compose-ssl.yml up -d
-          echo "Waiting for Kafka to be ready..."
-
-          sleep 10
-
-          echo "=== Container status ==="
-          docker compose ps kafka
-          for i in {1..30}; do
-            echo "=== Attempt $i/30 ==="
-
-            echo "Testing kafka-topics command..."
-            if docker compose exec -T kafka kafka-topics --bootstrap-server localhost:9092 --list >/dev/null 2>&1; then
-              echo "Kafka topics command succeeded!"
-              break
-            else
-              echo "Kafka topics command failed (exit code: $?)"
-            fi
-
-            echo "Sleeping 2 seconds..."
-            sleep 2
-          done
-      - name: Install bundle with precompiled library
-        env:
-          RDKAFKA_EXT_PATH: ${{ github.workspace }}/ext
-        run: |
-          bundle install
-          echo "Bundle install completed with precompiled library"
-      - name: Remove build dependencies to test static linking
-        continue-on-error: true
-        run: |
-          echo "Removing build dependencies to verify precompiled library is truly self-contained..."
-
-          # Remove packages one by one to avoid dependency conflicts
-          packages_to_remove="build-essential gcc g++ make patch tar wget libsasl2-dev libssl-dev zlib1g-dev libzstd-dev"
-
-          for package in $packages_to_remove; do
-            if dpkg -l | grep -q "^ii.*$package "; then
-              echo "Removing $package..."
-              sudo dpkg --remove --force-depends $package 2>/dev/null || echo "Could not remove $package"
-            else
-              echo "$package is not installed"
-            fi
-          done
-
-          echo "Build dependencies removal completed"
-          echo "Remaining build tools:"
-          which gcc g++ make 2>/dev/null || echo "No build tools found in PATH (good!)"
-      - name: Run specs with precompiled library and SSL
-        env:
-          RDKAFKA_EXT_PATH: ${{ github.workspace }}/ext
-          KAFKA_SSL_ENABLED: "true"
-        run: |
-          bundle exec rspec
-
-      - name: Run integration specs (precompiled flow)
-        env:
-          RDKAFKA_EXT_PATH: ${{ github.workspace }}/ext
-        run: |
-          for file in $(ls spec/integrations/*_spec.rb); do
-            echo "Running $file with Ruby ${{ matrix.ruby }} (precompiled)";
-            bundle exec ruby "$file" || exit 1;
-          done

data/.github/workflows/ci_macos_arm64.yml

@@ -1,284 +0,0 @@
-name: CI macOS ARM64
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
-
-on:
-  pull_request:
-    branches: [ main, master ]
-  push:
-    branches: [ main, master ]
-  schedule:
-    - cron: '0 1 * * *'
-
-permissions:
-  contents: read
-
-env:
-  BUNDLE_RETRY: 6
-  BUNDLE_JOBS: 4
-  # Renovate can track and update this version
-  CONFLUENT_VERSION: "8.0.0"
-
-jobs:
-  specs_install:
-    timeout-minutes: 45
-    strategy:
-      fail-fast: false
-      matrix:
-        ruby:
-          - '3.5.0-preview1'
-          - '3.4'
-          - '3.3'
-          - '3.2'
-          - '3.1'
-        macos-version:
-          - 'macos-14' # macOS 14 Sonoma (ARM64)
-          - 'macos-15' # macOS 15 Sequoia (ARM64)
-        include:
-          - ruby: '3.4'
-            macos-version: 'macos-15'
-            coverage: 'true'
-        exclude:
-          - ruby: '3.5.0-preview1'
-            macos-version: 'macos-14'
-    runs-on: ${{ matrix.macos-version }}
-    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-        with:
-          fetch-depth: 0
-      - name: Install Bash 4+ and Kerberos
-        run: |
-          brew install bash
-          brew list krb5 &>/dev/null || brew install krb5
-          echo "/opt/homebrew/bin" >> $GITHUB_PATH
-      - name: Set up Ruby
-        uses: ruby/setup-ruby@2a7b30092b0caf9c046252510f9273b4875f3db9 # v1.254.0
-        with:
-          ruby-version: ${{matrix.ruby}}
-          bundler-cache: false
-      - name: Install and Start Confluent Community Kafka (KRaft)
-        run: |
-          brew install openjdk@17
-          export PATH="/opt/homebrew/opt/openjdk@17/bin:$PATH"
-          export JAVA_HOME="/opt/homebrew/opt/openjdk@17"
-
-          curl -O "https://packages.confluent.io/archive/8.0/confluent-community-${CONFLUENT_VERSION}.tar.gz"
-          tar -xzf "confluent-community-${CONFLUENT_VERSION}.tar.gz"
-
-          export CONFLUENT_HOME="$(pwd)/confluent-${CONFLUENT_VERSION}"
-          export PATH="$CONFLUENT_HOME/bin:$PATH"
-          cd "$CONFLUENT_HOME"
-
-          # Find the correct server config
-          KRAFT_CONFIG=""
-          for config in "etc/kafka/kraft/server.properties" "config/kraft/server.properties" "etc/kafka/server.properties"; do
-            if [ -f "$config" ]; then
-              KRAFT_CONFIG="$config"
-              echo "Found config: $KRAFT_CONFIG"
-              break
-            fi
-          done
-
-          if [ -z "$KRAFT_CONFIG" ]; then
-            echo "❌ No server config found"
-            exit 1
-          fi
-
-          # Configure KRaft for single-node setup
-          cat >> "$KRAFT_CONFIG" << 'EOF'
-
-          # KRaft mode configuration for single-node setup
-          process.roles=broker,controller
-          node.id=1
-          controller.quorum.voters=1@127.0.0.1:9093
-          listeners=PLAINTEXT://127.0.0.1:9092,CONTROLLER://127.0.0.1:9093
-          controller.listener.names=CONTROLLER
-          inter.broker.listener.name=PLAINTEXT
-          log.dirs=/tmp/kraft-combined-logs
-
-          # Enable simple ACL authorization for testing
-          authorizer.class.name=org.apache.kafka.metadata.authorizer.StandardAuthorizer
-          super.users=User:ANONYMOUS
-          allow.everyone.if.no.acl.found=true
-          EOF
-
-          echo "Updated KRaft configuration"
-
-          CLUSTER_ID=$(bin/kafka-storage random-uuid)
-          bin/kafka-storage format -t "$CLUSTER_ID" -c "$KRAFT_CONFIG"
-          bin/kafka-server-start "$KRAFT_CONFIG" &
-
-          sleep 20
-
-          for i in {1..30}; do
-            if bin/kafka-topics --bootstrap-server 127.0.0.1:9092 --list >/dev/null 2>&1; then
-              echo "✅ Confluent Community ${CONFLUENT_VERSION} (KRaft) is ready!"
-              break
-            fi
-            [ $i -eq 30 ] && { echo "❌ Kafka failed to start"; exit 1; }
-            sleep 2
-          done
-      - name: Install dependencies
-        env:
-          RDKAFKA_EXT_PATH: ${{ github.workspace }}/ext
-        run: |
-          bundle install
-      - name: Build gem with mini_portile
-        run: |
-          set -e
-          cd ext && bundle exec rake
-          cd ..
-      - name: Run all specs
-        env:
-          GITHUB_COVERAGE: ${{matrix.coverage}}
-          RDKAFKA_EXT_PATH: ${{ github.workspace }}/ext
-        run: |
-          bundle exec rspec
-
-  build_precompiled:
-    timeout-minutes: 45
-    runs-on: macos-14
-    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-        with:
-          fetch-depth: 0
-      - name: Install Bash 4+ and Kerberos
-        run: |
-          brew install bash
-          brew list krb5 &>/dev/null || brew install krb5
-          echo "/opt/homebrew/bin" >> $GITHUB_PATH
-      - name: Cache build-tmp directory
-        uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
-        with:
-          path: ext/build-tmp-macos
-          key: build-tmp-${{ runner.os }}-${{ hashFiles('ext/*.sh', 'ext/Rakefile') }}-v2
-      - name: Build precompiled librdkafka for macOS ARM64
-        run: |
-          cd ext
-          /opt/homebrew/bin/bash ./build_macos_arm64.sh
-      - name: Upload precompiled library
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
-        with:
-          name: librdkafka-precompiled-macos
-          path: ext/
-          retention-days: 1
-
-  specs_precompiled:
-    timeout-minutes: 30
-    needs: build_precompiled
-    strategy:
-      fail-fast: false
-      matrix:
-        ruby:
-          - '3.5.0-preview1'
-          - '3.4'
-          - '3.3'
-          - '3.2'
-          - '3.1'
-        macos-version:
-          - 'macos-14'
-          - 'macos-15'
-        include:
-          - ruby: '3.4'
-            macos-version: 'macos-15'
-            coverage: 'true'
-        exclude:
-          - ruby: '3.5.0-preview1'
-            macos-version: 'macos-14'
-    runs-on: ${{ matrix.macos-version }}
-    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-        with:
-          fetch-depth: 0
-      - name: Download precompiled library
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
-        with:
-          name: librdkafka-precompiled-macos
-          path: ext/
-      - name: Set up Ruby
-        uses: ruby/setup-ruby@2a7b30092b0caf9c046252510f9273b4875f3db9 # v1.254.0
-        with:
-          ruby-version: ${{ matrix.ruby }}
-          bundler-cache: false
-      - name: Install Bash 4+ and Kerberos
-        run: |
-          brew install bash
-          brew list krb5 &>/dev/null || brew install krb5
-          echo "/opt/homebrew/bin" >> $GITHUB_PATH
-      - name: Install and Start Confluent Community Kafka (KRaft)
-        run: |
-          brew install openjdk@17
-          export PATH="/opt/homebrew/opt/openjdk@17/bin:$PATH"
-          export JAVA_HOME="/opt/homebrew/opt/openjdk@17"
-
-          curl -O "https://packages.confluent.io/archive/8.0/confluent-community-${CONFLUENT_VERSION}.tar.gz"
-          tar -xzf "confluent-community-${CONFLUENT_VERSION}.tar.gz"
-
-          export CONFLUENT_HOME="$(pwd)/confluent-${CONFLUENT_VERSION}"
-          export PATH="$CONFLUENT_HOME/bin:$PATH"
-          cd "$CONFLUENT_HOME"
-
-          # Find the correct server config
-          KRAFT_CONFIG=""
-          for config in "etc/kafka/kraft/server.properties" "config/kraft/server.properties" "etc/kafka/server.properties"; do
-            if [ -f "$config" ]; then
-              KRAFT_CONFIG="$config"
-              echo "Found config: $KRAFT_CONFIG"
-              break
-            fi
-          done
-
-          if [ -z "$KRAFT_CONFIG" ]; then
-            echo "❌ No server config found"
-            exit 1
-          fi
-
-          # Configure KRaft for single-node setup
-          cat >> "$KRAFT_CONFIG" << 'EOF'
-
-          # KRaft mode configuration for single-node setup
-          process.roles=broker,controller
-          node.id=1
-          controller.quorum.voters=1@127.0.0.1:9093
-          listeners=PLAINTEXT://127.0.0.1:9092,CONTROLLER://127.0.0.1:9093
-          controller.listener.names=CONTROLLER
-          inter.broker.listener.name=PLAINTEXT
-          log.dirs=/tmp/kraft-combined-logs
-
-          # Enable simple ACL authorization for testing
-          authorizer.class.name=org.apache.kafka.metadata.authorizer.StandardAuthorizer
-          super.users=User:ANONYMOUS
-          allow.everyone.if.no.acl.found=true
-          EOF
-
-          echo "Updated KRaft configuration"
-
-          CLUSTER_ID=$(bin/kafka-storage random-uuid)
-          bin/kafka-storage format -t "$CLUSTER_ID" -c "$KRAFT_CONFIG"
-          bin/kafka-server-start "$KRAFT_CONFIG" &
-
-          sleep 20
-
-          for i in {1..30}; do
-            if bin/kafka-topics --bootstrap-server 127.0.0.1:9092 --list >/dev/null 2>&1; then
-              echo "✅ Confluent Community ${CONFLUENT_VERSION} (KRaft) is ready!"
-              break
-            fi
-            [ $i -eq 30 ] && { echo "❌ Kafka failed to start"; exit 1; }
-            sleep 2
-          done
-      - name: Install bundle with precompiled library
-        env:
-          GITHUB_COVERAGE: ${{ matrix.coverage }}
-          RDKAFKA_EXT_PATH: ${{ github.workspace }}/ext
-        run: |
-          bundle install
-          echo "Bundle install completed with precompiled library"
-      - name: Run specs with precompiled library
-        env:
-          GITHUB_COVERAGE: ${{ matrix.coverage }}
-          RDKAFKA_EXT_PATH: ${{ github.workspace }}/ext
-        run: |
-          bundle exec rspec

data/.github/workflows/push_linux_aarch64_gnu.yml

@@ -1,65 +0,0 @@
-name: Push Linux aarch64 GNU Platform Gem
-
-on:
-  push:
-    tags:
-      - v*
-
-permissions:
-  contents: read
-
-env:
-  BUNDLE_RETRY: 6
-  BUNDLE_JOBS: 4
-
-jobs:
-  push:
-    if: github.repository_owner == 'karafka'
-    timeout-minutes: 30
-    # Same as CI, we build on the oldest possible for ABI compatibility
-    runs-on: ubuntu-22.04-arm # renovate: ignore
-    environment: deployment
-    permissions:
-      contents: write
-      id-token: write
-    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-        with:
-          fetch-depth: 0
-      - name: Install build dependencies
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y --no-install-recommends \
-            build-essential \
-            gcc \
-            make \
-            patch \
-            tar \
-            wget \
-            ca-certificates \
-            libsasl2-dev \
-            libssl-dev \
-            zlib1g-dev \
-            libzstd-dev
-      - name: Cache build-tmp directory
-        uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
-        with:
-          path: ext/build-tmp
-          key: build-tmp-${{ runner.os }}-${{ hashFiles('ext/*.sh') }}
-      - name: Set up Ruby
-        uses: ruby/setup-ruby@2a7b30092b0caf9c046252510f9273b4875f3db9 # v1.254.0
-        with:
-          ruby-version: '3.4'
-          bundler-cache: false
-      - name: Build precompiled librdkafka.so
-        run: |
-          cd ext
-          ./build_linux_aarch64_gnu.sh
-      - name: Configure trusted publishing credentials
-        uses: rubygems/configure-rubygems-credentials@bc6dd217f8a4f919d6835fcfefd470ef821f5c44 # v1.0.0
-      - name: Build and push platform-specific gem
-        run: |
-          gem build *.gemspec
-          gem push *.gem
-        env:
-          RUBY_PLATFORM: 'aarch64-linux-gnu'

data/.github/workflows/push_linux_x86_64_gnu.yml

@@ -1,65 +0,0 @@
-name: Push Linux x86_64 GNU Platform Gem
-
-on:
-  push:
-    tags:
-      - v*
-
-permissions:
-  contents: read
-
-env:
-  BUNDLE_RETRY: 6
-  BUNDLE_JOBS: 4
-
-jobs:
-  push:
-    if: github.repository_owner == 'karafka'
-    timeout-minutes: 30
-    # Same as CI, we build on the oldest possible for ABI compatibility
-    runs-on: ubuntu-22.04 # renovate: ignore
-    environment: deployment
-    permissions:
-      contents: write
-      id-token: write
-    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-        with:
-          fetch-depth: 0
-      - name: Install build dependencies
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y --no-install-recommends \
-            build-essential \
-            gcc \
-            make \
-            patch \
-            tar \
-            wget \
-            ca-certificates \
-            libsasl2-dev \
-            libssl-dev \
-            zlib1g-dev \
-            libzstd-dev
-      - name: Cache build-tmp directory
-        uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
-        with:
-          path: ext/build-tmp
-          key: build-tmp-${{ runner.os }}-${{ hashFiles('ext/*.sh') }}
-      - name: Set up Ruby
-        uses: ruby/setup-ruby@2a7b30092b0caf9c046252510f9273b4875f3db9 # v1.254.0
-        with:
-          ruby-version: '3.4'
-          bundler-cache: false
-      - name: Build precompiled librdkafka.so
-        run: |
-          cd ext
-          ./build_linux_x86_64_gnu.sh
-      - name: Configure trusted publishing credentials
-        uses: rubygems/configure-rubygems-credentials@bc6dd217f8a4f919d6835fcfefd470ef821f5c44 # v1.0.0
-      - name: Build and push platform-specific gem
-        run: |
-          gem build *.gemspec
-          gem push *.gem
-        env:
-          RUBY_PLATFORM: 'x86_64-linux-gnu'