ci: clone coldcard repo only once

Co-Authored-By: GPT-5 (Preview) <gpt5@example.com>

Author: Sjors

.github/actions/install-sim/action.yml

@@ -18,14 +18,25 @@ runs:
         apt-get install -y libsdl2-image-2.0-0 libusb-1.0-0
         tar -xvf trezor-firmware.tar.gz
 
+    # Coldcard: download seeded firmware (seed job must run earlier)
+    - name: Download seeded Coldcard firmware
+      if: inputs.device == 'coldcard'
+      uses: actions/download-artifact@v4
+      with:
+        name: coldcard-firmware-src
+        path: test/work/firmware
+
     - if: inputs.device == 'coldcard'
       shell: bash
       run: |
         apt-get update
         apt-get install -y libpcsclite-dev libusb-1.0-0 swig
         git config --global user.email "ci@ci.com"
         git config --global user.name "ci"
-        pushd test/work; git clone --recursive https://github.com/Coldcard/firmware.git; popd
+        pushd test/work
+        if [ ! -d "firmware" ]; then
+          git clone --recursive https://github.com/Coldcard/firmware.git
+        popd
         tar -xvf coldcard-mpy.tar.gz
         pushd test/work/firmware; git am ../../data/coldcard-multisig.patch; popd
         poetry run pip install -r test/work/firmware/requirements.txt

.github/workflows/ci.yml

@@ -119,9 +119,13 @@ jobs:
       # Trezor T binaries don't need this.
       runs-on: ubuntu-22.04
 
+  coldcard-firmware-seed:
+    uses: ./.github/workflows/coldcard-firmware-seed.yml
+
+  # Use the generic sim-builder with a Coldcard seed dependency
   sim-builder-coldcard:
     name: Coldcard sim builder
-    needs: prepare-sim-matrices
+    needs: [prepare-sim-matrices, coldcard-firmware-seed]
     uses: ./.github/workflows/sim-builder.yml
     with:
       sim: coldcard

.github/workflows/coldcard-firmware-seed.yml

@@ -0,0 +1,25 @@
+name: Coldcard Firmware Seed
+on:
+  workflow_call:
+
+jobs:
+  seed:
+    name: Seed Coldcard firmware (once per run)
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Clone Coldcard firmware (with submodules)
+        shell: bash
+        run: |
+          set -euo pipefail
+          mkdir -p test/work
+          pushd test/work
+            git clone --recursive https://github.com/Coldcard/firmware.git
+          popd
+
+      - name: Upload seeded repo as artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: coldcard-firmware-src
+          path: test/work/firmware

.github/workflows/sim-builder.yml

@@ -23,6 +23,15 @@ jobs:
         include: ${{ fromJSON(inputs.include) }}
     steps:
       - uses: actions/checkout@v4
+
+      # Coldcard: download seeded firmware (seed job must run earlier)
+      - name: Download seeded Coldcard firmware
+        if: ${{ inputs.sim == 'coldcard' }}
+        uses: actions/download-artifact@v4
+        with:
+          name: coldcard-firmware-src
+          path: test/work/firmware
+
       - uses: ./.github/actions/build-sim
         with:
           name: ${{ matrix.name }}

test/setup_environment.sh

@@ -133,30 +133,22 @@ if [[ -n ${build_coldcard} ]]; then
         coldcard_setup_needed=true
     else
         cd firmware
-        git reset --hard HEAD~3 # Undo git-am for checking and updating
-        git fetch
-
-        # Determine if we need to pull. From https://stackoverflow.com/a/3278427
-        UPSTREAM=${1:-'@{u}'}
-        LOCAL=$(git rev-parse @)
-        REMOTE=$(git rev-parse "$UPSTREAM")
-        BASE=$(git merge-base @ "$UPSTREAM")
+        # Ensure repo matches upstream (handles seeded artifact without local commits)
+        git fetch origin
+        git reset --hard origin/master
+        coldcard_setup_needed=true
 
-        if [ $LOCAL = $REMOTE ]; then
-            echo "Up-to-date"
-        elif [ $LOCAL = $BASE ]; then
-            git pull
-            coldcard_setup_needed=true
-        fi
+        # No additional pull needed; hard-reset above already synced to upstream
     fi
-    # Apply patch to make simulator work in linux environments
-    git am ../../data/coldcard-multisig.patch
 
     # Build the simulator. This is cached, but it is also fast
     poetry run pip install -r requirements.txt
     pip install -r requirements.txt
     cd unix
     if [ "$coldcard_setup_needed" == true ] ; then
+        # Apply patch to make simulator work in linux environments
+        git am ../../../data/coldcard-multisig.patch
+
         pushd ../external/micropython/mpy-cross/
         make
         popd