openssl/.github/workflows, branch openssl-3.6

CI: give the cross-compile matrix jobs stable names

2026-10-21T16:52:44Z

GitHub names a matrix job after all its matrix values and cuts the name at 100 characters, so the aarch64 and riscv legs report identical names. Nothing reading job results by name can then tell whether every leg ran or which one failed. Name the jobs after a short per-entry label instead, as interop-tests.yml already does. Assisted-by: Claude:claude-opus-5-5 Reviewed-by: Neil Horman Reviewed-by: Bob Beck Merge-date: Wed Oct 21 16:48:12 2026 Merged-from: https://github.com/openssl/openssl/pull/33121 (cherry picked from commit 4fe51b0ad523d1863533b2c1f395ace6bf06fddf)

chore(bump): update FreeBSD image

2026-10-19T13:10:03Z

This is being done to help reduce OS maintainer burden as well as OpenSSL developer burden by using a version of FreeBSD which is currently supported by the project. This change updates FreeBSD from 13.4-RELEASE (an EOL release) to 14.4-RELEASE (a close to EOL release, but at the very least supported). Once 15.2-RELEASE is made available, this project should cut over to that version. Original-Commit: e4653f59eeea "chore(bump): update FreeBSD and OpenBSD images" Original-PR: https://github.com/openssl/openssl/pull/31840 Signed-off-by: Enji Cooper Reviewed-by: Nikola Pajkovsky Reviewed-by: Dmitry Belyavskiy Reviewed-by: Eugene Syromiatnikov Merge-date: Mon Oct 19 13:10:16 2026 Merged-from: https://github.com/openssl/openssl/pull/33249

chore(bump): update cross-platform-actions/action to v1.5.0

2026-10-19T13:09:46Z

Original-Commit: eacf272ea86a "chore(bump): update cross-platform-actions/action to v1.5.0" Original-PR: https://github.com/openssl/openssl/pull/31840 Signed-off-by: Enji Cooper Reviewed-by: Nikola Pajkovsky Reviewed-by: Dmitry Belyavskiy Reviewed-by: Eugene Syromiatnikov Merge-date: Mon Oct 19 13:10:15 2026 Merged-from: https://github.com/openssl/openssl/pull/33249

ci: keep dispatched runs off the self-hosted os-zoo runners

2026-09-24T09:23:07Z

These jobs run on OpenSSL's own machines. A workflow_dispatch always runs in this repository, so the repository check does not tell a nightly run apart from one carrying pull request code; without an event guard the dispatch entry point would build unreviewed changes there. Allow the schedule and ordinary manual runs only, as master does. Reviewed-by: Milan Broz Reviewed-by: Norbert Pocs Merge-date: Thu Sep 24 09:23:10 2026 Merged-from: https://github.com/openssl/openssl/pull/32328

ci: build the fuzzers from the checked-out tree

2026-09-24T09:23:07Z

CIFuzz fetches its own copy of OpenSSL when no project source path is given, so a run started against a particular revision would still fuzz whatever the action cloned. Check that revision out and point the build at the workspace. Reviewed-by: Milan Broz Reviewed-by: Norbert Pocs Merge-date: Thu Sep 24 09:23:09 2026 Merged-from: https://github.com/openssl/openssl/pull/32328

ci: let the CI bot dispatch this branch's test suites

2026-09-24T09:23:07Z

The bot dispatches workflows against a pull request's base branch, so each branch needs its own dispatch entry points rather than inheriting master's: the three dispatch inputs, a validation call that rejects malformed ones, the run-name sentinel runs are correlated by, a concurrency key, and checkouts pinned to the pull request head SHA instead of the branch tip. Two fixes ride along, both required before these files may check out pull request code: interop-tests gains the permissions block it was missing, and oss-fuzz gains a checkout of its own so it fuzzes the tested tree rather than a fresh clone. Assisted-by: Claude:claude-opus-5 Reviewed-by: Milan Broz Reviewed-by: Norbert Pocs Merge-date: Thu Sep 24 09:23:08 2026 Merged-from: https://github.com/openssl/openssl/pull/32328

update active branches in deploy-docs-openssl-org.yml workflow

2026-09-16T09:18:41Z

Reviewed-by: Neil Horman Reviewed-by: Andrew Dinh Merge-date: Wed Sep 16 09:18:44 2026 Merged-from: https://github.com/openssl/openssl/pull/32782

Make the extended tests CI jobs run on ready_for_review

2026-09-16T09:00:56Z

This allows avoiding full CI re-run by the otherwise necessary close & reopen of the PR to re-run these jobs. Reviewed-by: Paul Dale Reviewed-by: Nikola Pajkovsky Merge-date: Wed Sep 16 09:01:06 2026 Merged-from: https://github.com/openssl/openssl/pull/32679

Remove 3.0 branch from various CI jobs as it is EOL

2026-09-11T13:28:45Z

Reviewed-by: Eugene Syromiatnikov Reviewed-by: Nikola Pajkovsky Merge-date: Fri Sep 11 13:05:07 2026 Merged-from: https://github.com/openssl/openssl/pull/32768 (cherry picked from commit 2238a94895d90cf221ae804d385a063280b81d0e)

Add 4.1 branch to various CI jobs

2026-09-11T13:27:09Z

Reviewed-by: Eugene Syromiatnikov Reviewed-by: Nikola Pajkovsky Merge-date: Fri Sep 11 13:05:06 2026 Merged-from: https://github.com/openssl/openssl/pull/32768 (cherry picked from commit b2335251a885ab5b48302ff59347e7faee2f1672)