ci: build release on ubuntu 20.04 for glibc 2.31 compatibility

Author: cuongducle

.github/workflows/release.yml

@@ -10,7 +10,7 @@ permissions:
 
 jobs:
   build-and-publish:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
 
     steps:
       - name: Checkout
@@ -86,6 +86,33 @@ jobs:
       - name: Build DEB and AppImage
         run: npm run build:linux
 
+      - name: Verify better-sqlite3 GLIBC compatibility (Ubuntu 20.04 baseline)
+        run: |
+          set -euo pipefail
+          BASELINE_GLIBC="2.31"
+          NODE_FILE="$(find dist/linux-unpacked -type f -name better_sqlite3.node | head -n 1 || true)"
+          if [[ -z "${NODE_FILE}" ]]; then
+            echo "Could not locate better_sqlite3.node in dist/linux-unpacked." >&2
+            exit 1
+          fi
+          echo "Inspecting: ${NODE_FILE}"
+          MAX_GLIBC="$(
+            strings "${NODE_FILE}" \
+              | grep -oE 'GLIBC_[0-9]+\.[0-9]+' \
+              | sed 's/^GLIBC_//' \
+              | sort -V \
+              | tail -n 1
+          )"
+          if [[ -z "${MAX_GLIBC}" ]]; then
+            echo "No GLIBC symbol version found in ${NODE_FILE}." >&2
+            exit 1
+          fi
+          echo "Detected max GLIBC requirement: ${MAX_GLIBC}"
+          if dpkg --compare-versions "${MAX_GLIBC}" gt "${BASELINE_GLIBC}"; then
+            echo "better_sqlite3.node requires GLIBC_${MAX_GLIBC}, exceeds baseline GLIBC_${BASELINE_GLIBC}." >&2
+            exit 1
+          fi
+
       - name: Verify packaged CLI binary
         run: |
           test -x dist/linux-unpacked/resources/codex

README.md

@@ -100,6 +100,7 @@ That new tag triggers the release workflow, which publishes new `.deb`, `.AppIma
 
 - Packaging targets: **DEB** and **AppImage** only
 - Linux native module rebuild (`better-sqlite3`, `node-pty`)
+- Release CI builds on Ubuntu 20.04 baseline (glibc 2.31) for wider compatibility
 - Auto-upload release artifacts (`.deb`, `.AppImage`) to GitHub Releases
 - Optional APT repo publish on release tag