Merge branch 'main' into test-names

Signed-off-by: exploreriii <133720349+exploreriii@users.noreply.github.com>

Author: exploreriii

.github/coderabbit/release-pr-prompt.md

@@ -0,0 +1,34 @@
+## 🕵️ Release-Gate Audit: Breaking Changes & Architecture
+
+You are performing a **Senior Release Engineer** audit on this diff. Your goal is to identify risks that could impact downstream users or system stability.
+
+### 🚨 Critical Instructions
+- **Ignore** linting, variable naming, or stylistic preferences.
+- **Focus** on public API surface, data schemas, and logic flow.
+- **Be Concise**: Use bullet points. If no risks are found, state "No breaking changes identified."
+
+---
+
+### 1. 🛠️ Public API & Contract Changes
+Identify any modifications to the public-facing interface.
+- **Removals/Renames**: Are any classes, methods, or variables renamed or removed?
+- **Signature Changes**: Have parameter types or return types changed in a way that breaks existing calls?
+- **Defaults**: Have default values for arguments changed?
+
+### 2. 🏗️ Architectural Integrity
+- **Dependency Changes**: Highlight any new external libraries or significant version bumps.
+- **Side Effects**: Are there new global states, singletons, or changes to how the application initializes?
+- **Resource Usage**: Does this diff introduce patterns that might impact memory or CPU (e.g., new loops, heavy recursive calls)?
+
+### 3. 📉 Backward Compatibility & Data
+- **Persistence**: If applicable, do database schema changes or file format changes require a migration?
+- **Protocol**: If this communicates via API/WebSockets, is the payload structure still compatible with the previous version?
+
+### 4. 🧪 Testing & Validation
+- **Coverage Gap**: Are there major logic additions that lack corresponding test files in the diff?
+- **Edge Cases**: Identify at least one "what-if" scenario that might cause a failure (e.g., "What if the network is down during this new initialization step?").
+
+---
+
+### 🏁 Summary Verdict
+Provide a 1-sentence summary of the "Safety" of this release candidate.

.github/scripts/release-pr-coderabbit-gate.js

@@ -0,0 +1,143 @@
+/**
+ * Posts a single "@coderabbit review" comment on release PRs, embedding the
+ * release review prompt. Designed to run with:
+ * - permissions: contents: read, pull-requests: write
+ *
+ * Safety:
+ * - Only runs for maintainer-authored PRs (MEMBER/OWNER)
+ * - Dedupe via hidden marker comment
+ */
+
+const fs = require("fs");
+const path = require("path");
+
+const MARKER = "<!-- coderabbit-release-gate: v1 -->";
+
+
+function loadPrompt() {
+  const promptPath = path.join(
+    process.env.GITHUB_WORKSPACE || ".", 
+    ".github/coderabbit/release-pr-prompt.md"
+  );
+  try {
+    const content = fs.readFileSync(promptPath, "utf8").trim();
+    if (!content) {
+      throw new Error("Release prompt file is empty");
+    }
+    return content;
+  } catch (error) {
+    throw new Error(`Failed to load release prompt from ${promptPath}: ${error.message}`);
+  }
+}
+
+
+async function commentAlreadyExists({ github, owner, repo, issue_number }) {
+  try {
+      const data = await github.paginate(github.rest.issues.listComments, {
+      owner,
+      repo,
+      issue_number,
+      per_page: 100,
+      });
+      data.forEach(c => {
+        if (c.body && c.body.includes(MARKER)) {
+            console.log(`FOUND MATCH in comment by ${c.user.login}: ${c.html_url}`);
+        }
+      });
+        return data.some((c) => typeof c.body === "string" && c.body.includes(MARKER));
+      }
+  catch (error) {
+      console.error(`Error checking for existing comments: ${error.message}`);
+      return true; // Fail closed to avoid duplicates if we can't verify
+      }
+}
+
+
+function buildBody({ prompt, headRef }) {
+  return [
+    "@coderabbit review",
+    "",
+    MARKER,
+    "",
+    "## 🚀 Release Gate: Cumulative Audit",
+    "> **Notice to Reviewer**: This is a checkpoint PR for a new release. While the diff here primarily updates versioning and the Changelog, your audit must cover the **entire cumulative scope** of changes since the last version tag.",
+    "",
+    "### 🎯 Audit Objectives",
+    "- Analyze all features merged into `main` since the previous release.",
+    "- Identify breaking changes in the public API or protocol.",
+    "- Verify architectural integrity across the Hiero SDK Python modules.",
+    "",
+    "<details>",
+    "<summary><b>View Senior Audit Constraints</b></summary>",
+    "",
+    prompt,
+    "",
+    "</details>",
+    "",
+    "---",
+    `*Auditing Branch: \`${headRef}\` against the project history.*`,
+  ].join("\n");
+}
+
+function getSkipReason(pr) {
+  if (!pr) {
+    return "No pull_request payload; exiting.";
+  }
+
+  if (!["MEMBER", "OWNER"].includes(pr.author_association)) {
+    return `author_association=${pr.author_association}; skipping.`;
+  }
+
+  const title = (pr.title || "").toLowerCase();
+  const isReleaseTitle =
+    title.startsWith("chore: release v") || title.startsWith("release v");
+
+  if (!isReleaseTitle) {
+    return "Not a release PR title; skipping.";
+  }
+
+  return null;
+}
+
+module.exports = async ({ github, context }) => {
+  let issue_number = "unknown";
+  let headRef = "?";
+  let baseRef = "?";
+
+  try {
+    const owner = context.repo.owner;
+    const repo = context.repo.repo;
+    const pr = context.payload.pull_request;
+
+    const skipReason = getSkipReason(pr);
+    if (skipReason) {
+      console.log(skipReason);
+      return;
+    }
+
+    issue_number = pr.number;
+    if (await commentAlreadyExists({ github, owner, repo, issue_number })) {
+      console.log("Release gate comment already exists. Skipping.");
+      return;
+    }
+
+    headRef = pr.head?.ref || "unknown";
+    baseRef = pr.base?.ref || "unknown";
+
+    const prompt = loadPrompt();
+    const body = buildBody({ prompt, headRef });
+
+    await github.rest.issues.createComment({
+      owner,
+      repo,
+      issue_number,
+      body,
+    });
+
+    console.log("Posted CodeRabbit release-gate comment.");
+    console.log(`PR #${issue_number} (${headRef} → ${baseRef})`);
+  } catch (error) {
+    console.error(`Error in release PR coderabbit gate: ${error.message}`);
+    console.log(`PR #${issue_number || 'unknown'} (${headRef || '?'} → ${baseRef || '?'})`);
+  }
+};

.github/spam-list.txt

@@ -1,11 +1,12 @@
-KubanjaElijahEldred
-by22Jy
-CODEAbhinav-art
-zhanglinqian
-Halbot100
-roberthallers
-SergioChan
-ndpvt-web
-OnlyTerp
-shixian-HFUT
-Yuki9814
+KubanjaElijahEldred
+by22Jy
+CODEAbhinav-art
+zhanglinqian
+Halbot100
+roberthallers
+SergioChan
+ndpvt-web
+OnlyTerp
+shixian-HFUT
+Yuki9814
+ashrafzunaira18

.github/workflows/pr-check-test.yml …heck-secondary-unit-integration-test.yml.github/workflows/pr-check-test.yml renamed to .github/workflows/pr-check-secondary-unit-integration-test.yml .github/workflows/pr-check-test.yml renamed to .github/workflows/pr-check-secondary-unit-integration-test.yml

@@ -1,5 +1,4 @@
-name: Hiero Solo Integration & Unit Tests
-
+name: Secondary PR Check - Hiero Solo Integration & Unit Tests
 on:
   push:
     branches:
@@ -9,21 +8,27 @@ on:
       - "docs/**"
       - "examples/**"
       - "tck/**"
+      - "tests/fuzz/**"
       - ".github/**"
-      - "!.github/workflows/pr-check-test.yml"
+      - "!.github/workflows/pr-check-secondary-unit-integration-test.yml"
   pull_request:
     paths-ignore:
       - "**/*.md"
       - "docs/**"
       - "examples/**"
       - "tck/**"
+      - "tests/fuzz/**"
       - ".github/**"
-      - "!.github/workflows/pr-check-test.yml"
+      - "!.github/workflows/pr-check-secondary-unit-integration-test.yml"
   workflow_dispatch: {}
 
 permissions:
   contents: read
 
+concurrency:
+  group: pr-check-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
 jobs:
   unit-tests:
     name: Unit Tests (Python ${{ matrix.python-version }})

.github/workflows/publish.yml

@@ -31,10 +31,10 @@ jobs:
           python-version: '3.14'
 
       - name: Upgrade pip
-        run: pip install --upgrade pip
+        run: pip install "pip==26.0.1"
 
       - name: Install build, pdm-backend, and grpcio-tools
-        run: pip install build pdm-backend "grpcio-tools>=1.76.0"
+        run: pip install build pdm-backend "grpcio-tools==1.76.0"
 
       - name: Generate Protobuf
         run: python generate_proto.py

.github/workflows/release-pr-coderabbit-gate.yml

@@ -0,0 +1,42 @@
+name: CodeRabbit Release Gate Comment
+
+on:
+  pull_request:
+    types: [opened, reopened, synchronize, edited]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+concurrency:
+  group: coderabbit-release-gate-${{ github.event.pull_request.number }}
+  cancel-in-progress: true
+
+jobs:
+  coderabbit-release-gate:
+    runs-on: ubuntu-latest
+    # Only run for release PRs /title check as initial filter
+    if: |
+      github.event.pull_request &&
+      (github.event.pull_request.author_association == 'MEMBER' ||
+      github.event.pull_request.author_association == 'OWNER') &&
+      (startsWith(github.event.pull_request.title, 'chore: release v') ||
+      startsWith(github.event.pull_request.title, 'release v'))
+
+    steps:
+      - name:  Harden the runner
+        uses: step-security/harden-runner@e3f713f2d8f53843e71c69a996d56f51aa9adfb9 # v2.14.1
+        with:
+            egress-policy: audit
+
+      - name: Checkout repository
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 #v6.0.1
+
+      - name: Post CodeRabbit release-gate prompt comment
+        env: 
+            GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd #v8.0.0
+        with:
+          script: |
+            const script = require('./.github/scripts/release-pr-coderabbit-gate.js');      
+            await script({ github, context});

CHANGELOG.md

@@ -1,4 +1,4 @@
-# Changelog
+# Changelog
 
 All notable changes to this project will be documented in this file.
 This project adheres to [Semantic Versioning](https://semver.org).
@@ -7,24 +7,29 @@ This changelog is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.
 ## [Unreleased]
 
 ### Src
-- 
+- Exposed all missing `TransactionRecord` protobuf fields `consensusTimestamp`, `scheduleRef`, `assessed_custom_fees`, `automatic_token_associations`, `parent_consensus_timestamp`, `alias`, `ethereum_hash`, `paid_staking_rewards`, `evm_address`, `contractCreateResult` with proper `None` handling, PRNG oneof handling with unset values return `None` instead of default values 0 / b"" (#1636)
 
 ### Tests
 - Refactor `mock_server` setup for network level TLS handling and added thread safety
 - Ensured /fuzz and /unit tests end in `_test.py` (#2063)
 
 ### Examples
 
+- Add the missing `setup_client()` docstring in `examples/tokens/token_dissociate_transaction.py` for consistency with the other example functions. (#2058)
 
 ### Docs
 
 
 ### .github
+- chore: pin pip packages to exact versions in publish.yml to improve supply chain security and reproducibility (#2056)
 - chore: update GitHub Actions runners from ubuntu-latest to hl-sdk-py-lin-md (#2021)
 - Refactored the Advanced Issue Template to V2 with stricter prerequisites and a focus on architectural design (#2016).
 - Refactored the Advanced Issue Template to ensure PR-level quality checklists do not block maintainers during issue creation (#2036)
+- chore: add concurrency to unit and integration tests (#2071)
 - Add automated label sync workflow to propagate labels from linked issues to pull requests (#1716)
 - Added support for fuzz and TCK test naming check, converted to JS from shell and ensure it checks all tests (#2064)
+- chore: update spam list (#2035)
+- Add CodeRabbit release gate workflow and prompt for PR audits `release-pr-prompt.md`, `release-pr-coderabbit-gate.yml` and `release-pr-coderabbit-gate.js`
 
 ## [0.2.3] - 2026-03-26
 
@@ -36,6 +41,8 @@ This changelog is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.
 - Fix the TransactionGetReceiptQuery to raise ReceiptStatusError for the non-retryable and non success receipt status
 - Refactor `AccountInfo` to use the existing `StakingInfo` wrapper class instead of flattened staking fields. Access is now via `info.staking_info.staked_account_id`, `info.staking_info.staked_node_id`, and `info.staking_info.decline_reward`. The old flat accessors (`info.staked_account_id`, `info.staked_node_id`, `info.decline_staking_reward`) are still available as deprecated properties and will emit a `DeprecationWarning`. (#1366)
 - Added abstract `Key` supper class to handle various proto Keys.
+
+
 ### Examples
 
 ### Tests

examples/tokens/token_dissociate_transaction.py

@@ -19,6 +19,7 @@
 
 
 def setup_client():
+    """Initialize the Hiero client from environment variables and print connection info."""
     client = Client.from_env()
     print(f"Network: {client.network.network}")
     print(f"Client set up with operator id {client.operator_account_id}")