Utilize macos machines in CI

Signed-off-by: penguindan <[email protected]>

Author: PenguinDan

.github/workflows/ci.yaml

@@ -9,14 +9,42 @@ on:
       - '*'
 
 jobs:
-  Tests:
+  test-linux:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
+
+      - name: Validate Gradle Wrapper
+        uses: gradle/actions/wrapper-validation@v5
+
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v5
 
       # For browser tests
       - uses: browser-actions/setup-chrome@v2
 
       - name: Run checks
         run: ./gradlew check --no-daemon --stacktrace
+
+  test-mac:
+    runs-on: macos-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Set up JDK 17
+        uses: actions/setup-java@v5
+        with:
+          java-version: 17
+          distribution: 'zulu'
+
+      - name: Validate Gradle Wrapper
+        uses: gradle/actions/wrapper-validation@v5
+
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v5
+
+      - name: Run checks (skipping Linux tests)
+        # linuxX64Test fails on macOS because it tries to execute the Linux binary
+        run: ./gradlew check -x linuxX64Test --no-daemon --stacktrace

.github/workflows/release_please.yaml

@@ -29,21 +29,13 @@ jobs:
 
   kotlin-release:
     needs: release-please
-    runs-on: ubuntu-latest
+    # Run on macOS to ensure we can publish iOS/Mac targets AND Linux/Android targets (via cross-compilation).
+    # This ensures a single consistent root module file is published.
+    runs-on: macos-latest
     if: ${{ needs.release-please.outputs.release_created }}
     steps:
       # The logic below handles the github release:
-      - name: Cache Gradle and wrapper
-        uses: actions/cache@v3
-        with:
-          path: |
-            ~/.gradle/caches
-            ~/.gradle/wrapper
-          key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle*') }}
-          restore-keys: |
-            ${{ runner.os }}-gradle-
-
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Configure GPG Key
         run: |
@@ -56,7 +48,7 @@ jobs:
         run: |
           mkdir -p ~/.gradle/
           echo "signing.keyId=08C5EC5C" >> ~/.gradle/gradle.properties
-          echo "signing.secretKeyRingFile=/home/runner/.gnupg/secring.gpg" >> ~/.gradle/gradle.properties
+          echo "signing.secretKeyRingFile=$HOME/.gnupg/secring.gpg" >> ~/.gradle/gradle.properties
           echo "signing.password=$GPG_SIGNING_KEY_PASSWORD" >> ~/.gradle/gradle.properties
         env:
           GPG_SIGNING_KEY_ID: ${{ secrets.GPG_SIGNING_KEY_ID }}
@@ -68,13 +60,19 @@ jobs:
           java-version: 17
           distribution: 'zulu'
 
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v5
+
       - name: Grant Permission for Gradlew to Execute
         run: chmod +x gradlew
 
       - name: Publish to Sonatype
         env:
           CENTRAL_USERNAME: ${{ secrets.CENTRAL_USERNAME }}
           CENTRAL_PASSWORD: ${{ secrets.CENTRAL_PASSWORD }}
+        # We publish everything from Mac.
+        # Note: This will compile Linux targets but NOT run their tests (which would fail on Mac).
+        # We assume CI has already validated Linux tests.
         run: ./gradlew publishToSonatype closeAndReleaseSonatypeStagingRepository --no-daemon --stacktrace
 
       - name: Clean up signing secrets