Skip to content
Snippets Groups Projects
  1. Feb 19, 2025
    • castillax's avatar
      Add note for organization contributors about creating branches directly (#7611) · a48b3894
      castillax authored
      # Description
      
      * This PR adds a note to the CONTRIBUTING.md file to inform contributors
      who are part of the organization that they do not need to fork the
      repository. Instead, they can create a branch directly in the repository
      to send a pull request.
      
      ## Changes
      
      Added a note under the "What?" section in CONTRIBUTING.md to clarify
      that organization contributors can create branches directly in the
      repository.
      a48b3894
  2. Feb 18, 2025
  3. Feb 17, 2025
    • Ankan's avatar
      [Staking] Bounded Slashing: Paginated Offence Processing & Slash Application (#7424) · dda2cb59
      Ankan authored
      
      closes https://github.com/paritytech/polkadot-sdk/issues/3610.
      
      helps https://github.com/paritytech/polkadot-sdk/issues/6344, but need
      to migrate storage `Offences::Reports` before we can remove exposure
      dependency in RC pallets.
      
      replaces https://github.com/paritytech/polkadot-sdk/issues/6788.
      
      ## Context  
      Slashing in staking is unbounded currently, which is a major blocker
      until staking can move to a parachain (AH).
      
      ### Current Slashing Process (Unbounded)  
      
      1. **Offence Reported**  
      - Offences include multiple validators, each with potentially large
      exposure pages.
      - Slashes are **computed immediately** and scheduled for application
      after **28 eras**.
      
      2. **Slash Applied**  
      - All unapplied slashes are executed in **one block** at the start of
      the **28th era**. This is an **unbounded operation**.
      
      
      ### Proposed Slashing Process (Bounded)  
      
      1. **Offence Queueing**  
         - Offences are **queued** after basic sanity checks.  
      
      2. **Paged Offence Processing (Computing Slash)**  
         - Slashes are **computed one validator exposure page at a time**.  
         - **Unapplied slashes** are stored in a **double map**:  
           - **Key 1 (k1):** `EraIndex`  
      - **Key 2 (k2):** `(Validator, SlashFraction, PageIndex)` — a unique
      identifier for each slash page
      
      3. **Paged Slash Application**  
      - Slashes are **applied one page at a time** across multiple blocks.
      - Slash application starts at the **27th era** (one era earlier than
      before) to ensure all slashes are applied **before stakers can unbond**
      (which starts from era 28 onwards).
      
      ---
      
      ## Worst-Case Block Calculation for Slash Application  
      
      ### Polkadot:  
      - **1 era = 24 hours**, **1 block = 6s** → **14,400 blocks/era**  
      - On parachains (**12s blocks**) → **7,200 blocks/era**  
      
      ### Kusama:  
      - **1 era = 6 hours**, **1 block = 6s** → **3,600 blocks/era**  
      - On parachains (**12s blocks**) → **1,800 blocks/era**  
      
      ### Worst-Case Assumptions:  
      - **Total stakers:** 40,000 nominators, 1000 validators. (Polkadot
      currently has ~23k nominators and 500 validators)
      - **Max slashed:** 50% so 20k nominators, 250 validators.  
      - **Page size:** Validators with multiple page: (512 + 1)/2 = 256 ,
      Validators with single page: 1
      
      ### Calculation:  
      There might be a more accurate way to calculate this worst-case number,
      and this estimate could be significantly higher than necessary, but it
      shouldn’t exceed this value.
      
      Blocks needed: 250 + 20k/256 = ~330 blocks.
      
      ##  *Potential Improvement:*  
      - Consider adding an **Offchain Worker (OCW)** task to further optimize
      slash application in future updates.
      - Dynamically batch unapplied slashes based on number of nominators in
      the page, or process until reserved weight limit is exhausted.
      
      ----
      ## Summary of Changes  
      
      ### Storage  
      - **New:**  
        - `OffenceQueue` *(StorageDoubleMap)*  
          - **K1:** Era  
          - **K2:** Offending validator account  
          - **V:** `OffenceRecord`  
        - `OffenceQueueEras` *(StorageValue)*  
          - **V:** `BoundedVec<EraIndex, BoundingDuration>`  
        - `ProcessingOffence` *(StorageValue)*  
          - **V:** `(Era, offending validator account, OffenceRecord)`  
      
      - **Changed:**  
        - `UnappliedSlashes`:  
          - **Old:** `StorageMap<K -> Era, V -> Vec<UnappliedSlash>>`  
      - **New:** `StorageDoubleMap<K1 -> Era, K2 -> (validator_acc, perbill,
      page_index), V -> UnappliedSlash>`
      
      ### Events  
      - **New:**  
        - `SlashComputed { offence_era, slash_era, offender, page }`  
        - `SlashCancelled { slash_era, slash_key, payout }`  
      
      ### Error  
      - **Changed:**  
        - `InvalidSlashIndex` → Renamed to `InvalidSlashRecord`  
      - **Removed:**  
        - `NotSortedAndUnique`  
      - **Added:**  
        - `EraNotStarted`  
      
      ### Call  
      - **Changed:**  
        - `cancel_deferred_slash(era, slash_indices: Vec<u32>)`  
          → Now takes `Vec<(validator_acc, slash_fraction, page_index)>`  
      - **New:**  
      - `apply_slash(slash_era, slash_key: (validator_acc, slash_fraction,
      page_index))`
      
      ### Runtime Config  
      - `FullIdentification` is now set to a unit type (`()`) / null identity,
      replacing the previous exposure type for all runtimes using
      `pallet_session::historical`.
      
      ## TODO
      - [x] Fixed broken `CancelDeferredSlashes`.
      - [x] Ensure on_offence called only with validator account for
      identification everywhere.
      - [ ] Ensure we never need to read full exposure.
      - [x] Tests for multi block processing and application of slash.
      - [x] Migrate UnappliedSlashes 
      - [x] Bench (crude, needs proper bench as followup)
        - [x] on_offence()
        - [x] process_offence()
        - [x] apply_slash()
       
       
      ## Followups (tracker
      [link](https://github.com/paritytech/polkadot-sdk/issues/7596))
      - [ ] OCW task to process offence + apply slashes.
      - [ ] Minimum time for governance to cancel deferred slash.
      - [ ] Allow root or staking admin to add a custom slash.
      - [ ] Test HistoricalSession proof works fine with eras before removing
      exposure as full identity.
      - [ ] Properly bench offence processing and slashing.
      - [ ] Handle Offences::Reports migration when removing validator
      exposure as identity.
      
      ---------
      
      Co-authored-by: default avatarGonçalo Pestana <g6pestana@gmail.com>
      Co-authored-by: command-bot <>
      Co-authored-by: default avatarKian Paimani <5588131+kianenigma@users.noreply.github.com>
      Co-authored-by: default avatarGuillaume Thiolliere <gui.thiolliere@gmail.com>
      Co-authored-by: default avatarkianenigma <kian@parity.io>
      Co-authored-by: default avatarGiuseppe Re <giuseppe.re@parity.io>
      Co-authored-by: default avatarcmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
      dda2cb59
    • Qiwei Yang's avatar
      Remove `yamux_window_size` from network config (#7014) · 6b6dae87
      Qiwei Yang authored
      # Description
      
      resolve #6468
      
      
      
      # Checklist
      
      * [x] My PR includes a detailed description as outlined in the
      "Description" and its two subsections above.
      * [x] My PR follows the [labeling requirements](
      
      https://github.com/paritytech/polkadot-sdk/blob/master/docs/contributor/CONTRIBUTING.md#Process
      ) of this project (at minimum one label for `T` required)
      * External contributors: ask maintainers to put the right label on your
      PR.
      * [x] I have made corresponding changes to the documentation (if
      applicable)
      * [x] I have added tests that prove my fix is effective or that my
      feature works (if applicable)
      
      ---------
      
      Co-authored-by: command-bot <>
      6b6dae87
    • nprt's avatar
      implement web3_clientVersion (#7580) · d61032b9
      nprt authored
      
      Implements the `web3_clientVersion` method. This is a common requirement
      for external Ethereum libraries when querying a client.
      
      Fixes paritytech/contract-issues#26.
      
      ---------
      
      Co-authored-by: default avatarcmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
      d61032b9
    • Adrian Catangiu's avatar
      integration tests: add more emulated bridge tests (#7576) · 430a016c
      Adrian Catangiu authored
      
      Add emulated e2e tests for following scenarios:
      
      Exporting native asset to another ecosystem:
      - Sending WNDs from Penpal Westend to Penpal Rococo: PPW->AHW->AHR->PPR
      - Sending WNDs from Westend Relay to Penpal Rococo: W->AHW->AHR->PPR
         Example: Westend Treasury funds something on Rococo Parachain.
      
      Importing native asset from another ecosystem to its native ecosystem:
      - Sending ROCs from Penpal Westend to Penpal Rococo: PPW->AHW->AHR->PPR
      - Sending ROCs from Penpal Westend to Rococo Relay: PPW->AHW->AHR->R
         Example: Westend Parachain returns some funds to Rococo Treasury.
      
      Signed-off-by: default avatarAdrian Catangiu <adrian@parity.io>
      430a016c
    • Alexandru Vasile's avatar
      libp2p: Enhance logging targets for granular control (#7494) · 09d37543
      Alexandru Vasile authored
      
      This PR modifies the libp2p networking-specific log targets for granular
      control (e.g., just enabling trace for req-resp).
      
      Previously, all logs were outputted to `sub-libp2p` target, flooding the
      log messages on busy validators.
      
      ### Changes
      - Discover: `sub-libp2p::discovery`
      - Notification/behaviour: `sub-libp2p::notification::behaviour`
      - Notification/handler: `sub-libp2p::notification::handler`
      - Notification/service: `sub-libp2p::notification::service`
      - Notification/upgrade: `sub-libp2p::notification::upgrade`
      - Request response: `sub-libp2p::request-response`
      
      cc @paritytech/networking
      
      ---------
      
      Signed-off-by: default avatarAlexandru Vasile <alexandru.vasile@parity.io>
      Co-authored-by: default avatarDmitry Markin <dmitry@markin.tech>
      09d37543
    • Oliver Tale-Yazdi's avatar
      [AHM] Make pallet types public (#7579) · ca91d4b5
      Oliver Tale-Yazdi authored
      
      Preparation for AHM and making stuff public.
      
      ---------
      
      Signed-off-by: default avatarOliver Tale-Yazdi <oliver.tale-yazdi@parity.io>
      Co-authored-by: default avatarcmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
      Co-authored-by: default avatarDónal Murray <donal.murray@parity.io>
      ca91d4b5
    • Daniel Olano's avatar
      Change pallet referenda TracksInfo::tracks to return an iterator (#2072) · c078d2f4
      Daniel Olano authored
      
      Returning an iterator in `TracksInfo::tracks()` instead of a static
      slice allows for more flexible implementations of `TracksInfo` that can
      use the chain storage without compromising a lot on the
      performance/memory penalty if we were to return an owned `Vec` instead.
      
      ---------
      
      Co-authored-by: default avatarPablo Andrés Dorado Suárez <hola@pablodorado.com>
      c078d2f4
    • PG Herveou's avatar
      [pallet-revive] rpc add --earliest-receipt-block (#7589) · 8cca727f
      PG Herveou authored
      
      Add a cli option to skip searching receipts for blocks older than the
      specified limit
      
      ---------
      
      Co-authored-by: default avatarcmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
      8cca727f
    • Giuseppe Re's avatar
      Bump frame-metadata v16 to 19.0.0 (#7563) · 9015a0fc
      Giuseppe Re authored
      
      Update to latest version of `frame-metadata` in order to support pallet
      view function metadata.
      
      ---------
      
      Co-authored-by: default avatarcmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
      9015a0fc
    • Pablo Andrés Dorado Suárez's avatar
      83db0474
    • rainb0w-pr0mise's avatar
      `pallet-utility: if_else` (#6321) · ead8fbdf
      rainb0w-pr0mise authored
      
      # Utility Call Fallback
      
      This introduces a new extrinsic: **`if_else`**
      
      Which first attempts to dispatch the `main` call(s). If the `main`
      call(s) fail, the `fallback` call(s) is dispatched instead. Both calls
      are executed with the same origin.
      
      In the event of a fallback failure the whole call fails with the weights
      returned.
      
      ## Use Case
      Some use cases might involve submitting a `batch` type call in either
      main, fallback or both.
      
      Resolves #6000
      
      Polkadot Address: 1HbdqutFR8M535LpbLFT41w3j7v9ptEYGEJKmc6PKpqthZ8
      
      ---------
      
      Co-authored-by: default avatarrainbow-promise <154476501+rainbow-promise@users.noreply.github.com>
      Co-authored-by: default avatarGuillaume Thiolliere <gui.thiolliere@gmail.com>
      Co-authored-by: default avatarOliver Tale-Yazdi <oliver.tale-yazdi@parity.io>
      ead8fbdf
  4. Feb 16, 2025
    • dependabot[bot]'s avatar
      Bump enumflags2 from 0.7.7 to 0.7.11 (#7426) · 0f2024f5
      dependabot[bot] authored
      
      Bumps [enumflags2](https://github.com/meithecatte/enumflags2) from 0.7.7
      to 0.7.11.
      <details>
      <summary>Release notes</summary>
      <p><em>Sourced from <a
      href="https://github.com/meithecatte/enumflags2/releases">enumflags2's
      releases</a>.</em></p>
      <blockquote>
      <h2>Release 0.7.10</h2>
      <ul>
      <li>Fix a case where the <code>#[bitflags]</code> macro would access the
      crate through <code>enumflags2::...</code> instead of
      <code>::enumflags2::...</code>. This makes the generated code more
      robust and avoids triggering the <code>unused_qualifications</code>
      lint. (<a
      href="https://redirect.github.com/meithecatte/enumflags2/issues/58">#58</a>)</li>
      <li>Rework the proc-macro to use <code>syn</code> with the
      <code>derive</code> feature (as opposed to <code>full</code>). This
      reduces the <code>cargo build</code> time for <code>enumflags2</code> by
      about 20%.</li>
      </ul>
      <h2>Release 0.7.9</h2>
      <ul>
      <li>The <code>BitFlag</code> trait now includes convenience re-exports
      for the constructors of <code>BitFlags</code>. This lets you do
      <code>MyFlag::from_bits</code> instead
      <code>BitFlags::&lt;MyFlag&gt;::from_bits</code> where the type of the
      flag cannot be inferred from context (thanks <a
      href="https://github.com/ronnodas"><code>@​ronnodas</code></a>).</li>
      <li>The documentation now calls out the fact that the implementation of
      <code>PartialOrd</code> may not be what you expect (reported by <a
      href="https://github.com/ronnodas"><code>@​ronnodas</code></a>).</li>
      </ul>
      <h2>Release 0.7.8</h2>
      <ul>
      <li>New API: <code>BitFlags::set</code>. Sets the value of a specific
      flag to that of the <code>bool</code> passed as argument. (thanks, <a
      href="https://github.com/m4dh0rs3"><code>@​m4dh0rs3</code></a>)</li>
      <li><code>BitFlags</code> now implements <code>PartialOrd</code> and
      <code>Ord</code>, to make it possible to use it as a key in a
      <code>BTreeMap</code>.</li>
      <li>The bounds on the implementation of <code>Hash</code> got improved,
      so that it is possible to use it in code generic over <code>T:
      BitFlag</code>.</li>
      </ul>
      </blockquote>
      </details>
      <details>
      <summary>Commits</summary>
      <ul>
      <li><a
      href="https://github.com/meithecatte/enumflags2/commit/cc09d89bc4ef20fbf4c8016a40e160fe47b2d042"><code>cc09d89</code></a>
      Release 0.7.11</li>
      <li><a
      href="https://github.com/meithecatte/enumflags2/commit/24f03afbd0c23adaf0873a941600bd0b3b7ba302"><code>24f03af</code></a>
      make_bitflags: Allow omitting { } for singular flags</li>
      <li><a
      href="https://github.com/meithecatte/enumflags2/commit/754a8de723c54c79b2a8ab6993adc59b478273b0"><code>754a8de</code></a>
      Expand some aspects of the documentation</li>
      <li><a
      href="https://github.com/meithecatte/enumflags2/commit/aec9558136a53a952f39b74a4a0688a31423b815"><code>aec9558</code></a>
      Update ui tests for latest nightly</li>
      <li><a
      href="https://github.com/meithecatte/enumflags2/commit/8205d5ba03ccc9ccb7407693440f8e47f8ceeeb4"><code>8205d5b</code></a>
      Release 0.7.10</li>
      <li><a
      href="https://github.com/meithecatte/enumflags2/commit/1c78f097165436d043f48b9f6183501f84ff965f"><code>1c78f09</code></a>
      Run clippy with only the declared syn features</li>
      <li><a
      href="https://github.com/meithecatte/enumflags2/commit/561fe5eaf7ba6daeb267a41343f6def2a8b86ad7"><code>561fe5e</code></a>
      Emit a proper error if bitflags enum is generic</li>
      <li><a
      href="https://github.com/meithecatte/enumflags2/commit/f3bb174beb27a1d1ef28dcf03fb607a3bb7c6e55"><code>f3bb174</code></a>
      Avoid depending on syn's <code>full</code> feature flag</li>
      <li><a
      href="https://github.com/meithecatte/enumflags2/commit/e01808be0f151ac251121833d3225debd253ca3a"><code>e01808b</code></a>
      Always use absolute paths in generated proc macro code</li>
      <li><a
      href="https://github.com/meithecatte/enumflags2/commit/f08cd33a18511608f4a881e53c4f4c1b951301e0"><code>f08cd33</code></a>
      Specify the Rust edition for the whole test package</li>
      <li>Additional commits viewable in <a
      href="https://github.com/meithecatte/enumflags2/compare/v0.7.7...v0.7.11">compare
      view</a></li>
      </ul>
      </details>
      <br />
      
      
      [![Dependabot compatibility
      score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=enumflags2&package-manager=cargo&previous-version=0.7.7&new-version=0.7.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
      
      Dependabot will resolve any conflicts with this PR as long as you don't
      alter it yourself. You can also trigger a rebase manually by commenting
      `@dependabot rebase`.
      
      [//]: # (dependabot-automerge-start)
      [//]: # (dependabot-automerge-end)
      
      ---
      
      <details>
      <summary>Dependabot commands and options</summary>
      <br />
      
      You can trigger Dependabot actions by commenting on this PR:
      - `@dependabot rebase` will rebase this PR
      - `@dependabot recreate` will recreate this PR, overwriting any edits
      that have been made to it
      - `@dependabot merge` will merge this PR after your CI passes on it
      - `@dependabot squash and merge` will squash and merge this PR after
      your CI passes on it
      - `@dependabot cancel merge` will cancel a previously requested merge
      and block automerging
      - `@dependabot reopen` will reopen this PR if it is closed
      - `@dependabot close` will close this PR and stop Dependabot recreating
      it. You can achieve the same result by closing it manually
      - `@dependabot show <dependency name> ignore conditions` will show all
      of the ignore conditions of the specified dependency
      - `@dependabot ignore this major version` will close this PR and stop
      Dependabot creating any more for this major version (unless you reopen
      the PR or upgrade to it yourself)
      - `@dependabot ignore this minor version` will close this PR and stop
      Dependabot creating any more for this minor version (unless you reopen
      the PR or upgrade to it yourself)
      - `@dependabot ignore this dependency` will close this PR and stop
      Dependabot creating any more for this dependency (unless you reopen the
      PR or upgrade to it yourself)
      
      
      </details>
      
      Signed-off-by: default avatardependabot[bot] <support@github.com>
      Co-authored-by: default avatardependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
      Co-authored-by: default avatarBastian Köcher <git@kchr.de>
      0f2024f5
  5. Feb 15, 2025
  6. Feb 14, 2025
    • Kian Paimani's avatar
      [AHM] Multi-block staking election pallet (#7282) · a025562b
      Kian Paimani authored
      ## Multi Block Election Pallet
      
      This PR adds the first iteration of the multi-block staking pallet. 
      
      From this point onwards, the staking and its election provider pallets
      are being customized to work in AssetHub. While usage in solo-chains is
      still possible, it is not longer the main focus of this pallet. For a
      safer usage, please fork and user an older version of this pallet.
      
      ---
      
      ## Replaces
      
      - [x] https://github.com/paritytech/polkadot-sdk/pull/6034 
      - [x] https://github.com/paritytech/polkadot-sdk/pull/5272
      
      ## Related PRs: 
      
      - [x] https://github.com/paritytech/polkadot-sdk/pull/7483
      - [ ] https://github.com/paritytech/polkadot-sdk/pull/7357
      - [ ] https://github.com/paritytech/polkadot-sdk/pull/7424
      - [ ] https://github.com/paritytech/polkadot-staking-miner/pull/955
      
      This branch can be periodically merged into
      https://github.com/paritytech/polkadot-sdk/pull/7358 ->
      https://github.com/paritytech/polkadot-sdk/pull/6996
      
      ## TODOs: 
      
      - [x] rebase to master 
      - Benchmarking for staking critical path
        - [x] snapshot
        - [x] election result
      - Benchmarking for EPMB critical path
        - [x] snapshot
        - [x] verification
        - [x] submission
        - [x] unsigned submission
        - [ ] election results fetching
      - [ ] Fix deletion weights. Either of
        - [ ] Garbage collector + lazy removal of all paged storage items
        - [ ] Confirm that deletion is small PoV footprint.
      - [ ] Move election prediction to be push based. @tdimitrov 
      - [ ] integrity checks for bounds 
      - [ ] Properly benchmark this as a part of CI -- for now I will remove
      them as they are too slow
      - [x] add try-state to all pallets
      - [x] Staking to allow genesis dev accounts to be created internally
      - [x] Decouple miner config so @niklasad1 can work on the miner
      72841b73
      - [x] duplicate snapshot page reported by @niklasad1
      
       
      - [ ] https://github.com/paritytech/polkadot-sdk/pull/6520 or equivalent
      -- during snapshot, `VoterList` must be locked
      - [ ] Move target snapshot to a separate block
      
      ---------
      
      Co-authored-by: default avatarGonçalo Pestana <g6pestana@gmail.com>
      Co-authored-by: default avatarAnkan <10196091+Ank4n@users.noreply.github.com>
      Co-authored-by: command-bot <>
      Co-authored-by: default avatarGuillaume Thiolliere <gui.thiolliere@gmail.com>
      Co-authored-by: default avatarGiuseppe Re <giuseppe.re@parity.io>
      Co-authored-by: default avatarcmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
      a025562b
    • Alexandre R. Baldé's avatar
      Add minor improvements to `chill_other` test (#7553) · c1915afc
      Alexandre R. Baldé authored
      
      # Description
      
      https://github.com/open-web3-stack/polkadot-ecosystem-tests/pull/174
      showed the test for the `pallet_staking::chill_other` extrinsic could be
      more exhaustive.
      
      This PR adds those checks, and also a few more to another test related
      to `chill_other`,
      `pallet_staking::tests::change_of_absolute_max_nominations`.
      
      ## Integration
      
      N/A
      
      ## Review Notes
      
      N/A
      
      ---------
      
      Co-authored-by: default avatarBastian Köcher <git@kchr.de>
      c1915afc
    • dependabot[bot]'s avatar
      Bump the ci_dependencies group across 1 directory with 6 updates (#7555) · 8779c606
      dependabot[bot] authored
      Bumps the ci_dependencies group with 6 updates in the / directory:
      
      | Package | From | To |
      | --- | --- | --- |
      |
      [lycheeverse/lychee-action](https://github.com/lycheeverse/lychee-action)
      | `2.1.0` | `2.3.0` |
      | [Swatinem/rust-cache](https://github.com/swatinem/rust-cache) |
      `2.7.5` | `2.7.7` |
      |
      [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request)
      | `7.0.5` | `7.0.6` |
      |
      [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action)
      | `3.7.1` | `3.9.0` |
      |
      [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials)
      | `4.0.2` | `4.1.0` |
      |
      [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance)
      | `1.4.3` | `2.2.0` |
      
      
      Updates `lycheeverse/lychee-action` from 2.1.0 to 2.3.0
      <details>
      <summary>Release notes</summary>
      <p><em>Sourced from <a
      href="https://github.com/lycheeverse/lychee-action/releases">lycheeverse/lychee-action's
      releases</a>.</em></p>
      <blockquote>
      <h2>Version 2.3.0</h2>
      <h2>What's Changed</h2>
      <ul>
      <li>feat: support ARM workers by <a
      href="https://github.com/LesnyRumcajs"><code>@​LesnyRumcajs</code></a>
      in <a
      href="https://redirect.github.com/lycheeverse/lychee-action/pull/273">lycheeverse/lychee-action#273</a></li>
      </ul>
      <h2>New Contributors</h2>
      <ul>
      <li><a
      href="https://github.com/LesnyRumcajs"><code>@​LesnyRumcajs</code></a>
      made their first contribution in <a
      href="https://redirect.github.com/lycheeverse/lychee-action/pull/273">lycheeverse/lychee-action#273</a></li>
      </ul>
      <p><strong>Full Changelog</strong>: <a
      href="https://github.com/lycheeverse/lychee-action/compare/v2...v2.3.0">https://github.com/lycheeverse/lychee-action/compare/v2...v2.3.0</a></p>
      <h2>Version 2.2.0</h2>
      <h2>What's Changed</h2>
      <ul>
      <li>Fix if expressions in GitHub actions by <a
      href="https://github.com/YDX-2147483647"><code>@​YDX-2147483647</code></a>
      in <a
      href="https://redirect.github.com/lycheeverse/lychee-action/pull/265">lycheeverse/lychee-action#265</a></li>
      <li>Update README.md to include continue-on-error: true in action by <a
      href="https://github.com/psobolewskiPhD"><code>@​psobolewskiPhD</code></a>
      in <a
      href="https://redirect.github.com/lycheeverse/lychee-action/pull/267">lycheeverse/lychee-action#267</a></li>
      <li>Bump default version to latest (0.18.0) by <a
      href="https://github.com/trask"><code>@​trask</code></a> in <a
      href="https://redirect.github.com/lycheeverse/lychee-action/pull/269">lycheeverse/lychee-action#269</a></li>
      </ul>
      <h2>New Contributors</h2>
      <ul>
      <li><a
      href="https://github.com/psobolewskiPhD"><code>@​psobolewskiPhD</code></a>
      made their first contribution in <a
      href="https://redirect.github.com/lycheeverse/lychee-action/pull/267">lycheeverse/lychee-action#267</a></li>
      <li><a href="https://github.com/trask"><code>@​trask</code></a> made
      their first contribution in <a
      href="https://redirect.github.com/lycheeverse/lychee-action/pull/269">lycheeverse/lychee-action#269</a></li>
      </ul>
      <p><strong>Full Changelog</strong>: <a
      href="https://github.com/lycheeverse/lychee-action/compare/v2...v2.2.0">https://github.com/lycheeverse/lychee-action/compare/v2...v2.2.0</a></p>
      </blockquote>
      </details>
      <details>
      <summary>Commits</summary>
      <ul>
      <li><a
      href="https://github.com/lycheeverse/lychee-action/commit/f613c4a64e50d792e0b31ec34bbcbba12263c6a6"><code>f613c4a</code></a>
      feat: support ARM workers (<a
      href="https://redirect.github.com/lycheeverse/lychee-action/issues/273">#273</a>)</li>
      <li><a
      href="https://github.com/lycheeverse/lychee-action/commit/f796c8b7d468feb9b8c0a46da3fac0af6874d374"><code>f796c8b</code></a>
      Bump default version to latest (0.18.0) (<a
      href="https://redirect.github.com/lycheeverse/lychee-action/issues/269">#269</a>)</li>
      <li><a
      href="https://github.com/lycheeverse/lychee-action/commit/4aa18b6ccdac05029fab067313a6a04f941e6494"><code>4aa18b6</code></a>
      Update README.md to include continue-on-error: true in action (<a
      href="https://redirect.github.com/lycheeverse/lychee-action/issues/267">#267</a>)</li>
      <li><a
      href="https://github.com/lycheeverse/lychee-action/commit/5cd5ba7877bce8b3973756ae3c9474ce1e50be2f"><code>5cd5ba7</code></a>
      Fix if expressions in GitHub actions (<a
      href="https://redirect.github.com/lycheeverse/lychee-action/issues/265">#265</a>)</li>
      <li>See full diff in <a
      href="https://github.com/lycheeverse/lychee-action/compare/f81112d0d2814ded911bd23e3beaa9dda9093915...f613c4a64e50d792e0b31ec34bbcbba12263c6a6">compare
      view</a></li>
      </ul>
      </details>
      <br />
      
      Updates `Swatinem/rust-cache` from 2.7.5 to 2.7.7
      <details>
      <summary>Release notes</summary>
      <p><em>Sourced from <a
      href="https://github.com/swatinem/rust-cache/releases">Swatinem/rust-cache's
      releases</a>.</em></p>
      <blockquote>
      <h2>v2.7.7</h2>
      <p><strong>Full Changelog</strong>: <a
      href="https://github.com/Swatinem/rust-cache/compare/v2.7.6...v2.7.7">https://github.com/Swatinem/rust-cache/compare/v2.7.6...v2.7.7</a></p>
      <h2>v2.7.6</h2>
      <h2>What's Changed</h2>
      <ul>
      <li>Updated artifact upload action to v4 by <a
      href="https://github.com/guylamar2006"><code>@​guylamar2006</code></a>
      in <a
      href="https://redirect.github.com/Swatinem/rust-cache/pull/212">Swatinem/rust-cache#212</a></li>
      <li>Adds an option to do lookup-only of the cache by <a
      href="https://github.com/danlec"><code>@​danlec</code></a> in <a
      href="https://redirect.github.com/Swatinem/rust-cache/pull/217">Swatinem/rust-cache#217</a></li>
      <li>add runner OS in cache key by <a
      href="https://github.com/rnbguy"><code>@​rnbguy</code></a> in <a
      href="https://redirect.github.com/Swatinem/rust-cache/pull/220">Swatinem/rust-cache#220</a></li>
      <li>Allow opting out of caching $CARGO_HOME/bin. by <a
      href="https://github.com/benjyw"><code>@​benjyw</code></a> in <a
      href="https://redirect.github.com/Swatinem/rust-cache/pull/216">Swatinem/rust-cache#216</a></li>
      </ul>
      <h2>New Contributors</h2>
      <ul>
      <li><a
      href="https://github.com/guylamar2006"><code>@​guylamar2006</code></a>
      made their first contribution in <a
      href="https://redirect.github.com/Swatinem/rust-cache/pull/212">Swatinem/rust-cache#212</a></li>
      <li><a href="https://github.com/danlec"><code>@​danlec</code></a> made
      their first contribution in <a
      href="https://redirect.github.com/Swatinem/rust-cache/pull/217">Swatinem/rust-cache#217</a></li>
      <li><a href="https://github.com/rnbguy"><code>@​rnbguy</code></a> made
      their first contribution in <a
      href="https://redirect.github.com/Swatinem/rust-cache/pull/220">Swatinem/rust-cache#220</a></li>
      <li><a href="https://github.com/benjyw"><code>@​benjyw</code></a> made
      their first contribution in <a
      href="https://redirect.github.com/Swatinem/rust-cache/pull/216">Swatinem/rust-cache#216</a></li>
      </ul>
      <p><strong>Full Changelog</strong>: <a
      href="https://github.com/Swatinem/rust-cache/compare/v2.7.5...v2.7.6">https://github.com/Swatinem/rust-cache/compare/v2.7.5...v2.7.6</a></p>
      </blockquote>
      </details>
      <details>
      <summary>Commits</summary>
      <ul>
      <li><a
      href="https://github.com/Swatinem/rust-cache/commit/f0deed1e0edfc6a9be95417288c0e1099b1eeec3"><code>f0deed1</code></a>
      2.7.7</li>
      <li><a
      href="https://github.com/Swatinem/rust-cache/commit/008623fb834cadde1d7ccee1a26dc84acb660ec3"><code>008623f</code></a>
      also cache <code>cargo install</code> metadata</li>
      <li><a
      href="https://github.com/Swatinem/rust-cache/commit/720f7e45ccee46c12a7b1d7bed2ab733be9be5a1"><code>720f7e4</code></a>
      2.7.6</li>
      <li><a
      href="https://github.com/Swatinem/rust-cache/commit/4b1f006ad2112a11d66969e219444096a98af937"><code>4b1f006</code></a>
      update dependencies, in particular <code>@actions/cache</code></li>
      <li><a
      href="https://github.com/Swatinem/rust-cache/commit/e8e63cdbf2788df3801e6f9a81516b2ca8391886"><code>e8e63cd</code></a>
      Allow opting out of caching $CARGO_HOME/bin. (<a
      href="https://redirect.github.com/swatinem/rust-cache/issues/216">#216</a>)</li>
      <li><a
      href="https://github.com/Swatinem/rust-cache/commit/9a2e0d32122f6883cb48fad7a1ac5c49f25b7661"><code>9a2e0d3</code></a>
      add runner OS in cache key (<a
      href="https://redirect.github.com/swatinem/rust-cache/issues/220">#220</a>)</li>
      <li><a
      href="https://github.com/Swatinem/rust-cache/commit/c00f3025caeee0e9c78c18c43de11ab15fd3b486"><code>c00f302</code></a>
      Adds an option to do lookup-only of the cache (<a
      href="https://redirect.github.com/swatinem/rust-cache/issues/217">#217</a>)</li>
      <li><a
      href="https://github.com/Swatinem/rust-cache/commit/68b3cb7503c78e67dae8373749990a220eb65352"><code>68b3cb7</code></a>
      Updated artifact upload action to v4 (<a
      href="https://redirect.github.com/swatinem/rust-cache/issues/212">#212</a>)</li>
      <li>See full diff in <a
      href="https://github.com/swatinem/rust-cache/compare/v2.7.5...f0deed1e0edfc6a9be95417288c0e1099b1eeec3">compare
      view</a></li>
      </ul>
      </details>
      <br />
      
      Updates `peter-evans/create-pull-request` from 7.0.5 to 7.0.6
      <details>
      <summary>Release notes</summary>
      <p><em>Sourced from <a
      href="https://github.com/peter-evans/create-pull-request/releases">peter-evans/create-pull-request's
      releases</a>.</em></p>
      <blockquote>
      <h2>Create Pull Request v7.0.6</h2>
      <p>:gear:
      
      ️ Fixes an issue with commit signing where unicode characters in
      file paths were not preserved.</p>
      <h2>What's Changed</h2>
      <ul>
      <li>build(deps-dev): bump <code>@​vercel/ncc</code> from 0.38.1 to
      0.38.2 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3365">peter-evans/create-pull-request#3365</a></li>
      <li>Update distribution by <a
      href="https://github.com/actions-bot"><code>@​actions-bot</code></a> in
      <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3370">peter-evans/create-pull-request#3370</a></li>
      <li>build(deps): bump
      <code>@​octokit/plugin-rest-endpoint-methods</code> from 13.2.4 to
      13.2.5 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3375">peter-evans/create-pull-request#3375</a></li>
      <li>build(deps-dev): bump <code>@​types/node</code> from 18.19.50 to
      18.19.54 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3376">peter-evans/create-pull-request#3376</a></li>
      <li>build(deps): bump <code>@​octokit/plugin-paginate-rest</code> from
      11.3.3 to 11.3.5 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3377">peter-evans/create-pull-request#3377</a></li>
      <li>Update distribution by <a
      href="https://github.com/actions-bot"><code>@​actions-bot</code></a> in
      <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3388">peter-evans/create-pull-request#3388</a></li>
      <li>build(deps-dev): bump <code>@​types/node</code> from 18.19.54 to
      18.19.55 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3400">peter-evans/create-pull-request#3400</a></li>
      <li>build(deps): bump <code>@​actions/core</code> from 1.10.1 to 1.11.1
      by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>
      in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3401">peter-evans/create-pull-request#3401</a></li>
      <li>build(deps): bump
      <code>@​octokit/plugin-rest-endpoint-methods</code> from 13.2.5 to
      13.2.6 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3403">peter-evans/create-pull-request#3403</a></li>
      <li>build(deps-dev): bump eslint-plugin-import from 2.30.0 to 2.31.0 by
      <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
      <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3402">peter-evans/create-pull-request#3402</a></li>
      <li>build(deps): bump <code>@​octokit/plugin-throttling</code> from
      9.3.1 to 9.3.2 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3404">peter-evans/create-pull-request#3404</a></li>
      <li>Update distribution by <a
      href="https://github.com/actions-bot"><code>@​actions-bot</code></a> in
      <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3423">peter-evans/create-pull-request#3423</a></li>
      <li>build(deps-dev): bump typescript from 5.6.2 to 5.6.3 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3441">peter-evans/create-pull-request#3441</a></li>
      <li>build(deps): bump undici from 6.19.8 to 6.20.1 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3442">peter-evans/create-pull-request#3442</a></li>
      <li>Update distribution by <a
      href="https://github.com/actions-bot"><code>@​actions-bot</code></a> in
      <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3451">peter-evans/create-pull-request#3451</a></li>
      <li>build(deps-dev): bump <code>@​types/node</code> from 18.19.55 to
      18.19.58 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3457">peter-evans/create-pull-request#3457</a></li>
      <li>build(deps-dev): bump <code>@​types/jest</code> from 29.5.13 to
      29.5.14 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3462">peter-evans/create-pull-request#3462</a></li>
      <li>build(deps-dev): bump <code>@​types/node</code> from 18.19.58 to
      18.19.60 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3463">peter-evans/create-pull-request#3463</a></li>
      <li>chore: don't bundle undici by <a
      href="https://github.com/benmccann"><code>@​benmccann</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3475">peter-evans/create-pull-request#3475</a></li>
      <li>Update distribution by <a
      href="https://github.com/actions-bot"><code>@​actions-bot</code></a> in
      <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3478">peter-evans/create-pull-request#3478</a></li>
      <li>chore: use node-fetch-native support for proxy env vars by <a
      href="https://github.com/peter-evans"><code>@​peter-evans</code></a> in
      <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3483">peter-evans/create-pull-request#3483</a></li>
      <li>build(deps-dev): bump <code>@​types/node</code> from 18.19.60 to
      18.19.64 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3488">peter-evans/create-pull-request#3488</a></li>
      <li>build(deps-dev): bump undici from 6.20.1 to 6.21.0 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3499">peter-evans/create-pull-request#3499</a></li>
      <li>build(deps-dev): bump <code>@​vercel/ncc</code> from 0.38.2 to
      0.38.3 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3500">peter-evans/create-pull-request#3500</a></li>
      <li>docs: note <code>push-to-repo</code> classic PAT
      <code>workflow</code> scope requirement by <a
      href="https://github.com/scop"><code>@​scop</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3511">peter-evans/create-pull-request#3511</a></li>
      <li>docs: spelling fixes by <a
      href="https://github.com/scop"><code>@​scop</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3512">peter-evans/create-pull-request#3512</a></li>
      <li>build(deps-dev): bump typescript from 5.6.3 to 5.7.2 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3516">peter-evans/create-pull-request#3516</a></li>
      <li>build(deps-dev): bump prettier from 3.3.3 to 3.4.0 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3517">peter-evans/create-pull-request#3517</a></li>
      <li>build(deps-dev): bump <code>@​types/node</code> from 18.19.64 to
      18.19.66 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3518">peter-evans/create-pull-request#3518</a></li>
      <li>docs(README): clarify that an existing open PR is managed by <a
      href="https://github.com/caugner"><code>@​caugner</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3498">peter-evans/create-pull-request#3498</a></li>
      <li>Update distribution by <a
      href="https://github.com/actions-bot"><code>@​actions-bot</code></a> in
      <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3529">peter-evans/create-pull-request#3529</a></li>
      <li>build(deps): bump <code>@​octokit/plugin-paginate-rest</code> from
      11.3.5 to 11.3.6 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3542">peter-evans/create-pull-request#3542</a></li>
      <li>build(deps-dev): bump <code>@​types/node</code> from 18.19.66 to
      18.19.67 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3543">peter-evans/create-pull-request#3543</a></li>
      <li>build(deps-dev): bump prettier from 3.4.0 to 3.4.1 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3544">peter-evans/create-pull-request#3544</a></li>
      <li>build(deps-dev): bump eslint-import-resolver-typescript from 3.6.3
      to 3.7.0 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3559">peter-evans/create-pull-request#3559</a></li>
      <li>build(deps-dev): bump prettier from 3.4.1 to 3.4.2 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3560">peter-evans/create-pull-request#3560</a></li>
      <li>build(deps-dev): bump <code>@​types/node</code> from 18.19.67 to
      18.19.68 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3570">peter-evans/create-pull-request#3570</a></li>
      <li>build(deps): bump p-limit from 6.1.0 to 6.2.0 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3578">peter-evans/create-pull-request#3578</a></li>
      <li>Update distribution by <a
      href="https://github.com/actions-bot"><code>@​actions-bot</code></a> in
      <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3583">peter-evans/create-pull-request#3583</a></li>
      <li>fix: preserve unicode in filepaths when commit signing by <a
      href="https://github.com/peter-evans"><code>@​peter-evans</code></a> in
      <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3588">peter-evans/create-pull-request#3588</a></li>
      </ul>
      <h2>New Contributors</h2>
      <ul>
      <li><a href="https://github.com/benmccann"><code>@​benmccann</code></a>
      made their first contribution in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3475">peter-evans/create-pull-request#3475</a></li>
      <li><a href="https://github.com/scop"><code>@​scop</code></a> made their
      first contribution in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3511">peter-evans/create-pull-request#3511</a></li>
      <li><a href="https://github.com/caugner"><code>@​caugner</code></a> made
      their first contribution in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3498">peter-evans/create-pull-request#3498</a></li>
      </ul>
      <!-- raw HTML omitted -->
      </blockquote>
      <p>... (truncated)</p>
      </details>
      <details>
      <summary>Commits</summary>
      <ul>
      <li><a
      href="https://github.com/peter-evans/create-pull-request/commit/67ccf781d68cd99b580ae25a5c18a1cc84ffff1f"><code>67ccf78</code></a>
      fix: preserve unicode in filepaths when commit signing (<a
      href="https://redirect.github.com/peter-evans/create-pull-request/issues/3588">#3588</a>)</li>
      <li><a
      href="https://github.com/peter-evans/create-pull-request/commit/bb88e27d3f9cc69c8bc689eba126096c6fe3dded"><code>bb88e27</code></a>
      build: update distribution (<a
      href="https://redirect.github.com/peter-evans/create-pull-request/issues/3583">#3583</a>)</li>
      <li><a
      href="https://github.com/peter-evans/create-pull-request/commit/b378ed537a3374cbb7642141277ace10488f9318"><code>b378ed5</code></a>
      build(deps): bump p-limit from 6.1.0 to 6.2.0 (<a
      href="https://redirect.github.com/peter-evans/create-pull-request/issues/3578">#3578</a>)</li>
      <li><a
      href="https://github.com/peter-evans/create-pull-request/commit/fa9200e5b4f0d3fe4adc6d4a980fdb27ca333ed2"><code>fa9200e</code></a>
      build(deps-dev): bump <code>@​types/node</code> from 18.19.67 to
      18.19.68 (<a
      href="https://redirect.github.com/peter-evans/create-pull-request/issues/3570">#3570</a>)</li>
      <li><a
      href="https://github.com/peter-evans/create-pull-request/commit/16e0059bfd236716f0191bfcfa63d9ded4cf325f"><code>16e0059</code></a>
      build(deps-dev): bump prettier from 3.4.1 to 3.4.2 (<a
      href="https://redirect.github.com/peter-evans/create-pull-request/issues/3560">#3560</a>)</li>
      <li><a
      href="https://github.com/peter-evans/create-pull-request/commit/5bffd5ae80c9e3cdce3fdaba74ba437193643add"><code>5bffd5a</code></a>
      build(deps-dev): bump eslint-import-resolver-typescript (<a
      href="https://redirect.github.com/peter-evans/create-pull-request/issues/3559">#3559</a>)</li>
      <li><a
      href="https://github.com/peter-evans/create-pull-request/commit/a22a0ddc2127a4161a9f144623d1e51be98d81aa"><code>a22a0dd</code></a>
      build(deps-dev): bump prettier from 3.4.0 to 3.4.1 (<a
      href="https://redirect.github.com/peter-evans/create-pull-request/issues/3544">#3544</a>)</li>
      <li><a
      href="https://github.com/peter-evans/create-pull-request/commit/b27ce378c8a71596550fb729c05c9a998f8ff26f"><code>b27ce37</code></a>
      build(deps-dev): bump <code>@​types/node</code> from 18.19.66 to
      18.19.67 (<a
      href="https://redirect.github.com/peter-evans/create-pull-request/issues/3543">#3543</a>)</li>
      <li><a
      href="https://github.com/peter-evans/create-pull-request/commit/4e0cc19e22f9071762b3542aa9fa90a1d682dd32"><code>4e0cc19</code></a>
      build(deps): bump <code>@​octokit/plugin-paginate-rest</code> from
      11.3.5 to 11.3.6 (<a
      href="https://redirect.github.com/peter-evans/create-pull-request/issues/3542">#3542</a>)</li>
      <li><a
      href="https://github.com/peter-evans/create-pull-request/commit/25b6871a4ebe4c3585f47c7a687ac6fd0ec0e32d"><code>25b6871</code></a>
      docs: update scopes for push-to-fork</li>
      <li>Additional commits viewable in <a
      href="https://github.com/peter-evans/create-pull-request/compare/5e914681df9dc83aa4e4905692ca88beb2f9e91f...67ccf781d68cd99b580ae25a5c18a1cc84ffff1f">compare
      view</a></li>
      </ul>
      </details>
      <br />
      
      Updates `docker/setup-buildx-action` from 3.7.1 to 3.9.0
      <details>
      <summary>Release notes</summary>
      <p><em>Sourced from <a
      href="https://github.com/docker/setup-buildx-action/releases">docker/setup-buildx-action's
      releases</a>.</em></p>
      <blockquote>
      <h2>v3.9.0</h2>
      <ul>
      <li>Bump <code>@​docker/actions-toolkit</code> from 0.48.0 to 0.54.0 in
      <a
      href="https://redirect.github.com/docker/setup-buildx-action/pull/402">docker/setup-buildx-action#402</a>
      <a
      href="https://redirect.github.com/docker/setup-buildx-action/pull/404">docker/setup-buildx-action#404</a></li>
      </ul>
      <p><strong>Full Changelog</strong>: <a
      href="https://github.com/docker/setup-buildx-action/compare/v3.8.0...v3.9.0">https://github.com/docker/setup-buildx-action/compare/v3.8.0...v3.9.0</a></p>
      <h2>v3.8.0</h2>
      <ul>
      <li>Make cloud prefix optional to download buildx if driver is cloud by
      <a href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in
      <a
      href="https://redirect.github.com/docker/setup-buildx-action/pull/390">docker/setup-buildx-action#390</a></li>
      <li>Bump <code>@​actions/core</code> from 1.10.1 to 1.11.1 in <a
      href="https://redirect.github.com/docker/setup-buildx-action/pull/370">docker/setup-buildx-action#370</a></li>
      <li>Bump <code>@​docker/actions-toolkit</code> from 0.39.0 to 0.48.0 in
      <a
      href="https://redirect.github.com/docker/setup-buildx-action/pull/389">docker/setup-buildx-action#389</a></li>
      <li>Bump cross-spawn from 7.0.3 to 7.0.6 in <a
      href="https://redirect.github.com/docker/setup-buildx-action/pull/382">docker/setup-buildx-action#382</a></li>
      </ul>
      <p><strong>Full Changelog</strong>: <a
      href="https://github.com/docker/setup-buildx-action/compare/v3.7.1...v3.8.0">https://github.com/docker/setup-buildx-action/compare/v3.7.1...v3.8.0</a></p>
      </blockquote>
      </details>
      <details>
      <summary>Commits</summary>
      <ul>
      <li><a
      href="https://github.com/docker/setup-buildx-action/commit/f7ce87c1d6bead3e36075b2ce75da1f6cc28aaca"><code>f7ce87c</code></a>
      Merge pull request <a
      href="https://redirect.github.com/docker/setup-buildx-action/issues/404">#404</a>
      from docker/dependabot/npm_and_yarn/docker/actions-to...</li>
      <li><a
      href="https://github.com/docker/setup-buildx-action/commit/aa1e2a0b496d6cd3474071c7b0ab0eea5948de3a"><code>aa1e2a0</code></a>
      chore: update generated content</li>
      <li><a
      href="https://github.com/docker/setup-buildx-action/commit/673e00877621ac201ca3084ec053b85e9b65063e"><code>673e008</code></a>
      build(deps): bump <code>@​docker/actions-toolkit</code> from 0.53.0 to
      0.54.0</li>
      <li><a
      href="https://github.com/docker/setup-buildx-action/commit/ba31df4664624f17e1b1ef1c9c85ed1ca9463a6d"><code>ba31df4</code></a>
      Merge pull request <a
      href="https://redirect.github.com/docker/setup-buildx-action/issues/402">#402</a>
      from docker/dependabot/npm_and_yarn/docker/actions-to...</li>
      <li><a
      href="https://github.com/docker/setup-buildx-action/commit/5475af18ec6f58d53e9452495e8db373e6dcb469"><code>5475af1</code></a>
      chore: update generated content</li>
      <li><a
      href="https://github.com/docker/setup-buildx-action/commit/acacad903e45f670c1e2d4638f4ee5f24b03e6b6"><code>acacad9</code></a>
      build(deps): bump <code>@​docker/actions-toolkit</code> from 0.48.0 to
      0.53.0</li>
      <li><a
      href="https://github.com/docker/setup-buildx-action/commit/6a25f988bdfa969e96a38fc9f843ea31e0b5df27"><code>6a25f98</code></a>
      Merge pull request <a
      href="https://redirect.github.com/docker/setup-buildx-action/issues/396">#396</a>
      from crazy-max/bake-v6</li>
      <li><a
      href="https://github.com/docker/setup-buildx-action/commit/ca1af179f5dc207dc723446d832eb3f77d3912dc"><code>ca1af17</code></a>
      update bake-action to v6</li>
      <li><a
      href="https://github.com/docker/setup-buildx-action/commit/6524bf65af31da8d45b59e8c27de4bd072b392f5"><code>6524bf6</code></a>
      Merge pull request <a
      href="https://redirect.github.com/docker/setup-buildx-action/issues/390">#390</a>
      from crazy-max/buildx-cloud-latest</li>
      <li><a
      href="https://github.com/docker/setup-buildx-action/commit/8d5e0747fc81adde3c75a11c4ab1cd6e831c45b5"><code>8d5e074</code></a>
      chore: update generated content</li>
      <li>Additional commits viewable in <a
      href="https://github.com/docker/setup-buildx-action/compare/c47758b77c9736f4b2ef4073d4d51994fabfe349...f7ce87c1d6bead3e36075b2ce75da1f6cc28aaca">compare
      view</a></li>
      </ul>
      </details>
      <br />
      
      Updates `aws-actions/configure-aws-credentials` from 4.0.2 to 4.1.0
      <details>
      <summary>Release notes</summary>
      <p><em>Sourced from <a
      href="https://github.com/aws-actions/configure-aws-credentials/releases">aws-actions/configure-aws-credentials's
      releases</a>.</em></p>
      <blockquote>
      <h2>v4.1.0</h2>
      <h2><a
      href="https://github.com/aws-actions/configure-aws-credentials/compare/v4.0.3...v4.1.0">4.1.0</a>
      (2025-02-08)</h2>
      <h3>Features</h3>
      <ul>
      <li>idempotent fetch (<a
      href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1289">#1289</a>)
      (<a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/eb70354fb423a380b6e4ab4b9f15d2ee9ffae911">eb70354</a>)</li>
      </ul>
      <h3>Bug Fixes</h3>
      <ul>
      <li>build failure due to tests (<a
      href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1283">#1283</a>)
      (<a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/134d71efe0ecbe9ad6965f2f766c0cae63a7685f">134d71e</a>)</li>
      <li>Dependabot autoapprove (<a
      href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1284">#1284</a>)
      (<a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/b9ee51dc600fe38c892e24f60ca26476e0e0b6de">b9ee51d</a>)</li>
      <li>Dependabot autoapprove id-token write permission (<a
      href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1285">#1285</a>)
      (<a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/f0af89b102390dcf10ce402195d74a98f24861f3">f0af89b</a>)</li>
      <li>typo (<a
      href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1281">#1281</a>)
      (<a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/39fd91c08ed8bf770034de4e62662503e8007d76">39fd91c</a>)</li>
      </ul>
      <h2>v4.0.3</h2>
      <h2><a
      href="https://github.com/aws-actions/configure-aws-credentials/compare/v4.0.2...v4.0.3">4.0.3</a>
      (2025-01-27)</h2>
      <h3>Features</h3>
      <ul>
      <li>added release-please action config (<a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/0f88004d9c27e0bdbbc254b3f7c8053cb38f04d7">0f88004</a>)</li>
      </ul>
      <h3>Bug Fixes</h3>
      <ul>
      <li>add id-token permission to automerge (<a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/97834a484a5ab3c40fa9e2eb40fcf8041105a573">97834a4</a>)</li>
      <li>cpy syntax on npm package (<a
      href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1195">#1195</a>)
      (<a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/83b5a565471214aec459e234bef606339fe07111">83b5a56</a>)</li>
      <li>force push packaged files to main (<a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/bfd218503eb87938c29603a551e19c6b594f5fe5">bfd2185</a>)</li>
      </ul>
      <h3>Miscellaneous Chores</h3>
      <ul>
      <li>release 4.0.3 (<a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/ca00fd4d3842ad58c3c21ebfe69defa1f0e7bdc4">ca00fd4</a>)</li>
      </ul>
      </blockquote>
      </details>
      <details>
      <summary>Changelog</summary>
      <p><em>Sourced from <a
      href="https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md">aws-actions/configure-aws-credentials's
      changelog</a>.</em></p>
      <blockquote>
      <h1>Changelog</h1>
      <p>All notable changes to this project will be documented in this file.
      See <a
      href="https://github.com/conventional-changelog/standard-version">standard-version</a>
      for commit guidelines.</p>
      <h2><a
      href="https://github.com/aws-actions/configure-aws-credentials/compare/v4.0.3...v4.1.0">4.1.0</a>
      (2025-02-08)</h2>
      <h3>Features</h3>
      <ul>
      <li>idempotent fetch (<a
      href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1289">#1289</a>)
      (<a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/eb70354fb423a380b6e4ab4b9f15d2ee9ffae911">eb70354</a>)</li>
      </ul>
      <h3>Bug Fixes</h3>
      <ul>
      <li>build failure due to tests (<a
      href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1283">#1283</a>)
      (<a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/134d71efe0ecbe9ad6965f2f766c0cae63a7685f">134d71e</a>)</li>
      <li>Dependabot autoapprove (<a
      href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1284">#1284</a>)
      (<a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/b9ee51dc600fe38c892e24f60ca26476e0e0b6de">b9ee51d</a>)</li>
      <li>Dependabot autoapprove id-token write permission (<a
      href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1285">#1285</a>)
      (<a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/f0af89b102390dcf10ce402195d74a98f24861f3">f0af89b</a>)</li>
      <li>typo (<a
      href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1281">#1281</a>)
      (<a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/39fd91c08ed8bf770034de4e62662503e8007d76">39fd91c</a>)</li>
      </ul>
      <h2><a
      href="https://github.com/aws-actions/configure-aws-credentials/compare/v4.0.2...v4.0.3">4.0.3</a>
      (2025-01-27)</h2>
      <h3>Features</h3>
      <ul>
      <li>added release-please action config (<a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/0f88004d9c27e0bdbbc254b3f7c8053cb38f04d7">0f88004</a>)</li>
      </ul>
      <h3>Bug Fixes</h3>
      <ul>
      <li>add id-token permission to automerge (<a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/97834a484a5ab3c40fa9e2eb40fcf8041105a573">97834a4</a>)</li>
      <li>cpy syntax on npm package (<a
      href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1195">#1195</a>)
      (<a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/83b5a565471214aec459e234bef606339fe07111">83b5a56</a>)</li>
      <li>force push packaged files to main (<a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/bfd218503eb87938c29603a551e19c6b594f5fe5">bfd2185</a>)</li>
      </ul>
      <h3>Miscellaneous Chores</h3>
      <ul>
      <li>release 4.0.3 (<a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/ca00fd4d3842ad58c3c21ebfe69defa1f0e7bdc4">ca00fd4</a>)</li>
      </ul>
      <h2><a
      href="https://github.com/aws-actions/configure-aws-credentials/compare/v4.0.1...v4.0.2">4.0.2</a>
      (2024-02-09)</h2>
      <ul>
      <li>Revert 4.0.1 to remove warning</li>
      </ul>
      <h2><a
      href="https://github.com/aws-actions/configure-aws-credentials/compare/v4.0.0...v4.0.1">4.0.1</a>
      (2023-10-03)</h2>
      <h3>Documentation</h3>
      <ul>
      <li>Throw a warning when customers use long-term credentials.</li>
      </ul>
      <h2><a
      href="https://github.com/aws-actions/configure-aws-credentials/compare/v3.0.2...v4.0.0">4.0.0</a>
      (2023-09-11)</h2>
      <ul>
      <li>Upgraded runtime to <code>node20</code> from
      <code>node16</code></li>
      </ul>
      <!-- raw HTML omitted -->
      </blockquote>
      <p>... (truncated)</p>
      </details>
      <details>
      <summary>Commits</summary>
      <ul>
      <li><a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/ececac1a45f3b08a01d2dd070d28d111c5fe6722"><code>ececac1</code></a>
      chore(main): release 4.1.0 (<a
      href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1282">#1282</a>)</li>
      <li><a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/16fec6080fdb89d4b237dee411b7bf8f3658ec97"><code>16fec60</code></a>
      chore: Update dist</li>
      <li><a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/eb70354fb423a380b6e4ab4b9f15d2ee9ffae911"><code>eb70354</code></a>
      feat: idempotent fetch (<a
      href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1289">#1289</a>)</li>
      <li><a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/3478c15aa1cf2543c22efcbbd3e483d49c3a31d7"><code>3478c15</code></a>
      chore(deps-dev): bump memfs from 4.14.0 to 4.17.0 (<a
      href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1250">#1250</a>)</li>
      <li><a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/a69d38c39d4e4ef6ebd2825ae1bf38948c4a63fa"><code>a69d38c</code></a>
      chore: Update dist</li>
      <li><a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/6b1d0f829dbf80f581d095620da2a3d26e7f3b81"><code>6b1d0f8</code></a>
      chore(deps-dev): bump <code>@​smithy/property-provider</code> from 3.1.8
      to 4.0.1 (<a
      href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1246">#1246</a>)</li>
      <li><a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/f021516513c128da882cdc5b42712935bb1f89fc"><code>f021516</code></a>
      chore: remove role session name</li>
      <li><a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/1c8dbbcc0280c0f2662d0842550c5c63ef1572a4"><code>1c8dbbc</code></a>
      chore(deps-dev): bump <code>@​vercel/ncc</code> from 0.38.2 to 0.38.3
      (<a
      href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1204">#1204</a>)</li>
      <li><a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/ce290d67fea24eb4c156f6207fa1d18c8ff6c891"><code>ce290d6</code></a>
      chore: change dependabot role session name</li>
      <li><a
      href="https://github.com/aws-actions/configure-aws-credentials/commit/1780ebd97bfd07ffbef8765880395a9bfed87d09"><code>1780ebd</code></a>
      chore: create one-off test for CAWSC</li>
      <li>Additional commits viewable in <a
      href="https://github.com/aws-actions/configure-aws-credentials/compare/e3dd6a429d7300a6a4c196c26e071d42e0343502...ececac1a45f3b08a01d2dd070d28d111c5fe6722">compare
      view</a></li>
      </ul>
      </details>
      <br />
      
      Updates `actions/attest-build-provenance` from 1.4.3 to 2.2.0
      <details>
      <summary>Release notes</summary>
      <p><em>Sourced from <a
      href="https://github.com/actions/attest-build-provenance/releases">actions/attest-build-provenance's
      releases</a>.</em></p>
      <blockquote>
      <h2>v2.2.0</h2>
      <h2>What's Changed</h2>
      <ul>
      <li>Bump actions/attest from v2.1.0 to v2.2.0 by <a
      href="https://github.com/bdehamer"><code>@​bdehamer</code></a> in <a
      href="https://redirect.github.com/actions/attest-build-provenance/pull/449">actions/attest-build-provenance#449</a>
      <ul>
      <li>Includes support for now <code>subject-checksums</code> input
      parameter</li>
      </ul>
      </li>
      </ul>
      <p><strong>Full Changelog</strong>: <a
      href="https://github.com/actions/attest-build-provenance/compare/v2.1.0...v2.2.0">https://github.com/actions/attest-build-provenance/compare/v2.1.0...v2.2.0</a></p>
      <h2>v2.1.0</h2>
      <h2>What's Changed</h2>
      <ul>
      <li>Update README w/ note about GH plans supporting attestations by <a
      href="https://github.com/bdehamer"><code>@​bdehamer</code></a> in <a
      href="https://redirect.github.com/actions/attest-build-provenance/pull/414">actions/attest-build-provenance#414</a></li>
      <li>Add <code>attestation-id</code> and <code>attestation-url</code>
      outputs by <a
      href="https://github.com/bdehamer"><code>@​bdehamer</code></a> in <a
      href="https://redirect.github.com/actions/attest-build-provenance/pull/415">actions/attest-build-provenance#415</a></li>
      </ul>
      <p><strong>Full Changelog</strong>: <a
      href="https://github.com/actions/attest-build-provenance/compare/v2.0.1...v2.1.0">https://github.com/actions/attest-build-provenance/compare/v2.0.1...v2.1.0</a></p>
      <h2>v2.0.1</h2>
      <h2>What's Changed</h2>
      <ul>
      <li>Bump actions/attest from 2.0.0 to 2.0.1 by <a
      href="https://github.com/bdehamer"><code>@​bdehamer</code></a> in <a
      href="https://redirect.github.com/actions/attest-build-provenance/pull/406">actions/attest-build-provenance#406</a>
      <ul>
      <li>Deduplicate subjects before adding to in-toto statement</li>
      </ul>
      </li>
      </ul>
      <p><strong>Full Changelog</strong>: <a
      href="https://github.com/actions/attest-build-provenance/compare/v2.0.0...v2.0.1">https://github.com/actions/attest-build-provenance/compare/v2.0.0...v2.0.1</a></p>
      <h2>v2.0.0</h2>
      <p>The <code>attest-build-provenance</code> action now supports
      attesting multiple subjects simultaneously. When identifying multiple
      subjects with the <code>subject-path</code> input a single attestation
      is created with references to each of the supplied subjects, rather than
      generating separate attestations for each artifact. This reduces the
      number of attestations that you need to create and manage.</p>
      <h2>What's Changed</h2>
      <ul>
      <li>Bump cross-spawn from 7.0.3 to 7.0.6 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/actions/attest-build-provenance/pull/319">actions/attest-build-provenance#319</a></li>
      <li>Prepare v2.0.0 release by <a
      href="https://github.com/bdehamer"><code>@​bdehamer</code></a> in <a
      href="https://redirect.github.com/actions/attest-build-provenance/pull/321">actions/attest-build-provenance#321</a>
      <ul>
      <li>Bump <code>actions/attest</code> from 1.4.1 to 2.0.0 (w/
      multi-subject attestation support)</li>
      </ul>
      </li>
      </ul>
      <p><strong>Full Changelog</strong>: <a
      href="https://github.com/actions/attest-build-provenance/compare/v1.4.4...v2.0.0">https://github.com/actions/attest-build-provenance/compare/v1.4.4...v2.0.0</a></p>
      <h2>v1.4.4</h2>
      <h2>What's Changed</h2>
      <ul>
      <li>Bump predicate action from 1.1.3 to 1.1.4 by <a
      href="https://github.com/bdehamer"><code>@​bdehamer</code></a> in <a
      href="https://redirect.github.com/actions/attest-build-provenance/pull/310">actions/attest-build-provenance#310</a>
      <ul>
      <li>Bump <code>@​actions/core</code> from 1.10.1 to 1.11.1 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/actions/attest-build-provenance/pull/275">actions/attest-build-provenance#275</a></li>
      <li>Bump <code>@​actions/attest</code> from 1.4.2 to 1.5.0 by <a
      href="https://github.com/bdehamer"><code>@​bdehamer</code></a> in <a
      href="https://redirect.github.com/actions/attest-build-provenance/pull/309">actions/attest-build-provenance#309</a>
      <ul>
      <li>Fix SLSA provenance bug related to <code>workflow_ref</code> OIDC
      token claims containing the &quot;@&quot; symbol in the tag name (<a
      href="https://redirect.github.com/actions/toolkit/pull/1863">actions/toolkit#1863</a>)</li>
      </ul>
      </li>
      </ul>
      </li>
      </ul>
      <p><strong>Full Changelog</strong>: <a
      href="https://github.com/actions/attest-build-provenance/compare/v1.4.3...v1.4.4">https://github.com/actions/attest-build-provenance/compare/v1.4.3...v1.4.4</a></p>
      </blockquote>
      </details>
      <details>
      <summary>Commits</summary>
      <ul>
      <li><a
      href="https://github.com/actions/attest-build-provenance/commit/520d128f165991a6c774bcb264f323e3d70747f4"><code>520d128</code></a>
      bump actions/attest from v2.1.0 to v2.2.0 (<a
      href="https://redirect.github.com/actions/attest-build-provenance/issues/449">#449</a>)</li>
      <li><a
      href="https://github.com/actions/attest-build-provenance/commit/5d2ced98e37711f730ee81bf4f290e59f429cea9"><code>5d2ced9</code></a>
      Add example of upload-artifaction integration (<a
      href="https://redirect.github.com/actions/attest-build-provenance/issues/450">#450</a>)</li>
      <li><a
      href="https://github.com/actions/attest-build-provenance/commit/3c016c14be1000a987f5724861e76009e48945d1"><code>3c016c1</code></a>
      bump actions/attest from v2.1.0 to v2.2.0 (<a
      href="https://redirect.github.com/actions/attest-build-provenance/issues/449">#449</a>)</li>
      <li><a
      href="https://github.com/actions/attest-build-provenance/commit/e06bbafba962e6346493c5fd57cfcfe0873b0474"><code>e06bbaf</code></a>
      Bump the npm-development group with 3 updates (<a
      href="https://redirect.github.com/actions/attest-build-provenance/issues/447">#447</a>)</li>
      <li><a
      href="https://github.com/actions/attest-build-provenance/commit/47c6e87ba15264d457c4b3aeeaca0aa4ef36cfc8"><code>47c6e87</code></a>
      Bump the npm-development group with 4 updates (<a
      href="https://redirect.github.com/actions/attest-build-provenance/issues/444">#444</a>)</li>
      <li><a
      href="https://github.com/actions/attest-build-provenance/commit/c083b467494a647632714fee9685ca81f12ca4d6"><code>c083b46</code></a>
      Bump the npm-development group with 2 updates (<a
      href="https://redirect.github.com/actions/attest-build-provenance/issues/438">#438</a>)</li>
      <li><a
      href="https://github.com/actions/attest-build-provenance/commit/1b4b366241fcfed280d0cc0db3d44132575a6a87"><code>1b4b366</code></a>
      Bump typescript-eslint in the npm-development group (<a
      href="https://redirect.github.com/actions/attest-build-provenance/issues/434">#434</a>)</li>
      <li><a
      href="https://github.com/actions/attest-build-provenance/commit/963f8a02f24ac90336362e63ca6730cf69ad102e"><code>963f8a0</code></a>
      Bump the npm-development group with 2 updates (<a
      href="https://redirect.github.com/actions/attest-build-provenance/issues/429">#429</a>)</li>
      <li><a
      href="https://github.com/actions/attest-build-provenance/commit/4ecada3c132a6497cc654fcac5c8644da6815ca6"><code>4ecada3</code></a>
      Bump the npm-development group across 1 directory with 3 updates (<a
      href="https://redirect.github.com/actions/attest-build-provenance/issues/422">#422</a>)</li>
      <li><a
      href="https://github.com/actions/attest-build-provenance/commit/f4b7552a127d7acf1bef22d5bc9f315117aebfcd"><code>f4b7552</code></a>
      bump eslint from 8.57.1 to 9.16.0 (<a
      href="https://redirect.github.com/actions/attest-build-provenance/issues/418">#418</a>)</li>
      <li>Additional commits viewable in <a
      href="https://github.com/actions/attest-build-provenance/compare/v1.4.3...520d128f165991a6c774bcb264f323e3d70747f4">compare
      view</a></li>
      </ul>
      </details>
      <br />
      
      
      Dependabot will resolve any conflicts with this PR as long as you don't
      alter it yourself. You can also trigger a rebase manually by commenting
      `@dependabot rebase`.
      
      [//]: # (dependabot-automerge-start)
      [//]: # (dependabot-automerge-end)
      
      ---
      
      <details>
      <summary>Dependabot commands and options</summary>
      <br />
      
      You can trigger Dependabot actions by commenting on this PR:
      - `@dependabot rebase` will rebase this PR
      - `@dependabot recreate` will recreate this PR, overwriting any edits
      that have been made to it
      - `@dependabot merge` will merge this PR after your CI passes on it
      - `@dependabot squash and merge` will squash and merge this PR after
      your CI passes on it
      - `@dependabot cancel merge` will cancel a previously requested merge
      and block automerging
      - `@dependabot reopen` will reopen this PR if it is closed
      - `@dependabot close` will close this PR and stop Dependabot recreating
      it. You can achieve the same result by closing it manually
      - `@dependabot show <dependency name> ignore conditions` will show all
      of the ignore conditions of the specified dependency
      - `@dependabot ignore <dependency name> major version` will close this
      group update PR and stop Dependabot creating any more for the specific
      dependency's major version (unless you unignore this specific
      dependency's major version or upgrade to it yourself)
      - `@dependabot ignore <dependency name> minor version` will close this
      group update PR and stop Dependabot creating any more for the specific
      dependency's minor version (unless you unignore this specific
      dependency's minor version or upgrade to it yourself)
      - `@dependabot ignore <dependency name>` will close this group update PR
      and stop Dependabot creating any more for the specific dependency
      (unless you unignore this specific dependency or upgrade to it yourself)
      - `@dependabot unignore <dependency name>` will remove all of the ignore
      conditions of the specified dependency
      - `@dependabot unignore <dependency name> <ignore condition>` will
      remove the ignore condition of the specified dependency and ignore
      conditions
      
      
      </details>
      
      Signed-off-by: default avatardependabot[bot] <support@github.com>
      Co-authored-by: default avatardependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
      8779c606
    • Michal Kucharczyk's avatar
      `txpool api`: `remove_invalid` call improved (#6661) · c94df1bc
      Michal Kucharczyk authored
      #### Description 
      Currently the transaction which is reported as invalid by a block
      builder (or `removed_invalid` by other components) is silently skipped.
      
      This PR improves this behavior. The transaction pool `report_invalid`
      function now accepts optional error associated with every reported
      transaction, and also the optional block hash which provides hints how
      reported transaction shall be handled. The following API change is
      proposed:
      
      https://github.com/paritytech/polkadot-sdk/blob/8be5ef3e/substrate/client/transaction-pool/api/src/lib.rs#L297-L318
      Depending on error, the transaction pool can decide if transaction shall
      be removed from the view only or entirely from the pool. Invalid event
      will be dispatched if required.
      
      
      #### Notes for reviewers
      
      - Actual logic of removing invalid txs is implented in
      [`ViewStore::report_invalid`](https://github.com/paritytech/polkadot-sdk/blob/0fad26c4/substrate/client/transaction-pool/src/fork_aware_txpool/view_store.rs#L657-L680).
      Method's doc explains the flow.
      - This PR changes `HashMap` to `IndexMap` in revalidation logic. This is
      to preserve the original order of transactions (mainly for purposes of
      unit tests).
      - This PR solves the problem mentioned in:
      https://github.com/paritytech/polkadot-sdk/issues/5477#issuecomment-2598809344
      (which can now be resolved). The invalid transactions found during
      mempool revalidation are now also removed from the `view_store`. No
      dangling invalid transaction shall be left in the pool.
      (https://github.com/paritytech/polkadot-sdk/pull/6661/commits/bfec2625)
      - The support for dropping invalid transactions reported from the views
      was also added. This should never happen, but if for any case all views
      will report invalid transcation (which previously was valid) the
      transaction will be dropped from the pool
      (https://github.com/paritytech/polkadot-sdk/pull/6661/commits/48214a38
      
      ).
      
      
      
      fixes: #6008, #5477
      
      ---------
      
      Co-authored-by: command-bot <>
      Co-authored-by: default avatarSebastian Kunert <skunert49@gmail.com>
      c94df1bc
    • Alexander Theißen's avatar
      pallet-revive: Fix the contract size related benchmarks (#7568) · 60146ba5
      Alexander Theißen authored
      
      Partly addresses https://github.com/paritytech/polkadot-sdk/issues/6157
      
      The benchmarks measuring the impact of contract sizes on calling or
      instantiating a contract were bogus because they needed to be written in
      assembly in order to tightly control the basic block size.
      
      This fixes the benchmarks for:
      - call_with_code_per_byte
      - upload_code
      - instantiate_with_code
      
      And adds a new benchmark that accounts for the fact that the interpreter
      will always compile whole basic blocks:
      - basic_block_compilation
      
      After this PR only the weight we assign to instructions need to be
      addressed.
      
      ---------
      
      Co-authored-by: default avatarcmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
      Co-authored-by: default avatarPG Herveou <pgherveou@gmail.com>
      60146ba5
    • Alexandru Vasile's avatar
      network/tests: Add conformance testing for litep2p and libp2p (#7361) · 20ffada0
      Alexandru Vasile authored
      
      This PR implements conformance tests between our network backends
      (litep2p and libp2p).
      
      The PR creates a setup for extending testing in the future, while
      implementing the following tests:
      - connectivity check: Connect litep2p -> libp2p and libp2p -> litep2p
      - request response check: Send 32 requests from one backend to the other
      - notification check: Send 128 ping pong notifications and 128 from one
      backend to the other
      
      cc @paritytech/networking
      
      ---------
      
      Signed-off-by: default avatarAlexandru Vasile <alexandru.vasile@parity.io>
      20ffada0
    • Tomás Senovilla Polo's avatar
      refactor: Move `T:Config` into where clause in `#[benchmarks]` macro if needed (#7418) · 4b2ca118
      Tomás Senovilla Polo authored
      # Description
      
      Currently, the `#[benchmarks]` macro always add `<T:Config>` to the
      expanded code even if a where clause is used. Using a where clause which
      also includes a trait bound for the generic `T` is triggering [this
      clippy
      warning](https://rust-lang.github.io/rust-clippy/master/index.html#multiple_bound_locations)
      from Rust 1.78 onwards. We've found that
      [here](https://github.com/freeverseio/laos/blob/main/pallets/precompiles-benchmark/src/precompiles/vesting/benchmarking.rs#L126-L132)
      in LAOS, as we need to include `T: pallet_vesting::Config` in the where
      clause, here's the outcome:
      
      ```rust
      error: bound is defined in more than one place
         --> pallets/precompiles-benchmark/src/precompiles/vesting/benchmarking.rs:130:1
          |
      130 | / #[benchmarks(
      131 | |     where
      132 | |         T: Config + pallet_vesting::Config,
          | |         ^
      133 | |         T::AccountIdToH160: ConvertBack<T::AccountId, H160>,
      134 | |         BalanceOf<T>: Into<U256>,
      135 | |         BlockNumberFor<T>: Into<U256>
      136 | | )]
          | |__^
          |
          = help: for further information visit https://rust-lang.github.io/rust-clippy/master/index.html#multiple_bound_locations
          = note: `-D clippy::multiple-bound-locations` implied by `-D warnings`
          = help: to override `-D warnings` add `#[allow(clippy::multiple_bound_locations)]`
          = note: this error originates in the attribute macro `benchmarks` (in Nightly builds, run with -Z macro-backtrace for more info)
      ```
      
      While this is a harmless warning, only thrown due to a trait bound for T
      is being defined twice in an expanded code that nobody will see, and
      while annotating the benchmarks module with
      `#[allow(clippy::multiple_bound_locations)]` is enough to get rid of it,
      it might cause unnecessary concerns.
      
      Hence, I think it's worth slightly modifying the macro to avoid this.
      
      ## Review Notes
      
      What I propose is to include `<T: Config>` (or its instance version) in
      the expanded code only if no where clause was specified, and include
      that trait bound in the where clause if one is present.
      
      I considered always creating a where clause which includes `<T: Config>`
      even if the macro doesn't specify a where clause and totally getting rid
      of `<T: Config>`, but discarded the idea for simplicity.
      
      I also considered checking if `T:Config` is present in the provided
      where clause (as it's the case in the LAOS example I provided) before
      adding it, but discarded the idea as well due to it implies a bit more
      computation and having `T:Config` defined twice in the where clause is
      harmless: the compiler will ignore the second occurrence and nobody will
      see it's there.
      
      If you think this change is worth it and one of the discarded ideas
      would be a better approach, I'm happy to push that code instead.
      4b2ca118
    • Florian Franzen's avatar
      cumulus-client: use only valid syntax in Cargo.toml (#7455) · 9117f70f
      Florian Franzen authored
      # Description
      
      This PR ensure that only valid syntax is uses inside the `Cargo.toml`. 
      
      ## Integration
      
      Not sure if worth backporting. Came across this when trying to package
      `try-runtime-cli`.
      
      ## Review Notes
      
      It should be obvious that this is not valid syntax. I am not able to add
      labels and doubt this requires a prdoc.
      9117f70f
    • Bastian Köcher's avatar
    • Alexander Theißen's avatar
      pallet-revive: Add env var to allow skipping of validation for testing (#7562) · b44dc3a5
      Alexander Theißen authored
      
      When trying to reproduce bugs we sometimes need to deploy code that
      wouldn't pass validation. This PR adds a new environment variable
      `REVIVE_SKIP_VALIDATION` that when set will skip all validation except
      the contract blob size limit.
      
      Please note that this only applies to when the pallet is compiled for
      `std` and hence will never be part of on-chain.
      
      ---------
      
      Co-authored-by: default avatarcmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
      b44dc3a5
    • Oliver Tale-Yazdi's avatar
      [mq pallet] Custom next queue selectors (#6059) · 7aac8861
      Oliver Tale-Yazdi authored
      
      Changes:
      - Expose a `force_set_head` function from the `MessageQueue` pallet via
      a new trait: `ForceSetHead`. This can be used to force the MQ pallet to
      process this queue next.
      - The change only exposes an internal function through a trait, no audit
      is required.
      
      ## Context
      
      For the Asset Hub Migration (AHM) we need a mechanism to prioritize the
      inbound upward messages and the inbound downward messages on the AH. To
      achieve this, a minimal (and no breaking) change is done to the MQ
      pallet in the form of adding the `force_set_head` function.
      
      An example use of how to achieve prioritization is then demonstrated in
      `integration_test.rs::AhmPrioritizer`. Normally, all queues are
      scheduled round-robin like this:
      
      `| Relay | Para(1) | Para(2) | ... | Relay | ... `
      
      The prioritizer listens to changes to its queue and triggers if either:
      - The queue processed in the last block (to keep the general round-robin
      scheduling)
      - The queue did not process since `n` blocks (to prevent starvation if
      there are too many other queues)
      
      In either situation, it schedules the queue for a streak of three
      consecutive blocks, such that it would become:
      
      `| Relay | Relay | Relay | Para(1) | Para(2) | ... | Relay | Relay |
      Relay | ... `
      
      It basically transforms the round-robin into an elongated round robin.
      Although different strategies can be injected into the pallet at
      runtime, this one seems to strike a good balance between general service
      level and prioritization.
      
      ---------
      
      Signed-off-by: default avatarOliver Tale-Yazdi <oliver.tale-yazdi@parity.io>
      Co-authored-by: default avatarcmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
      Co-authored-by: default avatarmuharem <ismailov.m.h@gmail.com>
      7aac8861