Fix Anchor CI: sync IDL addresses after keys sync

After 'anchor keys sync' generates new keypairs on CI, the declare_id!()
in source gets updated but the IDL files in idls/*.json keep the old
addresses. Since declare_program!(name) reads from the IDL, LiteSVM tests
then load the .so at the stale IDL address while the program expects the
new declare_id!() address, causing DeclaredProgramIdMismatch.

This adds a step after keys sync that updates each IDL's address field
to match the corresponding program address in Anchor.toml.

Author: mikemaccana-edwardbot

.github/workflows/anchor.yml

@@ -142,6 +142,24 @@ jobs:
             # Sync program IDs (Anchor 1.0.0 requires keypair and declare_id! to match)
             anchor keys sync
 
+            # Update IDL address fields to match the synced keys.
+            # declare_program!(name) reads the address from idls/<name>.json, so
+            # after keys sync changes the program IDs, the IDLs must match too —
+            # otherwise LiteSVM tests load the .so at the old IDL address while
+            # the compiled program expects the new declare_id!() address.
+            if [ -d "idls" ]; then
+              for idl_file in idls/*.json; do
+                program_name=$(basename "$idl_file" .json)
+                # Look up the new address from Anchor.toml [programs.localnet]
+                new_address=$(grep "^${program_name} " Anchor.toml | head -1 | sed 's/.*= *"\(.*\)"/\1/')
+                if [ -n "$new_address" ]; then
+                  # Update the "address" field in the IDL JSON
+                  tmp=$(mktemp)
+                  jq --arg addr "$new_address" '.address = $addr' "$idl_file" > "$tmp" && mv "$tmp" "$idl_file"
+                fi
+              done
+            fi
+
             # Run anchor build
             if ! anchor build; then
               echo "::error::anchor build failed for $project"