ci: use artifacts for mbedtls/nss interop output

The test jobs used actions/cache/restore with fail-on-cache-miss,
which aborted when the cache key was scoped to another PR or had
been evicted, even though the build job reported success.

Upload the build output as a workflow artifact and download it in
the test job. Artifacts are scoped to the workflow run, so the
test job always gets the data. The cache is kept as a speed
optimization; on miss the build job rebuilds from scratch.

Author: LinuxJedi

.github/workflows/mbedtls.yml

@@ -29,7 +29,6 @@ jobs:
         with:
           path: mbedtls
           key: mbedtls-${{ env.MBED_REF }}
-          lookup-only: true
 
       - name: Checkout mbedtls
         if: steps.cache.outputs.cache-hit != 'true'
@@ -53,6 +52,14 @@ jobs:
           openssl pkey -in framework/data_files/cli-rsa-sha256.key.der -text > framework/data_files/cli-rsa-sha256.key.pem
           openssl pkey -in framework/data_files/server2.key.der -text > framework/data_files/server2.key.pem
 
+      - name: Upload mbedtls build
+        uses: actions/upload-artifact@v4
+        with:
+          name: mbedtls-build
+          path: mbedtls
+          retention-days: 1
+          include-hidden-files: true
+
   mbedtls_test:
     name: Test interop with mbedtls
     if: github.repository_owner == 'wolfssl'
@@ -63,13 +70,11 @@ jobs:
       - name: Disable IPv6 (IMPORTANT, OTHERWISE DTLS MBEDTLS CLIENT WON'T CONNECT)
         run: echo 1 | sudo tee /proc/sys/net/ipv6/conf/lo/disable_ipv6
 
-      - name: Checking if we have mbed in cache
-        uses: actions/cache/restore@v4
-        id: cache
+      - name: Download mbedtls build
+        uses: actions/download-artifact@v4
         with:
+          name: mbedtls-build
           path: mbedtls
-          key: mbedtls-${{ env.MBED_REF }}
-          fail-on-cache-miss: true
 
       - name: Build wolfSSL
         uses: wolfSSL/actions-build-autotools-project@v1

.github/workflows/nss.yml

@@ -37,7 +37,6 @@ jobs:
         with:
           path: dist
           key: nss-${{ env.NSS_REF }}
-          lookup-only: true
 
       - name: Install dependencies
         if: steps.cache.outputs.cache-hit != 'true'
@@ -61,20 +60,26 @@ jobs:
           cd nss
           ./build.sh
 
+      - name: Upload nss build
+        uses: actions/upload-artifact@v4
+        with:
+          name: nss-build
+          path: dist
+          retention-days: 1
+          include-hidden-files: true
+
   nss_test:
     name: Test interop with nss
     if: github.repository_owner == 'wolfssl'
     runs-on: ubuntu-24.04
     needs: build_nss
     timeout-minutes: 10
     steps:
-      - name: Checking if we have nss in cache
-        uses: actions/cache/restore@v4
-        id: cache
+      - name: Download nss build
+        uses: actions/download-artifact@v4
         with:
+          name: nss-build
           path: dist
-          key: nss-${{ env.NSS_REF }}
-          fail-on-cache-miss: true
 
       - name: Build wolfSSL
         uses: wolfSSL/actions-build-autotools-project@v1