Build Packages / Create release (push) Successful in 27s
Build Packages / build:viewer:macos-arm64:nocuda (push) Successful in 3m9s
Build Packages / build:rugnux:macos-arm64:nocuda (push) Successful in 2m35s
Build Packages / build:viewer:linux-x86_64:nocuda (push) Successful in 10m49s
Build Packages / build:viewer:linux-x86_64:cuda (push) Successful in 10m28s
Build Packages / build:rugnux:linux-aarch64:cuda (push) Successful in 6m44s
Build Packages / build:rugnux:linux-x86_64:cuda (push) Successful in 6m55s
Build Packages / build:viewer:windows-x86_64:nocuda (push) Successful in 19m17s
Build Packages / HDF5 consumer tests (DIALS, XDS) (push) Successful in 24m47s
Build Packages / build:viewer:windows-x86_64:cuda (push) Successful in 23m52s
Build Packages / build:jfjoch:rocky8:nocuda (push) Successful in 13m48s
Build Packages / build:jfjoch:rocky9:nocuda (push) Successful in 16m28s
Build Packages / build:jfjoch:ubuntu2204:nocuda (push) Successful in 16m37s
Build Packages / build:rugnux:windows-x86_64:cuda (push) Successful in 13m53s
Build Packages / build:jfjoch:ubuntu2404:nocuda (push) Successful in 17m43s
Build Packages / build:jfjoch:rocky8:cuda-sls9 (push) Successful in 18m59s
Build Packages / Generate python client (push) Successful in 44s
Build Packages / Build documentation (push) Successful in 1m35s
Build Packages / build:jfjoch:rocky9:cuda-sls9 (push) Successful in 18m30s
Build Packages / build:jfjoch:rocky8:cuda (push) Successful in 16m57s
Build Packages / build:jfjoch:ubuntu2204:cuda (push) Successful in 19m23s
Build Packages / build:jfjoch:rocky9:cuda (push) Successful in 20m14s
Build Packages / build:jfjoch:ubuntu2404:cuda (push) Successful in 17m27s
Build Packages / Unit tests (push) Successful in 2h24m10s
The viewer's live-broker client goes back to cpp-httplib, which the broker already fetches; libcurl was only there for Kerberos, which is no longer wanted. HTTPS comes from Mbed TLS 4.2.0, fetched and statically linked for viewer builds only, so one TLS backend now serves Linux, Windows and macOS (the macOS viewer previously had no TLS at all, and Linux needed host OpenSSL >= 3.0). cpp-httplib verifies servers against the OS trust store: the Windows certificate store, the macOS Keychain, the CA bundle on Linux. CPPHTTPLIB_MBEDTLS_SUPPORT is set on jfjoch_viewer only, not on httplib::httplib, so the broker stays plain HTTP. JFJochHttpReader.cpp is the only viewer source that includes httplib.h, and the header keeps httplib::Client opaque so <windows.h> stays out of the other viewer units. Checked on Linux: a viewer-only build links Mbed TLS statically, with no curl and no system libssl; a standalone client built against the same httplib + Mbed TLS fetches from real HTTPS hosts and rejects expired, self-signed and wrong-host certificates. Windows and macOS are untested. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>