Fix Windows cross-compilation in release workflow and unblock branch dispatch

[Copilot]

Release workflow fails on both Windows targets (x86_64, aarch64) because they're cross-compiled from Ubuntu where no Windows libcurl.lib exists. Separately, workflow_dispatch was gated to refs/heads/main, blocking release from upstream-sync.

build.zig: skip libcurl linking for cross-compiled Windows

No source file uses @cImport for curl — all HTTP is subprocess-based. Linking the C library is only needed on native Windows (vcpkg). Cross-compiled Windows builds now skip it:

const link_curl = curl_source_available or (is_windows and !is_cross);

Also fixed vcpkg library name: linkSystemLibrary("libcurl") (vcpkg installs libcurl.lib, not curl.lib).

release.yml: allow dispatch from any branch

• Removed github.ref == 'refs/heads/main' gate on generate-tag job
• Added explicit permissions: contents: read

ci.yml: Windows vcpkg diagnostics

• Added find/ls after vcpkg install to surface installed file names on failure

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• api.openai.com
  • Triggering command: ./.zig-cache/o/2c6e5eef9477ce484bf211c81f055606/test ./.zig-cache/o/2c6e5eef9477ce484bf211c81f055606/test --cache-dir=./.zig-cache --seed=0x2ead3a60 --listen=- (dns block)
  • Triggering command: ./.zig-cache/o/2c6e5eef9477ce484bf211c81f055606/test ./.zig-cache/o/2c6e5eef9477ce484bf211c81f055606/test --cache-dir=./.zig-cache --seed=0xdddde8af --listen=- law/�� rd --local de/node/bin/git user.name (dns block)
• backend.composio.dev
  • Triggering command: /usr/bin/curl curl -sL -m 15 -H x-api-key: test-key REDACTED xpa/repo (dns block)
  • Triggering command: /usr/bin/curl curl -sL -m 15 -H x-api-key: test-key REDACTED cal/bin/git (dns block)
  • Triggering command: /usr/bin/curl curl -sL -m 15 -H x-api-key: test-key REDACTED t (dns block)
• https://github.com/ghapi/search/repositories
  • Triggering command: ./.zig-cache/o/2c6e5eef9477ce484bf211c81f055606/test ./.zig-cache/o/2c6e5eef9477ce484bf211c81f055606/test --cache-dir=./.zig-cache --seed=0x2ead3a60 --listen=- (http block)
  • Triggering command: ./.zig-cache/o/2c6e5eef9477ce484bf211c81f055606/test ./.zig-cache/o/2c6e5eef9477ce484bf211c81f055606/test --cache-dir=./.zig-cache --seed=0xdddde8af --listen=- law/�� rd --local de/node/bin/git user.name (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

---

🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. Learn more about Advanced Security.

---

[devin-ai-integration]

Devin Review found 1 potential issue.

View 6 additional findings in Devin Review.

[devin-ai-integration]

🔴 link_curl is true for cross-compiled Windows targets, causing linker failure

The expression const link_curl = curl_source_available or (is_windows and !is_cross); at build.zig:607 will evaluate to true for cross-compiled Windows targets whenever curl_source_available is true (i.e., vendor/curl source exists and target is not WASI). This contradicts the comment on lines 604-606 which states "Cross-compiled Windows builds skip this."

When this triggers, linkCurlToStep is called with curl_install_dir = null (line 598 sets it to null for Windows) and a Windows target. The Windows branch at build.zig:214-232 runs and calls step.linkSystemLibrary("libcurl"), attempting to find a Windows libcurl.lib on a Linux build host — which will fail at link time. The release workflow (release.yml) builds windows-x86_64 and windows-aarch64 on ubuntu-latest (cross-compile), so this would break release builds once the vendor/curl source directory is added to the repository.

Correct fix

The condition should exclude Windows from the curl_source_available path:
const link_curl = (curl_source_available and !is_windows) or (is_windows and !is_cross);

Or equivalently: const link_curl = curl_install_dir != null or (is_windows and !is_cross);

Suggested change

	const link_curl = curl_source_available or (is_windows and !is_cross);
	const link_curl = (curl_source_available and !is_windows) or (is_windows and !is_cross);

---

Was this helpful? React with 👍 or 👎 to provide feedback.