[sxlijin]

Stacked on #3688 (sam/ci-restructure). Splits the ring-crypto change out of the CI restructure into its own reviewable PR.

Switches the whole-workspace native test builds (linux/macos/windows cargo test) from --all-features to a curated RING_FEATURES set that uses the ring crypto provider instead of aws-lc, dropping aws-lc-sys and its cmake/C/NASM cold-build cost (build-caching/04 Exp 10).

• Adds the RING_FEATURES workflow env + points the 3 native cargo-test jobs at it.
• 4 source edits: baml/baml_release reqwest rustls → rustls-no-provider; baml_tests/bex_engine sys_native aws-crypto → ring-crypto.
• Shipping crates keep default = ["aws-crypto"], so release artifacts are unchanged — this only affects test builds.
• -p-scoped jobs (snapshot, sdk-tests) keep --all-features (cargo's --features <pkg>/<feat> requires the pkg in the -p selected set).

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
beps	Ready	Preview, Comment	Jun 6, 2026 1:05am
promptfiddle	Ready	Preview, Comment	Jun 6, 2026 1:05am
promptfiddle2	Error		Jun 6, 2026 1:05am

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: 53c37439-2cd0-4c1f-80bf-62770606a05a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch sam/ci-restructure-ring

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

⏭️ Performance benchmarks were skipped

Perf benchmarks (CodSpeed) are opt-in on pull requests — they no longer run on every push. They always run automatically after merge to canary/main.

To run them on this PR, do any of the following, then push a commit (or re-run CI):

• Add RUN_CODSPEED=1 to the PR description, or
• Include run-perf or /perf in the PR title or any commit message.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 9fdf604e95

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Install a rustls provider before using reqwest

When this crate is built outside the whole-workspace CI feature set (for example the release/downloader path used by baml_release, and the same pattern was added in crates/baml), reqwest now uses rustls-no-provider but neither crate installs a rustls::crypto provider before Client::builder().build() in the HTTPS download code. Reqwest documents that rustls-no-provider requires a provider to be installed before building a client and otherwise panics at construction time, so self-update/release downloads can fail even though the old rustls feature supplied the provider automatically.

Useful? React with 👍 / 👎.

[github-actions]

⚠️ Missing size-gate report(s):

• windows (job result: success)

The unified report below only reflects platforms that produced output.

Binary size checks passed

✅ 5 passed

	Artifact	Platform	File	Gzip	Gated on	Baseline	Delta	Status
✅	baml-cli	Linux	🔒 17.8 MB	7.6 MB	file	24.1 MB	-6.3 MB (-26.0%)	OK
✅	packed-program	Linux	🔒 12.9 MB	5.5 MB	file	15.1 MB	-2.2 MB (-14.4%)	OK
✅	baml-cli	macOS	🔒 13.6 MB	6.6 MB	file	18.2 MB	-4.6 MB (-25.3%)	OK
✅	packed-program	macOS	🔒 9.9 MB	4.8 MB	file	11.5 MB	-1.6 MB (-14.3%)	OK
✅	bridge_wasm	WASM	11.9 MB	🔒 3.4 MB	gzip	3.9 MB	-501.0 KB (-12.9%)	OK

🔒 = the size this artifact is GATED on (ceiling + delta). Binaries gate on file size (installed binary); WASM gates on gzip (download size). The other size is shown for information only.

---

Generated by cargo size-gate · workflow run