producers: build from pre-staging; pin localnet-tools to ubuntu-24.04

Both precompiled producers now clone suibase at the PROMOTED branch
(pre-staging) instead of a moving dev, so each artifact is compiled from
exactly the source that staging then validates. localnet-tools is pinned
to ubuntu-24.04 (stable glibc 2.39 floor; glibc not musl, matching how
MystenLabs/sui ships its RocksDB-heavy binaries) — asset suffix unchanged.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: mario4tier

.github/workflows/build-localnet-tools.yml

@@ -142,9 +142,15 @@ jobs:
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
-        os: [ubuntu-latest, macos-latest]
+        # Linux pinned to ubuntu-24.04 (NOT ubuntu-latest): glibc binaries are
+        # forward-compatible only, so the build image is the MINIMUM glibc the
+        # artifact requires. Pinning keeps that floor stable (24.04 = glibc 2.39)
+        # instead of silently rising when GitHub bumps `ubuntu-latest`. glibc (not
+        # musl) matches how MystenLabs/sui ships its own RocksDB-heavy binaries; the
+        # asset suffix stays "ubuntu-x86_64" so the consumer match is unchanged.
+        os: [ubuntu-24.04, macos-latest]
         include:
-          - os: ubuntu-latest
+          - os: ubuntu-24.04
             asset-name-suffix: ubuntu-x86_64
           - os: macos-latest
             asset-name-suffix: macos-arm64
@@ -194,7 +200,10 @@ jobs:
         run: |
           # The crate (rust/walrus-store) + its vendored embedded-contracts live in
           # suibase; build straight from a checkout (no `suibase install` needed).
-          git clone --branch dev https://github.com/ChainMovers/suibase.git $HOME/suibase
+          # Build from the PROMOTED branch (pre-staging), not a moving `dev`, so the
+          # published binary is compiled from exactly the source that staging validates
+          # (mirrors build-suibase-daemon.yml).
+          git clone --branch pre-staging https://github.com/ChainMovers/suibase.git $HOME/suibase
 
       - name: Build walrus-localnet-deploy
         if: steps.asset_vars.outputs.do_build == 'true'

.github/workflows/build-suibase-daemon.yml

@@ -245,7 +245,9 @@ jobs:
         run: |
           mkdir -p $HOME/.local/bin
           echo "$HOME/.local/bin" >> $GITHUB_PATH
-          git clone --branch dev https://github.com/ChainMovers/suibase.git $HOME/suibase
+          # Build from the PROMOTED branch (pre-staging), not a moving `dev`, so the
+          # published binary is compiled from exactly the source that staging validates.
+          git clone --branch pre-staging https://github.com/ChainMovers/suibase.git $HOME/suibase
 
       - name: Install Suibase
         if: steps.asset_vars.outputs.do_build == 'true'