feat: add linux-arm64 prebuild via QEMU, fix publish

Author: guimard

.github/Dockerfile.arm64

@@ -0,0 +1,29 @@
+FROM node:20-bookworm
+
+# Install build dependencies
+RUN apt-get update && apt-get install -y \
+    liblasso3-dev \
+    libxml2-dev \
+    libxmlsec1-dev \
+    libglib2.0-dev \
+    python3 \
+    make \
+    g++ \
+    && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /app
+
+# Copy package files
+COPY package*.json ./
+
+# Install dependencies
+RUN npm ci
+
+# Copy source
+COPY . .
+
+# Build prebuilds
+RUN npm run prebuildify
+
+# Output stage - copy prebuilds to /prebuilds
+RUN mkdir -p /output/prebuilds && cp -r prebuilds/* /output/prebuilds/

.github/workflows/ci.yml

@@ -62,9 +62,6 @@ jobs:
         include:
           - os: ubuntu-latest
             target: linux-x64
-          # Note: linux-arm64 requires self-hosted runners or QEMU cross-compilation
-          # - os: ubuntu-24.04-arm64
-          #   target: linux-arm64
           - os: macos-latest
             target: darwin-x64
           - os: macos-14
@@ -105,8 +102,40 @@ jobs:
           name: prebuilds-${{ matrix.target }}
           path: prebuilds/
 
+  build-linux-arm64:
+    needs: test
+    if: startsWith(github.ref, 'refs/tags/v')
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+        with:
+          platforms: arm64
+
+      - name: Build in arm64 container
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          file: .github/Dockerfile.arm64
+          platforms: linux/arm64
+          push: false
+          outputs: type=local,dest=./output
+
+      - name: Extract prebuilds
+        run: |
+          mkdir -p prebuilds
+          cp -r output/prebuilds/* prebuilds/
+
+      - name: Upload prebuilds
+        uses: actions/upload-artifact@v4
+        with:
+          name: prebuilds-linux-arm64
+          path: prebuilds/
+
   publish:
-    needs: build
+    needs: [build, build-linux-arm64]
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -135,6 +164,6 @@ jobs:
         run: npm run build:ts
 
       - name: Publish to npm
-        run: npm publish
+        run: npm publish --ignore-scripts
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

package.json

@@ -1,7 +1,7 @@
 {
   "name": "lasso.js",
   "version": "0.1.1",
-  "description": "Node.js N-API binding for Lasso SAML library",
+  "description": "SAML 2.0 Identity Provider (IdP) and Service Provider (SP) for Node.js - Native binding to Lasso library",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "scripts": {
@@ -45,30 +45,23 @@
     "saml",
     "saml2",
     "saml-2.0",
-    "saml2.0",
-    "lasso",
-    "sso",
-    "single-sign-on",
-    "idp",
     "identity-provider",
-    "sp",
     "service-provider",
-    "identity",
-    "federation",
+    "idp",
+    "sp",
+    "sso",
+    "single-sign-on",
     "authentication",
-    "auth",
     "slo",
     "single-logout",
+    "federation",
     "xml-signature",
     "xmlsec",
     "express",
     "middleware",
-    "passport",
-    "oauth",
-    "security",
-    "n-api",
+    "lasso",
     "native",
-    "binding"
+    "n-api"
   ],
   "author": "LINAGORA <https://linagora.com>",
   "license": "GPL-2.0-or-later",