Fix CI environment: install SQLite3-dev and use LLVM 22 consistently

[Copilot]

CI tests were failing due to missing dependencies and LLVM version mismatches in the container environment.

Changes

• Install SQLite3 development libraries - Container had runtime but not headers required for compilation

• Enforce LLVM 22 consistency - Container ships both LLVM 21 and 22; defaults pointed to 21 while libc++ was 22, causing sanitizer library link failures

  • Use clang++-22 explicitly in CMake configuration
  • Symlink clang-scan-deps-22, lld-22, clang-format-22 to unversioned names

• Fix C++ standard library module path - CMake 4.x expects modules at /lib/share/libc++/v1 but LLVM 22 installs to /usr/lib/llvm-22/share/libc++/v1

# .github/workflows/ci.yml
- name: Install dependencies
  run: |
    apt-get install -y libsqlite3-dev
    ln -sf /usr/bin/clang-scan-deps-22 /usr/bin/clang-scan-deps
    ln -sf /usr/bin/ld.lld-22 /usr/bin/ld.lld
    mkdir -p /lib/share/libc++
    ln -sf /usr/lib/llvm-22/share/libc++/v1 /lib/share/libc++/v1

- name: Configure CMake
  run: cmake -S . -B build -DCMAKE_CXX_COMPILER=clang++-22

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• apt.kitware.com
  • Triggering command: /usr/lib/apt/methods/https /usr/lib/apt/methods/https (dns block)
  • Triggering command: /usr/lib/apt/methods/https /usr/lib/apt/methods/https -i docker0 -j DROP (dns block)
  • Triggering command: /usr/lib/apt/methods/https /usr/lib/apt/methods/https ./libs/mpl/include/boost/mpl/aux_/preprocessed/bcc/iter_fold_impl.hpp ./libs/mpl/include/boost/mpl/aux_/preprocessed/bcc/bind_fwd.hpp ./libs/mpl/include/boost/mpl/aux_/preprocessed/bcc/minus.hpp ./libs/mpl/include/boost/mpl/aux_/preprocessed/bcc/deque.hpp ./libs/mpl/include/boost/mpl/aux_/preprocessed/bcc/fold_impl.hpp ./libs/mpl/include/boost/mpl/aux_/preprocessed/bcc/full_lambda.hpp 5c7bdcfad7fefe54b4ecb7367d3e7c23d98/log.json ./libs/mpl/include/boost/mpl/aux_/preprocessed/bcc/greater_equal.hpp ./libs/mpl/include/boost/mpl/aux_/preprocessed/bcc/reverse_iter_fold_impl.hpp ./libs/mpl/include/boost/mpl/aux_/preprocessed/bcc/shift_right.hpp ./libs/mpl/include/boost/mpl/aux_/preprocessed/bcc/quote.hpp "SSL�� --root /var/run/docker/runtime-runc/mob./libs/math/test/test_reverse_mode_autodiff_special_functions_co/usr/bin/runc d-dispatcher/routable.d/chrony-o./libs/math/test/test_reverse_mode_autodiff_special_functions_co--root /run/containerd/sed --log-format json d-dispatcher/rou./libs/mpl/include/boost/mpl/aux_/preprocessed/msvc60/placeholders.hpp (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.