CI: move ASAN job to MacOS, drop UBSAN

Author: ngoldbaum

.github/workflows/compiler_sanitizers.yml

@@ -0,0 +1,79 @@
+name: Test with compiler sanitizers (Linux)
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+      - maintenance/**
+
+defaults:
+  run:
+    shell: bash
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read # to fetch code (actions/checkout)
+
+# prefer newer versions of sanitizers than what Apple ships
+env:
+  CC: /opt/homebrew/llvm/bin/clang-19
+  CXX: /opt/homebrew/opt/llvm/bin/clang++-19
+  LDFLAGS: -L/opt/homebrew/opt/llvm/lib
+  CPPFLAGS: -I/opt/homebrew/opt/llvm/include
+
+
+jobs:
+  clang_ASAN:
+    # To enable this workflow on a fork, comment out:
+    # if: github.repository == 'numpy/numpy'
+    runs-on: macos-latest
+    steps:
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      with:
+        submodules: recursive
+        fetch-tags: true
+        persist-credentials: false
+    - name: Set up pyenv
+      run: |
+        git clone https://github.com/pyenv/pyenv.git "$HOME/.pyenv"
+        # main as of Feb 3 2025
+        pushd "$HOME/.pyenv"
+        git checkout 823dd3cef9d53621a5bdbf68f83713e1b15bfc80
+        popd
+        PYENV_ROOT="$HOME/.pyenv"
+        PYENV_BIN="$PYENV_ROOT/bin"
+        echo "$PYENV_BIN" >> $GITHUB_PATH
+        echo "PYENV_ROOT=$PYENV_ROOT" >> $GITHUB_ENV
+    - name: Check pyenv is working
+      run:
+        pyenv --version
+    - name: Build Python with address sanitizer support and install dependencies
+      run: |
+        brew update
+        brew install llvm@19
+        CONFIGURE_OPTS="--with-address-sanitizer" pyenv install 3.13-dev
+        pyenv global 3.13-dev
+        pip install -r requirements/build_requirements.txt
+        pip install -r requirements/ci_requirements.txt
+        pip install -r requirements/test_requirements.txt
+    - name: Build
+      shell: 'script -q -e -c "bash --noprofile --norc -eo pipefail {0}"'
+      env:
+        TERM: xterm-256color
+        PKG_CONFIG_PATH: ${{ github.workspace }}/.openblas
+      run:
+        spin build --with-scipy-openblas=32 -- -Db_sanitize=address
+    - name: Test
+      shell: 'script -q -e -c "bash --noprofile --norc -eo pipefail {0}"'
+      env:
+        TERM: xterm-256color
+      run: |
+        ASAN_OPTIONS=detect_leaks=0:symbolize=1:strict_init_order=true:allocator_may_return_null=1:halt_on_error=1 \
+        # pass -s to see ASAN errors and warnings, otherwise pytest captures them
+        python -m spin test -- -v -s --timeout=600 --durations=10