fix(ci): build Linux ARM releases natively (#29)

Co-authored-by: Mark Stuart <mstuart@users.noreply.github.com>

Author: mstuart

.github/workflows/release.yml

@@ -4,6 +4,7 @@ on:
   push:
     tags:
       - 'v*'
+  workflow_dispatch:
 
 permissions: {}
 
@@ -21,7 +22,10 @@ jobs:
           - os: ubuntu-latest
             target: x86_64-unknown-linux-gnu
             artifact: code-memory
-          - os: ubuntu-latest
+          # Build ARM64 natively. Cross-compiling this target from x64 pulls
+          # native-tls through fastembed and fails in openssl-sys because the
+          # runner does not have an ARM64 OpenSSL development toolchain.
+          - os: ubuntu-24.04-arm
             target: aarch64-unknown-linux-gnu
             artifact: code-memory
           - os: windows-latest
@@ -40,13 +44,6 @@ jobs:
         with:
           targets: ${{ matrix.target }}
 
-      - name: Install cross-compilation tools (Linux ARM64)
-        if: matrix.target == 'aarch64-unknown-linux-gnu'
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y gcc-aarch64-linux-gnu g++-aarch64-linux-gnu
-          echo "CARGO_TARGET_AARCH64_UNKNOWN_LINUX_GNU_LINKER=aarch64-linux-gnu-gcc" >> $GITHUB_ENV
-
       - name: Build
         run: cargo build --release --target ${{ matrix.target }}
 
@@ -69,6 +66,7 @@ jobs:
           path: code-memory-${{ github.ref_name }}-${{ matrix.target }}.*
 
   release:
+    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
     needs: build
     runs-on: ubuntu-latest
     permissions:
@@ -88,6 +86,7 @@ jobs:
           generate_release_notes: true
 
   publish-npm:
+    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
     needs: release
     runs-on: ubuntu-latest
     permissions: