Merge branch 'master' into tyler/update-nativeaot-llvm-infrastructure

Author: rekhoff

.github/workflows/ci.yml

@@ -238,6 +238,30 @@ jobs:
           ./emsdk install 4.0.21
           ./emsdk activate 4.0.21
 
+      - name: Install wasm-bindgen CLI
+        run: |
+          REQUIRED_WASM_BINDGEN_VERSION="$(
+            awk '
+              $1 == "name" && $3 == "\"wasm-bindgen\"" { in_pkg = 1; next }
+              in_pkg && $1 == "version" {
+                gsub(/"/, "", $3);
+                print $3;
+                exit;
+              }
+            ' Cargo.lock
+          )"
+          if [ -z "${REQUIRED_WASM_BINDGEN_VERSION}" ]; then
+            echo "Failed to determine wasm-bindgen version from Cargo.lock"
+            exit 1
+          fi
+
+          INSTALLED_WASM_BINDGEN_VERSION="$(wasm-bindgen --version 2>/dev/null | awk '{print $2}' || true)"
+          if [ "${INSTALLED_WASM_BINDGEN_VERSION}" != "${REQUIRED_WASM_BINDGEN_VERSION}" ]; then
+            cargo install --locked --force wasm-bindgen-cli --version "${REQUIRED_WASM_BINDGEN_VERSION}"
+          fi
+
+          wasm-bindgen --version
+
       - name: Build typescript module sdk
         working-directory: crates/bindings-typescript
         run: pnpm build

.github/workflows/pr_approval_check.yml

@@ -30,6 +30,9 @@ jobs:
   publish-approval-status:
     name: Set approval status
     runs-on: ubuntu-latest
+    # Disabled until we can spend some more focus on making this work consistently.
+    # See https://github.com/clockworklabs/SpacetimeDB/pull/4673.
+    if: false
 
     # SECURITY: Do not add a checkout step to this job. See comment at the top of this file.
     steps: