From b086496e0b8680815a96373489d77723c236d843 Mon Sep 17 00:00:00 2001
From: Scott Andrews <scott@andrews.me>
Date: Thu, 29 Oct 2026 15:23:33 -0400
Subject: [PATCH 1/2] Only build wasmtime for dependabot PR when changed

Dependabot bumping wasmtime is only focused on a single version. There's
no need to build other version of wasmtime, even if they fail the
pre-flight checks.

This is particularly true for dev builds which often fail the pre-flight

Signed-off-by: Scott Andrews <scott@andrews.me>
---
 .github/workflows/publish-wasmtime.yaml |  7 ++++++-
 .github/workflows/pull-request.yaml     | 17 +++++++++++++++++
 2 files changed, 23 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/publish-wasmtime.yaml b/.github/workflows/publish-wasmtime.yaml
index 1dd4808..75ffcaa 100644
--- a/.github/workflows/publish-wasmtime.yaml
+++ b/.github/workflows/publish-wasmtime.yaml
@@ -33,6 +33,10 @@ on:
         description: force overwriting an existing image
         type: boolean
         default: false
+      skip:
+        description: skip all jobs, useful to exclude an entry from a calling matrix
+        type: boolean
+        default: false
       builder-image:
         description: image used to build wasmtime
         type: string
@@ -55,6 +59,7 @@ env:
 jobs:
   preflight:
     name: Preflight ${{ inputs.tag }}
+    if: ${{ ! inputs.skip }}
     runs-on: ubuntu-latest
     outputs:
       existing-digest: ${{ steps.existing.outputs.digest }}
@@ -296,7 +301,7 @@ jobs:
   tag:
     name: Tag ${{ inputs.tag }}
     needs: publish
-    if: always() && !failure() && !cancelled() && inputs.publish && inputs.additional-tags
+    if: always() && !failure() && !cancelled() && !inputs.skip && inputs.publish && inputs.additional-tags
     runs-on: ubuntu-latest
     permissions:
       packages: write
diff --git a/.github/workflows/pull-request.yaml b/.github/workflows/pull-request.yaml
index d3e939f..616e987 100644
--- a/.github/workflows/pull-request.yaml
+++ b/.github/workflows/pull-request.yaml
@@ -10,6 +10,7 @@ jobs:
     permissions:
       pull-requests: read
     outputs:
+      wasmtime-bump: ${{ steps.versions.outputs.wasmtime-bump }}
       rust-toolchain: ${{ steps.versions.outputs.rust-toolchain }}
       wasmtime-dev-git-sha: ${{ steps.versions.outputs.wasmtime-dev-git-sha }}
       wasmtime-next-changed: ${{ steps.filter.outputs.wasmtime-next }}
@@ -54,6 +55,9 @@ jobs:
         run: |
           set -euo pipefail
 
+          # dependabot PRs that bump a wasmtime version only build the bumped version
+          echo "wasmtime-bump=${{ startsWith(github.head_ref, 'dependabot/cargo/versions/wasmtime/') }}" | tee -a "${GITHUB_OUTPUT}"
+
           echo "rust-toolchain=$(yq -r '.toolchain.channel' rust-toolchain.toml)" | tee -a "${GITHUB_OUTPUT}"
 
           # dev
@@ -107,50 +111,62 @@ jobs:
             wasmtime-crate: ""
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-dev-git-sha }}
             force: ${{ needs.preflight.outputs.common-changed == 'true' }}
+            skip: ${{ needs.preflight.outputs.wasmtime-bump == 'true' }}
           - tag: dev-${{ needs.preflight.outputs.wasmtime-dev-git-sha }}-alpine
             wasmtime-crate: ""
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-dev-git-sha }}
             force: ${{ needs.preflight.outputs.common-changed == 'true' }}
+            skip: ${{ needs.preflight.outputs.wasmtime-bump == 'true' }}
           - tag: v${{ needs.preflight.outputs.wasmtime-next-version }}
             wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-next-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-next-git-sha }}
             force: ${{ needs.preflight.outputs.wasmtime-next-changed == 'true' || needs.preflight.outputs.common-changed == 'true' }}
+            skip: ${{ needs.preflight.outputs.wasmtime-bump == 'true' && needs.preflight.outputs.wasmtime-next-changed != 'true' }}
           - tag: v${{ needs.preflight.outputs.wasmtime-next-version }}-alpine
             wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-next-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-next-git-sha }}
             force: ${{ needs.preflight.outputs.wasmtime-next-changed == 'true' || needs.preflight.outputs.common-changed == 'true' }}
+            skip: ${{ needs.preflight.outputs.wasmtime-bump == 'true' && needs.preflight.outputs.wasmtime-next-changed != 'true' }}
           - tag: v${{ needs.preflight.outputs.wasmtime-stable-version }}
             wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-stable-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-stable-git-sha }}
             force: ${{ needs.preflight.outputs.wasmtime-stable-changed == 'true' || needs.preflight.outputs.common-changed == 'true' }}
+            skip: ${{ needs.preflight.outputs.wasmtime-bump == 'true' && needs.preflight.outputs.wasmtime-stable-changed != 'true' }}
           - tag: v${{ needs.preflight.outputs.wasmtime-stable-version }}-alpine
             wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-stable-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-stable-git-sha }}
             force: ${{ needs.preflight.outputs.wasmtime-stable-changed == 'true' || needs.preflight.outputs.common-changed == 'true' }}
+            skip: ${{ needs.preflight.outputs.wasmtime-bump == 'true' && needs.preflight.outputs.wasmtime-stable-changed != 'true' }}
           - tag: v${{ needs.preflight.outputs.wasmtime-stable-1-version }}
             wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-stable-1-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-stable-1-git-sha }}
             force: ${{ needs.preflight.outputs.wasmtime-stable-1-changed == 'true' || needs.preflight.outputs.common-changed == 'true' }}
+            skip: ${{ needs.preflight.outputs.wasmtime-bump == 'true' && needs.preflight.outputs.wasmtime-stable-1-changed != 'true' }}
           - tag: v${{ needs.preflight.outputs.wasmtime-stable-1-version }}-alpine
             wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-stable-1-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-stable-1-git-sha }}
             force: ${{ needs.preflight.outputs.wasmtime-stable-1-changed == 'true' || needs.preflight.outputs.common-changed == 'true' }}
+            skip: ${{ needs.preflight.outputs.wasmtime-bump == 'true' && needs.preflight.outputs.wasmtime-stable-1-changed != 'true' }}
           - tag: v${{ needs.preflight.outputs.wasmtime-lts-version }}
             wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-lts-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-lts-git-sha }}
             force: ${{ needs.preflight.outputs.wasmtime-lts-changed == 'true' || needs.preflight.outputs.common-changed == 'true' }}
+            skip: ${{ needs.preflight.outputs.wasmtime-bump == 'true' && needs.preflight.outputs.wasmtime-lts-changed != 'true' }}
           - tag: v${{ needs.preflight.outputs.wasmtime-lts-version }}-alpine
             wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-lts-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-lts-git-sha }}
             force: ${{ needs.preflight.outputs.wasmtime-lts-changed == 'true' || needs.preflight.outputs.common-changed == 'true' }}
+            skip: ${{ needs.preflight.outputs.wasmtime-bump == 'true' && needs.preflight.outputs.wasmtime-lts-changed != 'true' }}
           - tag: v${{ needs.preflight.outputs.wasmtime-lts-1-version }}
             wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-lts-1-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-lts-1-git-sha }}
             force: ${{ needs.preflight.outputs.wasmtime-lts-1-changed == 'true' || needs.preflight.outputs.common-changed == 'true' }}
+            skip: ${{ needs.preflight.outputs.wasmtime-bump == 'true' && needs.preflight.outputs.wasmtime-lts-1-changed != 'true' }}
           - tag: v${{ needs.preflight.outputs.wasmtime-lts-1-version }}-alpine
             wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-lts-1-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-lts-1-git-sha }}
             force: ${{ needs.preflight.outputs.wasmtime-lts-1-changed == 'true' || needs.preflight.outputs.common-changed == 'true' }}
+            skip: ${{ needs.preflight.outputs.wasmtime-bump == 'true' && needs.preflight.outputs.wasmtime-lts-1-changed != 'true' }}
     uses: ./.github/workflows/publish-wasmtime.yaml
     with:
       rust-toolchain: "${{ needs.preflight.outputs.rust-toolchain }}"
@@ -159,6 +175,7 @@ jobs:
       tag: "${{ matrix.tag }}"
       publish: false
       force: ${{ matrix.force }}
+      skip: ${{ matrix.skip }}
     secrets: inherit
 
   done:

From a3dcbf453ed584715490271c30b5d291014c1e28 Mon Sep 17 00:00:00 2001
From: Scott Andrews <scott@andrews.me>
Date: Thu, 29 Oct 2026 16:23:54 -0400
Subject: [PATCH 2/2] avoid CI artifact name collisions

Signed-off-by: Scott Andrews <scott@andrews.me>
---
 .github/workflows/manual-publish.yaml   | 30 ++++++++++----------
 .github/workflows/publish-wasmtime.yaml | 26 +++++++++++------
 .github/workflows/publish.yaml          | 37 +++++++++++++++++--------
 .github/workflows/pull-request.yaml     | 37 +++++++++++++++++--------
 4 files changed, 82 insertions(+), 48 deletions(-)

diff --git a/.github/workflows/manual-publish.yaml b/.github/workflows/manual-publish.yaml
index cc45073..8722776 100644
--- a/.github/workflows/manual-publish.yaml
+++ b/.github/workflows/manual-publish.yaml
@@ -29,7 +29,6 @@ on:
         type: string
 
 jobs:
-
   preflight:
     name: Preflight
     runs-on: ubuntu-latest
@@ -38,23 +37,23 @@ jobs:
       wasmtime-git-sha: ${{ steps.versions.outputs.wasmtime-git-sha }}
       additional-tags: ${{ steps.versions.outputs.additional-tags }}
     steps:
-    - uses: actions/checkout@v7
-    - name: Resolve versions
-      id: versions
-      run: |
-        set -euo pipefail
+      - uses: actions/checkout@v7
+      - name: Resolve versions
+        id: versions
+        run: |
+          set -euo pipefail
 
-        echo "rust-toolchain=${{ inputs.rust-toolchain || '$(yq -r ''.toolchain.channel'' rust-toolchain.toml)' }}" | tee -a "${GITHUB_OUTPUT}"
+          echo "rust-toolchain=${{ inputs.rust-toolchain || '$(yq -r ''.toolchain.channel'' rust-toolchain.toml)' }}" | tee -a "${GITHUB_OUTPUT}"
 
-        wasmtime_git_sha="$(gh api "repos/bytecodealliance/wasmtime/commits/${{ inputs.wasmtime-git-ref }}" --template '{{.sha}}')"
-        echo "wasmtime-git-sha=${wasmtime_git_sha}" | tee -a "${GITHUB_OUTPUT}"
+          wasmtime_git_sha="$(gh api "repos/bytecodealliance/wasmtime/commits/${{ inputs.wasmtime-git-ref }}" --template '{{.sha}}')"
+          echo "wasmtime-git-sha=${wasmtime_git_sha}" | tee -a "${GITHUB_OUTPUT}"
 
-        # convert space delimited to new-line delimited
-        echo 'additional-tags<<EOF' | tee -a "${GITHUB_OUTPUT}"
-        echo "${{ inputs.additional-tags }}" | perl -pe 's/\s+/\n/g' | tee -a "${GITHUB_OUTPUT}"
-        echo 'EOF' | tee -a "${GITHUB_OUTPUT}"
-      env:
-        GH_TOKEN: ${{ github.token }}
+          # convert space delimited to new-line delimited
+          echo 'additional-tags<<EOF' | tee -a "${GITHUB_OUTPUT}"
+          echo "${{ inputs.additional-tags }}" | perl -pe 's/\s+/\n/g' | tee -a "${GITHUB_OUTPUT}"
+          echo 'EOF' | tee -a "${GITHUB_OUTPUT}"
+        env:
+          GH_TOKEN: ${{ github.token }}
 
   publish:
     name: Publish
@@ -71,4 +70,5 @@ jobs:
       tag: "${{ inputs.tag }}"
       additional-tags: "${{ needs.preflight.outputs.additional-tags }}"
       force: ${{ inputs.force }}
+      id: manual
     secrets: inherit
diff --git a/.github/workflows/publish-wasmtime.yaml b/.github/workflows/publish-wasmtime.yaml
index 75ffcaa..d684630 100644
--- a/.github/workflows/publish-wasmtime.yaml
+++ b/.github/workflows/publish-wasmtime.yaml
@@ -43,12 +43,20 @@ on:
       base-image:
         description: base image used for running wasmtime
         type: string
+      id:
+        description: identifier to distinguish calls within a matrix
+        type: string
+    outputs:
+      artifact-name:
+        description: uploaded node image artifact name
+        value: "kind-node-${{ inputs.tag }}-${{ inputs.id || '0'}}"
 
 concurrency:
   group: ${{ case(inputs.publish, inputs.tag, format('run-{0}-{1}', github.run_id, inputs.tag)) }}
   queue: max
 
 env:
+  artifact-name: "wasmtime-${{ inputs.tag }}-${{ inputs.id || '0'}}"
   repository: "${{
     case(inputs.repository == '',
     format('ghcr.io/{0}', github.repository),
@@ -156,13 +164,13 @@ jobs:
           tar -xvf "wasmtime-${{ inputs.tag }}-${{ matrix.arch }}.tar" -C "wasmtime-${{ inputs.tag }}-${{ matrix.arch }}"
       - uses: actions/upload-artifact@v7
         with:
-          name: "wasmtime-${{ inputs.tag }}-${{ matrix.arch }}"
+          name: "${{ env.artifact-name }}-${{ matrix.arch }}"
           path: "wasmtime-${{ inputs.tag }}-${{ matrix.arch }}"
           retention-days: 7
 
   assemble:
     name: Assemble ${{ inputs.tag }}
-    needs: build
+    needs: [preflight, build]
     runs-on: ubuntu-latest
     outputs:
       digest: ${{ steps.assemble.outputs.digest }}
@@ -175,12 +183,12 @@ jobs:
       - name: Download staged image (amd64)
         uses: actions/download-artifact@v8
         with:
-          name: "wasmtime-${{ inputs.tag }}-amd64"
+          name: "${{ env.artifact-name }}-amd64"
           path: "wasmtime-${{ inputs.tag }}-amd64"
       - name: Download staged image (arm64)
         uses: actions/download-artifact@v8
         with:
-          name: "wasmtime-${{ inputs.tag }}-arm64"
+          name: "${{ env.artifact-name }}-arm64"
           path: "wasmtime-${{ inputs.tag }}-arm64"
       - name: Assemble
         id: assemble
@@ -209,13 +217,13 @@ jobs:
 
       - uses: actions/upload-artifact@v7
         with:
-          name: "wasmtime-${{ inputs.tag }}"
+          name: "${{ env.artifact-name }}"
           path: "wasmtime-${{ inputs.tag }}"
           retention-days: 7
 
   test:
     name: Test ${{ inputs.tag }} ${{ matrix.os }}/${{ matrix.arch }}
-    needs: assemble
+    needs: [preflight, assemble]
     outputs:
       digest: ${{ needs.assemble.outputs.digest }}
     strategy:
@@ -238,7 +246,7 @@ jobs:
       - name: Download staged image
         uses: actions/download-artifact@v8
         with:
-          name: "wasmtime-${{ inputs.tag }}"
+          name: "${{ env.artifact-name }}"
           path: "wasmtime-${{ inputs.tag }}"
       - name: Relocate image
         run: |
@@ -260,7 +268,7 @@ jobs:
 
   publish:
     name: Publish ${{ inputs.tag }}
-    needs: test
+    needs: [preflight, test]
     if: inputs.publish
     runs-on: ubuntu-latest
     permissions:
@@ -275,7 +283,7 @@ jobs:
       - name: Download staged image
         uses: actions/download-artifact@v8
         with:
-          name: "wasmtime-${{ inputs.tag }}"
+          name: "${{ env.artifact-name }}"
           path: "wasmtime-${{ inputs.tag }}"
       - name: Login to GitHub Container Registry
         uses: docker/login-action@v4
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 89c8246..c4690ef 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -108,7 +108,8 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-dev-git-sha }}
+          - id: dev
+            wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-dev-git-sha }}
             repository: dev
             tag: dev-${{ needs.preflight.outputs.wasmtime-dev-git-sha }}
             additional-tags: |
@@ -116,26 +117,30 @@ jobs:
               dev-${{ needs.preflight.outputs.wasmtime-dev-git-date }}
               dev
               latest
-          - wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-dev-git-sha }}
+          - id: dev-alpine
+            wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-dev-git-sha }}
             repository: dev
             tag: dev-${{ needs.preflight.outputs.wasmtime-dev-git-sha }}-alpine
             additional-tags: |
               dev-${{ needs.preflight.outputs.wasmtime-dev-git-sha-short }}-alpine
               dev-${{ needs.preflight.outputs.wasmtime-dev-git-date }}-alpine
               dev-alpine
-          - wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-next-version }}
+          - id: next
+            wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-next-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-next-git-sha }}
             tag: v${{ needs.preflight.outputs.wasmtime-next-version }}
             additional-tags: |
               v${{ needs.preflight.outputs.wasmtime-next-version-minor }}
               v${{ needs.preflight.outputs.wasmtime-next-version-major }}
-          - wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-next-version }}
+          - id: next-alpine
+            wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-next-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-next-git-sha }}
             tag: v${{ needs.preflight.outputs.wasmtime-next-version }}-alpine
             additional-tags: |
               v${{ needs.preflight.outputs.wasmtime-next-version-minor }}-alpine
               v${{ needs.preflight.outputs.wasmtime-next-version-major }}-alpine
-          - wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-stable-version }}
+          - id: stable
+            wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-stable-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-stable-git-sha }}
             tag: v${{ needs.preflight.outputs.wasmtime-stable-version }}
             additional-tags: |
@@ -143,14 +148,16 @@ jobs:
               v${{ needs.preflight.outputs.wasmtime-stable-version-major }}
               stable
               latest
-          - wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-stable-version }}
+          - id: stable-alpine
+            wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-stable-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-stable-git-sha }}
             tag: v${{ needs.preflight.outputs.wasmtime-stable-version }}-alpine
             additional-tags: |
               v${{ needs.preflight.outputs.wasmtime-stable-version-minor }}-alpine
               v${{ needs.preflight.outputs.wasmtime-stable-version-major }}-alpine
               stable-alpine
-          - wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-stable-1-version }}
+          - id: stable-1
+            wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-stable-1-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-stable-1-git-sha }}
             tag: v${{ needs.preflight.outputs.wasmtime-stable-1-version }}
             additional-tags: |
@@ -158,35 +165,40 @@ jobs:
               v${{ needs.preflight.outputs.wasmtime-stable-1-version-major }}
               stable-1
               latest-1
-          - wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-stable-1-version }}
+          - id: stable-1-alpine
+            wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-stable-1-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-stable-1-git-sha }}
             tag: v${{ needs.preflight.outputs.wasmtime-stable-1-version }}-alpine
             additional-tags: |
               v${{ needs.preflight.outputs.wasmtime-stable-1-version-minor }}-alpine
               v${{ needs.preflight.outputs.wasmtime-stable-1-version-major }}-alpine
               stable-1-alpine
-          - wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-lts-version }}
+          - id: lts
+            wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-lts-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-lts-git-sha }}
             tag: v${{ needs.preflight.outputs.wasmtime-lts-version }}
             additional-tags: |
               v${{ needs.preflight.outputs.wasmtime-lts-version-major }}
               v${{ needs.preflight.outputs.wasmtime-lts-version-minor }}
               lts
-          - wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-lts-version }}
+          - id: lts-alpine
+            wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-lts-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-lts-git-sha }}
             tag: v${{ needs.preflight.outputs.wasmtime-lts-version }}-alpine
             additional-tags: |
               v${{ needs.preflight.outputs.wasmtime-lts-version-major }}-alpine
               v${{ needs.preflight.outputs.wasmtime-lts-version-minor }}-alpine
               lts-alpine
-          - wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-lts-1-version }}
+          - id: lts-1
+            wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-lts-1-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-lts-1-git-sha }}
             tag: v${{ needs.preflight.outputs.wasmtime-lts-1-version }}
             additional-tags: |
               v${{ needs.preflight.outputs.wasmtime-lts-1-version-minor }}
               v${{ needs.preflight.outputs.wasmtime-lts-1-version-major }}
               lts-1
-          - wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-lts-1-version }}
+          - id: lts-1-alpine
+            wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-lts-1-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-lts-1-git-sha }}
             tag: v${{ needs.preflight.outputs.wasmtime-lts-1-version }}-alpine
             additional-tags: |
@@ -202,4 +214,5 @@ jobs:
       tag: "${{ matrix.tag }}"
       additional-tags: "${{ matrix.additional-tags }}"
       publish: ${{ github.ref == 'refs/heads/main' }}
+      id: "${{ matrix.id }}"
     secrets: inherit
diff --git a/.github/workflows/pull-request.yaml b/.github/workflows/pull-request.yaml
index 616e987..d43ebb4 100644
--- a/.github/workflows/pull-request.yaml
+++ b/.github/workflows/pull-request.yaml
@@ -107,62 +107,74 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - tag: dev-${{ needs.preflight.outputs.wasmtime-dev-git-sha }}
+          - id: dev
+            tag: dev-${{ needs.preflight.outputs.wasmtime-dev-git-sha }}
             wasmtime-crate: ""
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-dev-git-sha }}
             force: ${{ needs.preflight.outputs.common-changed == 'true' }}
             skip: ${{ needs.preflight.outputs.wasmtime-bump == 'true' }}
-          - tag: dev-${{ needs.preflight.outputs.wasmtime-dev-git-sha }}-alpine
+          - id: dev-alpine
+            tag: dev-${{ needs.preflight.outputs.wasmtime-dev-git-sha }}-alpine
             wasmtime-crate: ""
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-dev-git-sha }}
             force: ${{ needs.preflight.outputs.common-changed == 'true' }}
             skip: ${{ needs.preflight.outputs.wasmtime-bump == 'true' }}
-          - tag: v${{ needs.preflight.outputs.wasmtime-next-version }}
+          - id: next
+            tag: v${{ needs.preflight.outputs.wasmtime-next-version }}
             wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-next-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-next-git-sha }}
             force: ${{ needs.preflight.outputs.wasmtime-next-changed == 'true' || needs.preflight.outputs.common-changed == 'true' }}
             skip: ${{ needs.preflight.outputs.wasmtime-bump == 'true' && needs.preflight.outputs.wasmtime-next-changed != 'true' }}
-          - tag: v${{ needs.preflight.outputs.wasmtime-next-version }}-alpine
+          - id: next-alpine
+            tag: v${{ needs.preflight.outputs.wasmtime-next-version }}-alpine
             wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-next-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-next-git-sha }}
             force: ${{ needs.preflight.outputs.wasmtime-next-changed == 'true' || needs.preflight.outputs.common-changed == 'true' }}
             skip: ${{ needs.preflight.outputs.wasmtime-bump == 'true' && needs.preflight.outputs.wasmtime-next-changed != 'true' }}
-          - tag: v${{ needs.preflight.outputs.wasmtime-stable-version }}
+          - id: stable
+            tag: v${{ needs.preflight.outputs.wasmtime-stable-version }}
             wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-stable-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-stable-git-sha }}
             force: ${{ needs.preflight.outputs.wasmtime-stable-changed == 'true' || needs.preflight.outputs.common-changed == 'true' }}
             skip: ${{ needs.preflight.outputs.wasmtime-bump == 'true' && needs.preflight.outputs.wasmtime-stable-changed != 'true' }}
-          - tag: v${{ needs.preflight.outputs.wasmtime-stable-version }}-alpine
+          - id: stable-alpine
+            tag: v${{ needs.preflight.outputs.wasmtime-stable-version }}-alpine
             wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-stable-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-stable-git-sha }}
             force: ${{ needs.preflight.outputs.wasmtime-stable-changed == 'true' || needs.preflight.outputs.common-changed == 'true' }}
             skip: ${{ needs.preflight.outputs.wasmtime-bump == 'true' && needs.preflight.outputs.wasmtime-stable-changed != 'true' }}
-          - tag: v${{ needs.preflight.outputs.wasmtime-stable-1-version }}
+          - id: stable-1
+            tag: v${{ needs.preflight.outputs.wasmtime-stable-1-version }}
             wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-stable-1-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-stable-1-git-sha }}
             force: ${{ needs.preflight.outputs.wasmtime-stable-1-changed == 'true' || needs.preflight.outputs.common-changed == 'true' }}
             skip: ${{ needs.preflight.outputs.wasmtime-bump == 'true' && needs.preflight.outputs.wasmtime-stable-1-changed != 'true' }}
-          - tag: v${{ needs.preflight.outputs.wasmtime-stable-1-version }}-alpine
+          - id: stable-1-alpine
+            tag: v${{ needs.preflight.outputs.wasmtime-stable-1-version }}-alpine
             wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-stable-1-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-stable-1-git-sha }}
             force: ${{ needs.preflight.outputs.wasmtime-stable-1-changed == 'true' || needs.preflight.outputs.common-changed == 'true' }}
             skip: ${{ needs.preflight.outputs.wasmtime-bump == 'true' && needs.preflight.outputs.wasmtime-stable-1-changed != 'true' }}
-          - tag: v${{ needs.preflight.outputs.wasmtime-lts-version }}
+          - id: lts
+            tag: v${{ needs.preflight.outputs.wasmtime-lts-version }}
             wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-lts-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-lts-git-sha }}
             force: ${{ needs.preflight.outputs.wasmtime-lts-changed == 'true' || needs.preflight.outputs.common-changed == 'true' }}
             skip: ${{ needs.preflight.outputs.wasmtime-bump == 'true' && needs.preflight.outputs.wasmtime-lts-changed != 'true' }}
-          - tag: v${{ needs.preflight.outputs.wasmtime-lts-version }}-alpine
+          - id: lts-alpine
+            tag: v${{ needs.preflight.outputs.wasmtime-lts-version }}-alpine
             wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-lts-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-lts-git-sha }}
             force: ${{ needs.preflight.outputs.wasmtime-lts-changed == 'true' || needs.preflight.outputs.common-changed == 'true' }}
             skip: ${{ needs.preflight.outputs.wasmtime-bump == 'true' && needs.preflight.outputs.wasmtime-lts-changed != 'true' }}
-          - tag: v${{ needs.preflight.outputs.wasmtime-lts-1-version }}
+          - id: lts-1
+            tag: v${{ needs.preflight.outputs.wasmtime-lts-1-version }}
             wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-lts-1-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-lts-1-git-sha }}
             force: ${{ needs.preflight.outputs.wasmtime-lts-1-changed == 'true' || needs.preflight.outputs.common-changed == 'true' }}
             skip: ${{ needs.preflight.outputs.wasmtime-bump == 'true' && needs.preflight.outputs.wasmtime-lts-1-changed != 'true' }}
-          - tag: v${{ needs.preflight.outputs.wasmtime-lts-1-version }}-alpine
+          - id: lts-1-alpine
+            tag: v${{ needs.preflight.outputs.wasmtime-lts-1-version }}-alpine
             wasmtime-crate: ${{ needs.preflight.outputs.wasmtime-lts-1-version }}
             wasmtime-git-sha: ${{ needs.preflight.outputs.wasmtime-lts-1-git-sha }}
             force: ${{ needs.preflight.outputs.wasmtime-lts-1-changed == 'true' || needs.preflight.outputs.common-changed == 'true' }}
@@ -176,6 +188,7 @@ jobs:
       publish: false
       force: ${{ matrix.force }}
       skip: ${{ matrix.skip }}
+      id: "${{ matrix.id }}"
     secrets: inherit
 
   done: