Skip to content

Update litep2p with WebRTC Transport Support#10

Draft
timwu20 wants to merge 85 commits intomasterfrom
tim/webrtc-integration
Draft

Update litep2p with WebRTC Transport Support#10
timwu20 wants to merge 85 commits intomasterfrom
tim/webrtc-integration

Conversation

@timwu20
Copy link
Copy Markdown

@timwu20 timwu20 commented Feb 10, 2026

Summary

  • Updates litep2p from crates.io v0.13.0 to a git revision (27b110d1) that includes WebRTC transport support, and enables the new webrtc feature flag
  • Adds WebRTC address parsing to the litep2p network backend so that /ip4/.../udp/.../webrtc listen addresses are recognized and routed to the WebRTC transport
  • Extends known-address handling to recognize WebRTC and Certhash multiaddr protocols when appending /p2p/<peer_id> to addresses

Details

Dependency change (Cargo.toml)

The litep2p dependency is switched from a crates.io release to a pinned git commit from the chainsafe/litep2p repository, with the webrtc feature added alongside the existing rsa and websocket features. This also pulls in str0m (a WebRTC media/data library) as a new transitive dependency.

Listen address parsing (substrate/client/network/src/litep2p/mod.rs)

The previous implementation used an iterator-based filter_map + unzip pattern to split listen addresses into TCP and WebSocket buckets. This is refactored into an explicit for loop that classifies addresses into three categories:

Address pattern Transport
/ip{4,6}/.../tcp/.../ws or /wss WebSocket
/ip{4,6}/.../tcp/... TCP
/ip{4,6}/.../udp/.../webrtc WebRTC (new)

The WebRTC transport is conditionally configured — it is only added to the litep2p config when at least one WebRTC listen address is provided.

Known-address protocol matching

The address-matching logic in NetworkBackend::new is updated to also recognize Protocol::WebRTC and Protocol::Certhash(_) as valid terminal protocols before appending /p2p/<peer_id>, ensuring WebRTC addresses from the DHT or other discovery mechanisms are correctly handled.

Test plan

  • Verify that existing TCP and WebSocket listen addresses continue to work as before
  • Configure a node with a WebRTC listen address (e.g., /ip4/0.0.0.0/udp/30333/webrtc) and confirm it starts listening on WebRTC
  • Confirm that WebRTC peer addresses discovered via DHT are properly formatted with the /p2p suffix
  • Run cargo build -p polkadot --release to confirm successful compilation
  • Run network-related tests: cargo test -p sc-network

0xRVE and others added 30 commits February 10, 2026 10:26
…aritytech#10920)

fixes paritytech/contract-issues#213 where
storage deposit refunds failed in nested/reentrant calls.

Problem
Storage refunds were calculated incorrectly when a contract allocated
storage, then performed a nested call that cleared it. Pending storage
changes lived only in the parent FrameMeter, so child frames could not
see them and refunds were skipped.

Solution
Apply pending storage deposit changes to a cloned ContractInfo before
creating nested frames. This makes the parent’s storage state visible to
child frames during refund calculation.

Implementation
- Added apply_pending_changes_to_contract() to apply pending diffs to
ContractInfo
- Added apply_pending_storage_changes() wrapper on FrameMeter
- Applied pending storage changes before nested frame creation in
exec.rs (3 locations)

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: pgherveou <pgherveou@gmail.com>
…ck (paritytech#11031)

After `AuraDigestProvider` was introduced, emulated integration tests
for parachains with `slot_duration != relay_slot_duration` (e.g. 12s
Polkadot/Kusama chains) panic because `FixedVelocityConsensusHook`
derives a parachain slot that doesn't match `CurrentSlot`.
Fix by advancing the relay block number by `slot_duration /
RELAY_CHAIN_SLOT_DURATION_MILLIS` per parachain block (instead of always
+1), and computing the aura digest slot inline using both durations.
This removes the `DigestProvider` associated type from the `Parachain`
trait and the `AuraDigestProvider` struct — the emulator now handles the
digest automatically.
Downstream users must remove `DigestProvider: AuraDigestProvider,` from
their `decl_test_parachains!` invocations.

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
# Description

Add `DecodeWithMemTracking` derive to `CompactProof` in
`substrate/primitives/trie/src/storage_proof.rs`.

`StorageProof` already derived `DecodeWithMemTracking` but
`CompactProof` in the same file was missed.

## Integration

No integration changes required for downstream projects. `CompactProof`
now implements `DecodeWithMemTracking`, which is a strictly additive
trait implementation. Existing code using `CompactProof` will continue
to work as before.

## Review Notes

Single-line change adding `DecodeWithMemTracking` to the derive macro
list on `CompactProof`:

```diff
-#[derive(Debug, PartialEq, Eq, Clone, Encode, Decode, TypeInfo)]
+#[derive(Debug, PartialEq, Eq, Clone, Encode, Decode, DecodeWithMemTracking, TypeInfo)]
 pub struct CompactProof {
     pub encoded_nodes: Vec<Vec<u8>>,
 }
```

`CompactProof` only contains `Vec<Vec<u8>>`, which already implements
`DecodeWithMemTracking`, so the derive works without any manual
implementation.

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Lets give the link-checker job some new life.

Sadly our blog posts are not available anymore (or at least I could not
find them), so I removed all references to them. Was thinking about
linking web archive, but its silly to first remove our blog and then
link to an archive.
### Context

When verifying Ethereum-to-Polkadot transfer messages, the key field in
receipt_proof is not used. Remove it as a cleanup and update the tests
accordingly.

---------

Co-authored-by: Branislav Kontur <bkontur@gmail.com>
…10794)

Changes:
- Ensure all benchmarks run for at least 10 seconds. Configurable with
`--min-duration <s>`
- Turn off runtime logging in bench bot to reduce spam log output
- Reduce DB repetition to 1 since PoV metering must be deterministic

Example of the System benchmark with the `set_heap_pages` benchmark that
took less than 10 ms before:
```pre
2026-01-13T21:36:10.687286Z [ 22 % ] Starting benchmark: frame_system::set_heap_pages    
2026-01-13T21:36:10.688437Z [ 33 % ] Starting benchmark: frame_system::set_code    
```

Now takes 10 seconds:
```pre
2026-01-13T21:37:31.392981Z [ 22 % ] Starting benchmark: frame_system::set_heap_pages    
2026-01-13T21:37:32.271275Z [ 22 % ] Running  benchmark: frame_system::set_heap_pages (overtime)    
2026-01-13T21:37:37.272099Z [ 22 % ] Running  benchmark: frame_system::set_heap_pages (overtime)    
2026-01-13T21:37:41.393107Z [ 33 % ] Starting benchmark: frame_system::set_code    
```

---------

Signed-off-by: Oliver Tale-Yazdi <oliver.tale-yazdi@parity.io>
Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Follow up of paritytech#11038

Even though the job passed in my last PR, I missed this broken link. So
here we go again.
…aritytech#11053)

Latest version of tracing-subscriber right now doesn't support ASNI
colour codes correctly: tokio-rs/tracing#3378

So, the workaround right now is to pin it to `0.3.19`.


Closes: paritytech#11030

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
…ttHub fails on relay chain (paritytech#11055)

Emit SessionKeysUpdateFailed with the operation type and dispatch error
for observability so set_keys/purge_kets failures from AssetHub are
observable on-chain.

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
…d proofs via the relay state proof (paritytech#10678)

## Purpose

This pull request introduces a new runtime API and implements the full
feature pipeline for requesting additional relay-chain storage proofs in
lookahead collators. The API allows parachain runtimes to specify extra
top-level storage keys or child-trie data that must be included in the
relay-chain state proof. The collator collects these additional proofs
and merges them into the relay-chain state proof provided to the runtime
during block execution, enabling the runtime to later process custom
relay-chain data.

## Rationale 

Immediate application in pubsub mechanism proposed in paritytech#9994

This is a narrow down of scope for easier review of PR paritytech#10679 

Due to early exits when defaulted it adds no significant overhead to
current flows.

## What this PR adds
### Runtime API

- Introduces `KeyToIncludeInRelayProofApi`. (_Suggestions for better
naming are very welcome._)

- Adds supporting types` RelayProofRequest` and `RelayStorageKey`.

- Allows runtimes to declare which relay-chain storage entries must be
included in the relay state proof.

### Collator integration

- The lookahead collator calls the runtime API before block production.

- Requested relay-chain proofs are collected, batched, and merged in a
single operation.

- The additional proofs are merged into the existing relay-chain state
proof and passed to the runtime via parachain inherent data.

### Proof extraction

- `parachain-system` exposes an extraction method for processing this
additional proofs.

- Uses a handler pattern:

  - `parachain-system` manages proof lifecycle and initial validation.

- Application pallets consume proofs (data extraction or additional
validation) by implementing `ProcessRelayProofKeys`.

- Keeps extra proofs processing logic out of parachain-system.

### About RelayStorageKey

`RelayStorageKey` is an enum with two variants:

- `Top`: a `Vec<u8>` representing a top-level relay-chain storage key.

- `Child`, which contains:

- `storage_key`: an unprefixed identifier of the child trie root (the
default _:child_storage:default:_ prefix is applied automatically),

  - `key`: the specific key within that child trie.

On the client side, child trie access is performed via
ChildInfo::new_default(&storage_key).

Why `storage_key` instead of `ChildInfo`:

- `ChildInfo` from `sp-storage` does not implement `TypeInfo`, which
runtime APIs require.

- Adding `TypeInfo` to `sp-storage` (or introducing a wrapper to avoid
bloating a critical core component like `sp-storage`) would
significantly expand the scope of this PR.

As a result, the current design:

- Uses raw `storage_key` bytes.

- Is limited to child tries using the default prefix.

## Future improvements

- Full `ChildInfo` support if `TypeInfo` is added to `sp-storage`
(directly or via a wrapper), enabling arbitrary child-trie prefixes.

- Possible unification with `additional_relay_state_keys` for top-level
proofs, subject to careful analysis of semantics and backward
compatibility.

- Integration with additional collator implementations beyond lookahead
collators.

---------

Co-authored-by: Bastian Köcher <git@kchr.de>
This PR fixes block import during Warp sync, which was silently failing
due to "Unknown parent" errors - a typical case during Warp sync and the
`full_node_warp_sync` test was not detecting such failure.

Changes
 - Relaxed verification for Warp synced blocks:
The fix relaxes verification requirements for Warp synced blocks by not
performing full verification, with the assumption that these blocks are
part of the finalized chain and have already been verified using the
provided warp sync proof.
- New `BlockOrigin` variants:
For improved clarity, two additional `BlockOrigin` items have been
introduced:
  - `WarpSync`
  - `GapSync`
- Gap sync improvements:
Warp synced blocks are now skipped during the gap sync block import
phase, which required improvements to gap handling when committing the
block import operation in the database.
- Enhanced testing:
The Warp sync zombienet test has been modified to more thoroughly assert
both warp and gap sync phases.

This PR builds on changes by @sistemd in paritytech#9678

---------

Co-authored-by: sistemd <enntheprogrammer@gmail.com>
Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
…a benchmark (paritytech#11037)

## Summary

Consolidates the three identical `get_name`, `get_symbol`, and
`get_decimals` benchmarks into a single `get_metadata` benchmark. This
addresses the follow-up from paritytech#10971 where it was noted that these
benchmarks perform the same operation (`Pallet::get_metadata()`).

## Changes

### Benchmarks
- **`substrate/frame/assets/src/benchmarking.rs`**
- Replaced `get_name`, `get_symbol`, `get_decimals` with single
`get_metadata` benchmark
- Updated verification to check all three metadata fields (name, symbol,
decimals)

### Weight Functions
- **`substrate/frame/assets/src/weights.rs`**
- Replaced `get_name()`, `get_symbol()`, `get_decimals()` with single
`get_metadata()` in `WeightInfo` trait
  - Updated implementations for `SubstrateWeight<T>` and `()`

### Precompile
- **`substrate/frame/assets/precompiles/src/lib.rs`**
- Updated `name()`, `symbol()`, and `decimals()` methods to all charge
`get_metadata()` weight

### Cumulus Runtimes
Updated weight implementations in:
- `asset-hub-rococo`: `pallet_assets_foreign.rs`,
`pallet_assets_local.rs`, `pallet_assets_pool.rs`
- `asset-hub-westend`: `pallet_assets_foreign.rs`,
`pallet_assets_local.rs`, `pallet_assets_pool.rs`

## Rationale

All three original benchmarks were measuring the exact same operation -
a single metadata storage read. Consolidating them:
1. Reduces code duplication
2. Simplifies the `WeightInfo` trait
3. Accurately reflects that `name()`, `symbol()`, and `decimals()` have
identical costs

Closes follow-up from
paritytech#10971 (comment)

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
…ytech#7751) (paritytech#10917)

Implements persistent storage for the experimental collator protocol's
reputation database.

Changes:

- Adds `PersistentDb` wrapper that persists the in-memory reputation DB
to disk
  - Periodic persistence every 10 minutes (30s in test mode)
  - Immediate persistence on slashes and parachain deregistration
  - Loads existing state on startup with lookback for missed blocks
  
Implementation:
  
  `PersistentDb` wraps the existing `Db` and adds persistence on top:

    - All reputation logic (scoring, decay, LRU) stays in `Db`
    - Persistence layer handles disk I/O and serialization
    - Per-para data stored in parachains_db
    
Tests:

- `basic_persistence.rs`: Validates persistence across restarts and
startup lookback
- `pruning.rs`: Validates automatic cleanup on parachain deregistration

---------

Signed-off-by: Alexandru Cihodaru <alexandru.cihodaru@parity.io>
Co-authored-by: alindima <alin@parity.io>
Co-authored-by: Tsvetomir Dimitrov <tsvetomir@parity.io>
Co-authored-by: Serban Iorga <serban@parity.io>
Co-authored-by: Serban Iorga <serban300@gmail.com>
Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
### Summary
This PR optimizes gap sync bandwidth usage by skipping body requests for
non-archive nodes. Bodies are unnecessary during gap sync when the node
doesn't maintain full block history, while archive nodes continue to
request bodies to preserve complete history.
It reduces bandwidth consumption and database size significantly for
typical validator/full nodes.

Additionally added some gap sync statistics for observability:
- Introduced `GapSyncStats` to track bandwidth usage: header bytes, body
bytes, justification bytes
- Logged on gap sync completion to provide visibility into bandwidth
savings

---------

Co-authored-by: sistemd <enntheprogrammer@gmail.com>
Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
## Summary
- Fix address tracking in delegatecall operations for callTracer

## Changes
- Update callTracer to correctly track addresses during delegatecall
operations

## Test plan
- Existing tests should pass
- Verify callTracer correctly reports addresses for delegatecall
operations

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Robert van Eerdewijk <robertvaneerdewijk@gmail.com>
## Summary

Preparatory cleanup PR extracted from the EIP-7702 branch to simplify
review.

- **Counter.sol uint64**: Change `uint256` to `uint64` in
Counter/NestedCounter fixtures, to avoid U256 conversion in tests.
- **Debug log**: Add debug log for `eth_transact` substrate tx hash
- **RLP fix**: Fix `Transaction7702Signed` decoder field order (removed
incorrect `gas_price` field at index 4, aligned with encoder)

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Fix huge benchmark regression for storage-heavy extrinsics, enabling
jemalloc-allocator via polkadot-jemalloc-shim for omni-bencher, marked
as optional in the scope of PR paritytech#10590.

This close paritytech/trie#230.

Thanks @alexggh and @cheme for the help 🙇 

Tested against `runtime / main` and
[2.1.0](polkadot-fellows/runtimes#1065) as
described
[here](paritytech/trie#230 (comment)).
For the `usual` exstrinsic `force_apply_min_commission` doing massive
storage allocation/deallocation on benchmark setup and then just 1read -
2 write in the benchmark extrinsic itself, times goes down from ms to
µs.

The regression was introduced by paritytech#10590 `sc-client-db: Make jemalloc
optional`

```bash
runtimes git:(sigurpol-release-2_0_6) /home/paolo/github/polkadot-sdk/target/release/frame-omni-bencher v1 benchmark pallet --runtime ./target/release/wbuild/asset-hub-polkadot-runtime/asset_hub_polkadot_runtime.compact.compressed.wasm --pallet pallet_staking_async --extrinsic "force_apply_min_commission" --steps 2 --repeat 1
2026-02-13T15:06:30.145367Z  INFO frame::benchmark::pallet: Initialized runtime log filter to 'INFO'
2026-02-13T15:06:31.784936Z  INFO pallet_collator_selection::pallet: assembling new collators for new session 0 at #0
2026-02-13T15:06:31.784966Z  INFO pallet_collator_selection::pallet: assembling new collators for new session 1 at #0
2026-02-13T15:08:29.701636Z  INFO frame::benchmark::pallet: [  0 % ] Starting benchmark: pallet_staking_async::force_apply_min_commission
2026-02-13T15:08:35.130403Z  INFO frame::benchmark::pallet: [  0 % ] Running  benchmark: pallet_staking_async::force_apply_min_commission (overtime)
Pallet: "pallet_staking_async", Extrinsic: "force_apply_min_commission", Lowest values: [], Highest values: [], Steps: 2, Repeat: 1
Raw Storage Info
========
Storage: `Staking::MinCommission` (r:1 w:0)
Proof: `Staking::MinCommission` (`max_values`: Some(1), `max_size`: Some(4), added: 499, mode: `MaxEncodedLen`)
Storage: `Staking::Validators` (r:1 w:1)
Proof: `Staking::Validators` (`max_values`: None, `max_size`: Some(45), added: 2520, mode: `MaxEncodedLen`)

Median Slopes Analysis
========
-- Extrinsic Time --

Model:
Time ~=    50.31
              µs

Reads = 2
Writes = 1
Recorded proof Size = 564

Min Squares Analysis
========
-- Extrinsic Time --

Model:
Time ~=    50.31
              µs

Reads = 2
Writes = 1
Recorded proof Size = 564
```

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Bastian Köcher <git@kchr.de>
…perations (paritytech#10384)

Introduce "ImbalanceAccounting" traits for dynamic dispatch management
of imbalances. These are helper traits to be used for generic Imbalance,
helpful for tracking multiple concrete types of `Imbalance` using
dynamic dispatch of these traits.

`xcm-executor` now tracks imbalances in holding.

Change the xcm executor implementation and inner types and adapters so
that it keeps track of imbalances across the stack.

Previously, XCM operations on fungible assets would break the respective
fungibles' total issuance invariants by burning and minting them in
different stages of XCM processing pipeline.

This commit fixes that by keeping track of the "withdrawn" or
"deposited" fungible assets in holding and other XCM registers as
imbalances. The imbalances are tied to the underlying pallet managing
the asset so that they keep the assets' total issuance correctness
throughout the execution of the XCM program.

Imbalances in XCM registers are resolved by the underlying pallets
managing them whenever they move from XCM registers to other parts of
the stack (e.g. deposited to accounts, burned, etc).

XCM emulated tests now also verify total issuance before/after
transfers, swaps, traps, claims, etc to guarantee implementation
correctness.

---------

Signed-off-by: Adrian Catangiu <adrian@parity.io>
Signed-off-by: Alexandru Gheorghe <alexandru.gheorghe@parity.io>
Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Daniel Shiposha <dev@shiposha.com>
Co-authored-by: Francisco Aguirre <franciscoaguirreperez@gmail.com>
Co-authored-by: Oliver Tale-Yazdi <oliver.tale-yazdi@parity.io>
Co-authored-by: 0xRVE <robertvaneerdewijk@gmail.com>
Co-authored-by: Bastian Köcher <git@kchr.de>
Co-authored-by: Sebastian Kunert <skunert49@gmail.com>
Co-authored-by: Paolo La Camera <paolo@parity.io>
Co-authored-by: Ankan <10196091+Ank4n@users.noreply.github.com>
Co-authored-by: Alexander Samusev <41779041+alvicsam@users.noreply.github.com>
Co-authored-by: Manuel Mauro <manuel.mauro@protonmail.com>
Co-authored-by: Alexandre R. Baldé <alexandre.balde@parity.io>
Co-authored-by: Omar <OmarAbdulla7@hotmail.com>
Co-authored-by: BDevParity <bruno.devic@parity.io>
Co-authored-by: Egor_P <egor@parity.io>
Co-authored-by: Andrei Eres <eresav@me.com>
Co-authored-by: Klapeyron <11329616+Klapeyron@users.noreply.github.com>
Co-authored-by: Alexander Theißen <alex.theissen@me.com>
Co-authored-by: Alexandru Gheorghe <49718502+alexggh@users.noreply.github.com>
Co-authored-by: Xavier Lau <x@acg.box>
Co-authored-by: Dónal Murray <donal.murray@parity.io>
bump zombienet to latest `v0.4.5` (and subxt to `0.44.`)

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
…iate (paritytech#10919)

## Summary
- Add integration tests for revive runtime API
- Test Fibonacci contract deployment and execution via substrate APIs

## Changes
- Add test for Fibonacci contract call via runtime API
- Add test to verify large Fibonacci values run out of gas as expected
- Update dev-node runtime configuration for testing

## Test plan
- Run new integration tests
- Verify runtime API correctly handles contract deployment
- Verify gas limits are enforced correctly

---------

Co-authored-by: Mónica Jin <monica@parity.io>
…0 updates (paritytech#11076)

Bumps the ci_dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `6.0.1` |
`6.0.2` |
|
[docker/build-push-action](https://github.com/docker/build-push-action)
| `6.18.0` | `6.19.2` |
| [docker/login-action](https://github.com/docker/login-action) |
`3.6.0` | `3.7.0` |
| [actions/cache](https://github.com/actions/cache) | `5.0.2` | `5.0.3`
|
|
[korthout/backport-action](https://github.com/korthout/backport-action)
| `4.0.1` | `4.1.0` |
|
[peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request)
| `8.0.0` | `8.1.0` |
| [actions/setup-python](https://github.com/actions/setup-python) |
`6.1.0` | `6.2.0` |
|
[aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials)
| `5.1.1` | `6.0.0` |
|
[actions/attest-build-provenance](https://github.com/actions/attest-build-provenance)
| `3.1.0` | `3.2.0` |
|
[tj-actions/changed-files](https://github.com/tj-actions/changed-files)
| `47.0.1` | `47.0.2` |


Updates `actions/checkout` from 6.0.1 to 6.0.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/releases">actions/checkout's
releases</a>.</em></p>
<blockquote>
<h2>v6.0.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID
is set by <a
href="https://github.com/TingluoHuang"><code>@​TingluoHuang</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/2355">actions/checkout#2355</a></li>
<li>Fix tag handling: preserve annotations and explicit fetch-tags by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2356">actions/checkout#2356</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v6.0.1...v6.0.2">https://github.com/actions/checkout/compare/v6.0.1...v6.0.2</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/blob/main/CHANGELOG.md">actions/checkout's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>v6.0.2</h2>
<ul>
<li>Fix tag handling: preserve annotations and explicit fetch-tags by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2356">actions/checkout#2356</a></li>
</ul>
<h2>v6.0.1</h2>
<ul>
<li>Add worktree support for persist-credentials includeIf by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2327">actions/checkout#2327</a></li>
</ul>
<h2>v6.0.0</h2>
<ul>
<li>Persist creds to a separate file by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2286">actions/checkout#2286</a></li>
<li>Update README to include Node.js 24 support details and requirements
by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/2248">actions/checkout#2248</a></li>
</ul>
<h2>v5.0.1</h2>
<ul>
<li>Port v6 cleanup to v5 by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2301">actions/checkout#2301</a></li>
</ul>
<h2>v5.0.0</h2>
<ul>
<li>Update actions checkout to use node 24 by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li>
</ul>
<h2>v4.3.1</h2>
<ul>
<li>Port v6 cleanup to v4 by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2305">actions/checkout#2305</a></li>
</ul>
<h2>v4.3.0</h2>
<ul>
<li>docs: update README.md by <a
href="https://github.com/motss"><code>@​motss</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li>
<li>Add internal repos for checking out multiple repositories by <a
href="https://github.com/mouismail"><code>@​mouismail</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li>
<li>Documentation update - add recommended permissions to Readme by <a
href="https://github.com/benwells"><code>@​benwells</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li>
<li>Adjust positioning of user email note and permissions heading by <a
href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2044">actions/checkout#2044</a></li>
<li>Update README.md by <a
href="https://github.com/nebuk89"><code>@​nebuk89</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li>
<li>Update CODEOWNERS for actions by <a
href="https://github.com/TingluoHuang"><code>@​TingluoHuang</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/2224">actions/checkout#2224</a></li>
<li>Update package dependencies by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li>
</ul>
<h2>v4.2.2</h2>
<ul>
<li><code>url-helper.ts</code> now leverages well-known environment
variables by <a href="https://github.com/jww3"><code>@​jww3</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li>
<li>Expand unit test coverage for <code>isGhes</code> by <a
href="https://github.com/jww3"><code>@​jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li>
</ul>
<h2>v4.2.1</h2>
<ul>
<li>Check out other refs/* by commit if provided, fall back to ref by <a
href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li>
</ul>
<h2>v4.2.0</h2>
<ul>
<li>Add Ref and Commit outputs by <a
href="https://github.com/lucacome"><code>@​lucacome</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1180">actions/checkout#1180</a></li>
<li>Dependency updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>- <a
href="https://redirect.github.com/actions/checkout/pull/1777">actions/checkout#1777</a>,
<a
href="https://redirect.github.com/actions/checkout/pull/1872">actions/checkout#1872</a></li>
</ul>
<h2>v4.1.7</h2>
<ul>
<li>Bump the minor-npm-dependencies group across 1 directory with 4
updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1739">actions/checkout#1739</a></li>
<li>Bump actions/checkout from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1697">actions/checkout#1697</a></li>
<li>Check out other refs/* by commit by <a
href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1774">actions/checkout#1774</a></li>
<li>Pin actions/checkout's own workflows to a known, good, stable
version. by <a href="https://github.com/jww3"><code>@​jww3</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1776">actions/checkout#1776</a></li>
</ul>
<h2>v4.1.6</h2>
<ul>
<li>Check platform to set archive extension appropriately by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1732">actions/checkout#1732</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/checkout/commit/de0fac2e4500dabe0009e67214ff5f5447ce83dd"><code>de0fac2</code></a>
Fix tag handling: preserve annotations and explicit fetch-tags (<a
href="https://redirect.github.com/actions/checkout/issues/2356">#2356</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/064fe7f3312418007dea2b49a19844a9ee378f49"><code>064fe7f</code></a>
Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is
set (...</li>
<li>See full diff in <a
href="https://github.com/actions/checkout/compare/8e8c483db84b4bee98b60c0593521ed34d9990e8...de0fac2e4500dabe0009e67214ff5f5447ce83dd">compare
view</a></li>
</ul>
</details>
<br />

Updates `docker/build-push-action` from 6.18.0 to 6.19.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/build-push-action/releases">docker/build-push-action's
releases</a>.</em></p>
<blockquote>
<h2>v6.19.2</h2>
<ul>
<li>Preserve port in <code>GIT_AUTH_TOKEN</code> host by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/build-push-action/pull/1458">docker/build-push-action#1458</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/build-push-action/compare/v6.19.1...v6.19.2">https://github.com/docker/build-push-action/compare/v6.19.1...v6.19.2</a></p>
<h2>v6.19.1</h2>
<ul>
<li>Derive <code>GIT_AUTH_TOKEN</code> host from GitHub server URL by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/build-push-action/pull/1456">docker/build-push-action#1456</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/build-push-action/compare/v6.19.0...v6.19.1">https://github.com/docker/build-push-action/compare/v6.19.0...v6.19.1</a></p>
<h2>v6.19.0</h2>
<ul>
<li>Scope default git auth token to <code>github.com</code> by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/build-push-action/pull/1451">docker/build-push-action#1451</a></li>
<li>Bump brace-expansion from 1.1.11 to 1.1.12 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1396">docker/build-push-action#1396</a></li>
<li>Bump form-data from 2.5.1 to 2.5.5 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1391">docker/build-push-action#1391</a></li>
<li>Bump js-yaml from 3.14.1 to 3.14.2 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1429">docker/build-push-action#1429</a></li>
<li>Bump lodash from 4.17.21 to 4.17.23 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1446">docker/build-push-action#1446</a></li>
<li>Bump tmp from 0.2.3 to 0.2.4 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1398">docker/build-push-action#1398</a></li>
<li>Bump undici from 5.28.4 to 5.29.0 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1397">docker/build-push-action#1397</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/build-push-action/compare/v6.18.0...v6.19.0">https://github.com/docker/build-push-action/compare/v6.18.0...v6.19.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/docker/build-push-action/commit/10e90e3645eae34f1e60eeb005ba3a3d33f178e8"><code>10e90e3</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/build-push-action/issues/1458">#1458</a>
from crazy-max/git-auth-port</li>
<li><a
href="https://github.com/docker/build-push-action/commit/5262538458b1dbba30c9bd737bd974c879110196"><code>5262538</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/docker/build-push-action/commit/cd130e45cb5599aef419bf8afd66b57ed9e6ef72"><code>cd130e4</code></a>
preserve port in GIT_AUTH_TOKEN host</li>
<li><a
href="https://github.com/docker/build-push-action/commit/806c75105a1251cac8905df5dd4723b33174552c"><code>806c751</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/build-push-action/issues/1452">#1452</a>
from crazy-max/update-yarn</li>
<li><a
href="https://github.com/docker/build-push-action/commit/601a80b39c9405e50806ae38af30926f9d957c47"><code>601a80b</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/build-push-action/issues/1456">#1456</a>
from crazy-max/auth-token-dyn-host</li>
<li><a
href="https://github.com/docker/build-push-action/commit/8f7fd7c8c7c3eb0de00d0ddff2fc40be6ec64bf1"><code>8f7fd7c</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/docker/build-push-action/commit/710e33547432c0d28271c6786a7c5d06b2d47adc"><code>710e335</code></a>
derive GIT_AUTH_TOKEN host from GitHub server URL</li>
<li><a
href="https://github.com/docker/build-push-action/commit/c4ca8486a6a47db97a23379a9c7a9c0e86a954c1"><code>c4ca848</code></a>
update yarn to 4.9.2</li>
<li><a
href="https://github.com/docker/build-push-action/commit/ee4ca427a2f43b6a16632044ca514c076267da23"><code>ee4ca42</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/build-push-action/issues/1398">#1398</a>
from docker/dependabot/npm_and_yarn/tmp-0.2.4</li>
<li><a
href="https://github.com/docker/build-push-action/commit/f1b3bb51af7f5b69b537668d0e140572a5e992d0"><code>f1b3bb5</code></a>
chore: update generated content</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/build-push-action/compare/263435318d21b8e681c14492fe198d362a7d2c83...10e90e3645eae34f1e60eeb005ba3a3d33f178e8">compare
view</a></li>
</ul>
</details>
<br />

Updates `docker/login-action` from 3.6.0 to 3.7.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/login-action/releases">docker/login-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.7.0</h2>
<ul>
<li>Add <code>scope</code> input to set scopes for the authentication
token by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/912">docker/login-action#912</a></li>
<li>Add support for AWS European Sovereign Cloud ECR by <a
href="https://github.com/dphi"><code>@​dphi</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/914">docker/login-action#914</a></li>
<li>Ensure passwords are redacted with <code>registry-auth</code> input
by <a href="https://github.com/crazy-max"><code>@​crazy-max</code></a>
in <a
href="https://redirect.github.com/docker/login-action/pull/911">docker/login-action#911</a></li>
<li>build(deps): bump lodash from 4.17.21 to 4.17.23 in <a
href="https://redirect.github.com/docker/login-action/pull/915">docker/login-action#915</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/login-action/compare/v3.6.0...v3.7.0">https://github.com/docker/login-action/compare/v3.6.0...v3.7.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/docker/login-action/commit/c94ce9fb468520275223c153574b00df6fe4bcc9"><code>c94ce9f</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/915">#915</a>
from docker/dependabot/npm_and_yarn/lodash-4.17.23</li>
<li><a
href="https://github.com/docker/login-action/commit/8339c958ce8511f38d0c474c1886a87c802bf1ef"><code>8339c95</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/912">#912</a>
from docker/scope</li>
<li><a
href="https://github.com/docker/login-action/commit/c83e9320c8beb50b77dd007c46d5c8161f0cac4a"><code>c83e932</code></a>
build(deps): bump lodash from 4.17.21 to 4.17.23</li>
<li><a
href="https://github.com/docker/login-action/commit/b268aa57e39ff0a5386d2fd1eded4e2e1d60d705"><code>b268aa5</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/docker/login-action/commit/a60322927812ddc99316dd6252b4fba6d8f09ac1"><code>a603229</code></a>
documentation for scope input</li>
<li><a
href="https://github.com/docker/login-action/commit/7567f92a74b2639be1bd8bc932a112a0d81283da"><code>7567f92</code></a>
Add scope input to set scopes for the authentication token</li>
<li><a
href="https://github.com/docker/login-action/commit/0567fa5ae8c9a197cb207537dc5cbb43ca3d803f"><code>0567fa5</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/914">#914</a>
from dphi/add-support-for-amazonaws.eu</li>
<li><a
href="https://github.com/docker/login-action/commit/f6ef57754547a85003a0e18f789be661346d4a6e"><code>f6ef577</code></a>
feat: add support for AWS European Sovereign Cloud ECR registries</li>
<li><a
href="https://github.com/docker/login-action/commit/916386b00027d425839f8da46d302dab33f5875b"><code>916386b</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/911">#911</a>
from crazy-max/ensure-redact</li>
<li><a
href="https://github.com/docker/login-action/commit/5b3f94a294ea5478af3af437baa6ad0d3dcd04fd"><code>5b3f94a</code></a>
chore: update generated content</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/login-action/compare/5e57cd118135c172c3672efd75eb46360885c0ef...c94ce9fb468520275223c153574b00df6fe4bcc9">compare
view</a></li>
</ul>
</details>
<br />

Updates `actions/cache` from 5.0.2 to 5.0.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/cache/releases">actions/cache's
releases</a>.</em></p>
<blockquote>
<h2>v5.0.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump <code>@actions/cache</code> to v5.0.5 (Resolves: <a
href="https://github.com/actions/cache/security/dependabot/33">https://github.com/actions/cache/security/dependabot/33</a>)</li>
<li>Bump <code>@actions/core</code> to v2.0.3</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/cache/compare/v5...v5.0.3">https://github.com/actions/cache/compare/v5...v5.0.3</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/cache/blob/main/RELEASES.md">actions/cache's
changelog</a>.</em></p>
<blockquote>
<h1>Releases</h1>
<h2>How to prepare a release</h2>
<blockquote>
<p>[!NOTE]<br />
Relevant for maintainers with write access only.</p>
</blockquote>
<ol>
<li>Switch to a new branch from <code>main</code>.</li>
<li>Run <code>npm test</code> to ensure all tests are passing.</li>
<li>Update the version in <a
href="https://github.com/actions/cache/blob/main/package.json"><code>https://github.com/actions/cache/blob/main/package.json</code></a>.</li>
<li>Run <code>npm run build</code> to update the compiled files.</li>
<li>Update this <a
href="https://github.com/actions/cache/blob/main/RELEASES.md"><code>https://github.com/actions/cache/blob/main/RELEASES.md</code></a>
with the new version and changes in the <code>## Changelog</code>
section.</li>
<li>Run <code>licensed cache</code> to update the license report.</li>
<li>Run <code>licensed status</code> and resolve any warnings by
updating the <a
href="https://github.com/actions/cache/blob/main/.licensed.yml"><code>https://github.com/actions/cache/blob/main/.licensed.yml</code></a>
file with the exceptions.</li>
<li>Commit your changes and push your branch upstream.</li>
<li>Open a pull request against <code>main</code> and get it reviewed
and merged.</li>
<li>Draft a new release <a
href="https://github.com/actions/cache/releases">https://github.com/actions/cache/releases</a>
use the same version number used in <code>package.json</code>
<ol>
<li>Create a new tag with the version number.</li>
<li>Auto generate release notes and update them to match the changes you
made in <code>RELEASES.md</code>.</li>
<li>Toggle the set as the latest release option.</li>
<li>Publish the release.</li>
</ol>
</li>
<li>Navigate to <a
href="https://github.com/actions/cache/actions/workflows/release-new-action-version.yml">https://github.com/actions/cache/actions/workflows/release-new-action-version.yml</a>
<ol>
<li>There should be a workflow run queued with the same version
number.</li>
<li>Approve the run to publish the new version and update the major tags
for this action.</li>
</ol>
</li>
</ol>
<h2>Changelog</h2>
<h3>5.0.3</h3>
<ul>
<li>Bump <code>@actions/cache</code> to v5.0.5 (Resolves: <a
href="https://github.com/actions/cache/security/dependabot/33">https://github.com/actions/cache/security/dependabot/33</a>)</li>
<li>Bump <code>@actions/core</code> to v2.0.3</li>
</ul>
<h3>5.0.2</h3>
<ul>
<li>Bump <code>@actions/cache</code> to v5.0.3 <a
href="https://redirect.github.com/actions/cache/pull/1692">#1692</a></li>
</ul>
<h3>5.0.1</h3>
<ul>
<li>Update <code>@azure/storage-blob</code> to <code>^12.29.1</code> via
<code>@actions/cache@5.0.1</code> <a
href="https://redirect.github.com/actions/cache/pull/1685">#1685</a></li>
</ul>
<h3>5.0.0</h3>
<blockquote>
<p>[!IMPORTANT]
<code>actions/cache@v5</code> runs on the Node.js 24 runtime and
requires a minimum Actions Runner version of <code>2.327.1</code>.
If you are using self-hosted runners, ensure they are updated before
upgrading.</p>
</blockquote>
<h3>4.3.0</h3>
<ul>
<li>Bump <code>@actions/cache</code> to <a
href="https://redirect.github.com/actions/toolkit/pull/2132">v4.1.0</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/cache/commit/cdf6c1fa76f9f475f3d7449005a359c84ca0f306"><code>cdf6c1f</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/cache/issues/1695">#1695</a>
from actions/Link-/prepare-5.0.3</li>
<li><a
href="https://github.com/actions/cache/commit/a1bee22673bee4afb9ce4e0a1dc3da1c44060b7d"><code>a1bee22</code></a>
Add review for the <code>@​actions/http-client</code> license</li>
<li><a
href="https://github.com/actions/cache/commit/46957638dc5c5ff0c34c0143f443c07d3a7c769f"><code>4695763</code></a>
Add licensed output</li>
<li><a
href="https://github.com/actions/cache/commit/dc73bb9f7bf74a733c05ccd2edfd1f2ac9e5f502"><code>dc73bb9</code></a>
Upgrade dependencies and address security warnings</li>
<li><a
href="https://github.com/actions/cache/commit/345d5c2f761565bace4b6da356737147e9041e3a"><code>345d5c2</code></a>
Add 5.0.3 builds</li>
<li>See full diff in <a
href="https://github.com/actions/cache/compare/8b402f58fbc84540c8b491a91e594a4576fec3d7...cdf6c1fa76f9f475f3d7449005a359c84ca0f306">compare
view</a></li>
</ul>
</details>
<br />

Updates `korthout/backport-action` from 4.0.1 to 4.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/korthout/backport-action/releases">korthout/backport-action's
releases</a>.</em></p>
<blockquote>
<h2>Backport-action v4.1.0</h2>
<h2>What's Changed</h2>
<p><a
href="https://github.com/lenaschoenburg"><code>@​lenaschoenburg</code></a>
fixed a bug where backport-action thought that
<code>[#0](https://github.com/korthout/backport-action/issues/0)</code>
was a valid issue ref and used it in <a
href="https://github.com/korthout/backport-action?tab=readme-ov-file#placeholders"><code>${issue_refs}</code></a></p>
<ul>
<li>fix: disallow issue numbers with a leading zero by <a
href="https://github.com/lenaschoenburg"><code>@​lenaschoenburg</code></a>
in <a
href="https://redirect.github.com/korthout/backport-action/pull/552">korthout/backport-action#552</a></li>
</ul>
<p>The project is now bundled with esbuild, uses ESM, and is minified,
resulting in a much smaller github action (from ~2MB to ~550kB)</p>
<ul>
<li>Minify build artifact with esbuild by <a
href="https://github.com/korthout"><code>@​korthout</code></a> in <a
href="https://redirect.github.com/korthout/backport-action/pull/555">korthout/backport-action#555</a></li>
<li>Convert project to ESM by <a
href="https://github.com/korthout"><code>@​korthout</code></a> in <a
href="https://redirect.github.com/korthout/backport-action/pull/557">korthout/backport-action#557</a></li>
<li>Auto update licenses txt by <a
href="https://github.com/korthout"><code>@​korthout</code></a> in <a
href="https://redirect.github.com/korthout/backport-action/pull/559">korthout/backport-action#559</a></li>
<li>Cleanup leftover sourcemap files by <a
href="https://github.com/korthout"><code>@​korthout</code></a> in <a
href="https://redirect.github.com/korthout/backport-action/pull/560">korthout/backport-action#560</a></li>
</ul>
<h2>Updated dependencies</h2>
<ul>
<li>Update dependency <code>@​actions/core</code> to v2.0.1 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/korthout/backport-action/pull/526">korthout/backport-action#526</a></li>
<li>Update korthout/backport-action action to v4.0.1 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/korthout/backport-action/pull/528">korthout/backport-action#528</a></li>
<li>Update dependency dedent to v1.7.1 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/korthout/backport-action/pull/530">korthout/backport-action#530</a></li>
<li>Update dependency <code>@​actions/github</code> to v7 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/korthout/backport-action/pull/536">korthout/backport-action#536</a></li>
<li>Update dependency <code>@​actions/core</code> to v2.0.2 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/korthout/backport-action/pull/535">korthout/backport-action#535</a></li>
<li>ci: pin GitHub Action digests to SemVer by <a
href="https://github.com/korthout"><code>@​korthout</code></a> in <a
href="https://redirect.github.com/korthout/backport-action/pull/539">korthout/backport-action#539</a></li>
<li>Update actions/setup-node action to v6.2.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/korthout/backport-action/pull/541">korthout/backport-action#541</a></li>
<li>Update jacobtomlinson/gha-find-replace action to v3.0.5 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/korthout/backport-action/pull/540">korthout/backport-action#540</a></li>
<li>Update dependency prettier to v3.8.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/korthout/backport-action/pull/538">korthout/backport-action#538</a></li>
<li>Update EndBug/add-and-commit action to v9.1.4 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/korthout/backport-action/pull/542">korthout/backport-action#542</a></li>
<li>Update madhead/semver-utils action to v4.3.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/korthout/backport-action/pull/543">korthout/backport-action#543</a></li>
<li>Update actions/checkout action to v6.0.2 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/korthout/backport-action/pull/544">korthout/backport-action#544</a></li>
<li>Update dependency prettier to v3.8.1 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/korthout/backport-action/pull/545">korthout/backport-action#545</a></li>
<li>Update dependency <code>@​actions/core</code> to v2.0.3 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/korthout/backport-action/pull/548">korthout/backport-action#548</a></li>
<li>Pin dependency esbuild to 0.27.3 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/korthout/backport-action/pull/556">korthout/backport-action#556</a></li>
<li>Update dependency <code>@​actions/github</code> to v9 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/korthout/backport-action/pull/549">korthout/backport-action#549</a></li>
<li>Update dependency <code>@​actions/exec</code> to v3 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/korthout/backport-action/pull/550">korthout/backport-action#550</a></li>
<li>Pin dependency <code>@​octokit/request-error</code> to 7.1.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/korthout/backport-action/pull/558">korthout/backport-action#558</a></li>
<li>Update dependency <code>@​actions/core</code> to v3 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/korthout/backport-action/pull/551">korthout/backport-action#551</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/korthout/backport-action/compare/v4.0.1...v4.1.0">https://github.com/korthout/backport-action/compare/v4.0.1...v4.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/korthout/backport-action/commit/01619ebc9a6e3f6820274221b9956b3e7365000a"><code>01619eb</code></a>
dist: release 4.1.0</li>
<li><a
href="https://github.com/korthout/backport-action/commit/d3fdb6dcc75e72e562daeaa3aa862fa482c11ddf"><code>d3fdb6d</code></a>
Merge pull request <a
href="https://redirect.github.com/korthout/backport-action/issues/560">#560</a>
from korthout/korthout-clean-up-sourcemap-files</li>
<li><a
href="https://github.com/korthout/backport-action/commit/8d0f84d55b8d49398a47acde3d9c6795e73caf3c"><code>8d0f84d</code></a>
dist: remove leftover sourcemap files</li>
<li><a
href="https://github.com/korthout/backport-action/commit/d7a50fba4055c5d1c82d442a948fde577c7654ce"><code>d7a50fb</code></a>
Merge pull request <a
href="https://redirect.github.com/korthout/backport-action/issues/559">#559</a>
from korthout/korthout-auto-update-licenses-txt</li>
<li><a
href="https://github.com/korthout/backport-action/commit/13771dc475c5ef402f0aa43cb0d7f88b2427fb29"><code>13771dc</code></a>
dist: build new licenses.txt</li>
<li><a
href="https://github.com/korthout/backport-action/commit/7a3c8b00ddd23a4f0b3857d3f31c09d0adac6089"><code>7a3c8b0</code></a>
build: update dist/licenses.txt automatically</li>
<li><a
href="https://github.com/korthout/backport-action/commit/06a6b57e36fc04c4805b2337a76a54feea3ab483"><code>06a6b57</code></a>
build: move esbuild to a separate file</li>
<li><a
href="https://github.com/korthout/backport-action/commit/669791ab007af8984ce1264946807738da2a1df0"><code>669791a</code></a>
dist: build new artifacts</li>
<li><a
href="https://github.com/korthout/backport-action/commit/74946b7102ddd5ab8806c0a5bc5cd6624275a3b8"><code>74946b7</code></a>
Merge pull request <a
href="https://redirect.github.com/korthout/backport-action/issues/551">#551</a>
from korthout/renovate/actions-core-3.x</li>
<li><a
href="https://github.com/korthout/backport-action/commit/8b1a415ca5d7650c1d12df5a16427d9692e32a09"><code>8b1a415</code></a>
Merge pull request <a
href="https://redirect.github.com/korthout/backport-action/issues/558">#558</a>
from korthout/renovate/pin-dependencies</li>
<li>Additional commits viewable in <a
href="https://github.com/korthout/backport-action/compare/c656f5d5851037b2b38fb5db2691a03fa229e3b2...01619ebc9a6e3f6820274221b9956b3e7365000a">compare
view</a></li>
</ul>
</details>
<br />

Updates `peter-evans/create-pull-request` from 8.0.0 to 8.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/peter-evans/create-pull-request/releases">peter-evans/create-pull-request's
releases</a>.</em></p>
<blockquote>
<h2>Create Pull Request v8.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>README.md: bump given GitHub actions to their latest versions by <a
href="https://github.com/deining"><code>@​deining</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/4265">peter-evans/create-pull-request#4265</a></li>
<li>build(deps): bump the github-actions group with 2 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/4273">peter-evans/create-pull-request#4273</a></li>
<li>build(deps-dev): bump the npm group with 2 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/4274">peter-evans/create-pull-request#4274</a></li>
<li>build(deps-dev): bump undici from 6.22.0 to 6.23.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/4284">peter-evans/create-pull-request#4284</a></li>
<li>Update distribution by <a
href="https://github.com/actions-bot"><code>@​actions-bot</code></a> in
<a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/4289">peter-evans/create-pull-request#4289</a></li>
<li>fix: Handle remote prune failures gracefully on self-hosted runners
by <a
href="https://github.com/peter-evans"><code>@​peter-evans</code></a> in
<a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/4295">peter-evans/create-pull-request#4295</a></li>
<li>feat: add <code>@​octokit/plugin-retry</code> to handle retriable
server errors by <a
href="https://github.com/peter-evans"><code>@​peter-evans</code></a> in
<a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/4298">peter-evans/create-pull-request#4298</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/deining"><code>@​deining</code></a> made
their first contribution in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/4265">peter-evans/create-pull-request#4265</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/peter-evans/create-pull-request/compare/v8.0.0...v8.1.0">https://github.com/peter-evans/create-pull-request/compare/v8.0.0...v8.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/peter-evans/create-pull-request/commit/c0f553fe549906ede9cf27b5156039d195d2ece0"><code>c0f553f</code></a>
feat: add <code>@​octokit/plugin-retry</code> to handle retriable server
errors (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/4298">#4298</a>)</li>
<li><a
href="https://github.com/peter-evans/create-pull-request/commit/70001242bfa9ec7844891e620fdda69a2a2a06c7"><code>7000124</code></a>
fix: Handle remote prune failures gracefully (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/4295">#4295</a>)</li>
<li><a
href="https://github.com/peter-evans/create-pull-request/commit/34aa40e9cf0bb8b5be745a552003fdeb25e4dd3a"><code>34aa40e</code></a>
build: update distribution (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/4289">#4289</a>)</li>
<li><a
href="https://github.com/peter-evans/create-pull-request/commit/641099ddca097df58c3369dd5e1f33322b223029"><code>641099d</code></a>
build(deps-dev): bump undici from 6.22.0 to 6.23.0 (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/4284">#4284</a>)</li>
<li><a
href="https://github.com/peter-evans/create-pull-request/commit/2271f1ddcf09437ed8f019733eb5cfba58ac76f0"><code>2271f1d</code></a>
build(deps-dev): bump the npm group with 2 updates (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/4274">#4274</a>)</li>
<li><a
href="https://github.com/peter-evans/create-pull-request/commit/437c31a11dd02128dd37633ad8d3832853477e7a"><code>437c31a</code></a>
build(deps): bump the github-actions group with 2 updates (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/4273">#4273</a>)</li>
<li><a
href="https://github.com/peter-evans/create-pull-request/commit/0979079bc20c05bbbb590a56c21c4e2b1d1f1bbe"><code>0979079</code></a>
docs: update readme</li>
<li><a
href="https://github.com/peter-evans/create-pull-request/commit/5b751cdf403b4f0314c656b2618939e4c8bdf824"><code>5b751cd</code></a>
README.md: bump given GitHub actions to their latest versions (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/4265">#4265</a>)</li>
<li>See full diff in <a
href="https://github.com/peter-evans/create-pull-request/compare/98357b18bf14b5342f975ff684046ec3b2a07725...c0f553fe549906ede9cf27b5156039d195d2ece0">compare
view</a></li>
</ul>
</details>
<br />

Updates `actions/setup-python` from 6.1.0 to 6.2.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-python/releases">actions/setup-python's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.0</h2>
<h2>What's Changed</h2>
<h3>Dependency Upgrades</h3>
<ul>
<li>Upgrade dependencies to Node 24 compatible versions by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1259">actions/setup-python#1259</a></li>
<li>Upgrade urllib3 from 2.5.0 to 2.6.3 in <code>/__tests__/data</code>
by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1253">actions/setup-python#1253</a>
and <a
href="https://redirect.github.com/actions/setup-python/pull/1264">actions/setup-python#1264</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-python/compare/v6...v6.2.0">https://github.com/actions/setup-python/compare/v6...v6.2.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-python/commit/a309ff8b426b58ec0e2a45f0f869d46889d02405"><code>a309ff8</code></a>
Bump urllib3 from 2.6.0 to 2.6.3 in /<strong>tests</strong>/data (<a
href="https://redirect.github.com/actions/setup-python/issues/1264">#1264</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/bfe8cc55a7890e3d6672eda6460ef37bfcc70755"><code>bfe8cc5</code></a>
Upgrade <a href="https://github.com/actions"><code>@​actions</code></a>
dependencies to Node 24 compatible versions (<a
href="https://redirect.github.com/actions/setup-python/issues/1259">#1259</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/4f41a90a1f38628c7ccc608d05fbafe701bc20ae"><code>4f41a90</code></a>
Bump urllib3 from 2.5.0 to 2.6.0 in /<strong>tests</strong>/data (<a
href="https://redirect.github.com/actions/setup-python/issues/1253">#1253</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/setup-python/compare/83679a892e2d95755f2dac6acb0bfd1e9ac5d548...a309ff8b426b58ec0e2a45f0f869d46889d02405">compare
view</a></li>
</ul>
</details>
<br />

Updates `aws-actions/configure-aws-credentials` from 5.1.1 to 6.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/aws-actions/configure-aws-credentials/releases">aws-actions/configure-aws-credentials's
releases</a>.</em></p>
<blockquote>
<h2>v6.0.0</h2>
<h2><a
href="https://github.com/aws-actions/configure-aws-credentials/compare/v5.1.1...v6.0.0">6.0.0</a>
(2026-02-04)</h2>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li>Update action to use node24 <em>Note this requires GitHub action
runner version <a
href="https://github.com/actions/runner/releases/tag/v2.327.1">v2.327.1</a>
or later</em> (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1632">#1632</a>)
(<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/a7a2c1125c67f40a1e95768f4e4a7d8f019f87af">a7a2c11</a>)</li>
</ul>
<h3>Features</h3>
<ul>
<li>add support to define transitive tag keys (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1316">#1316</a>)
(<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/232435c0c05e51137544f0203931b84893d13b74">232435c</a>)
(<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1628/changes/930ebd9bcaed959c3ba9e21567e8abbc3cae72c0">930ebd9</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>properly output <code>aws-account-id</code> and
<code>authenticated-arn</code> when using role-chaining (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1633">#1633</a>)
(<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/7ceaf96edc86cc1713cef59eba79feeb23f59da1">7ceaf96</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md">aws-actions/configure-aws-credentials's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>All notable changes to this project will be documented in this file.
See <a
href="https://github.com/conventional-changelog/standard-version">standard-version</a>
for commit guidelines.</p>
<h2><a
href="https://github.com/aws-actions/configure-aws-credentials/compare/v5.1.1...v6.0.0">6.0.0</a>
(2026-02-04)</h2>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li>Update action to use node24 (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1632">#1632</a>)
(<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/a7a2c1125c67f40a1e95768f4e4a7d8f019f87af">a7a2c11</a>)</li>
</ul>
<h3>Features</h3>
<ul>
<li>add support to define transitive tag keys (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1316">#1316</a>)
(<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/232435c0c05e51137544f0203931b84893d13b74">232435c</a>)
(<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1628/changes/930ebd9bcaed959c3ba9e21567e8abbc3cae72c0">930ebd9</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>properly output <code>aws-account-id</code> and
<code>authenticated-arn</code> when using role-chaining (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1633">#1633</a>)
(<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/7ceaf96edc86cc1713cef59eba79feeb23f59da1">7ceaf96</a>)</li>
</ul>
<h2><a
href="https://github.com/aws-actions/configure-aws-credentials/compare/v5.1.0...v5.1.1">5.1.1</a>
(2025-11-24)</h2>
<h3>Miscellaneous Chores</h3>
<ul>
<li>release 5.1.1 (<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/56d6a583f00f6bad6d19d91d53a7bc3b8143d0e9">56d6a58</a>)</li>
</ul>
<h2><a
href="https://github.com/aws-actions/configure-aws-credentials/compare/v5.0.0...v5.1.0">5.1.0</a>
(2025-10-06)</h2>
<h3>Features</h3>
<ul>
<li>Add global timeout support (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1487">#1487</a>)
(<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/1584b8b0e2062557287c28fbe9b8920df434e866">1584b8b</a>)</li>
<li>add no-proxy support (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1482">#1482</a>)
(<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/dde9b22a8e889a0821997a21a2c5a38020ee8de3">dde9b22</a>)</li>
<li>Improve debug logging in retry logic (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1485">#1485</a>)
(<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/97ef425d73aa532439f54f90d0e83101a186c5a6">97ef425</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>properly expose getProxyForUrl (introduced in <a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1482">#1482</a>)
(<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1486">#1486</a>)
(<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/cea42985ac88b42678fbc84c18066a7f07f05176">cea4298</a>)</li>
</ul>
<h2><a
href="https://github.com/aws-actions/configure-aws-credentials/compare/v4.3.1...v5.0.0">5.0.0</a>
(2025-09-03)</h2>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li>Cleanup input handling. Changes invalid boolean input behavior (see
<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1445">#1445</a>)</li>
</ul>
<h3>Features</h3>
<ul>
<li>add skip OIDC option (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1458">#1458</a>)
(<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/8c45f6b08196feb86cfdbe431541d5571d9ab2c2">8c45f6b</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws-actions/configure-aws-credentials/commit/8df5847569e6427dd6c4fb1cf565c83acfa8afa7"><code>8df5847</code></a>
chore(deps): bump fast-xml-parser and <code>@​aws-sdk/xml-builder</code>
(<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1640">#1640</a>)</li>
<li><a
href="https://github.com/aws-actions/configure-aws-credentials/commit/d22a0f8af59e052e453e2f8fbe2b9cbbc1b76b15"><code>d22a0f8</code></a>
chore(deps-dev): bump <code>@​types/node</code> from 25.0.10 to 25.2.0
(<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1635">#1635</a>)</li>
<li><a
href="https://github.com/aws-actions/configure-aws-credentials/commit/f7b8181755fc1413cd909cbac860d8a76dc848f1"><code>f7b8181</code></a>
chore(main): release 6.0.0 (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1641">#1641</a>)</li>
<li><a
href="https://github.com/aws-actions/configure-aws-credentials/commit/c367a6acb003ce286b445638569d6ed8d9e846de"><code>c367a6a</code></a>
chore: integ tests manual option (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1639">#1639</a>)</li>
<li><a
href="https://github.com/aws-actions/configure-aws-credentials/commit/7ceaf96edc86cc1713cef59eba79feeb23f59da1"><code>7ceaf96</code></a>
fix: correct outputs for role chaining (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1633">#1633</a>)</li>
<li><a
href="https://github.com/aws-actions/configure-aws-credentials/commit/a7a2c1125c67f40a1e95768f4e4a7d8f019f87af"><code>a7a2c11</code></a>
feat!: update action to use node24 (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1632">#1632</a>)</li>
<li><a
href="https://github.com/aws-actions/configure-aws-credentials/commit/6e3375df071cb03cfbf5fa8ae7770ada6633ab7c"><code>6e3375d</code></a>
chore: remove release-please release automation (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1631">#1631</a>)</li>
<li><a
href="https://github.com/aws-actions/configure-aws-credentials/commit/98abed784138c9838ce602dfb51633e39a1a02b8"><code>98abed7</code></a>
chore: add workflow_dispatch trigger to release workflow (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1630">#1630</a>)</li>
<li><a
href="https://github.com/aws-actions/configure-aws-credentials/commit/bf3adbbb948ac5c9b2dd90a5beecc537dab6ebbf"><code>bf3adbb</code></a>
chore: Update dist</li>
<li><a
href="https://github.com/aws-actions/configure-aws-credentials/commit/db43b8b90ab5e82cf8affce23d07afc7837ae4b2"><code>db43b8b</code></a>
chore: re-run linter</li>
<li>Additional commits viewable in <a
href="https://github.com/aws-actions/configure-aws-credentials/compare/61815dcd50bd041e203e49132bacad1fd04d2708...8df5847569e6427dd6c4fb1cf565c83acfa8afa7">compare
view</a></li>
</ul>
</details>
<br />

Updates `actions/attest-build-provenance` from 3.1.0 to 3.2.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/attest-build-provenance/releases">actions/attest-build-provenance's
releases</a>.</em></p>
<blockquote>
<h2>v3.2.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump <code>@​actions/core</code> from 1.11.1 to 2.0.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/attest-build-provenance/pull/776">actions/attest-build-provenance#776</a></li>
<li>Add more documentation on Artifact Metadata Storage Records by <a
href="https://github.com/malancas"><code>@​malancas</code></a> in <a
href="https://redirect.github.com/actions/attest-build-provenance/pull/797">actions/attest-build-provenance#797</a></li>
<li>Update actions/attest to latest version v3.2.0 by <a
href="https://github.com/malancas"><code>@​malancas</code></a> in <a
href="https://redirect.github.com/actions/attest-build-provenance/pull/812">actions/attest-build-provenance#812</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/attest-build-provenance/compare/v3.1.0...v3.2.0">https://github.com/actions/attest-build-provenance/compare/v3.1.0...v3.2.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/attest-build-provenance/commit/96278af6caaf10aea03fd8d33a09a777ca52d62f"><code>96278af</code></a>
Update actions/attest to latest version v3.2.0 (<a
href="https://redirect.github.com/actions/attest-build-provenance/issues/812">#812</a>)</li>
<li><a
href="https://github.com/actions/attest-build-provenance/commit/6865550d0380db508fc599a58cc87c50c0bba5c5"><code>6865550</code></a>
Add more documentation on Artifact Metadata Storage Records (<a
href="https://redirect.github.com/actions/attest-build-provenance/issues/797">#797</a>)</li>
<li><a
href="https://github.com/actions/attest-build-provenance/commit/98f3aa9c27c3d6da66cf51b7d38fb7511df72d3a"><code>98f3aa9</code></a>
Bump <code>@​actions/core</code> from 1.11.1 to 2.0.1 (<a
href="https://redirect.github.com/actions/attest-build-provenance/issues/776">#776</a>)</li>
<li><a
href="https://github.com/actions/attest-build-provenance/commit/63e64444a7857c20bbda4810126aabe30ef3b047"><code>63e6444</code></a>
Bump github/codeql-action in the actions-minor group (<a
href="https://redirect.github.com/actions/attest-build-provenance/issues/782">#782</a>)</li>
<li><a
href="https://github.com/actions/attest-build-provenance/commit/3bc61afc810a5808496e2782a241fbbf5b91e8b0"><code>3bc61af</code></a>
Bump the npm-development group with 2 updates (<a
href="https://redirect.github.com/actions/attest-build-provenance/issues/795">#795</a>)</li>
<li><a
href="https://github.com/actions/attest-build-provenance/commit/405d0eac46dee8bbc8a98b540f33935742b4d7c8"><code>405d0ea</code></a>
Bump the npm-development group with 3 updates (<a
href="https://redirect.github.com/actions/attest-build-provenance/issues/783">#783</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/attest-build-provenance/compare/00014ed6ed5efc5b1ab7f7f34a39eb55d41aa4f8...96278af6caaf10aea03fd8d33a09a777ca52d62f">compare
view</a></li>
</ul>
</details>
<br />

Updates `tj-actions/changed-files` from 47.0.1 to 47.0.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tj-actions/changed-files/releases">tj-actions/changed-files's
releases</a>.</em></p>
<blockquote>
<h2>v47.0.2</h2>
<h2>What's Changed</h2>
<ul>
<li>chore(deps-dev): bump eslint-plugin-jest from 29.2.1 to 29.11.0 by
<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2751">tj-actions/changed-files#2751</a></li>
<li>chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2741">tj-actions/changed-files#2741</a></li>
<li>chore(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 by
<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2743">tj-actions/changed-files#2743</a></li>
<li>chore(deps): bump <code>@​actions/core</code> from 2.0.0 to 2.0.2 by
<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2757">tj-actions/changed-files#2757</a></li>
<li>Updated README.md by <a
href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot]
in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2768">tj-actions/changed-files#2768</a></li>
<li>chore: update dist by <a
href="https://github.com/jackton1"><code>@​jackton1</code></a> in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2769">tj-actions/changed-files#2769</a></li>
<li>chore: update matrix-example.yml by <a
href="https://github.com/jackton1"><code>@​jackton1</code></a> in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2752">tj-actions/changed-files#2752</a></li>
<li>feat: add support for excluding symlinks and fix bug with commit not
found by <a
href="https://github.com/jackton1"><code>@​jackton1</code></a> in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2770">tj-actions/changed-files#2770</a></li>
<li>chore(deps): bump github/codeql-action from 4.31.7 to 4.31.10 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2761">tj-actions/changed-files#2761</a></li>
<li>Updated README.md by <a
href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot]
in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2771">tj-actions/changed-files#2771</a></li>
<li>chore(deps-dev): bump eslint-plugin-jest from 29.11.0 to 29.12.1 by
<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2756">tj-actions/changed-files#2756</a></li>
<li>chore(deps-dev): bump <code>@​types/lodash</code> from 4.17.21 to
4.17.23 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2759">tj-actions/changed-files#2759</a></li>
<li>fix: Update test.yml by <a
href="https://github.com/jackton1"><code>@​jackton1</code></a> in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2781">tj-actions/changed-files#2781</a></li>
<li>chore(deps): bump actions/checkout from 6.0.1 to 6.0.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2777">tj-actions/changed-files#2777</a></li>
<li>chore(deps): bump <code>@​stdlib/utils-convert-path</code> from
0.2.2 to 0.2.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2795">tj-actions/changed-files#2795</a></li>
<li>chore(deps-dev): bump <code>@​types/node</code> from 25.0.0 to
25.2.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2793">tj-actions/changed-files#2793</a></li>
<li>chore(deps): bump actions/setup-node from 6.1.0 to 6.2.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2766">tj-actions/changed-files#2766</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/tj-actions/changed-files/compare/v47.0.1...v47.0.2">https://github.com/tj-actions/changed-files/compare/v47.0.1...v47.0.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/tj-actions/changed-files/commit/8cba46e29c11878d930bca7870bb54394d3e8b21"><code>8cba46e</code></a>
chore(deps): bump actions/setup-node from 6.1.0 to 6.2.0 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2766">#2766</a>)</li>
<li><a
href="https://github.com/tj-actions/changed-files/commit/925972f627ac3ba50ec787d29479d19d5fd76899"><code>925972f</code></a>
chore(deps-dev): bump <code>@​types/node</code> from 25.0.0 to 25.2.2
(<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2793">#2793</a>)</li>
<li><a
href="https://github.com/tj-actions/changed-files/commit/a98754bb6adb8a47a1fc3d33dc1c465efdbb5ff8"><code>a98754b</code></a>
chore(deps): bump <code>@​stdlib/utils-convert-path</code> from 0.2.2 to
0.2.3 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2795">#2795</a>)</li>
<li><a
href="https://github.com/tj-actions/changed-files/commit/9c13e73478ad1bfebb10d95fdbaa6e62f519ddf8"><code>9c13e73</code></a>
chore(deps): bump actions/checkout from 6.0.1 to 6.0.2 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2777">#2777</a>)</li>
<li><a
href="https://github.com/tj-actions/changed-files/commit/caee9d94cec72c6797349cc07842c787d2cc9f74"><code>caee9d9</code></a>
fix: Update test.yml (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2781">#2781</a>)</li>
<li><a
href="https://github.com/tj-actions/changed-files/commit/16d791cc10d1511516254b9487f4f3b5e2b7c7fe"><code>16d791c</code></a>
chore(deps-dev): bump <code>@​types/lodash</code> from 4.17.21 to
4.17.23 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2759">#2759</a>)</li>
<li><a
href="https://github.com/tj-actions/changed-files/commit/8e056dec7d4b91f5a0f30055750dd52cad27f8c2"><code>8e056de</code></a>
chore(deps-dev): bump eslint-plugin-jest from 29.11.0 to 29.12.1 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2756">#2756</a>)</li>
<li><a
href="https://github.com/tj-actions/changed-files/commit/7d5bbf4e8d5c63a42c94e1c1bff2394247117e96"><code>7d5bbf4</code></a>
Updated README.md (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2771">#2771</a>)</li>
<li><a
href="https://github.com/tj-actions/changed-files/commit/078e2bcd1ef8f09b23d21604c2a9e3c26173126d"><code>078e2bc</code></a>
chore(deps): bump github/codeql-action from 4.31.7 to 4.31.10 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2761">#2761</a>)</li>
<li><a
href="https://github.com/tj-actions/changed-files/commit/8c4da285a3cb8b621b4a5cc251d6282b4b0a67a5"><code>8c4da28</code></a>
feat: add support for excluding symlinks and fix bug with commit not
found (#...</li>
<li>Additional commits viewable in <a
href="https://github.com/tj-actions/changed-files/compare/e0021407031f5be11a464abee9a0776171c79891...8cba46e29c11878d930bca7870bb54394d3e8b21">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Warp sync requires GRANDPA justifications at authority set change
boundaries to construct proofs. When block pruning is enabled, all block
bodies are removed regardless of whether they contain important
justifications. The pruned nodes can then not be used to fetch warp
proofs.

In this PR I add the capability to filter which blocks can be safely
pruned. For parachain nodes, everything can be pruned, solochain nodes
using grandpa keep blocks with justifications.

## Overview:
 ### sc-client-db
  - Add BlockPruningFilter trait with blanket impl for closures
  - Add block_pruning_filters field to DatabaseSettings and Backend
  - Check filters in prune_blocks() before removing block bodies

 ### sc-consensus-grandpa
- Add GrandpaBlockPruningFilter that preserves blocks with GRANDPA
justifications

 ### sc-service
- Add block_pruning_filters parameter to new_full_parts and
new_full_parts_record_import

 ### Nodes updated
  - polkadot-service: uses GrandpaBlockPruningFilter
  - staging-node-cli (kitchensink): uses GrandpaBlockPruningFilter
  - solochain-template: uses GrandpaBlockPruningFilter
  - parachain-template / omni-node / polkadot-parachain: empty filters 



fixes paritytech#2733

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Egor_P <egor@parity.io>
Co-authored-by: ParityReleases <release-team@parity.io>
`full_node_warp_sync` test start failing after we update the version of
`zombienet-sdk`, because the upgrade have some changes in the
customization of the chain-spec. In order to keep using the current
snapshots we should use the chain-specs in `raw` version to disable the
customization of the sdk.

<img width="997" height="172" alt="image"
src="https://github.com/user-attachments/assets/9312df04-b86f-4b92-b2ad-b017f8560bcb"
/>
While reviewing paritytech#10973 I found once more that our parent search is
totally overengineered:
- It offers the option to search branches that do not contain the
pending block -> These branches can never be taken
- It returns a list of potential parents -> Nobody uses the list, we
only care about the latest block that we should build on

By eliminating these two annoyances, the code is a lot more simple and
easier to follow. There are still some defensive checks that are not
strictly necessary, but does not hurt to keep them.

In summary, the mental model is: Build on the latest descendant of the
pending block that is still inside the relay parent ancestry. If no
pending block is available, use the included block in its place.

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
…itytech#11095)

When setting up a tracing span in an async future, it may gets
invalidated by any `await` point. The problem is that after continuing a
future, it may runs on a different thread where the `span` isn't active
anymore. The solution for this is to `instrument` the future properly.

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
…aritytech#11108)

Otherwise there is the possibility that nodes cache `None` and some
later `force_set_code` enacts the code. Then the nodes that have cached
`None` do not know that the validation code now actually exists on
chain.

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Gioyik and others added 21 commits February 26, 2026 08:19
the `SECURITY.md` file now reflect the actual state of security, deleted
duplicates and added a symbolic link to the root.
## Description

Fixes how we build the claim queue for core assignments. Previously we
statically pre-populated it by popping from assignment providers, which
was broken because we weren't advancing blocks correctly. If a new
assignment came in upcoming blocks, we'd miss it.

Now we build the claim queue on-the-fly by simulating block advancement
with the correct block numbers. This fixes the coretime partitioning
issue and simplifies session handling - no need to push anything back to
assignment providers anymore.

**Bonus**: On-demand orders are now instant. They show up in the claim
queue in the same block the order is placed.

## Changes

- Moved coretime assigner logic from separate pallet into scheduler
- Migrated on-demand pallet v1 → v2 (single queue instead of affinity
queues, this allows us to pop all on-demand cores of a block at once -
which makes affinity redundant, as we can now sensure that a particular
paraid is unique per height)
- Scheduler migration v3 → v4 (removes claim queue storage)
- Removed obsolete `assigner_coretime` pallet
- Updated on-demand benchmarks (removed linear `s` parameter)

## Breaking Changes

- `assigner_coretime` pallet → `scheduler::assigner_coretime` module
- On-demand storage structure changed (migration handles it)
- Scheduler storage now v4

TODOS:

- [x] Make it typecheck
- [x] Make CoreState one state item for all cores
- [x] Runtime APIs must look into the future (retrieve claim queue for
now +1)
- [x] Update scheduler + paras_inherent to use the new pop all cores at
once API
- [x] Fix scheduler and paras_inherent to use the new API
- [x] Add back duplication of first assignment for on-demand
- [x] Limit assignments returned by the scheduler to availability cores
count
- [x] Fix peek for on-demand
- [x] Fix benchmarks
- [x] Migrations
- [x] Add test that peek at block x correctly predicts pops at block x +
n
- [x] Add test that on-demand order on empty core shows up in two next
blocks (and no more)
- [x] Add test that bulk assignment coming in on an unoccupied core gets
duplicated before the start
- [x] Add test that peek does not modify state (multiple calls will
yield the same result)
- [x] Fix tests
- [x] Update docs
- [x] Drop other parachain assigner
- [x] Move coretime & ondemand assigner into scheduler folder
- [x] Polish

Fixes: paritytech#1312 paritytech#6563 paritytech#5529

---------

Co-authored-by: eskimor <eskimor@no-such-url.com>
Co-authored-by: eskimor <eskimor@users.noreply.github.com>
Co-authored-by: eskimor <eskimor@noreply.com>
Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Use correct target and ensure we log when we did not find any parent.

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Signed-off-by: Oliver Tale-Yazdi <oliver.tale-yazdi@parity.io>
…h#11152)

While warp syncing a node, I saw some huge stalls. What happens:

- During warp sync we store warp proofs
- After warp sync we start gap sync
- Problem: Once gap sync finishes, node starts looking for displaced
leaves from all the warp proof blocks, which was over 2500 in my
observed case. This led to a 30minutes stall.

In this PR I propose to import the blocks during warp sync with a
Disconnected state, which does not add them as leaves. This fixes the
downtime.

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
…itytech#10869)

fixes paritytech#8659

Adds ForeignAssetIdExtractor which converts a u32 asset id to an XCM
Location type.

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
A followup from paritytech#8541
with changes requested by @eskimor:
- Adjust the protocol parameters and add comments about the picked
values
- Simpler fetch mechanism - advertisements from unknown collators (those
with 0 reputation) are delayed. Everything else is fetched immediately.

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
… batch calls (paritytech#11203)

Replace the RuntimeCall::Utility { .. } wildcard with explicit batch,
batch_all, and force_batch calls only.
The wildcard unnecessarily exposed as_derivative, dispatch_as, and
with_weight which have no legitimate use for staking operations, and
future utility pallet additions would be automatically exposed.

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
When keep_latest_n_blocks (cache-size) is None, every processed block is
inserted into the BTreeMap used for detecting reorgs, but never removed,
except during reorgs. Since reorgs deeper than 256 blocks are unlikely,
cap the map at 256 to prevent unbounded growth.

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
…ly set keys (paritytech#11197)

Tracks whether session keys were set externally (via `SessionInterface`,
e.g. from AH) or locally.
Transitions between the two paths correctly manage the key deposit and
consumer ref in both directions.

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
…1223)

Fix failing semver check due to old compiled-in cargo in parity-publish
by:
1. Upgrading `parity-publish` to the latest version.
2. Fixing its build dependencies installation with `apt-get`.

```
Error: failed to load manifest for workspace member `/__w/polkadot-sdk/polkadot-sdk/bridges/bin/runtime-common`
referenced by workspace at `/__w/polkadot-sdk/polkadot-sdk/Cargo.toml`

Caused by:
    0: failed to load manifest for dependency `bp-header-chain`
    ...
   23: failed to load manifest for dependency `pallet-revive`
   24: failed to parse manifest at `/__w/polkadot-sdk/polkadot-sdk/substrate/frame/revive/Cargo.toml`
   25: feature `edition2024` is required
       
       The package requires the Cargo feature called `edition2024`, but that feature is not stabilized in this version of Cargo (1.83.0).
       Consider adding `cargo-features = ["edition2024"]` to the top of Cargo.toml (above the [package] table) to tell Cargo you are opting in to use this unstable feature.
```
This PR brings litep2p
[v0.13.1](https://github.com/paritytech/litep2p/releases/tag/v0.13.1) to
polkadot-sdk. The improvements include:

1. When dialing remote peers, all addresses from the DHT are tried,
starting from the public addresses. Before litep2p v0.13.1, only up to 8
addresses were tried, leading to dial failures when due to
misconfiguration there was a lot of private addresses in the DHT.
2. Protocols are now notified about connected peers before the library
user, fixing failures in opening substreams when the user command
arrived before the connection event.
3. Ping protocol implementation now conforms to the spec. This improves
the connection stability between polkadot-sdk and
[smoldot](https://github.com/smol-dot/smoldot) dramatically. Before this
PR, smoldot always disconnected polkadot-sdk peers every 15 seconds for
5 seconds due to failed pings.

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Closes: paritytech#11205

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Lukasz Rubaszewski <117115317+lrubasze@users.noreply.github.com>
…#11227)

## Summary

Add tests that verify the `AllowNext` reentrancy path is triggered for
zero-value `transfer` and `send` calls.

### How solc 0.8.30 handles the 2300 gas stipend

| Solidity call | value | gas passed by compiler | Stipend source |
|---|---|---|---|
| `target.transfer(amount)` | > 0 | `0` | EVM adds 2300 automatically |
| `target.send(amount)` | > 0 | `0` | EVM adds 2300 automatically |
| `target.transfer(0)` | 0 | `2300` | Compiler injects explicitly |
| `target.send(0)` | 0 | `2300` | Compiler injects explicitly |
| `target.call{value: v}("")` | any | remaining gas | No stipend
(forwards all gas) |

The zero-value case is the one detected by our `gas_limit ==
CALL_STIPEND` heuristic, which triggers `AllowNext`.

## Changes

- Add `testTransferZero` / `testSendZero` to `Stipends.sol` fixture —
these call `transfer(0)` and `send(0)` on EOA, DoNothingReceiver, and
SimpleReceiver
- Add corresponding Rust tests that exercise the `AllowNext` path
- Add trace logs to the call stipend match for debugging

## Test plan

- [x] `evm_call_stipends_work_for_transfer_zero` passes, logs show
`gas_limit=2300` → `AllowNext`
- [x] `evm_call_stipends_work_for_send_zero` passes, logs show
`gas_limit=2300` → `AllowNext`

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Fixes paritytech/contract-issues#206

This PR enables the call_invalid_opcode test, which verifies that the
INVALID opcode consumes all forwarded gas when executed in a nested
call. The underlying issue was fixed in the following PRs:
paritytech/revive#433
paritytech#9997

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Robert van Eerdewijk <robertvaneerdewijk@gmail.com>
At the same time this prepares Substrate runtimes for PolkaVM 64bit
support.

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
…aritytech#11222)

Replace MinSetKeysBond with a fungible hold deposit (KeyDeposit) which
ties the cost directly to the storage used: held on set_keys, released
on purge_keys.

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Ankan <10196091+Ank4n@users.noreply.github.com>
Closes paritytech#64

This PR implements approach 4 outlined in the issue and
polkadot-fellows/RFCs#123.

Unresolved questions:
- [x] Does the `CallContext::{Offchain, Onchain}` determine whether it's
runtime calls / (block production or import)?
- [x] dryRun RPC call will not work properly on the block setting the
pending code, right? Is that a problem? A: No, transactions are getting
invalidated any way by runtime upgrades because the spec version changes
- [X] Do we want to pass `IgnorePendingCode` regardless in the higher
level APIs? No
- [x] Do we want to emit an event when pending code is set?
- [x] Should the system_version check also be done on the node side
(block production and import)?
- [x] What is the best place to call `maybe_apply_pending_code_upgrade`?

TODO:
- [x] Fix failing tests
- [x] New unit tests
- [ ] e2e tests also for PVF upgrade
- [x] make sure this
paritytech#64 (comment)
is not a problem

---------

Co-authored-by: Dmitry Sinyavin <dmitry.sinyavin@parity.io>
Co-authored-by: s0me0ne-unkn0wn <48632512+s0me0ne-unkn0wn@users.noreply.github.com>
Co-authored-by: Bastian Köcher <git@kchr.de>
Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
(based on paritytech#10789)

Migrate tests:
- parachains_smoke_test (0001-parachains-smoke-test.zndsl)
- deregister_register_validator_smoke_test
(0003-deregister-register-validator-smoke.zndsl)
- coretime_smoke_test (0004-coretime-smoke-test.zndsl)
- precompile_pvf_smoke_test (0005-precompile-pvf-smoke.zndsl)

Removed:
- 0002-parachains-parachains-upgrade-smoke (since this is tested in
_cumulus_ workflow)

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Sebastian Kunert <skunert49@gmail.com>
@timwu20 timwu20 force-pushed the tim/webrtc-integration branch from 325ab1d to e3f7099 Compare March 4, 2026 04:02
mokita-j and others added 3 commits March 4, 2026 10:07
# Description

Fix evm_sized benchmark helper to use proper EVM init code instead of
raw runtime bytecode.

Previously, `evm_sized(size) `created a Vec of size `STOP` opcodes and
passed it directly as the contract code. However, in the EVM deployment
model the code supplied is init code (constructor), not runtime code.
The EVM executes the init code and whatever it `RETURN`s becomes the
stored runtime code. Passing raw `STOP` bytes meant the init code would
immediately halt and return nothing, resulting in an empty contract, not
a contract of the requested size.

This PR replaces the implementation with proper EVM init code (PUSH3
size, PUSH1 0, RETURN) that returns size bytes from zero-initialized
memory, producing a runtime code blob of exactly size bytes (all 0x00 /
STOP opcodes). This makes the benchmark helper behave correctly and
produce contracts whose `PristineCode` actually matches the requested
size.

### Regenerated benchmark weights

Since the evm_sized fix changes benchmark behavior, pallet-revive
weights were regenerated from CI.

 ### Call stipend update

Changed `determine_call_stipend()` to `CALL_STIPEND + DepositEvent`
weight. The Ethereum 2300 gas stipend allows a called contract to emit a
LOG event, but the DepositEvent weight includes a per-byte surcharge
that can exceed 2300 gas worth of evm_opcode weight. The stipend now
covers both the base gas operations and emitting an event.
Added reentrancy tests verifying that the stipend prevents a malicious
receiver from calling back into the sender via transfer or send.

### Expected differential test failures

12 revert.sol differential tests (6 cases × 2 compiler modes) added to
the expectations file. The weight regeneration changed
`ref_time_per_fuel`. The tests are failing with `OutofGas` error.

# Review Notes
  The new init code is 7 bytes:
```
  PUSH3 <b1> <b2> <b3>   // push the desired runtime code size (up to 16M)
  PUSH1 0x00              // push memory offset 0
  RETURN                  // return size bytes from offset 0
```

EVM memory is zero-initialized, so RETURN(0, size) produces size bytes
of 0x00 (STOP opcode). This runtime code is what gets stored in
PristineCode and loaded on every subsequent call.
The size is encoded as 3 bytes (PUSH3), supporting sizes up to ~16M
which is well above any practical benchmark need.

---------

Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
# Description

Related to paritytech#10850

CLI tool for benchmarking statement store latency at scale. Clients form
a ring topology where each subscribes to statements from the next
client, measuring propagation latency across the network.

This tool is designed to run as a Kubernetes Job, with multiple
instances running concurrently to simulate realistic load on
statement-store nodes.

---------

Signed-off-by: Alexandru Gheorghe <alexandru.gheorghe@parity.io>
Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Alexandru Gheorghe <49718502+alexggh@users.noreply.github.com>
Co-authored-by: Alexandru Gheorghe <alexandru.gheorghe@parity.io>
paritytech#11252)

This test is most of the time failing, because the _internal monitoring
of zombienet_ is tear down the network when we restart the node. This pr
disable this monitoring (tracking the needed changes in zombienet-sdk
[here](paritytech/zombienet-sdk#519)).


https://paritytech.github.io/zombienet-jobs-monitor/web/?search=zombienet-polkadot-collators-basic-reputation-persistence&startDate=2026-02-24&endDate=2026-03-03&mergeQueueOnly=true

<img width="1028" height="183" alt="Image"
src="https://github.com/user-attachments/assets/13e53f1b-89a9-487d-a2f5-1c1576f0e42e"
/>
@timwu20 timwu20 force-pushed the tim/webrtc-integration branch from e3f7099 to 1caea58 Compare March 4, 2026 19:42
@timwu20 timwu20 force-pushed the tim/webrtc-integration branch from 1caea58 to 7f06651 Compare March 4, 2026 20:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.