👷 Enhance CI workflow with manylinux container

Author: mnixry

.github/workflows/ci.yml

@@ -9,15 +9,20 @@ on:
 
 jobs:
   build-opencv:
-    name: Build OpenCV
+    name: Build OpenCV (${{ matrix.os.artifact-name || matrix.os.runner }})
 
     strategy:
       matrix:
         os:
-          - ubuntu-latest
-          - windows-latest
-          - macos-13
-          - macos-latest
+          - runner: ubuntu-latest
+            container: quay.io/pypa/manylinux_2_34_x86_64
+            artifact-name: linux
+          - runner: ubuntu-latest
+            container: quay.io/pypa/musllinux_1_2_x86_64
+            artifact-name: linux-musl
+          - runner: windows-latest
+          - runner: macos-13
+          - runner: macos-latest
 
     defaults:
       run:
@@ -26,16 +31,16 @@ jobs:
     env:
       SCCACHE_GHA_ENABLED: true
 
-    runs-on: ${{ matrix.os }}
+    runs-on: ${{ matrix.os.runner }}
+    container: ${{ matrix.os.container }}
 
     steps:
       - name: Get latest release
         id: latest-release
         run: |
-          curl -s https://api.github.com/repos/opencv/opencv/releases/latest \
-            -H "Accept: application/vnd.github.v3+json" \
-            -H "Authorization: token ${{ secrets.GITHUB_TOKEN }}" \
-            | jq -r '.tag_name' | tee latest-release.txt
+          curl -Ls -o /dev/null -w %{url_effective} \
+            https://github.com/opencv/opencv/releases/latest \
+            | sed 's#.*tag/\(.*\)$#\1#' > latest-release.txt
           echo "tag=$(cat latest-release.txt)" >> $GITHUB_OUTPUT
 
       - uses: actions/checkout@main
@@ -85,20 +90,25 @@ jobs:
 
       - uses: actions/upload-artifact@main
         with:
-          name: opencv-${{ matrix.os }}
+          name: opencv-${{ matrix.os.artifact-name || matrix.os.runner }}
           path: ./opencv
 
   build:
-    name: Build Wheel
+    name: Build Wheel (${{ matrix.os.artifact-name || matrix.os.runner }})
     needs: [build-opencv]
 
     strategy:
       matrix:
         os:
-          - ubuntu-latest
-          - windows-latest
-          - macos-13
-          - macos-latest
+          - runner: ubuntu-latest
+            container: quay.io/pypa/manylinux_2_34_x86_64
+            artifact-name: linux
+          - runner: ubuntu-latest
+            container: quay.io/pypa/musllinux_1_2_x86_64
+            artifact-name: linux-musl
+          - runner: windows-latest
+          - runner: macos-13
+          - runner: macos-latest
         python: ["3.8", "3.9", "3.10", "3.11", "3.12", "3.13"]
         exclude:
           - os: macos-latest
@@ -111,14 +121,15 @@ jobs:
       run:
         shell: bash
 
-    runs-on: ${{ matrix.os }}
+    runs-on: ${{ matrix.os.runner }}
+    container: ${{ matrix.os.container }}
 
     steps:
       - uses: actions/checkout@main
 
       - uses: actions/download-artifact@main
         with:
-          name: opencv-${{ matrix.os }}
+          name: opencv-${{ matrix.os.artifact-name || matrix.os.runner }}
           path: ./opencv
 
       - uses: pdm-project/setup-pdm@main
@@ -151,20 +162,25 @@ jobs:
 
       - uses: actions/upload-artifact@main
         with:
-          name: wheel-${{matrix.os}}-${{matrix.python}}
+          name: wheel-${{ matrix.os.artifact-name || matrix.os.runner }}-${{ matrix.python }}
           path: ./dist/*.whl
 
   test:
-    name: Test Wheel
+    name: Test Wheel (${{ matrix.os.artifact-name || matrix.os.runner }})
     needs: [build]
 
     strategy:
       matrix:
         os:
-          - ubuntu-latest
-          - windows-latest
-          - macos-13
-          - macos-latest
+          - runner: ubuntu-latest
+            container: quay.io/pypa/manylinux_2_34_x86_64
+            artifact-name: linux
+          - runner: ubuntu-latest
+            container: quay.io/pypa/musllinux_1_2_x86_64
+            artifact-name: linux-musl
+          - runner: windows-latest
+          - runner: macos-13
+          - runner: macos-latest
         python: ["3.8", "3.9", "3.10", "3.11", "3.12", "3.13"]
         exclude:
           - os: macos-latest
@@ -177,15 +193,16 @@ jobs:
       run:
         shell: bash
 
-    runs-on: ${{ matrix.os }}
+    runs-on: ${{ matrix.os.runner }}
+    container: ${{ matrix.os.container }}
 
     steps:
       - uses: actions/checkout@main
 
       - name: Download wheel
         uses: actions/download-artifact@main
         with:
-          name: wheel-${{matrix.os}}-${{matrix.python}}
+          name: wheel-${{ matrix.os.artifact-name || matrix.os.runner }}-${{ matrix.python }}
           path: ./dist
 
       - uses: pdm-project/setup-pdm@main
@@ -196,7 +213,7 @@ jobs:
       - name: Install dependencies
         run: |
           pdm install -G test --no-self
-          pdm add dist/*.whl --no-lock
+          pdm add -v dist/*.whl --frozen-lockfile
 
       - name: Run tests
         run: |