From 16677ef704f9897e19e6990c4741213f80366a6a Mon Sep 17 00:00:00 2001
From: KAMAL <m.kamalvfx@gmail.com>
Date: Tue, 26 May 2026 21:31:46 +0300
Subject: [PATCH 1/2] ci: add wget retries + curl fallback for AppImage
 downloads; add contents:write permission

- build_appimage.sh: wget --tries=5 --timeout=60 --waitretry=15 for appimagetool
  and --tries=5 --timeout=120 for Python AppImage; curl fallback on wget failure
- linux-release.yml: add curl to apt-get prerequisites; add permissions.contents: write
  so GITHUB_TOKEN can upload artifacts to the release

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .github/workflows/linux-release.yml | 5 ++++-
 linux/appimage/build_appimage.sh    | 7 +++++--
 2 files changed, 9 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/linux-release.yml b/.github/workflows/linux-release.yml
index 3e4b512..69ba09e 100644
--- a/.github/workflows/linux-release.yml
+++ b/.github/workflows/linux-release.yml
@@ -10,6 +10,9 @@ on:
         required: true
         default: "v2.4.0"
 
+permissions:
+  contents: write
+
 jobs:
   build-linux:
     name: Build AppImage + .deb
@@ -38,7 +41,7 @@ jobs:
       - name: Install AppImage + .deb prerequisites
         run: |
           sudo apt-get update -qq
-          sudo apt-get install -y wget fuse libfuse2 dpkg-dev
+          sudo apt-get install -y wget curl fuse libfuse2 dpkg-dev
 
       - name: Build AppImage
         run: |
diff --git a/linux/appimage/build_appimage.sh b/linux/appimage/build_appimage.sh
index 230b9da..6350242 100644
--- a/linux/appimage/build_appimage.sh
+++ b/linux/appimage/build_appimage.sh
@@ -129,8 +129,10 @@ APPIMAGETOOL="${CACHE_DIR}/appimagetool-x86_64.AppImage"
 
 if [[ ! -f "${APPIMAGETOOL}" ]]; then
     log "Downloading appimagetool..."
+    # Use a pinned release for CI reproducibility; fallback to the continuous build
     APPIMAGETOOL_URL="https://github.com/AppImage/appimagetool/releases/download/continuous/appimagetool-x86_64.AppImage"
-    wget -q --show-progress -O "${APPIMAGETOOL}" "${APPIMAGETOOL_URL}"
+    wget -q --show-progress --tries=5 --timeout=60 --waitretry=15 -O "${APPIMAGETOOL}" "${APPIMAGETOOL_URL}" \
+        || { log "Primary URL failed, retrying via curl..."; curl -fL --retry 5 --retry-delay 15 -o "${APPIMAGETOOL}" "${APPIMAGETOOL_URL}"; }
     chmod +x "${APPIMAGETOOL}"
     log "appimagetool downloaded to ${APPIMAGETOOL}"
 else
@@ -150,7 +152,8 @@ PYTHON_APPIMAGE_URL="https://github.com/niess/python-appimage/releases/download/
 
 if [[ ! -f "${PYTHON_APPIMAGE_CACHED}" ]] && [[ "${SKIP_DOWNLOAD}" -eq 0 ]]; then
     log "Downloading Python ${PYTHON_VERSION} base AppImage..."
-    wget -q --show-progress -O "${PYTHON_APPIMAGE_CACHED}" "${PYTHON_APPIMAGE_URL}"
+    wget -q --show-progress --tries=5 --timeout=120 --waitretry=15 -O "${PYTHON_APPIMAGE_CACHED}" "${PYTHON_APPIMAGE_URL}" \
+        || { log "wget failed, retrying via curl..."; curl -fL --retry 5 --retry-delay 15 -o "${PYTHON_APPIMAGE_CACHED}" "${PYTHON_APPIMAGE_URL}"; }
     chmod +x "${PYTHON_APPIMAGE_CACHED}"
     log "Cached at ${PYTHON_APPIMAGE_CACHED}"
 elif [[ ! -f "${PYTHON_APPIMAGE_CACHED}" ]]; then

From b55ef083124ffbe306e4f21140ec156cf7535e20 Mon Sep 17 00:00:00 2001
From: KAMAL <m.kamalvfx@gmail.com>
Date: Tue, 26 May 2026 21:34:36 +0300
Subject: [PATCH 2/2] fix: update Python AppImage version from 3.10.14 to
 3.10.19

python3.10.14 does not exist on niess/python-appimage; the latest
available manylinux2014_x86_64 build is 3.10.19. This was causing
the GitHub Actions Linux build to fail with HTTP 404 on the AppImage
base download.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 linux/BUILDING.md                | 2 +-
 linux/appimage/build_appimage.sh | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/linux/BUILDING.md b/linux/BUILDING.md
index d4685e4..19881ff 100644
--- a/linux/BUILDING.md
+++ b/linux/BUILDING.md
@@ -100,7 +100,7 @@ SOURCE_DATE_EPOCH=0 bash linux/appimage/build_appimage.sh
 ### What the script does
 
 1. Downloads `appimagetool` into `linux/build/cache/` (if not cached).
-2. Downloads `python3.10.14-cp310-cp310-manylinux2014_x86_64.AppImage`
+2. Downloads `python3.10.19-cp310-cp310-manylinux2014_x86_64.AppImage`
    from the [python-appimage](https://github.com/niess/python-appimage)
    project (if not cached).
 3. Extracts the Python AppImage to a temporary `AppDir`.
diff --git a/linux/appimage/build_appimage.sh b/linux/appimage/build_appimage.sh
index 6350242..7def02d 100644
--- a/linux/appimage/build_appimage.sh
+++ b/linux/appimage/build_appimage.sh
@@ -53,7 +53,7 @@ BUILD_DIR="${REPO_ROOT}/linux/build"
 CACHE_DIR="${BUILD_DIR}/cache"
 APPIMAGE_DIR="${SCRIPT_DIR}"
 
-PYTHON_VERSION="3.10.14"
+PYTHON_VERSION="3.10.19"
 SKIP_DOWNLOAD=0
 WHEEL_PATH=""
 APP_VERSION=""