release: add OpenVMM prebuilt binaries

[Ben Hillis (benhillis)]

Summary

• rename the source-only workflow and Flowey command to the generalized openvmm-release pipeline
• build x64 and ARM64 Linux musl binaries and upload them to the draft GitHub release
• publish unsigned x64 and ARM64 Windows EXE/PDB outputs as architecture-specific workflow artifacts
• preserve the vendor archive, offline distribution build, tag verification, and single draft-release publisher
• update the OpenVMM release and packaging Guide documentation

Validation

• cargo check -p flowey_hvlite -p flowey_lib_hvlite
• cargo clippy --all-targets -p flowey_hvlite -p flowey_lib_hvlite
• cargo doc --no-deps -p flowey_hvlite -p flowey_lib_hvlite
• cargo nextest run --profile agent -p flowey_hvlite -p flowey_lib_hvlite
• cargo xflowey regen
• cargo xtask fmt --fix

[Copilot]

Pull request overview

This PR generalizes the existing source-only OpenVMM release process into an openvmm-release pipeline that also produces and publishes prebuilt Linux musl binaries, while keeping Windows outputs as unsigned workflow artifacts, and updates the Guide to match.

Changes:

• Rename the Flowey pipeline and GitHub Actions workflow from “source release” to “release”.
• Build x86_64/aarch64 Linux musl openvmm binaries and upload them to the draft GitHub release alongside the vendor archive.
• Produce unsigned Windows x86_64/aarch64 openvmm.exe (+ PDB when present) as architecture-specific workflow artifacts, and update release/packaging docs accordingly.

Reviewed changes

Copilot reviewed 12 out of 12 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
Guide/src/SUMMARY.md	Updates the Guide TOC to reference the renamed release page.
Guide/src/dev_guide/contrib/security_releases.md	Updates security release wording to align with the generalized release process.
Guide/src/dev_guide/contrib/openvmm_release.md	Expands release documentation to include Linux binaries and Windows artifact behavior.
Guide/src/dev_guide/contrib/openvmm_packaging.md	Clarifies which release assets are relevant for downstream source packaging vs prebuilt binaries.
flowey/flowey_lib_hvlite/src/_jobs/publish_openvmm_gh_release.rs	Extends the GitHub draft-release publisher job to upload Linux binaries in addition to the vendor archive.
flowey/flowey_hvlite/src/pipelines/openvmm_source_release.rs	Removes the old source-only pipeline implementation.
flowey/flowey_hvlite/src/pipelines/openvmm_release.rs	Adds the new release pipeline that builds Linux musl binaries and Windows unsigned artifacts.
flowey/flowey_hvlite/src/pipelines/mod.rs	Wires the new openvmm_release pipeline into the CLI/pipeline registry.
.github/workflows/openvmm-source-release.yaml	Removes the old autogenerated workflow for the source-only pipeline.
.github/workflows/openvmm-release.yaml	Adds the new autogenerated workflow for the generalized release pipeline.
.github/skills/guide-maintenance/SKILL.md	Updates code-to-Guide mapping for the new release pipeline and related jobs.
.flowey.toml	Updates Flowey’s workflow generation configuration to emit openvmm-release.yaml and run ci openvmm-release.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

Pull request overview

Copilot reviewed 16 out of 16 changed files in this pull request and generated no new comments.

Suppressed comments (1)

flowey/flowey_lib_hvlite/src/_jobs/publish_openvmm_gh_release.rs:252

• stage_linux_binary uses fs_err::hard_link to stage the Linux binaries. Hard-links can fail when the source artifact directory and the staging directory are on different filesystems (common when $RUNNER_TEMP and $GITHUB_WORKSPACE are mounted differently), which would make the release pipeline fail even though the build succeeded. Using a regular copy here is more robust and still cheap for a single binary per arch.

    let staged = stage_dir.join(format!("openvmm-{target}"));
    fs_err::hard_link(&bin, &staged)
        .with_context(|| format!("failed to stage {} as {}", bin.display(), staged.display()))?;
    Ok((staged.absolute()?, None))

[github-actions]

3 Petri tests failed (0 unstable)

[Copilot]

Pull request overview

Copilot reviewed 16 out of 16 changed files in this pull request and generated no new comments.