Skip to content

chore: vendor core bridge#3629

Open
guibescos wants to merge 7 commits intomainfrom
vendor-core-bridge
Open

chore: vendor core bridge#3629
guibescos wants to merge 7 commits intomainfrom
vendor-core-bridge

Conversation

@guibescos
Copy link
Copy Markdown
Contributor

@guibescos guibescos commented Apr 24, 2026

I would like to bring this contract over from https://github.com/guibescos/wormhole/tree/feat/add-update-guardian-set-ttl/solana/programs/core-bridge, now that we are going to do more work on it.

This is the wormhole receiver that we use on Solana and SVM chains.
This PR is basically just a copy paste, with minimal changes to:

  • become part of the target_chains/solana workspace alongside the Pyth contracts
  • format
  • clippy

Open in Devin Review

@vercel
Copy link
Copy Markdown

vercel Bot commented Apr 24, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
api-reference Ready Ready Preview, Comment Apr 24, 2026 6:18pm
component-library Ready Ready Preview, Comment Apr 24, 2026 6:18pm
developer-hub Ready Ready Preview, Comment Apr 24, 2026 6:18pm
entropy-explorer Ready Ready Preview, Comment Apr 24, 2026 6:18pm
insights Ready Ready Preview, Comment Apr 24, 2026 6:18pm
proposals Ready Ready Preview, Comment Apr 24, 2026 6:18pm
staking Ready Ready Preview, Comment Apr 24, 2026 6:18pm

Request Review

Copy link
Copy Markdown
Contributor

@devin-ai-integration devin-ai-integration Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Devin Review found 5 potential issues.

⚠️ 1 issue in files not directly in the diff

⚠️ Accidental empty output.txt file committed to repository (target_chains/solana/programs/core-bridge/output.txt:1)

An empty output.txt file is added to target_chains/solana/programs/core-bridge/output.txt. This looks like an accidental file from a build or debug session. Per REVIEW.md: "Check for files that should not be in the repo (e.g., generated files, .env files, credentials, documents/). Flag any suspicious additions."

View 4 additional findings in Devin Review.

Open in Devin Review

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚩 Vendoring entire core-bridge program is a large addition — scope and test coverage

This PR vendors the entire Wormhole Core Bridge program (~4000+ lines of Rust) as a local dependency, replacing a git dependency. Per REVIEW.md's scope discipline rule, this is a very large addition. The commit message is simply "go", which provides no context. There are no tests included in this PR for the new code, and the README.md is empty. While the core-bridge code may have been tested upstream, the vendored version should have at minimum integration tests to verify it works correctly with the existing pyth-solana-receiver.

Open in Devin Review

Was this helpful? React with 👍 or 👎 to provide feedback.

Comment thread target_chains/solana/programs/core-bridge/src/lib.rs
@guibescos guibescos requested a review from a team as a code owner April 24, 2026 17:51
Copy link
Copy Markdown
Contributor

@devin-ai-integration devin-ai-integration Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Devin Review found 1 new potential issue.

View 5 additional findings in Devin Review.

Open in Devin Review

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants