OneDev build environment

1dev/buildenv supplies Java 17, Maven, Node.js, Playwright Chromium, and the cross-compilation tools used by ServiceWrapper. Run this project's Release job to build and publish the image. The job remains manual; pushing a tool update does not publish an image automatically.

The Rust toolchain is pinned to 1.96.1 with rustfmt/clippy and the five wrapper targets. Zig 0.16.0, cargo-zigbuild 0.23.4, cargo-xwin 0.23.1, LLVM/clang/lld, Python 3, and the macOS 11.3 SDK are installed. Ubuntu 24.04's LLVM 18 binary directory is on PATH; clang-tools supplies clang-cl, and lld supplies lld-link for cargo-xwin. Zig archives and the SDK have pinned SHA-256 checksums. Rust cross-compilation works on Linux amd64 or arm64.

For macOS cross-compilation use SDKROOT=/opt/MacOSX11.3.sdk; it is deliberately not exported globally, so unrelated Linux builds are unaffected. This follows cargo-zigbuild's upstream image. For Windows, cargo-xwin downloads the Microsoft SDK/CRT during the first build and caches it; job network access is required. See cargo-xwin.

After changing this image, build Release here before running ServiceWrapper's Release job. The wrapper job uses 1dev/buildenv and publishes its versioned generic and OneDev integration archives with OneDev's publish-artifacts step.