[luiarthur]

Hi,

This PR adds a GitHub Actions workflow that builds statically linked bwrap binaries for Linux aarch64 and x86_64 using Alpine Linux (alpine:3.23).

• Triggered on v* tag pushes.
• Builds binaries for both x86_64 and aarch64.
• Uploads bwrap-x86_64 and bwrap-aarch64 as release assets on the releases page (e.g., https://github.com/luiarthur/bubblewrap/releases/tag/v0.0.7).

After downloading the binary, set execution bit first before running. E.g.,

chmod +x bwrap-$(arch)
ln -s bwrap-$(arch) bwrap
./bwrap --version

[smcv]

The bubblewrap maintainers already have insufficient time to do everything we are trying to be responsible for. I don't think we want to be in the business of releasing ready-to-use binaries, which will create an expectation that we are responsible for end-user technical support, security fixes and so on.

OS distributions are already good at releasing binaries and (at least in the better OS distributions!) handling security updates, and the bubblewrap binaries that get used in production should often come from them.

If you want to build your own bubblewrap binaries from CI and take responsibility for their quality and security, that's already something you could do.