Test with ARM64 Windows and also build wheels

Since GitHub Actions now has ARM64 Windows runners we can
test and build natively.

* Python ARM64 builds are only available since 3.11, so skip older
  versions for ARM64 everywhere.
* Sodium has arm64 builds only in a later binary release, so update
  the tarball. Downloaded from here:
  https://download.libsodium.org/libsodium/releases/
* The arm64 sodium builds are only available for v143, so just bump
  to v143 everywhere to keep things simple.

Author: lazka

.github/workflows/ci.yml

@@ -95,20 +95,27 @@ jobs:
           curl -o codecov.sh -f https://codecov.io/bash || curl -o codecov.sh -f https://codecov.io/bash || curl -o codecov.sh -f https://codecov.io/bash || curl -o codecov.sh -f https://codecov.io/bash || curl -o codecov.sh -f https://codecov.io/bash
           bash codecov.sh -n "Python ${{ matrix.PYTHON.VERSION }}${{ matrix.PYTHON.NOTE }} on macOS"
   windows:
-    runs-on: windows-latest
+    runs-on: ${{ matrix.WINDOWS.IMAGE }}
     strategy:
       matrix:
         WINDOWS:
-          - {ARCH: 'x86', SODIUM_ARCH: 'Win32'}
-          - {ARCH: 'x64', SODIUM_ARCH: 'x64'}
+          - {ARCH: 'x86', SODIUM_ARCH: 'Win32', IMAGE: "windows-latest"}
+          - {ARCH: 'x64', SODIUM_ARCH: 'x64', IMAGE: "windows-latest"}
         PYTHON:
-          - {VERSION: "3.7", NOXSESSION: "tests", SODIUM_MSVC_VERSION: "v142"}
-          - {VERSION: "3.8", NOXSESSION: "tests", SODIUM_MSVC_VERSION: "v142"}
-          - {VERSION: "3.9", NOXSESSION: "tests", SODIUM_MSVC_VERSION: "v142"}
-          - {VERSION: "3.10", NOXSESSION: "tests", SODIUM_MSVC_VERSION: "v142"}
-          - {VERSION: "3.11", NOXSESSION: "tests", SODIUM_MSVC_VERSION: "v142"}
-          - {VERSION: "3.12", NOXSESSION: "tests", SODIUM_MSVC_VERSION: "v142"}
-          - {VERSION: "3.13", NOXSESSION: "tests", SODIUM_MSVC_VERSION: "v142"}
+          - {VERSION: "3.7", NOXSESSION: "tests", SODIUM_MSVC_VERSION: "v143"}
+          - {VERSION: "3.8", NOXSESSION: "tests", SODIUM_MSVC_VERSION: "v143"}
+          - {VERSION: "3.9", NOXSESSION: "tests", SODIUM_MSVC_VERSION: "v143"}
+          - {VERSION: "3.10", NOXSESSION: "tests", SODIUM_MSVC_VERSION: "v143"}
+          - {VERSION: "3.11", NOXSESSION: "tests", SODIUM_MSVC_VERSION: "v143"}
+          - {VERSION: "3.12", NOXSESSION: "tests", SODIUM_MSVC_VERSION: "v143"}
+          - {VERSION: "3.13", NOXSESSION: "tests", SODIUM_MSVC_VERSION: "v143"}
+        include:
+          - WINDOWS: {ARCH: 'arm64', SODIUM_ARCH: 'ARM64', IMAGE: "windows-11-arm"}
+            PYTHON: {VERSION: "3.11", NOXSESSION: "tests", SODIUM_MSVC_VERSION: "v143"}
+          - WINDOWS: {ARCH: 'arm64', SODIUM_ARCH: 'ARM64', IMAGE: "windows-11-arm"}
+            PYTHON: {VERSION: "3.12", NOXSESSION: "tests", SODIUM_MSVC_VERSION: "v143"}
+          - WINDOWS: {ARCH: 'arm64', SODIUM_ARCH: 'ARM64', IMAGE: "windows-11-arm"}
+            PYTHON: {VERSION: "3.13", NOXSESSION: "tests", SODIUM_MSVC_VERSION: "v143"}
     name: "Windows ${{ matrix.WINDOWS.ARCH }} ${{ matrix.PYTHON.VERSION }} ${{ matrix.PYTHON.NOXSESSION }}"
     steps:
       - uses: actions/[email protected]

.github/workflows/wheel-builder.yml

@@ -125,14 +125,16 @@ jobs:
           name: "pynacl-${{ github.event.inputs.version }}-macOS-${{ matrix.PYTHON.VERSION }}"
           path: pynacl-wheelhouse/
   windows:
-    runs-on: windows-latest
+    runs-on: ${{ matrix.WINDOWS.IMAGE }}
     strategy:
       matrix:
-        WINDOWS:
-          - {ARCH: 'x86', SODIUM_ARCH: 'Win32', VS_ARCH: 'x86'}
-          - {ARCH: 'x64', SODIUM_ARCH: 'x64', VS_ARCH: 'amd64'}
-        PYTHON:
-          - {VERSION: "3.9", SODIUM_MSVC_VERSION: "v142", "ABI_VERSION": "cp37"}
+        include:
+          - WINDOWS: {ARCH: 'x86', SODIUM_ARCH: 'Win32', VS_ARCH: 'x86', IMAGE: 'windows-latest'}
+            PYTHON: {VERSION: '3.9', ABI_VERSION: 'cp37', SODIUM_MSVC_VERSION: 'v143'}
+          - WINDOWS: {ARCH: 'x64', SODIUM_ARCH: 'x64', VS_ARCH: 'amd64', IMAGE: 'windows-latest'}
+            PYTHON: {VERSION: '3.9', ABI_VERSION: 'cp37', SODIUM_MSVC_VERSION: 'v143'}
+          - WINDOWS: {ARCH: 'arm64', SODIUM_ARCH: 'ARM64', VS_ARCH: 'arm64', IMAGE: 'windows-11-arm'}
+            PYTHON: {VERSION: '3.11', ABI_VERSION: 'cp37', SODIUM_MSVC_VERSION: 'v143'}
     name: "${{ matrix.PYTHON.VERSION }} ${{ matrix.WINDOWS.ARCH }} ${{ matrix.PYTHON.ABI_VERSION }}"
     steps:
       - uses: actions/[email protected]
@@ -160,7 +162,7 @@ jobs:
       - name: Build the wheel
         run: |
           mkdir wheelhouse
-          call "C:\Program Files (x86)\Microsoft Visual Studio\2019\Enterprise\Common7\Tools\VsDevCmd.bat" -no_logo -arch=${{ matrix.WINDOWS.VS_ARCH }}
+          call "C:\Program Files\Microsoft Visual Studio\2022\Enterprise\Common7\Tools\VsDevCmd.bat" -no_logo -arch=${{ matrix.WINDOWS.VS_ARCH }}
           python -m build --wheel --config-setting=--build-option=--py-limited-api=${{ matrix.PYTHON.ABI_VERSION }}
           mv dist/pynacl*.whl wheelhouse/
         shell: cmd

src/libsodium-1.0.20-stable-msvc.zip

@@ -0,0 +1,4 @@
+untrusted comment: signature from minisign secret key
+RUQf6LRCGA9i50j1qsFFuS0sFwTor4YgVaEg48uIZUI3McQGbM/VxlmYwDgo/IFX3yt0XbFTyP+nwoWLwD7PxR5UXV6JWDZF5gs=
+trusted comment: timestamp:1743694385	file:libsodium-1.0.20-stable-msvc.zip	hashed
+mUFfkjvI+IOcOcQVAacUhM5ehcNJcb313JjOaHtqgE7YvnkaETCRVCOh7UcQ74jpOFltYmeONOidd1JAZrjjCw==