@@ -106,18 +106,24 @@ jobs:
106106 - uses : actions/download-artifact@v4
107107 with :
108108 name : minimal-ixe
109- - name : Install Zisk toolchain (ziskup, latest)
109+ - name : Install Zisk toolchain (ziskup, pinned v0.18.0)
110+ # `--version 0.18.0` pins the toolchain to match our deps. Our host links
111+ # the argumentcomputer/zisk `blake3-precompile` fork, which is based on
112+ # v0.18.0 (its cargo-zisk has `check-setup`, used below to regenerate the
113+ # key's const-trees). Without the pin, ziskup installs `releases/latest`,
114+ # which resolves to upstream `v1.0.0-alpha` — a different circuit whose
115+ # cargo-zisk dropped the `check-setup` subcommand, breaking the key step.
110116 # `--cpu` picks the CPU build (no GPU on the runner) and `--nokey` skips
111- # ziskup's key install — both avoid its interactive /dev/tty prompts.
112- # We keep `--nokey` because the upstream `zisk-setup` bucket only carries
113- # the upstream circuit's key; our blake3-precompile fork has a different
114- # circuit (extra Blake3f AIR), so we restore the fork-matching key from
115- # our own S3 in the next step. `--prefix $HOME/.zisk` pins the install
116- # where cargo-zisk's ZiskPaths fallback looks (the runner sets
117- # XDG_CONFIG_HOME, which would otherwise relocate it).
117+ # ziskup's key install — both avoid its interactive /dev/tty prompts. We
118+ # keep `--nokey` because the upstream `zisk-setup` bucket only carries the
119+ # upstream circuit's key; our fork has a different circuit (extra Blake3f
120+ # AIR), so we restore the fork-matching key from our own S3 in the next
121+ # step. `--prefix $HOME/.zisk` pins the install where cargo-zisk's
122+ # ZiskPaths fallback looks (the runner sets XDG_CONFIG_HOME, which would
123+ # otherwise relocate it).
118124 run : |
119125 curl -L https://raw.githubusercontent.com/0xPolygonHermez/zisk/main/ziskup/install.sh \
120- | bash -s -- --cpu --nokey -y --prefix "$HOME/.zisk"
126+ | bash -s -- --cpu --nokey -y --version 0.18.0 -- prefix "$HOME/.zisk"
121127 echo "$HOME/.zisk/bin" >> "$GITHUB_PATH"
122128 # Execute still needs a proving key present: zisk-host calls
123129 # `client.setup()` (which the SDK runs before the execute branch), and that
0 commit comments