chore: use apisix-runtime 1.3.6

[nic-6443]

This updates APISIX to use apisix-runtime 1.3.6.

The new runtime release upgrades the OpenResty distribution to OpenResty 1.29.2.4 and uses:

• api7/apisix-build-tools apisix-runtime/1.3.6
• api7/apisix-nginx-module 1.19.5
• api7/ngx_multi_upstream_module 1.3.3

The old APISIX-side OPENRESTY_VERSION CI selector is removed. Runtime selection now comes from .requirements, so the install scripts invoke the released runtime build script directly.

Validation:

• git diff --check
• bash -n ci/common.sh utils/install-dependencies.sh ci/linux-install-openresty.sh ci/redhat-ci.sh ci/linux_openresty_runner.sh ci/linux_openresty_tongsuo_runner.sh ci/linux_apisix_current_luarocks_in_customed_nginx_runner.sh ci/linux_openresty_common_runner.sh ci/linux_apisix_current_luarocks_runner.sh
• shellcheck ci/common.sh utils/install-dependencies.sh ci/linux-install-openresty.sh ci/redhat-ci.sh ci/linux_openresty_runner.sh ci/linux_openresty_tongsuo_runner.sh ci/linux_apisix_current_luarocks_in_customed_nginx_runner.sh ci/linux_openresty_common_runner.sh ci/linux_apisix_current_luarocks_runner.sh

[Copilot]

Pull request overview

This PR updates CI runtime installation to validate APISIX against an OpenResty 1.29.2.4–based apisix-runtime by pinning api7/apisix-build-tools to a specific commit and routing CI downloads through that ref for reproducibility.

Changes:

• Add support for APISIX_BUILD_TOOLS_REF (commit/branch/tag) to fetch build-apisix-runtime.sh from a pinned apisix-build-tools ref.
• Fetch openssl.cnf from the same pinned apisix-build-tools ref in both Debian/Ubuntu and RedHat CI scripts.
• Bump .requirements runtime version to 1.3.6-dev and pin APISIX_BUILD_TOOLS_REF to a specific commit SHA.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 2 comments.

File	Description
ci/common.sh	Fetch runtime build script from a configurable/pinned apisix-build-tools ref.
ci/linux-install-openresty.sh	Download openssl.cnf from the pinned apisix-build-tools ref (non-FIPS path).
ci/redhat-ci.sh	Download openssl.cnf from the pinned apisix-build-tools ref.
.requirements	Update runtime version and pin apisix-build-tools ref to a commit for reproducible CI.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.