cherry-pick: Update CI to run on github hoster runners and pin down manylinux containers,

and other fixes from develop

Author: Matevz Morato

.github/workflows/main.yml

@@ -138,10 +138,6 @@ jobs:
       matrix:
         rpi-os: [rpi-buster, rpi-bullseye, rpi-bookworm]
     runs-on: ${{ matrix.rpi-os }}
-    env:
-      # workaround required for cache@v3, https://github.com/actions/cache/issues/1428
-      # to be removed when upgrading the manylinux image
-      ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: true
     steps:
       - name: Print home directory
         run: echo Home directory inside container $HOME
@@ -171,7 +167,7 @@ jobs:
       - name: Archive wheel artifacts
         uses: actions/upload-artifact@v4
         with:
-          name: audited-wheels
+          name: audited-wheels-${{ matrix.rpi-os }}
           path: wheelhouse/audited/
       - name: Deploy wheels to artifactory (if not a release)
         if: startsWith(github.ref, 'refs/tags/v') != true
@@ -229,7 +225,7 @@ jobs:
       - name: Archive wheel artifacts
         uses: actions/upload-artifact@v4
         with:
-          name: audited-wheels
+          name: audited-wheels-windows-${{ matrix.python-version }}-${{ matrix.python-architecture }}
           path: wheelhouse/audited/
       - name: Deploy wheels to artifactory (if not a release)
         if: startsWith(github.ref, 'refs/tags/v') != true
@@ -304,14 +300,10 @@ jobs:
   build-linux-x86_64:
     needs: build-docstrings
     runs-on: ubuntu-latest
-    env:
-      # workaround required for cache@v3, https://github.com/actions/cache/issues/1428
-      # to be removed when upgrading the manylinux image
-      ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: true
     container:
-      image: quay.io/pypa/manylinux2014_x86_64:latest
+      image: quay.io/pypa/manylinux_2_28_x86_64:2024.12.05-1
       env:
-        PLAT: manylinux2014_x86_64
+        PLAT: manylinux_2_28_x86_64
     steps:
       - name: Cache .hunter folder
         uses: actions/cache@v4
@@ -321,11 +313,6 @@ jobs:
       - uses: actions/checkout@v4
         with:
           submodules: 'recursive'
-      - name: Patching mirrorlist
-        run: |
-          sed -i s/mirror.centos.org/vault.centos.org/g /etc/yum.repos.d/*.repo
-          sed -i s/^#.*baseurl=http/baseurl=http/g /etc/yum.repos.d/*.repo
-          sed -i s/^mirrorlist=http/#mirrorlist=http/g /etc/yum.repos.d/*.repo
       - name: Installing libusb1-devel dependency
         run: yum install -y --disableplugin=fastestmirror libusb1-devel perl-core
       - name: Installing cmake dependency
@@ -363,7 +350,7 @@ jobs:
       - name: Archive wheel artifacts
         uses: actions/upload-artifact@v4
         with:
-          name: audited-wheels
+          name: audited-wheels-linux-x86_64
           path: wheelhouse/audited/
       - name: Deploy wheels to artifactory (if not a release)
         if: startsWith(github.ref, 'refs/tags/v') != true
@@ -376,27 +363,18 @@ jobs:
   # This job builds wheels for ARM64 arch
   build-linux-arm64:
     needs: build-docstrings
-    runs-on: [self-hosted, linux, ARM64]
-    env:
-      # workaround required for cache@v3, https://github.com/actions/cache/issues/1428
-      # to be removed when upgrading the manylinux image
-      ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: true
+    runs-on: ubuntu-24.04-arm
     container:
-      image: quay.io/pypa/manylinux2014_aarch64:latest
+      image: quay.io/pypa/manylinux_2_28_aarch64:2024.12.05-1
       env:
-        PLAT: manylinux2014_aarch64
+        PLAT: manylinux_2_28_aarch64
       # Mount local hunter cache directory, instead of transfering to Github and back
       volumes:
         - /.hunter:/github/home/.hunter
     steps:
       - uses: actions/checkout@v4
         with:
           submodules: 'recursive'
-      - name: Patching mirrorlist
-        run: |
-          sed -i s/mirror.centos.org/vault.centos.org/g /etc/yum.repos.d/*.repo
-          sed -i s/^#.*baseurl=http/baseurl=http/g /etc/yum.repos.d/*.repo
-          sed -i s/^mirrorlist=http/#mirrorlist=http/g /etc/yum.repos.d/*.repo
       - name: Installing libusb1-devel dependency
         run: yum install -y --disableplugin=fastestmirror libusb1-devel perl-core
       - name: Installing cmake dependency
@@ -429,7 +407,7 @@ jobs:
       - name: Archive wheel artifacts
         uses: actions/upload-artifact@v4
         with:
-          name: audited-wheels
+          name: audited-wheels-linux-arm64
           path: wheelhouse/audited/
       - name: Deploy wheels to artifactory (if not a release)
         if: startsWith(github.ref, 'refs/tags/v') != true
@@ -485,7 +463,8 @@ jobs:
           submodules: 'recursive'
       - uses: actions/download-artifact@v4
         with:
-          name: audited-wheels
+          pattern: audited-wheels*
+          merge-multiple: true
           path: wheelhouse/audited/
       - name: List files
         run: ls -lah