ci: seed config before linux-smoke launch so the server actually serves

With the PyGObject girepository-2.0 fix in place, the linux-smoke step
ran its server-boot assertion for the first time and failed: on a fresh
runner the first-run bootstrap writes a default config and calls
sys.exit(0) ("First run: generated default config ... then restart")
instead of serving, so /api/health never came up and the 15s wait
timed out.

That exit-on-first-run is deliberate product behavior (never silently
start in insecure no-auth mode), so adjust the test rather than the app:
invoke the server once to seed the config (it exits 0 before binding the
port), then launch it for real. /api/health requires no auth, so the
auto-generated token is irrelevant to the check.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

.gitea/workflows/build.yml

@@ -60,6 +60,16 @@ jobs:
         with:
           python-version: '3.11'
 
+      - name: Install native deps for dbus-python + PyGObject
+        run: |
+          # PyGObject >= 3.52 builds against girepository-2.0 (merged into
+          # GLib 2.80), not the old standalone girepository-1.0. ubuntu-latest
+          # (24.04) ships it as libgirepository-2.0-dev.
+          sudo apt-get update
+          sudo apt-get install -y --no-install-recommends \
+            libdbus-1-dev libglib2.0-dev pkg-config \
+            libcairo2-dev libgirepository-2.0-dev
+
       - name: Build Linux distribution
         run: |
           chmod +x build-dist-linux.sh

.gitea/workflows/release.yml

@@ -60,9 +60,11 @@ jobs:
           | Windows (installer) | \`MediaServer-{tag}-setup.exe\` |
           | Windows (portable) | \`MediaServer-{tag}-win-x64.zip\` |
           | Linux | \`MediaServer-{tag}-linux-x64.tar.gz\` |
-          | macOS (Apple Silicon) | \`MediaServer-{tag}-macos-arm64.tar.gz\` |
-          | macOS (Intel) | \`MediaServer-{tag}-macos-x86_64.tar.gz\` |
           ''').strip())
+          # TODO(macos-runner): re-add the macOS rows below once a macOS
+          # runner is connected to Gitea and the build-macos job is re-enabled.
+          #     | macOS (Apple Silicon) | \`MediaServer-{tag}-macos-arm64.tar.gz\` |
+          #     | macOS (Intel) | \`MediaServer-{tag}-macos-x86_64.tar.gz\`
 
           print(json.dumps('\n\n'.join(sections)))
           ")
@@ -191,10 +193,13 @@ jobs:
 
       - name: Install native deps for dbus-python + PyGObject
         run: |
+          # PyGObject >= 3.52 builds against girepository-2.0 (merged into
+          # GLib 2.80), not the old standalone girepository-1.0. ubuntu-latest
+          # (24.04) ships it as libgirepository-2.0-dev.
           sudo apt-get update
           sudo apt-get install -y --no-install-recommends \
             libdbus-1-dev libglib2.0-dev pkg-config \
-            libcairo2-dev libgirepository1.0-dev
+            libcairo2-dev libgirepository-2.0-dev
 
       - name: Build Linux distribution
         run: |
@@ -238,10 +243,16 @@ jobs:
 
   # --- Build macOS tarball (best-effort; requires a macos runner) ---
   # PyObjC wheels are macOS-only, so this job must run on a real Mac.
-  # If your Gitea instance has no macos runners, the job is skipped at
-  # scheduling time and the rest of the release still ships.
+  #
+  # TODO(macos-runner): Temporarily disabled via `if: false` because the
+  # Gitea instance currently has no macOS runner attached. To re-enable:
+  #   1. Connect a macOS runner to Gitea
+  #   2. Delete the `if: false` line below
+  #   3. Restore the macOS rows in the Downloads table generated by the
+  #      create-release job (search for the matching TODO(macos-runner)).
   build-macos:
     needs: create-release
+    if: false
     runs-on: macos-latest
     continue-on-error: true
     steps:

.gitea/workflows/test.yml

@@ -57,10 +57,13 @@ jobs:
 
       - name: Install Linux system deps for dbus-python + PyGObject
         run: |
+          # PyGObject >= 3.52 builds against girepository-2.0 (merged into
+          # GLib 2.80), not the old standalone girepository-1.0. ubuntu-latest
+          # (24.04) ships it as libgirepository-2.0-dev.
           sudo apt-get update
           sudo apt-get install -y --no-install-recommends \
             libdbus-1-dev libglib2.0-dev pkg-config \
-            libcairo2-dev libgirepository1.0-dev
+            libcairo2-dev libgirepository-2.0-dev
 
       - name: Install with linux extra
         run: |
@@ -80,6 +83,12 @@ jobs:
           export MEDIA_SERVER_VISUALIZER_ENABLED=false
           export MEDIA_SERVER_UPDATE_CHECK_ENABLED=false
           dbus-run-session -- bash -c '
+            # First run writes a default config (random token) and exits 0
+            # instead of serving, so the server is never left running in
+            # insecure no-auth mode. Run once to seed the config; the real
+            # launch below then finds it and actually boots. /api/health needs
+            # no auth, so the generated token is irrelevant here.
+            python -m media_server.main --no-tray --port 18765 || true
             python -m media_server.main --no-tray --port 18765 &
             SERVER_PID=$!
             for i in $(seq 1 30); do