Merge branch 'master' into soloseng/governance-slasher

.github/workflows/celo-monorepo.yml

@@ -130,7 +130,7 @@ jobs:
             code-${{ github.sha }}
       - name: Detect files changed in PR (or commit), and expose as output
         id: changed-files
-        uses: tj-actions/changed-files@v37
+        uses: tj-actions/changed-files@v40
         with:
           # Using comma as separator to be able to easily match full paths (using ,<path>)
           separator: ','
@@ -279,9 +279,9 @@ jobs:
           - name: Protocol Governance Voting
             command: |
               yarn --cwd packages/protocol test governance/voting/
-          - name: Protocol Stability
+          - name: Protocol scripts test
             command: |
-              yarn --cwd packages/protocol test stability/
+              yarn --cwd packages/protocol test:scripts
     steps:
       - uses: actions/checkout@v4
         with:

.github/workflows/containers.yaml

@@ -0,0 +1,159 @@
+---
+name: Build containers
+
+on:
+  push:
+    paths:
+      - 'dockerfiles/**'
+    branches:
+      - master
+  pull_request:
+    paths:
+      - 'dockerfiles/**'
+  workflow_dispatch:
+
+jobs:
+  changed-files:
+    runs-on: ubuntu-latest
+    outputs:
+      # Propagate more outputs if you need https://github.com/tj-actions/changed-files#outputs
+      # Adding a initial comma so ',<path>' matches also for the first file
+      all_modified_files: ',${{ steps.changed-files.outputs.all_modified_files }}'
+    steps:
+      - uses: actions/checkout@v4
+      - name: Detect files changed in PR (or commit), and expose as output
+        id: changed-files
+        uses: tj-actions/changed-files@v40
+        with:
+          # Using comma as separator to be able to easily match full paths (using ,<path>)
+          separator: ','
+
+  # Celotool images
+  celotool-build-dev:
+    uses: celo-org/reusable-workflows/.github/workflows/[email protected]
+    name: Build us-west1-docker.pkg.dev/devopsre/dev-images/celotool:${{ github.sha }}
+    needs: changed-files
+    if: |
+      github.ref != 'refs/heads/master' &&
+      contains(needs.changed-files.outputs.all_modified_files, ',dockerfiles/celotool/Dockerfile')
+    with:
+      workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-monorepo/providers/github-by-repos
+      service-account: '[email protected]'
+      artifact-registry: us-west1-docker.pkg.dev/devopsre/dev-images/celotool
+      tags: ${{ github.sha }}
+      platforms: linux/amd64
+      context: .
+      file: dockerfiles/celotool/Dockerfile
+      trivy: true
+  celotool-build:
+    uses: celo-org/reusable-workflows/.github/workflows/[email protected]
+    name: Build us-west1-docker.pkg.dev/devopsre/celo-monorepo/celotool:${{ github.sha }}
+    needs: changed-files
+    if: |
+      github.ref == 'refs/heads/master' &&
+      contains(needs.changed-files.outputs.all_modified_files, ',dockerfiles/celotool/Dockerfile')
+    with:
+      workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-monorepo-master/providers/github-by-repos
+      service-account: '[email protected]'
+      artifact-registry: us-west1-docker.pkg.dev/devopsre/celo-monorepo/celotool
+      tags: ${{ github.sha }}
+      platforms: linux/amd64
+      context: .
+      file: dockerfiles/celotool/Dockerfile
+      trivy: true
+
+  # All monorepo
+  celomonorepo-build-dev:
+    uses: celo-org/reusable-workflows/.github/workflows/[email protected]
+    name: Build us-west1-docker.pkg.dev/devopsre/dev-images/monorepo:${{ github.sha }}
+    needs: changed-files
+    if: |
+      github.ref != 'refs/heads/master' &&
+      contains(needs.changed-files.outputs.all_modified_files, ',dockerfiles/all-monorepo/Dockerfile')
+    with:
+      workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-monorepo/providers/github-by-repos
+      service-account: '[email protected]'
+      artifact-registry: us-west1-docker.pkg.dev/devopsre/dev-images/monorepo
+      tags: ${{ github.sha }}
+      context: .
+      file: dockerfiles/all-monorepo/Dockerfile
+      trivy: true
+  celomonorepo-build:
+    uses: celo-org/reusable-workflows/.github/workflows/[email protected]
+    name: Build us-west1-docker.pkg.dev/devopsre/celo-monorepo/monorepo:${{ github.sha }}
+    needs: changed-files
+    if: |
+      github.ref == 'refs/heads/master' &&
+      contains(needs.changed-files.outputs.all_modified_files, ',dockerfiles/all-monorepo/Dockerfile')
+    with:
+      workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-monorepo-master/providers/github-by-repos
+      service-account: '[email protected]'
+      artifact-registry: us-west1-docker.pkg.dev/devopsre/celo-monorepo/monorepo
+      tags: ${{ github.sha }}
+      context: .
+      file: dockerfiles/all-monorepo/Dockerfile
+      trivy: true
+
+  # CeloCli images
+  celocli-build-dev:
+    uses: celo-org/reusable-workflows/.github/workflows/[email protected]
+    needs: changed-files
+    name: Build us-west1-docker.pkg.dev/devopsre/dev-images/celocli:testing
+    if: |
+      github.ref != 'refs/heads/master' &&
+      contains(needs.changed-files.outputs.all_modified_files, ',dockerfiles/cli-standalone/Dockerfile')
+    with:
+      workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-monorepo/providers/github-by-repos
+      service-account: '[email protected]'
+      artifact-registry: us-west1-docker.pkg.dev/devopsre/dev-images/celocli
+      tags: testing
+      context: .
+      file: dockerfiles/cli-standalone/Dockerfile
+      trivy: true
+  celocli-build:
+    uses: celo-org/reusable-workflows/.github/workflows/[email protected]
+    needs: changed-files
+    name: Build us-west1-docker.pkg.dev/devopsre/celo-monorepo/celocli:latest
+    if: |
+      github.ref == 'refs/heads/master' &&
+      contains(needs.changed-files.outputs.all_modified_files, ',dockerfiles/cli-standalone/Dockerfile')
+    with:
+      workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-monorepo-master/providers/github-by-repos
+      service-account: '[email protected]'
+      artifact-registry: us-west1-docker.pkg.dev/devopsre/celo-monorepo/celocli
+      tags: latest
+      context: .
+      file: dockerfiles/cli-standalone/Dockerfile
+      trivy: true
+
+  # Blockscout Metadata crawler images
+  metadata-crawler-build-dev:
+    uses: celo-org/reusable-workflows/.github/workflows/[email protected]
+    needs: changed-files
+    name: Build us-west1-docker.pkg.dev/devopsre/dev-images/blockscout-metadata-crawler:testing
+    if: |
+      github.ref != 'refs/heads/master' &&
+      contains(needs.changed-files.outputs.all_modified_files, ',dockerfiles/metadata-crawler')
+    with:
+      workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-monorepo/providers/github-by-repos
+      service-account: '[email protected]'
+      artifact-registry: us-west1-docker.pkg.dev/devopsre/dev-images/blockscout-metadata-crawler
+      tags: testing
+      context: .
+      file: dockerfiles/metadata-crawler/Dockerfile
+      trivy: true
+  metadata-crawler-build:
+    uses: celo-org/reusable-workflows/.github/workflows/[email protected]
+    needs: changed-files
+    name: Build us-west1-docker.pkg.dev/devopsre/celo-monorepo/blockscout-metadata-crawler:latest
+    if: |
+      github.ref == 'refs/heads/master' &&
+      contains(needs.changed-files.outputs.all_modified_files, ',dockerfiles/metadata-crawler')
+    with:
+      workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-monorepo/providers/github-by-repos
+      service-account: '[email protected]'
+      artifact-registry: us-west1-docker.pkg.dev/devopsre/celo-monorepo/blockscout-metadata-crawler
+      tags: latest
+      context: .
+      file: dockerfiles/metadata-crawler/Dockerfile
+      trivy: true

.github/workflows/protocol_tests.yml

@@ -9,7 +9,7 @@ jobs:
     name: Run tests
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         with:
           submodules: recursive
       - name: Foundry cache

.github/workflows/publish-contracts-abi-release.yml

@@ -1,15 +1,19 @@
 name: Publish ABIs and Solidity files to NPM
 on:
   push:
-    branches: [main]
+    branches: [release/core-contracts/*]
+    tags:
+      - core-contracts.v*
   pull_request:
-
+    branches: [release/core-contracts/*, master]
+    paths:
+      - 'packages/protocol/**'
   release:
     types: [released]
   workflow_dispatch:
     inputs:
-      npm_version:
-        description: 'NPM version'
+      npm_tag:
+        description: 'NPM TAG e.g. alpha, pre-merge (default: canary) '
         required: true
         type: string
 jobs:
@@ -49,13 +53,13 @@ jobs:
         shell: bash
         run: yarn
 
-      - name: Check if a release should be published
+      - name: Determine release type and version (or dry run)
         # This is what sets the RELEASE_TYPE and RELEASE_VERSION env variables
-        run: yarn --silent is_contract_release >> "$GITHUB_ENV"
+        run: yarn --silent determine-release-version >> "$GITHUB_ENV"
         working-directory: packages/protocol
         env:
           GITHUB_TAG: ${{ github.ref_name }}
-          INPUT_VERSION: ${{ inputs.npm_version }}
+          NPM_TAG: ${{ inputs.npm_tag }}
       - name: 'Build packages which will not need abis'
         shell: bash
         run:  yarn build --ignore @celo/contractkit  --ignore @celo/explorer --ignore @celo/celocli --ignore @celo/governance --ignore @celo/metadata-crawler --ignore @celo/celotool --ignore @celo/env-tests --ignore @celo/transactions-uri --ignore @celo/wallet-rpc --include-dependencies