From a90b0dbef7bbb8bad5f3c2c4ad43e0bfa0ee3623 Mon Sep 17 00:00:00 2001
From: AztecBot <tech@aztec-labs.com>
Date: Sat, 16 May 2026 10:58:08 +0000
Subject: [PATCH] fix(ci): retry sqlite3mc-wasm download on transient DNS/TLS
 failures

---
 yarn-project/sqlite3mc-wasm/scripts/vendor.sh | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/yarn-project/sqlite3mc-wasm/scripts/vendor.sh b/yarn-project/sqlite3mc-wasm/scripts/vendor.sh
index c4abb0a2ae28..0ea4d3bad4c2 100755
--- a/yarn-project/sqlite3mc-wasm/scripts/vendor.sh
+++ b/yarn-project/sqlite3mc-wasm/scripts/vendor.sh
@@ -75,7 +75,11 @@ WORK_DIR=$(mktemp -d)
 trap 'rm -rf "$WORK_DIR"' EXIT
 
 echo "==> Downloading ${ASSET}"
-curl -fsSL -o "$WORK_DIR/$ASSET" "$URL"
+# Retries cover transient DNS / TLS failures on CI runners — a one-off
+# `Could not resolve host: release-assets.githubusercontent.com` here has
+# dequeued the merge train.
+curl -fsSL --retry 5 --retry-delay 2 --retry-all-errors --retry-connrefused \
+  -o "$WORK_DIR/$ASSET" "$URL"
 
 echo "==> Verifying zip SHA256"
 ACTUAL_SHA=$(sha256sum "$WORK_DIR/$ASSET" | awk '{print $1}')