Add macOS arm64 build to release workflow

Adds a build-macos job on macos-15 that builds Verific tclmain and
yosys with SMALL=1, bundles non-system dylibs, and uploads
yosys-macos-arm64.tar.gz alongside the existing Linux assets.

Made-with: Cursor

.github/workflows/release.yml

@@ -1,4 +1,4 @@
-name: Release (anylinux amd64 wheel)
+name: Release (anylinux amd64 + macOS arm64)
 
 on:
   push:
@@ -10,9 +10,9 @@ permissions:
   contents: write
 
 jobs:
-  build-and-release:
+  build-linux:
     runs-on: ubuntu-latest
-    name: Build anylinux amd64 wheel
+    name: Build anylinux amd64 wheel + tarball
 
     steps:
       - uses: actions/checkout@v4
@@ -104,16 +104,18 @@ jobs:
           printf '%s\n' \
             "Automated build from \`main\` @ [\`${SHORT_SHA}\`](${REPO_URL}/commit/${FULL_SHA})" \
             "" \
-            "**Platform:** Linux amd64 (Alpine-based, portable across Linux distros)" \
             "**Built:** ${DATE}" \
             "" \
             "### Assets" \
-            "- \`yosys-anylinux-amd64.tar.gz\` — standalone tarball" \
-            "- \`${WHEEL_NAME}\` — Python wheel (pyosys)" \
+            "| File | Platform |" \
+            "|------|----------|" \
+            "| \`yosys-anylinux-amd64.tar.gz\` | Linux x86-64 (Alpine-based, portable) |" \
+            "| \`yosys-macos-arm64.tar.gz\` | macOS Apple Silicon |" \
+            "| \`${WHEEL_NAME}\` | Python wheel (pyosys) |" \
             "" \
             "### Installation (tarball)" \
             "\`\`\`bash" \
-            "sudo tar xzf yosys-anylinux-amd64.tar.gz -C /" \
+            "sudo tar xzf yosys-<platform>.tar.gz -C /" \
             "\`\`\`" \
             "" \
             "### Installation (wheel)" \
@@ -148,3 +150,81 @@ jobs:
             --prerelease
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+  build-macos:
+    runs-on: macos-15
+    name: Build macOS arm64 tarball
+
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          submodules: recursive
+          ssh-key: ${{ secrets.SSH_PRIVATE_KEY }}
+
+      - name: Install dependencies
+        run: |
+          brew install bison flex gperf tcl-tk@8 readline libffi dwarfutils libelf
+
+      - name: Build Verific tclmain
+        run: |
+          export PATH="$(brew --prefix bison)/bin:$(brew --prefix flex)/bin:$PATH"
+          cd verific/tclmain
+          make
+
+      - name: Build yosys
+        run: |
+          set -ex
+          export PATH="$(brew --prefix bison)/bin:$(brew --prefix flex)/bin:$PATH"
+          make -j$(sysctl -n hw.ncpu) SMALL=1 ENABLE_PLUGINS=0 ENABLE_TCL=1 ENABLE_READLINE=1 PREFIX=/usr/local
+          make DESTDIR=/tmp/install PREFIX=/usr/local install
+
+      - name: Package tarball
+        run: |
+          STAGE=/tmp/install/usr/local
+          mkdir -p "$STAGE/lib"
+
+          copy_deps() {
+            for f in "$@"; do
+              [ -f "$f" ] || continue
+              otool -L "$f" 2>/dev/null | awk 'NR>1 {print $1}' | while read -r lib; do
+                [ -f "$lib" ] || continue
+                base=$(basename "$lib")
+                case "$base" in libSystem*|libc++*|libobjc*) continue ;; esac
+                case "$lib" in /usr/lib/*|/System/*) continue ;; esac
+                [ -f "$STAGE/lib/$base" ] || cp "$lib" "$STAGE/lib/$base"
+              done
+            done
+          }
+
+          copy_deps "$STAGE"/bin/*
+          copy_deps "$STAGE"/lib/*.dylib
+
+          for f in "$STAGE"/bin/*; do
+            [ -f "$f" ] || continue
+            install_name_tool -add_rpath "@executable_path/../lib" "$f" 2>/dev/null || true
+            for lib in "$STAGE"/lib/*.dylib; do
+              [ -f "$lib" ] || continue
+              base=$(basename "$lib")
+              install_name_tool -change "$(otool -L "$f" | grep "$base" | awk '{print $1}')" "@rpath/$base" "$f" 2>/dev/null || true
+            done
+          done
+          for f in "$STAGE"/lib/*.dylib; do
+            [ -f "$f" ] || continue
+            install_name_tool -id "@rpath/$(basename "$f")" "$f" 2>/dev/null || true
+          done
+
+          cd /tmp/install
+          tar czf "${{ github.workspace }}/yosys-macos-arm64.tar.gz" .
+
+      - name: Upload to permanent release
+        run: |
+          SHORT_SHA=$(git rev-parse --short HEAD)
+          DATE=$(date -u +%Y-%m-%d)
+          TAG="build-${DATE}-${SHORT_SHA}"
+          until gh release view "$TAG" >/dev/null 2>&1; do sleep 5; done
+          gh release upload "$TAG" yosys-macos-arm64.tar.gz --clobber
+          until gh release view latest >/dev/null 2>&1; do sleep 5; done
+          gh release upload latest yosys-macos-arm64.tar.gz --clobber
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}