fix: add both BoringSSL library directories and add vendor dependency caching

- Return both build/ssl and build/crypto directories for BoringSSL on macOS
- Handle openssl_lib being either a string or list for cross-platform compat
- Add GitHub Actions cache for vendor dependencies (BoringSSL, nghttp2, liburing)
- Cache key includes setup script hash to invalidate on changes

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: arman-bd

.github/workflows/release.yml

@@ -52,6 +52,20 @@ jobs:
       with:
         submodules: recursive
 
+    # Cache vendor dependencies (BoringSSL, nghttp2, liburing)
+    # This cache significantly speeds up builds by avoiding recompilation
+    # Cache key includes setup script hash to invalidate on script changes
+    - name: Cache vendor dependencies
+      uses: actions/cache@v4
+      with:
+        path: |
+          vendor/boringssl/build
+          vendor/nghttp2/install
+          vendor/liburing/install
+        key: vendor-deps-${{ runner.os }}-${{ hashFiles('scripts/setup_vendors.sh') }}
+        restore-keys: |
+          vendor-deps-${{ runner.os }}-
+
     - name: Build wheels
       uses: pypa/cibuildwheel@v2.22.0
 

setup.py

@@ -122,9 +122,12 @@ def get_library_paths():
         vendor_dir = Path("vendor").resolve()
 
         # BoringSSL (always vendor-built)
+        # BoringSSL builds libssl.a and libcrypto.a in separate subdirectories
         vendor_boringssl = vendor_dir / "boringssl"
         boringssl_include = str(vendor_boringssl / "include")
-        boringssl_lib = str(vendor_boringssl / "build" / "ssl")
+        # Return both ssl and crypto lib directories as a list
+        boringssl_lib_ssl = str(vendor_boringssl / "build" / "ssl")
+        boringssl_lib_crypto = str(vendor_boringssl / "build" / "crypto")
 
         # nghttp2 - prefer vendor build for wheel compatibility
         vendor_nghttp2 = vendor_dir / "nghttp2" / "install"
@@ -150,7 +153,7 @@ def get_library_paths():
 
         return {
             "openssl_include": boringssl_include,
-            "openssl_lib": boringssl_lib,
+            "openssl_lib": [boringssl_lib_ssl, boringssl_lib_crypto],  # Return as list
             "nghttp2_include": nghttp2_include,
             "nghttp2_lib": nghttp2_lib,
         }
@@ -390,17 +393,12 @@ def get_library_paths():
 
 # Define C extension modules
 # Build library directories list
-# On macOS, BoringSSL builds libssl.a in build/ssl/ and libcrypto.a in build/crypto/
-if IS_MACOS:
-    # Add both ssl and crypto directories for BoringSSL
-    vendor_dir = Path("vendor").resolve()
-    vendor_boringssl = vendor_dir / "boringssl"
-    BORINGSSL_LIB_DIRS = [
-        str(vendor_boringssl / "build" / "ssl"),
-        str(vendor_boringssl / "build" / "crypto"),
-    ]
+# Handle openssl_lib being either a string or a list
+openssl_lib = LIB_PATHS["openssl_lib"]
+if isinstance(openssl_lib, list):
+    BORINGSSL_LIB_DIRS = openssl_lib
 else:
-    BORINGSSL_LIB_DIRS = [LIB_PATHS["openssl_lib"]]
+    BORINGSSL_LIB_DIRS = [openssl_lib]
 
 # Build include and library directory lists
 INCLUDE_DIRS = [