mq-bridge-py-basic 0.3.1__tar.gz → 0.3.3__tar.gz

mq_bridge_py_basic-0.3.3/.github/workflows/benchmark.yml

@@ -0,0 +1,254 @@
+name: Benchmark
+
+on:
+  push:
+    branches: [main, dev]
+  schedule:
+    # Nightly full benchmark run (04:00 UTC)
+    - cron: '0 4 * * *'
+  workflow_dispatch:
+
+env:
+  CARGO_TERM_COLOR: always
+
+jobs:
+  # Compile the bench binary once (release, --features full) and hand the
+  # executable to the shard jobs below so none of them need to recompile.
+  benchmark-build:
+    name: Build Benchmark Binary
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
+
+      - name: Cache cargo build
+        uses: Swatinem/rust-cache@v2
+        with:
+          shared-key: release-full
+
+      - name: Build bench binary
+        run: |
+          set -o pipefail
+          cargo bench --bench performance_bench --features full --no-run --message-format=json | tee build-output.json
+          BIN_PATH=$(jq -r 'select(.reason == "compiler-artifact" and (.target.kind // [] | index("bench")) and .executable != null) | .executable' build-output.json | tail -n1)
+          if [ -z "$BIN_PATH" ]; then
+            echo "Could not locate performance_bench executable in cargo build output" >&2
+            exit 1
+          fi
+          cp "$BIN_PATH" ./performance_bench_bin
+
+      - name: Upload bench binary
+        uses: actions/upload-artifact@v4
+        with:
+          name: performance-bench-bin
+          path: performance_bench_bin
+          retention-days: 1
+
+  # Three independent shards of the same binary, filtered via the
+  # MQB_TEST_BACKEND env var that test_utils::should_run_benchmark() already
+  # supports. Each only pre-pulls the Docker images it actually needs.
+  benchmark-streams:
+    name: Benchmark (streams)
+    needs: benchmark-build
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+
+      - name: Download bench binary
+        uses: actions/download-artifact@v4
+        with:
+          name: performance-bench-bin
+
+      - name: Pre-pull docker images
+        run: |
+          for f in aws kafka amqp nats mqtt_performance; do
+            docker compose -f "tests/integration/docker-compose/${f}.yml" pull -q
+          done
+
+      - name: Run benchmarks
+        shell: bash
+        env:
+          MQB_TEST_BACKEND: "aws,kafka,amqp,nats,mqtt,ibm-mq"
+        run: |
+          set -o pipefail
+          chmod +x ./performance_bench_bin
+          export CARGO_TERM_COLOR=never
+          ./performance_bench_bin --bench --output-format bencher | tee raw_output_streams.txt
+          ./scripts/ci/format_bench_output.sh raw_output_streams.txt output_streams.txt
+
+      - name: Upload shard output
+        uses: actions/upload-artifact@v4
+        with:
+          name: bench-output-streams
+          path: |
+            raw_output_streams.txt
+            output_streams.txt
+          retention-days: 1
+
+  benchmark-database:
+    name: Benchmark (database)
+    needs: benchmark-build
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+
+      - name: Download bench binary
+        uses: actions/download-artifact@v4
+        with:
+          name: performance-bench-bin
+
+      - name: Pre-pull docker images
+        run: |
+          for f in mongodb postgres; do
+            docker compose -f "tests/integration/docker-compose/${f}.yml" pull -q
+          done
+
+      - name: Run benchmarks
+        shell: bash
+        env:
+          MQB_TEST_BACKEND: "mongodb,postgres"
+        run: |
+          set -o pipefail
+          chmod +x ./performance_bench_bin
+          export CARGO_TERM_COLOR=never
+          ./performance_bench_bin --bench --output-format bencher | tee raw_output_database.txt
+          ./scripts/ci/format_bench_output.sh raw_output_database.txt output_database.txt
+
+      - name: Upload shard output
+        uses: actions/upload-artifact@v4
+        with:
+          name: bench-output-database
+          path: |
+            raw_output_database.txt
+            output_database.txt
+          retention-days: 1
+
+  benchmark-dockerless:
+    name: Benchmark (dockerless)
+    needs: benchmark-build
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+
+      - name: Download bench binary
+        uses: actions/download-artifact@v4
+        with:
+          name: performance-bench-bin
+
+      - name: Run benchmarks
+        shell: bash
+        env:
+          MQB_TEST_BACKEND: "zeromq,memory,file,http,websocket,grpc"
+        run: |
+          set -o pipefail
+          chmod +x ./performance_bench_bin
+          export CARGO_TERM_COLOR=never
+          ./performance_bench_bin --bench --output-format bencher | tee raw_output_dockerless.txt
+          ./scripts/ci/format_bench_output.sh raw_output_dockerless.txt output_dockerless.txt
+
+      - name: Upload shard output
+        uses: actions/upload-artifact@v4
+        with:
+          name: bench-output-dockerless
+          path: |
+            raw_output_dockerless.txt
+            output_dockerless.txt
+          retention-days: 1
+
+  # Merge the three shard outputs back into the single combined report the
+  # gh-pages benchmark history / dashboard has always tracked.
+  benchmark-collect:
+    name: Collect Benchmark Results
+    needs: [benchmark-streams, benchmark-database, benchmark-dockerless]
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      deployments: write
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Download shard outputs
+        uses: actions/download-artifact@v4
+        with:
+          pattern: bench-output-*
+          merge-multiple: true
+          path: bench-outputs
+
+      - name: Merge shard outputs
+        run: |
+          cat bench-outputs/raw_output_*.txt > raw_output.txt
+          cat bench-outputs/output_*.txt > output.txt
+
+      - name: Generate Throughput Summary
+        run: |
+          python3 -c '
+          import re
+          import os
+
+          data = {}
+          try:
+              with open("raw_output.txt", "r") as f:
+                  for line in f:
+                      # Match lines like: "aws single_write: 1 iters, total time 1.48s, 673.75 msgs/sec"
+                      m = re.search(r"^\s*(.*): .* ([\d\.]+) msgs/sec", line)
+                      if m:
+                          name = m.group(1).strip()
+                          rate = float(m.group(2))
+                          if name not in data:
+                              data[name] = []
+                          data[name].append(rate)
+
+              if data:
+                  with open(os.environ["GITHUB_STEP_SUMMARY"], "a") as f:
+                      f.write("### Benchmark Throughput Results\n")
+                      f.write("| Test Case | Average msgs/sec | Samples |\n")
+                      f.write("|-----------|------------------|---------|\n")
+                      for name in sorted(data.keys()):
+                          rates = data[name]
+                          avg = sum(rates) / len(rates)
+                          f.write(f"| {name} | {avg:,.2f} | {len(rates)} |\n")
+          except Exception as e:
+              print(f"Error generating summary: {e}")
+          '
+
+      - name: Create gh-pages branch if missing
+        run: |
+          git fetch origin gh-pages || {
+            git config --global user.email "41898282+github-actions[bot]@users.noreply.github.com"
+            git config --global user.name "github-actions[bot]"
+            git checkout --orphan gh-pages
+            git rm -rf .
+            git commit --allow-empty -m "Initialize gh-pages branch"
+            git push origin gh-pages
+            git checkout ${{ github.sha }}
+          }
+
+      - name: Store benchmark result
+        uses: benchmark-action/github-action-benchmark@v1
+        with:
+          name: Rust Benchmark
+          tool: 'cargo'
+          output-file-path: output.txt
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          auto-push: true
+          alert-threshold: '40000%'
+          comment-on-alert: true
+          fail-on-alert: false

{mq_bridge_py_basic-0.3.1 → mq_bridge_py_basic-0.3.3}/.github/workflows/ci.yml

@@ -107,35 +107,74 @@ jobs:
       - name: Memory leak soak (route commit-task JoinSet)
         run: cargo test --test memory_leak_test --features=full -- --ignored --nocapture
 
-  # Integration tests (requires Docker) split into parallel jobs
+  # Compile the integration test binaries ONCE (release, full,test-utils) and
+  # publish them as a nextest archive. The three run jobs below download this
+  # archive instead of each recompiling the same binaries.
+  integration-build:
+    name: Integration — Build
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
+
+      - name: Install cargo-nextest
+        uses: taiki-e/install-action@v2
+        with:
+          tool: nextest
+
+      - name: Cache cargo build
+        uses: Swatinem/rust-cache@v2
+        with:
+          # Shared with the benchmark job so the full-feature dependency compile
+          # is reused across jobs/runs.
+          shared-key: release-full
+
+      - name: Build nextest archive
+        run: |
+          cargo nextest archive \
+            --release --features full,test-utils \
+            --test integration_test --test armature_integration \
+            --archive-file nextest-archive.tar.zst
+
+      - name: Upload nextest archive
+        uses: actions/upload-artifact@v4
+        with:
+          name: integration-nextest-archive
+          path: nextest-archive.tar.zst
+          retention-days: 1
+
+  # Integration tests (requires Docker) split into parallel jobs. Each runs the
+  # prebuilt nextest archive from integration-build — no recompilation.
   integration-others:
     name: Integration — Others
     runs-on: ubuntu-latest
+    needs: integration-build
     services:
       docker:
         image: docker:dind
         options: --privileged
     steps:
       - uses: actions/checkout@v4
-      
-      - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
-      
-      - name: Cache cargo build
-        uses: Swatinem/rust-cache@v2
+
+      - name: Install cargo-nextest
+        uses: taiki-e/install-action@v2
         with:
-          # Differentiates the matrix `check` job per feature set; evaluates to an
-          # empty string (no-op) in non-matrix jobs. rust-cache already keys on the
-          # job id, OS, rustc version, and lockfiles automatically.
-          key: ${{ matrix.features }}
-      
+          tool: nextest
+
+      - name: Download nextest archive
+        uses: actions/download-artifact@v4
+        with:
+          name: integration-nextest-archive
+
       - name: Pre-pull docker images
         run: |
           find tests/integration/docker-compose -name "*.yml" | xargs -P 5 -I {} docker compose -f {} pull -q
-      - name: Install JDK (for keytool)
+      - name: Install JRE (for keytool)
         run: |
           sudo apt-get update
-          sudo apt-get install -y default-jdk
+          sudo apt-get install -y default-jre-headless
 
       - name: Generate TLS certs for integration services
         run: |
@@ -146,15 +185,20 @@ jobs:
 
       - name: Run chaos/stability tests
         run: |
-          cargo test --test integration_test --release --features full,test-utils -- --ignored --nocapture --test-threads=1 --exact test_all_chaos
+          cargo nextest run --archive-file nextest-archive.tar.zst \
+            --run-ignored all --no-capture \
+            -E 'binary(integration_test) & test(=test_all_chaos)'
 
       - name: Run remaining integration tests (excluding chaos & performance)
         run: |
-          cargo test --test integration_test --release --features full,test-utils -- --ignored --nocapture --test-threads=1 --skip test_all_chaos --skip test_all_performance_pipeline --skip test_all_performance_direct
+          cargo nextest run --archive-file nextest-archive.tar.zst \
+            --run-ignored all --no-capture \
+            -E 'binary(integration_test) & not test(=test_all_chaos) & not test(=test_all_performance_pipeline) & not test(=test_all_performance_direct)'
 
   integration-performance:
     name: Integration — Performance
     runs-on: ubuntu-latest
+    needs: integration-build
     services:
       docker:
         image: docker:dind
@@ -162,24 +206,23 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
+      - name: Install cargo-nextest
+        uses: taiki-e/install-action@v2
+        with:
+          tool: nextest
 
-      - name: Cache cargo build
-        uses: Swatinem/rust-cache@v2
+      - name: Download nextest archive
+        uses: actions/download-artifact@v4
         with:
-          # Differentiates the matrix `check` job per feature set; evaluates to an
-          # empty string (no-op) in non-matrix jobs. rust-cache already keys on the
-          # job id, OS, rustc version, and lockfiles automatically.
-          key: ${{ matrix.features }}
+          name: integration-nextest-archive
 
       - name: Pre-pull docker images
         run: |
           find tests/integration/docker-compose -name "*.yml" | xargs -P 5 -I {} docker compose -f {} pull -q
-      - name: Install JDK (for keytool)
+      - name: Install JRE (for keytool)
         run: |
           sudo apt-get update
-          sudo apt-get install -y default-jdk
+          sudo apt-get install -y default-jre-headless
 
       - name: Generate TLS certs for integration services
         run: |
@@ -190,15 +233,20 @@ jobs:
 
       - name: Run pipeline performance tests
         run: |
-          cargo test --test integration_test --release --features full,test-utils -- --ignored --nocapture --test-threads=1 --exact test_all_performance_pipeline
+          cargo nextest run --archive-file nextest-archive.tar.zst \
+            --run-ignored all --no-capture \
+            -E 'binary(integration_test) & test(=test_all_performance_pipeline)'
 
       - name: Run other performance tests
         run: |
-          cargo test --test integration_test --release --features full,test-utils -- --ignored --nocapture --test-threads=1 --exact test_all_performance_direct
+          cargo nextest run --archive-file nextest-archive.tar.zst \
+            --run-ignored all --no-capture \
+            -E 'binary(integration_test) & test(=test_all_performance_direct)'
 
   integration-armature:
     name: Integration — Armature
     runs-on: ubuntu-latest
+    needs: integration-build
     services:
       docker:
         image: docker:dind
@@ -206,24 +254,23 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
+      - name: Install cargo-nextest
+        uses: taiki-e/install-action@v2
+        with:
+          tool: nextest
 
-      - name: Cache cargo build
-        uses: Swatinem/rust-cache@v2
+      - name: Download nextest archive
+        uses: actions/download-artifact@v4
         with:
-          # Differentiates the matrix `check` job per feature set; evaluates to an
-          # empty string (no-op) in non-matrix jobs. rust-cache already keys on the
-          # job id, OS, rustc version, and lockfiles automatically.
-          key: ${{ matrix.features }}
+          name: integration-nextest-archive
 
       - name: Pre-pull docker images
         run: |
           find tests/integration/docker-compose -name "*.yml" | xargs -P 5 -I {} docker compose -f {} pull -q
-      - name: Install JDK (for keytool)
+      - name: Install JRE (for keytool)
         run: |
           sudo apt-get update
-          sudo apt-get install -y default-jdk
+          sudo apt-get install -y default-jre-headless
 
       - name: Generate TLS certs for integration services
         run: |
@@ -234,7 +281,9 @@ jobs:
 
       - name: Run armature integration tests
         run: |
-          cargo test --test armature_integration --release --features full,test-utils -- --ignored --nocapture --test-threads=1
+          cargo nextest run --archive-file nextest-archive.tar.zst \
+            --run-ignored all --no-capture \
+            -E 'binary(armature_integration)'
 
   # Documentation
   docs:

{mq_bridge_py_basic-0.3.1 → mq_bridge_py_basic-0.3.3}/.github/workflows/ibm-mq.yml

@@ -82,10 +82,16 @@ jobs:
           ls -la /opt/mqm/lib64/ || echo "MQ lib64 directory not found"
           echo "LD_LIBRARY_PATH=$LD_LIBRARY_PATH"
 
-      - name: Build with IBM MQ feature
+      # `ibm-mq` (dlopen) is the shipping path and needs no SDK at build; the
+      # redist install above only provides headers for the static compile-check.
+      - name: Build with IBM MQ feature (dlopen)
         if: steps.mqclient.outputs.available == 'true'
         run: cargo build --features ibm-mq
 
+      - name: Build with IBM MQ feature (static link)
+        if: steps.mqclient.outputs.available == 'true'
+        run: cargo build --features ibm-mq-static
+
       - name: Run clippy on IBM MQ code
         if: steps.mqclient.outputs.available == 'true'
         run: cargo clippy --features ibm-mq -- -D warnings
@@ -156,13 +162,18 @@ jobs:
 
       - name: Run IBM MQ integration tests
         if: steps.mqclient.outputs.available == 'true'
+        env:
+          MQB_TEST_BACKEND: ibm-mq
         run: |
+          # The test fns are named test_all_* (filtered to ibm-mq via
+          # MQB_TEST_BACKEND). The previous test_ibm_mq_* filters matched no
+          # test, so this job silently ran zero tests.
           cargo test --test integration_test --features ibm-mq,test-utils,rustls-ring -- \
             --ignored --nocapture --test-threads=1 \
-            test_ibm_mq_subscriber_logic \
-            test_ibm_mq_performance_pipeline \
-            test_ibm_mq_chaos \
-            test_ibm_mq_status
+            test_all_subscriber_logic \
+            test_all_performance_pipeline \
+            test_all_chaos \
+            test_all_status
 
       - name: Run IBM MQ TLS tests
         if: steps.mqclient.outputs.available == 'true'

{mq_bridge_py_basic-0.3.1 → mq_bridge_py_basic-0.3.3}/.github/workflows/node.yml

@@ -2,7 +2,7 @@ name: Node
 
 on:
   push:
-    branches: [main]
+    branches: [main, dev]
     paths:
       - ".github/workflows/node.yml"
       - "node/mq-bridge-node/**"
@@ -23,6 +23,28 @@ env:
   CARGO_TERM_COLOR: always
 
 jobs:
+  # Fast guard: catches package.json/package-lock.json drift (e.g. a version
+  # bump that only half-updates the lock) before it reaches the publish flow,
+  # where `npm ci` fails after all the native builds have already run.
+  lock-sync:
+    name: package-lock in sync
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        with:
+          persist-credentials: false
+
+      - name: Set up Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          cache: npm
+          cache-dependency-path: node/mq-bridge-node/package-lock.json
+
+      - name: Verify lock is in sync
+        working-directory: node/mq-bridge-node
+        run: npm ci --ignore-scripts
+
   test:
     name: Node binding smoke test
     runs-on: ubuntu-latest

{mq_bridge_py_basic-0.3.1 → mq_bridge_py_basic-0.3.3}/.github/workflows/publish-node.yml

@@ -59,6 +59,12 @@ jobs:
           curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --profile minimal
           echo "$HOME/.cargo/bin" >> "$GITHUB_PATH"
 
+      # Regenerate package.json/lock from the Cargo workspace version (source of
+      # truth) BEFORE npm ci, so a drifted committed lock can't fail the build.
+      - name: Sync version from Cargo workspace
+        working-directory: node/mq-bridge-node
+        run: npm run sync-version
+
       - name: Install Node dependencies
         working-directory: node/mq-bridge-node
         run: npm ci
@@ -124,6 +130,12 @@ jobs:
         with:
           targets: ${{ matrix.target }}
 
+      # Regenerate package.json/lock from the Cargo workspace version (source of
+      # truth) BEFORE npm ci, so a drifted committed lock can't fail the build.
+      - name: Sync version from Cargo workspace
+        working-directory: node/mq-bridge-node
+        run: npm run sync-version
+
       - name: Install Node dependencies
         working-directory: node/mq-bridge-node
         run: npm ci
@@ -170,14 +182,16 @@ jobs:
       - name: Update npm
         run: npm install -g npm@11.5.1
 
-      - name: Install Node dependencies
-        working-directory: node/mq-bridge-node
-        run: npm ci
-
+      # Regenerate package.json/lock from the Cargo workspace version (source of
+      # truth) BEFORE npm ci, so a drifted committed lock can't fail the publish.
       - name: Sync version from Cargo workspace
         working-directory: node/mq-bridge-node
         run: npm run sync-version
 
+      - name: Install Node dependencies
+        working-directory: node/mq-bridge-node
+        run: npm ci
+
       - name: Download loader into package root
         uses: actions/download-artifact@v4
         with:

{mq_bridge_py_basic-0.3.1 → mq_bridge_py_basic-0.3.3}/.github/workflows/publish-python.yml

@@ -39,6 +39,25 @@ jobs:
             os: linux
             target: aarch64
             args: --release --out dist --find-interpreter --no-default-features
+          # musl/Alpine wheels for the basic package. basic uses the aws-lc-sys
+          # crypto provider (amqp + aws pull it in, same as full); aws-lc-sys
+          # compiles its C natively under musl given cmake + gcc, which
+          # before-script-linux installs in the musllinux container. The full
+          # wheel has no musl build (rdkafka makes it a separate effort).
+          - package: mq-bridge-py-basic
+            pyproject: pyproject-basic.toml
+            runner: ubuntu-latest
+            os: linux
+            target: x86_64
+            manylinux: musllinux_1_2
+            args: --release --out dist --find-interpreter --no-default-features
+          - package: mq-bridge-py-basic
+            pyproject: pyproject-basic.toml
+            runner: ubuntu-24.04-arm
+            os: linux
+            target: aarch64
+            manylinux: musllinux_1_2
+            args: --release --out dist --find-interpreter --no-default-features
           - package: mq-bridge-py-basic
             pyproject: pyproject-basic.toml
             runner: macos-15-intel
@@ -75,6 +94,39 @@ jobs:
             os: linux
             target: aarch64
             args: --release --out dist --find-interpreter
+          # Reduced-feature wheels published UNDER THE `mq-bridge-py` NAME so that
+          # a single `pip install mq-bridge-py` resolves to the `full` wheel on
+          # glibc-Linux/macOS/Windows-x64 and to this `basic`-featured wheel on
+          # targets where the full C toolchain doesn't build (musl/Alpine,
+          # Windows arm64), picked automatically by platform tag.
+          # pyproject-reduced.toml keeps the `mq-bridge-py` project name but
+          # compiles the `basic` feature set (no Kafka/sqlx/grpc/IBM-MQ-static).
+          # Same aws-lc-sys-native setup as the mq-bridge-py-basic rows.
+          - package: mq-bridge-py
+            pyproject: pyproject-reduced.toml
+            runner: ubuntu-latest
+            os: linux
+            target: x86_64
+            manylinux: musllinux_1_2
+            args: --release --out dist --find-interpreter --no-default-features
+          - package: mq-bridge-py
+            pyproject: pyproject-reduced.toml
+            runner: ubuntu-24.04-arm
+            os: linux
+            target: aarch64
+            manylinux: musllinux_1_2
+            args: --release --out dist --find-interpreter --no-default-features
+          # Windows arm64 gets the reduced set too: `basic` still pulls aws-lc-sys
+          # (via amqp+aws), which compiles natively under MSVC on the native
+          # windows-11-arm runner. If aws-lc-sys ever fails to build here, drop
+          # amqp+aws from a Windows-arm-only feature set rather than reintroducing
+          # a cross-compile.
+          - package: mq-bridge-py
+            pyproject: pyproject-reduced.toml
+            runner: windows-11-arm
+            os: windows
+            target: aarch64
+            args: --release --out dist --find-interpreter --no-default-features
           - package: mq-bridge-py
             pyproject: pyproject.toml
             runner: macos-15-intel
@@ -126,12 +178,18 @@ jobs:
           target: ${{ matrix.target }}
           args: ${{ matrix.args }}
           sccache: "true"
-          manylinux: auto
+          manylinux: ${{ matrix.manylinux || 'auto' }}
+          # amqp/aws (and full's kafka) pull aws-lc-sys, which compiles its C with
+          # cmake. manylinux containers already ship it; the musllinux (Alpine)
+          # container does not, so install it there. Guarded so it's a no-op
+          # wherever cmake is already present. Only runs for linux builds.
+          before-script-linux: |
+            command -v cmake >/dev/null 2>&1 || apk add --no-cache cmake gcc g++ make musl-dev perl
 
       - name: Upload wheels
         uses: actions/upload-artifact@v4
         with:
-          name: wheels-${{ matrix.package }}-${{ matrix.os }}-${{ matrix.target }}
+          name: wheels-${{ matrix.package }}-${{ matrix.os }}-${{ matrix.target }}-${{ matrix.manylinux || 'auto' }}
           path: python/mq-bridge-py/dist
 
   build-sdists: