feat: add support for linux arm64

- add a release dry run - manually trigger by starting the workflow
- verify-prebuilds - is now actually verifies that all binaries are
  present before publishing
- releases can still be triggered by tag pushes
- mac x64 gh runners are not free  -- we cross-compile from mac arm64

Author: oetr

.github/workflows/release.yaml

@@ -13,11 +13,12 @@ jobs:
       contents: read
     strategy:
       matrix:
-        os: [ubuntu-latest, macos-latest, windows-latest]
-        opts: [""]
+        os: [ubuntu-latest, ubuntu-24.04-arm, macos-latest, windows-latest]
+        arch: [""]
         include:
+          # macos-latest is arm64; cross-compile for x64 too
           - os: macos-latest
-            opts: "--arch arm64"
+            arch: "--arch x86_64"
     runs-on: ${{ matrix.os }}
     steps:
       - name: checkout
@@ -34,19 +35,52 @@ jobs:
         run: npm ci
       - name: build
         run: |
-          npm run prebuild --workspace=@jazzer.js/fuzzer -- ${{ matrix.opts }}
-          npm run build --workspace=@jazzer.js/fuzzer -- ${{ matrix.opts }}
+          npm run prebuild --workspace=@jazzer.js/fuzzer -- ${{ matrix.arch }}
+          npm run build --workspace=@jazzer.js/fuzzer -- ${{ matrix.arch }}
       - name: upload
         uses: actions/upload-artifact@v7
         with:
-          name: native-addon
+          name: native-addon-${{ matrix.os }}${{ matrix.arch && '-x64' || '' }}
           path: packages/fuzzer/prebuilds
           if-no-files-found: error
 
-  release:
-    name: release
+  verify-prebuilds:
+    name: verify prebuilds
     needs: [prebuilds]
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - name: download prebuilds
+        uses: actions/download-artifact@v8
+        with:
+          pattern: native-addon-*
+          path: prebuilds
+          merge-multiple: true
+      - name: verify all platforms are present
+        run: |
+          expected="fuzzer-darwin-arm64.node fuzzer-darwin-x64.node fuzzer-linux-arm64.node fuzzer-linux-x64.node fuzzer-win32-x64.node"
+          for f in $expected; do
+            if [ ! -f "prebuilds/$f" ]; then
+              echo "MISSING: $f"
+              exit 1
+            fi
+          done
+          expected_count=$(echo $expected | wc -w)
+          actual_count=$(ls prebuilds/ | wc -l)
+          if [ "$actual_count" -ne "$expected_count" ]; then
+            echo "Expected $expected_count prebuilds but found $actual_count:"
+            ls -lh prebuilds/
+            exit 1
+          fi
+          echo "Verified $expected_count prebuilds. All as expected:"
+          ls -lh prebuilds/
+
+  publish:
+    name: publish
+    if: startsWith(github.ref, 'refs/tags/')
+    needs: [verify-prebuilds]
+    runs-on: ubuntu-latest
     permissions:
       contents: write # for creating releases
     steps:
@@ -65,9 +99,9 @@ jobs:
       - name: download prebuilds
         uses: actions/download-artifact@v8
         with:
-          name: native-addon
+          pattern: native-addon-*
           path: packages/fuzzer/prebuilds
-          if-no-files-found: error
+          merge-multiple: true
       - name: publish
         run: npm publish --workspaces --access public
         env: