Registry: publish Julia binding through BinaryBuilder and General

[edithatogo]

Conductor track: research_software_registry_readiness_20260721.

Prepare and submit the Rust voiage-ffi library to Yggdrasil so BinaryBuilder can generate a registered JLL package; then replace the Julia binding local-library requirement with that JLL, verify the package across supported Julia/platform combinations, configure monorepo-safe TagBot automation, and trigger Registrator with subdir=bindings/julia.

Acceptance evidence:

• a Yggdrasil PR with passing platform builds and an accepted/generated JLL;
• Julia Project.toml depends on the registered JLL and includes bounded compat;
• clean-depot installation and EVPI fixture tests pass without a local Rust toolchain;
• General registration PR is opened and passes registry checks;
• final General merge/registry indexing is recorded separately from repository readiness.

External boundary: BinaryBuilder and General bots/maintainers control acceptance and merge.

[edithatogo]

Repository implementation is in #561. The prerequisite BinaryBuilder recipe is submitted as JuliaPackaging/Yggdrasil#14292; its seven requested hosted target builds are green. The source package passes isolated Aqua and fixture tests, CI covers Julia 1.10–1.12 on Linux/macOS/Windows, and subpackage-aware TagBot has repository-scoped deploy-key authentication.

The remaining sequence is evidence-gated: Yggdrasil acceptance and voiage_ffi_jll registration → add the generated JLL UUID/compat and default product path → clean-depot tests → @JuliaRegistrator register subdir=bindings/julia → General merge/indexing.

[JuliaRegistrator]

Error while trying to register: "File (Julia)Project.toml not found"

[edithatogo]

Repository readiness PR #561 merged into main as ba1826201439079ae2e0194713600607629c878a on 2026-07-27. It adds the pinned BinaryBuilder recipe, Julia package/General hygiene, Aqua tests, Julia 1.10/1.11/1.12 cross-platform CI, TagBot subdirectory/tag-prefix configuration, and repository-scoped TagBot deploy-key authentication. Yggdrasil PR JuliaPackaging/Yggdrasil#14292 remains open and clean; all seven Buildkite targets pass. The next gate is Yggdrasil maintainer acceptance and automatic voiage_ffi_jll registration. After its generated UUID/version are available, Voiage can consume the JLL and trigger @JuliaRegistrator register subdir=bindings/julia from a commit or issue comment.

[JuliaRegistrator]

Error while trying to register: "File (Julia)Project.toml not found"

[edithatogo]

Follow-up security hardening PR #564 merged into main as 882a7ed673b42c47dd8f1e5aaa3c0d2973ce3b94. TagBot now keeps workflow-wide contents access read-only and grants contents write only to the actor-guarded TagBot job. The complete hosted PR check set passed, including CodeQL, zizmor, GitHub Actions audit, supply-chain assurance, mutation testing, cross-platform distribution identity, and Python 3.12–3.14. Post-merge CodeQL also passed on main.

[edithatogo]

Yggdrasil v2.1.0 candidate refreshed

External PR JuliaPackaging/Yggdrasil#14292 now targets voiage_ffi 2.1.0 at signed-release commit 964a0fc334ece9509387cd07d43776adf38be240 (candidate head db38b5200cc4ed741c5cfc682a8465395f687b41). Buildkite build 31960 passed all seven advertised targets: aarch64/x86_64 macOS, aarch64/x86_64 glibc Linux, aarch64/x86_64 musl Linux, and x86_64 Windows.

This is clean candidate evidence, not registry acceptance. #555 remains open pending an authorized Yggdrasil maintainer merge and the destination-generated JLL/General receipts.

[edithatogo]

Maximum-platform-coverage implementation update (exact evidence, no registry completion claim):

• Voiage implementation PR: chore: maximize Yggdrasil platform coverage #999, current head f8fce0d30f4b932eac165571ec18fe58452fafc2
• External recipe PR: Voiage: new package at 2.1.0 JuliaPackaging/Yggdrasil#14292, exact head 2528e2efb90e4197924d45c98873ca5cdb1a9d42
• Terminal hosted run: Buildkite 31972, 15/15 included platforms passed
• Evidence-backed exclusions: FreeBSD aarch64, riscv64, and Windows i686; each has a narrow predicate, primary evidence, and reconsideration trigger
• Product evidence: all 15 published archives were independently downloaded and SHA-256/path/license verified
• Executable evidence: ABI 1.1, required symbols/capabilities, EVPI, and ENBS passed for arm64 and x86_64 macOS artifacts; the 13 cross targets remain build/product-only

Still pending externally: Yggdrasil review/merge, JLL generation/registration, clean-depot JLL execution, Julia General registration/merge, and indexing. This update does not close #555.