Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
18 commits
Select commit Hold shift + click to select a range
3bac2db
Dependabot rollup: zod, typescript-eslint, plugin-react, RTL (#291)
Greaker Sep 25, 2026
3b8cba7
Upgrade better-sqlite3 to 13.0.3 (#292)
Greaker Sep 25, 2026
00b9bf0
Make stop keep sandbox state; only delete discards it (#293)
Greaker Sep 25, 2026
db92409
Enable Blockscout's catch-up indexer so gaps heal themselves (#294)
Greaker Sep 25, 2026
47a87ac
Tbd: bind cctFrom to the payer and remove the unused nomination path …
Greaker Sep 28, 2026
bef78a2
Honour testMode for operators only; keep server-held keys server-side…
Greaker Sep 28, 2026
c744509
Remove the unused BondOrderBook and its factory (#302)
Greaker Sep 28, 2026
938d159
Operator-only issuer actions with route-level authorization tests (#305)
Greaker Sep 28, 2026
00920ea
Add implementation plans from the September repository review (#306)
Greaker Oct 2, 2026
f9e9b0a
Dependabot and security rollup: React 19.3.1, vite 8.2.4, pins (#307)
Greaker Oct 21, 2026
b63b44f
Hash stage base images into repo-owned image tags (#308)
Greaker Oct 21, 2026
89ed032
NB UI runtime: nginx-unprivileged 1.30.6 (#309)
Greaker Oct 21, 2026
691501e
Refresh Blockscout support pins: Postgres, Python, chart, verifier (#…
Greaker Oct 21, 2026
0624758
NGINX Gateway Fabric 2.8.0 with Gateway API CRDs v1.6.3 (#311)
Greaker Oct 21, 2026
e4a2701
Besu 26.10.0 (#312)
Greaker Oct 21, 2026
4a836fc
Node 26.12.1 toolchain pin; @types/node 26.6.5 (#313)
Greaker Oct 22, 2026
42da0fb
Vitest 4.1.12 for two @vitest/mocker advisories (#314)
Greaker Oct 22, 2026
db99e2b
Distrust compromised eMudhra CA: Foundry v1.8.6, BENS python 3.14.9 (…
Greaker Oct 22, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/test-contracts.yml
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ jobs:
- name: Install Foundry
uses: foundry-rs/foundry-toolchain@908c540300062bd5a7e473851cdb4282204cee09
with:
version: v1.7.1
version: v1.8.6

- name: Show Forge version
run: |
Expand Down
8 changes: 4 additions & 4 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -53,7 +53,7 @@ also help human contributors understand repo-specific workflow and guardrails:

## Current Local Chain

The validated local baseline is Besu 26.7.1 with Osaka active from genesis,
The validated local baseline is Besu 26.10.0 with Osaka active from genesis,
one QBFT validator, and one separate non-validator archive/RPC node. Solidity
0.8.36 and OpenZeppelin 5.6.1 are pinned to that execution baseline. All local
application, Blockscout, Foundry, and gateway traffic uses the archive/RPC
Expand Down Expand Up @@ -193,9 +193,9 @@ Use `/etc/hosts` on Linux/macOS or

| Command | Purpose |
| --- | --- |
| `./sandbox.sh start` | Create or update the local sandbox |
| `./sandbox.sh stop` | Stop workloads while keeping the cluster and cached images |
| `./sandbox.sh delete` | Tear down the Kind cluster. The local registry container and its cached images are kept (they live in the `kind-registry` Docker container, which is independent of the Kind cluster lifecycle). To reclaim that space, run `./sandbox.sh registry-reset` (or `docker rm -f kind-registry`). |
| `./sandbox.sh start` | Create or update the local sandbox; resumes a sandbox stopped with `stop` |
| `./sandbox.sh stop` | Stop the whole sandbox gracefully and keep all state: the chain, Blockscout's index and contract verifications, and the NB Bond API database. `start` brings it back as it was. Run it before quitting Docker or rebooting; see [unclean shutdowns](docs/KNOWN_ISSUES.md#sandbox-must-be-stopped-before-docker-quits-or-the-host-reboots). The Kind node gets `SANDBOX_STOP_TIMEOUT_SECONDS` (default 330) to shut down; a stop takes about 90 seconds |
| `./sandbox.sh delete` | Tear down the Kind cluster and **all sandbox state**; `delete` then `start` gives a fresh sandbox. The local registry container and its cached images are kept (they live in the `kind-registry` Docker container, which is independent of the Kind cluster lifecycle). To reclaim that space, run `./sandbox.sh registry-reset` (or `docker rm -f kind-registry`). |
| `./sandbox.sh generate-config` | Create `.env.sandbox` with deploy toggles |
| `./infra/infra.sh registry-start` | Start the local registry container (one-time setup; no-op if already running) |
| `./infra/infra.sh registry-sync` | Optional pre-warm: push every pinned third-party image into the local registry up front so `sandbox.sh start` doesn't pull them on demand |
Expand Down
36 changes: 18 additions & 18 deletions THIRD_PARTY_LICENSES.md
Original file line number Diff line number Diff line change
Expand Up @@ -52,16 +52,16 @@ License labels and deployment-time notes remain curated review items.
| Package | Version | License |
| --- | --- | --- |
| `@noble/secp256k1` | `3.1.0` | MIT |
| `better-sqlite3` | `12.11.1` | MIT |
| `better-sqlite3` | `13.0.3` | MIT |
| `cors` | `2.8.6` | MIT |
| `dotenv` | `17.4.2` | BSD-2-Clause |
| `ethers` | `6.17.0` | MIT |
| `express` | `5.2.1` | MIT |
| `express-rate-limit` | `8.6.2` | MIT |
| `express-rate-limit` | `8.7.1` | MIT |
| `helmet` | `8.3.0` | MIT |
| `jose` | `6.2.8` | MIT |
| `jose` | `6.2.13` | MIT |
| `winston` | `3.19.0` | MIT |
| `zod` | `4.5.4` | MIT |
| `zod` | `4.6.5` | MIT |
| `zod-openapi` | `6.0.1` | MIT |
| `@babel/core` | `7.29.7` | MIT |
| `@babel/preset-env` | `7.29.5` | MIT |
Expand All @@ -70,24 +70,24 @@ License labels and deployment-time notes remain curated review items.
| `@types/cors` | `2.8.19` | MIT |
| `@types/express` | `5.0.6` | MIT |
| `@types/jest` | `30.0.0` | MIT |
| `@types/node` | `26.5.1` | MIT |
| `@types/node` | `26.6.5` | MIT |
| `babel-jest` | `30.4.1` | MIT |
| `eslint` | `10.4.0` | MIT |
| `eslint-config-prettier` | `10.1.8` | MIT |
| `globals` | `17.7.0` | MIT |
| `globals` | `17.13.0` | MIT |
| `jest` | `30.4.2` | MIT |
| `prettier` | `3.9.6` | MIT |
| `prettier` | `3.9.10` | MIT |
| `tsx` | `4.23.11` | MIT |
| `typescript` | `7.0.2` | Apache-2.0 |
| `typescript-eslint` | `8.69.0` | MIT |
| `typescript-eslint` | `8.70.1` | MIT |

### `scripts/bid-encryption`

| Package | Version | License |
| --- | --- | --- |
| `@noble/secp256k1` | `3.1.0` | MIT |
| `ethers` | `6.17.0` | MIT |
| `@types/node` | `26.5.1` | MIT |
| `@types/node` | `26.6.5` | MIT |
| `tsx` | `4.23.11` | MIT |
| `typescript` | `7.0.2` | Apache-2.0 |

Expand All @@ -97,7 +97,7 @@ License labels and deployment-time notes remain curated review items.
| --- | --- | --- |
| `@noble/secp256k1` | `3.1.0` | MIT |
| `ethers` | `6.17.0` | MIT |
| `@types/node` | `26.5.1` | MIT |
| `@types/node` | `26.6.5` | MIT |
| `tsx` | `4.23.11` | MIT |
| `typescript` | `7.0.2` | Apache-2.0 |

Expand All @@ -106,21 +106,21 @@ License labels and deployment-time notes remain curated review items.
| Package | Version | License |
| --- | --- | --- |
| `@azure/msal-browser` | `5.18.0` | MIT |
| `react` | `19.2.8` | MIT |
| `react-dom` | `19.2.8` | MIT |
| `react` | `19.3.1` | MIT |
| `react-dom` | `19.3.1` | MIT |
| `@testing-library/jest-dom` | `7.0.1` | MIT |
| `@testing-library/react` | `16.3.2` | MIT |
| `@testing-library/react` | `16.3.3` | MIT |
| `@testing-library/user-event` | `14.6.1` | MIT |
| `@vitejs/plugin-react` | `6.0.3` | MIT |
| `@vitejs/plugin-react` | `6.1.1` | MIT |
| `eslint` | `9.39.5` | MIT |
| `eslint-config-prettier` | `10.1.8` | MIT |
| `eslint-plugin-react` | `7.37.5` | MIT |
| `eslint-plugin-react-hooks` | `7.1.1` | MIT |
| `globals` | `17.7.0` | MIT |
| `globals` | `17.13.0` | MIT |
| `jsdom` | `30.0.1` | MIT |
| `prettier` | `3.9.6` | MIT |
| `vite` | `8.2.1` | MIT |
| `vitest` | `4.1.11` | MIT |
| `prettier` | `3.9.10` | MIT |
| `vite` | `8.2.4` | MIT |
| `vitest` | `4.1.12` | MIT |

### `services/blockscout/bens-microservice`

Expand Down
Loading
Loading