ci: migrate macOS jobs to tart VM runner

[alee1246]

Summary

Migrate the macOS GitLab CI jobs from dedicated macos:sonoma / specific:true runners to virtualized macos:tart runners, using the repo-specific tart VM image (dd-sdk-reactnative-sonoma).

Migrated jobs: test:lint, test:js, test:build, test:native-android, test:native-ios, test:native-ios-sr, test:native-ios-newarch, and build-and-upload:app (benchmarks pipeline).

VM image: packer/macos-vm/team/dd-sdk-reactnative-sonoma.pkr.hcl → 486234852809.dkr.ecr.us-east-1.amazonaws.com/ci/ci-platform-machine-images/tart-vm:dd-sdk-reactnative-sonoma-latest

Motivation

The virtualized tart runners have a number of benefits over dedicated macOS runners:

• Better isolation between workloads — each job runs in a fresh VM
• Decoupled host toolchain — the host is independent of each team's toolchain requirements
• Concurrency — two jobs can run simultaneously on the same mac2.metal host
• Higher utilization of mac2.metal hosts → cost reduction from needing fewer instances
• Faster provisioning and teardown vs. the dedicated runner lifecycle

Changes

File	Change
.gitlab-ci.yml	Switch all test:* job tags from macos:sonoma / specific:true to macos:tart and pin the repo-specific tart VM image
benchmarks/.benchmarks-ci.yml	Switch build-and-upload:app tags to macos:tart and pin the repo-specific tart VM image

Test plan

• Manually trigger the pipeline and verify the test:* jobs pass on the tart runner
• Trigger a benchmark pipeline and verify build-and-upload:app passes on the tart runner

🤖 Generated with Claude Code

Passing build job

https://gitlab.ddbuild.io/DataDog/dd-sdk-reactnative/-/jobs/1871065405

[datadog-official]

🎉 All green!

🧪 All tests passed
❄️ No new flaky tests detected

_{This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 98a5272 | Docs | Datadog PR Page | Give us feedback!}

[Copilot]

Pull request overview

Migrates the repository’s macOS GitLab CI workloads from dedicated macos:sonoma runners to macos:tart virtualized runners, pinning jobs to the repo-specific tart VM image to ensure consistent toolchains and isolation.

Changes:

• Switch macOS CI jobs to macos:tart and pin the tart VM image for test:* jobs and the benchmarks build-and-upload:app job.
• Update Android SDK install snippets to set JAVA_HOME and prepend the JDK to PATH (for SDK manager / tooling).
• Update benchmarks secret retrieval to export AWS credentials in CI before Vault AWS auth.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

File	Description
benchmarks/scripts/secrets/get-secret.sh	Exports AWS credentials in CI prior to Vault AWS login.
benchmarks/.benchmarks-ci.yml	Moves benchmarks build job to tart runner + pinned VM image; updates Android SDK snippet JAVA env.
.gitlab-ci.yml	Moves all test:* macOS jobs to tart runner + pinned VM image; updates Android SDK snippet JAVA env.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 3 out of 3 changed files in this pull request and generated 5 comments.

[Copilot]

Pull request overview

Copilot reviewed 3 out of 3 changed files in this pull request and generated 3 comments.

[Copilot]

Pull request overview

Copilot reviewed 3 out of 3 changed files in this pull request and generated no new comments.

Suppressed comments (2)

.gitlab-ci.yml:34

• install-android-sdk downloads commandlinetools.zip but unzips commandlinetools (missing the .zip suffix). This will fail because the downloaded archive name doesn’t match the unzip target.

        - export PATH="$JAVA_HOME/bin:$PATH"
        - curl -sSL -o commandlinetools.zip https://dl.google.com/android/repository/$ANDROID_SDK_VERSION.zip
        - rm -rf ~/android_sdk
        - rm -rf ~/cmdline-tools
        - unzip -q commandlinetools -d ~/

benchmarks/.benchmarks-ci.yml:45

• install-android-sdk downloads commandlinetools.zip but unzips commandlinetools (missing the .zip suffix). This will fail because the downloaded archive name doesn’t match the unzip target.

    - export PATH="$JAVA_HOME/bin:$PATH"
    - curl -sSL -o commandlinetools.zip https://dl.google.com/android/repository/$ANDROID_SDK_VERSION.zip
    - rm -rf ~/android_sdk
    - rm -rf ~/cmdline-tools
    - unzip -q commandlinetools -d ~/

[cdn34dd]

For reference I've recently merged a PR to update the runners from Sonoma to Sequoia, and according to a comment on that same PR (https://github.com/ddoghq/ci-platform-machine-images/pull/840#issuecomment-5049995937) , Sequoia VMs are not yet supported. So unless something has changed in the mean time we should maybe delay this for a bit.

[alee1246]

For reference I've recently merged a PR to update the runners from Sonoma to Sequoia, and according to a comment on that same PR (https://github.com/ddoghq/ci-platform-machine-images/pull/840#issuecomment-5049995937) , Sequoia VMs are not yet supported. So unless something has changed in the mean time we should maybe delay this for a bit.

@cdn34dd ah, yes, we don't support sequoia vms just yet. I'm planning to upgrade the tart runners to support sequoia on VMs next week. I'll revisit this PR in a week or two then.