Merge origin/main into t3code/270bb972

Resolve .crow conflicts by taking main's content (which moved bincraft pins
to 4.2.1 and added per-minor build/install loops) and re-bumping every
bincraft pin to 4.2.2, so all pinned pipelines use the metadata-after-upload
release. build-all.R auto-merged: the restart skip-filter coexists with
main's r-minor-sensitive build path.

local/build-all.R

@@ -1,10 +1,13 @@
 sink(stdout(), type = "message")
 options(crayon.enabled = TRUE, future.globals.onReference = NULL)
+source(file.path("local", "r-minor-helpers.R"))
 
 args <- commandArgs(trailingOnly = TRUE)
-split_into <- as.integer(args[1])
-split_index <- as.integer(args[2])
-ncpus <- as.integer(args[3])
+parsed <- parse_build_args(args)
+split_into <- parsed$split_into
+split_index <- parsed$split_index
+ncpus <- parsed$ncpus
+sensitive_only <- parsed$sensitive_only
 options(Ncpus = ncpus)
 
 # Load bincraft eagerly to avoid lazy-load memory spike during first build call
@@ -12,9 +15,20 @@ library(bincraft, quietly = TRUE)
 library(future)
 plan("sequential")
 
-# Read precomputed package+version pairs
-pkgs <- readRDS("/mnt/cache/packages/pkgs_to_build.rds")
-sprintf("Total# of remaining package versions: %s", nrow(pkgs))
+pkgs <- if (sensitive_only) {
+  readRDS("/mnt/cache/packages/r_minor_sensitive_pkgs.rds")
+} else {
+  readRDS("/mnt/cache/packages/pkgs_to_build.rds")
+}
+# Back-compat: tolerate an older RDS without the column (treat all as non-sensitive)
+if (is.null(pkgs$r_minor_sensitive)) {
+  pkgs$r_minor_sensitive <- FALSE
+}
+sprintf(
+  "Total# of remaining package versions: %s (sensitive_only=%s)",
+  nrow(pkgs),
+  sensitive_only
+)
 
 # Split into chunks for this worker
 chunks <- split(pkgs, cut(seq_len(nrow(pkgs)), split_into, labels = FALSE))
@@ -57,26 +71,33 @@ s3_cache <- readRDS("/mnt/cache/packages/s3_cache.rds")
 sprintf("S3 cache: %s files", length(s3_cache))
 
 n <- nrow(chunk)
-mapply(function(pkg, ver, i) {
-  cat(sprintf("[%d/%d] %s_%s\n", i, n, pkg, ver))
-  bincraft::build_binary_package(
-    pkg,
-    tag = ver,
-    s3_endpoint = "https://s3.eu-central-003.backblazeb2.com",
-    s3_region = "eu-central-003",
-    s3_bucket = "devxy-rpkgs-binaries",
-    s3_access_key_id = Sys.getenv("B2_S3_ACCESS_KEY"),
-    s3_secret_access_key = Sys.getenv("B2_S3_SECRET_KEY"),
-    s3_package_cache = s3_cache,
-    metadata_db_host = "r-binaries.devxy.io",
-    metadata_db_name = "build_metadata",
-    metadata_db_table = "single_builds",
-    metadata_db_user = "rpkgs",
-    metadata_db_password = Sys.getenv("PGPASS"),
-    metadata_db_sslmode = "require",
-    metadata_db_port = 15432,
-    archive = TRUE,
-    upload = TRUE,
-    store_build_metadata = TRUE
-  )
-}, chunk$Package, chunk$Version, seq_len(n))
+mapply(
+  function(pkg, ver, sens, i) {
+    cat(sprintf("[%d/%d] %s_%s (r_minor_sensitive=%s)\n", i, n, pkg, ver, sens))
+    bincraft::build_binary_package(
+      pkg,
+      tag = ver,
+      is_r_minor_sensitive = isTRUE(sens),
+      s3_endpoint = "https://s3.eu-central-003.backblazeb2.com",
+      s3_region = "eu-central-003",
+      s3_bucket = "devxy-rpkgs-binaries",
+      s3_access_key_id = Sys.getenv("B2_S3_ACCESS_KEY"),
+      s3_secret_access_key = Sys.getenv("B2_S3_SECRET_KEY"),
+      s3_package_cache = s3_cache,
+      metadata_db_host = "r-binaries.devxy.io",
+      metadata_db_name = "build_metadata",
+      metadata_db_table = "single_builds",
+      metadata_db_user = "rpkgs",
+      metadata_db_password = Sys.getenv("PGPASS"),
+      metadata_db_sslmode = "require",
+      metadata_db_port = 15432,
+      archive = TRUE,
+      upload = TRUE,
+      store_build_metadata = TRUE
+    )
+  },
+  chunk$Package,
+  chunk$Version,
+  chunk$r_minor_sensitive,
+  seq_len(n)
+)