📦 RFP: Replace Autobuild with Modern Dependency Management System

[bennettgoble]

We are requesting proposals for removing autobuild from the Second Life Viewer build process and replacing it with a modern, maintainable dependency management system such as vcpkg, Conan, or direct embedded dependencies.

Autobuild was developed in-house to solve a real problem at the time, but it has become a maintenance burden and is now limiting our ability to quickly iterate, support new platforms, update dependencies, and simplify build tooling.

✅ Acceptance Criteria

• A detailed written proposal is submitted (as a comment linking to a Gist, Google Doc, or similar)
• Proof of concept featuring a building indra/llcommon
• The proposal includes a recommended replacement for autobuild (e.g., vcpkg, Conan, embedded libraries)
• The proposed solution:
  • Simplifies local development environment setup
  • Offers native or improved integration with CMake
  • Reduces the effort needed to update or patch third-party libraries
  • Improves or maintains code signing compatibility (especially for Windows)
  • Supports all current Viewer platforms (Windows and macOS)
  • Easily supports platforms supported by forks: (Linux, arm64 builds)
• The proposal includes:
  • CI/CD migration strategy
  • High-level timeline and migration plan
  • Identification of high-risk dependencies or steps
  • Tradeoffs between proposed options

🧪 Evaluation

• Build verification across Windows and macOS
• CI pass with the new dependency management system
• Comparison of build time, dependency footprint, and setup complexity (before vs. after)
• Developer experience feedback during migration

📎 Resources

• Autobuild repository
• vcpkg
• Conan

---

Please post your proposal as a comment on this issue by linking to a document (Gist, Google Doc, etc.).

[Ansariel]

From my experience it looks like we got a pick your poison contest here: VS2023 developer environment scripts can marvelously trip over vcpkg it it is installed while CMake is building the Conan packages, and Conan... it works until they randomly decide to change their recipe structure again between version of the same package... 😵‍💫

[brad-linden]

point in favor of vcpkg in my book: https://learn.microsoft.com/en-us/vcpkg/concepts/dependabot

[bennettgoble]

This project is now available for bids/application at https://www.upwork.com/jobs/~021973518684571374385 (Requires an Upwork account to view...)

[racooper]

What about building on Linux? shouldn't that be part of the evaluation requirements?

[bennettgoble]

@racooper, the requirements state: "Easily supports platforms supported by forks: (Linux, arm64 builds)" We will be re-adding proper linux support back to the upstream codebase as a separate work effort.

[ChorazinAllen]

A couple of points to keep in mind on behalf of TPV developers

• Whatever the solution looks like, it needs to work for TPVs as well. TPVs routinely include extra packages or are required to substitute LL packages with their own for licencing reasons. The solution needs to cope with TPVs adjusting the manifest downstream from LL's version.
• Don't assume an architecture based on pipelines - the solution needs to work equally well for building the viewer on a local computer