Merge branch 'develop' into feature/PLEX-2611-cre-don2don-accept-ocr-attestatin

Author: dhaidashenko

.changeset/confidential-workflow-execution.md

@@ -0,0 +1,5 @@
+---
+"chainlink": minor
+---
+
+Wire confidential relay service into CRE startup #added

.changeset/cw-fetcher-and-system-tests.md

@@ -0,0 +1,5 @@
+---
+"chainlink": patch
+---
+
+Support HTTP URLs in file fetcher for local confidential workflow testing, add system-test instrumentation #changed

.changeset/gold-kites-bake.md

@@ -0,0 +1,5 @@
+---
+"chainlink": patch
+---
+
+Deprecate InsecurePPROFHeap setting. Remove limitation.

.changeset/minor-bump-1774375762.md .changeset/minor-bump-1776191418.md.changeset/minor-bump-1774375762.md renamed to .changeset/minor-bump-1776191418.md

@@ -0,0 +1,5 @@
+---
+"chainlink": patch
+---
+
+Remove unused BinaryURLResolver from ConfidentialModule (PRIV-389 credentials sidecar)

.changeset/remove-binary-url-resolver.md

@@ -11,6 +11,11 @@ tmp/
 contracts/node_modules
 examples/
 
+.changeset/
+.github/
+docs/
+fuzz/
+
 devenv/
 deployment/
 integration/

.changeset/vault-auth-gw-handler.md

@@ -0,0 +1,20 @@
+<scope>
+GitHub Actions in the Chainlink Go monorepo.
+</scope>
+
+<rules>
+- Prefer runs-on runners when ubuntu-latest is insufficient.
+- Minimize YAML and shell in workflows.
+- Resolve smartcontractkit/.github from a local clone. Ask the user for the path if you cannot find it.
+- Do not fetch smartcontractkit/.github from the web unless no local copy exists or local copy does not match required CI behavior.
+</rules>
+
+<docs>
+- runs-on: https://runs-on.com/docs/
+</docs>
+
+<tools>
+- https://github.com/kalverra/octometrics — per-workflow debugging
+- https://github.com/kalverra/octometrics-action — runner resource monitoring
+</tools>
+

.dockerignore

@@ -9,105 +9,98 @@
 # Root
 * @smartcontractkit/foundations @smartcontractkit/core
 
-.changeset @smartcontractkit/foundations @smartcontractkit/core
+/.changeset/ @smartcontractkit/foundations @smartcontractkit/core
 
 # Chains
-/common @smartcontractkit/bix-framework @smartcontractkit/core
-/core/chains/ @smartcontractkit/bix-framework @smartcontractkit/core
-/core/chains/evm/txm @dimriou @smartcontractkit/bix-framework @smartcontractkit/core
+/common/ @smartcontractkit/bix-framework @smartcontractkit/core
+/common/txmgr/ @dimriou @smartcontractkit/bix-framework @smartcontractkit/core
 
 # Services
-/core/services/directrequest @smartcontractkit/foundations
-/core/services/feeds @smartcontractkit/core @smartcontractkit/devex-tooling
-/core/services/synchronization/telem @smartcontractkit/data-tooling @smartcontractkit/core
+/core/services/directrequest/ @smartcontractkit/foundations
+/core/services/feeds/ @smartcontractkit/core @smartcontractkit/devex-tooling
+/core/services/synchronization/telem/ @smartcontractkit/data-tooling @smartcontractkit/core
 /core/capabilities/ @smartcontractkit/keystone @smartcontractkit/capabilities-team
-/core/capabilities/ccip @smartcontractkit/ccip-offchain
-/core/capabilities/ccip/ccipsolana @smartcontractkit/bix-build
-/core/capabilities/ccip/ccipnoop @smartcontractkit/bix-build
-/core/capabilities/ccip/ccipton @smartcontractkit/bix-build
+/core/capabilities/ccip/ @smartcontractkit/ccip-offchain
+/core/capabilities/ccip/ccipsolana/ @smartcontractkit/bix-build
+/core/capabilities/ccip/ccipnoop/ @smartcontractkit/bix-build
+/core/capabilities/ccip/ccipton/ @smartcontractkit/bix-build
 
 # To be deprecated in Chainlink V3
-/core/services/fluxmonitorv2 @smartcontractkit/foundations @smartcontractkit/core
-/core/services/job @smartcontractkit/foundations @smartcontractkit/core
-/core/services/keystore @smartcontractkit/foundations
-/core/services/ocr* @smartcontractkit/foundations @smartcontractkit/core
-/core/services/periodicbackup @smartcontractkit/foundations @smartcontractkit/core
-/core/services/pg @smartcontractkit/foundations @smartcontractkit/core
-/core/services/pipeline @smartcontractkit/foundations @smartcontractkit/bix-framework @smartcontractkit/core
-/core/services/telemetry @smartcontractkit/data-tooling @smartcontractkit/core
-/core/services/relay/evm/mercury @smartcontractkit/data-streams-engineers @smartcontractkit/core
-/core/services/webhook @smartcontractkit/foundations @smartcontractkit/bix-framework @smartcontractkit/core
-/core/services/llo @smartcontractkit/data-streams-engineers @smartcontractkit/core
+/core/services/fluxmonitorv2/ @smartcontractkit/foundations @smartcontractkit/core
+/core/services/job/ @smartcontractkit/foundations @smartcontractkit/core
+/core/services/keystore/ @smartcontractkit/foundations
+/core/services/ocr*/ @smartcontractkit/foundations @smartcontractkit/core
+/core/services/periodicbackup/ @smartcontractkit/foundations @smartcontractkit/core
+/core/services/pg/ @smartcontractkit/foundations @smartcontractkit/core
+/core/services/pipeline/ @smartcontractkit/foundations @smartcontractkit/bix-framework @smartcontractkit/core
+/core/services/telemetry/ @smartcontractkit/data-tooling @smartcontractkit/core
+/core/services/relay/evm/mercury/ @smartcontractkit/data-streams-engineers @smartcontractkit/core
+/core/services/webhook/ @smartcontractkit/foundations @smartcontractkit/bix-framework @smartcontractkit/core
+/core/services/llo/ @smartcontractkit/data-streams-engineers @smartcontractkit/core
 
 # CCIP
-/core/services/ccip @smartcontractkit/ccip
-/core/services/ocr2/plugins/ccip @smartcontractkit/ccip
+/core/services/ccip/ @smartcontractkit/ccip
+/core/services/ocr2/plugins/ccip/ @smartcontractkit/ccip
 
 # VRF-related services
-/core/services/vrf @smartcontractkit/dev-services @smartcontractkit/core
-/core/services/blockhashstore @smartcontractkit/dev-services @smartcontractkit/core
-/core/services/blockheaderfeeder @smartcontractkit/dev-services @smartcontractkit/core
+/core/services/vrf/ @smartcontractkit/dev-services @smartcontractkit/core
+/core/services/blockhashstore/ @smartcontractkit/dev-services @smartcontractkit/core
+/core/services/blockheaderfeeder/ @smartcontractkit/dev-services @smartcontractkit/core
 /core/services/pipeline/task.vrf.go @smartcontractkit/dev-services
 /core/services/pipeline/task.vrfv2.go @smartcontractkit/dev-services
 /core/services/pipeline/task.vrfv2plus.go @smartcontractkit/dev-services
-/core/scripts/vrf* @smartcontractkit/dev-services
+/core/scripts/vrf*/ @smartcontractkit/dev-services
 
 # Keeper/Automation-related services
-/core/services/keeper @smartcontractkit/dev-services
-/core/services/ocr2/plugins/ocr2keeper @smartcontractkit/dev-services
+/core/services/keeper/ @smartcontractkit/dev-services
+/core/services/ocr2/plugins/ocr2keeper/ @smartcontractkit/dev-services
 
 # Chainlink Functions
-core/services/functions @smartcontractkit/dev-services
-core/services/ocr2/plugins/functions @smartcontractkit/dev-services
-core/services/s4 @smartcontractkit/dev-services
-core/service/ocr2/plugins/s4 @smartcontractkit/dev-services
-core/services/ocr2/plugins/threshold @smartcontractkit/dev-services
-core/services/relay/evm/functions @smartcontractkit/dev-services
-core/scripts/functions @smartcontractkit/dev-services
-core/scripts/gateway @smartcontractkit/dev-services
+/core/services/functions/ @smartcontractkit/dev-services
+/core/services/ocr2/plugins/functions/ @smartcontractkit/dev-services
+/core/services/s4/ @smartcontractkit/dev-services
+/core/services/ocr2/plugins/s4/ @smartcontractkit/dev-services
+/core/services/ocr2/plugins/threshold/ @smartcontractkit/dev-services
+/core/services/relay/evm/functions/ @smartcontractkit/dev-services
+/core/scripts/functions/ @smartcontractkit/dev-services
+/core/scripts/gateway/ @smartcontractkit/dev-services
 
 # Keystone
-/core/services/registrysyncer @smartcontractkit/keystone
-/core/services/workflows @smartcontractkit/keystone
-/core/services/standardcapabilities @smartcontractkit/keystone
-/core/scripts/keystone @smartcontractkit/keystone
+/core/services/registrysyncer/ @smartcontractkit/keystone
+/core/services/workflows/ @smartcontractkit/keystone
+/core/services/standardcapabilities/ @smartcontractkit/keystone
+/core/scripts/keystone/ @smartcontractkit/keystone
 
 # GQL API
-/core/web/resolver @smartcontractkit/foundations @smartcontractkit/core
-/core/web/schema @smartcontractkit/foundations @smartcontractkit/core
+/core/web/resolver/ @smartcontractkit/foundations @smartcontractkit/core
+/core/web/schema/ @smartcontractkit/foundations @smartcontractkit/core
 
 # Tests
 /integration-tests/ @smartcontractkit/devex-tooling @smartcontractkit/core
-/integration-tests/ccip-tests @smartcontractkit/ccip-offchain @smartcontractkit/core @smartcontractkit/ccip
+/integration-tests/ccip-tests/ @smartcontractkit/ccip-offchain @smartcontractkit/core @smartcontractkit/ccip
 /integration-tests/**/*keeper* @smartcontractkit/dev-services @smartcontractkit/core
 /integration-tests/**/*automation* @smartcontractkit/dev-services @smartcontractkit/core
 /integration-tests/**/*ccip* @smartcontractkit/ccip-offchain @smartcontractkit/core @smartcontractkit/ccip
 /devenv/ @smartcontractkit/devex-tooling
 /devenv/products/ocr2/ @smartcontractkit/devex-tooling
 
 # Deployment tooling
-/deployment @smartcontractkit/ccip-tooling @smartcontractkit/ccip-offchain @smartcontractkit/keystone @smartcontractkit/operations-platform @smartcontractkit/core
-/deployment/ccip @smartcontractkit/ccip-tooling @smartcontractkit/ccip-offchain @smartcontractkit/operations-platform @smartcontractkit/core
-/deployment/ccip/changeset/globals @smartcontractkit/ccip-offchain
-/deployment/ccip/changeset/ton @smartcontractkit/bix-build @smartcontractkit/operations-platform @smartcontractkit/core
-/deployment/common @smartcontractkit/operations-platform
-/deployment/cre @smartcontractkit/keystone @smartcontractkit/operations-platform
-/deployment/data-feeds @smartcontractkit/data-feeds-engineers @smartcontractkit/operations-platform @smartcontractkit/core
-/deployment/data-streams @smartcontractkit/data-streams-engineers @smartcontractkit/operations-platform @smartcontractkit/core
-/deployment/keystone @smartcontractkit/keystone @smartcontractkit/operations-platform @smartcontractkit/core
-/deployment/vault @smartcontractkit/cld-vault @smartcontractkit/operations-platform @smartcontractkit/core
+/deployment/ @smartcontractkit/ccip-tooling @smartcontractkit/ccip-offchain @smartcontractkit/keystone @smartcontractkit/operations-platform @smartcontractkit/core
+/deployment/ccip/ @smartcontractkit/ccip-tooling @smartcontractkit/ccip-offchain @smartcontractkit/operations-platform @smartcontractkit/core
+/deployment/ccip/changeset/globals/ @smartcontractkit/ccip-offchain
+/deployment/common/ @smartcontractkit/operations-platform
+/deployment/cre/ @smartcontractkit/keystone @smartcontractkit/operations-platform
+/deployment/data-feeds/ @smartcontractkit/data-feeds-engineers @smartcontractkit/operations-platform @smartcontractkit/core
+/deployment/data-streams/ @smartcontractkit/data-streams-engineers @smartcontractkit/operations-platform @smartcontractkit/core
+/deployment/keystone/ @smartcontractkit/keystone @smartcontractkit/operations-platform @smartcontractkit/core
+/deployment/vault/ @smartcontractkit/cld-vault @smartcontractkit/operations-platform @smartcontractkit/core
 
 # CI/CD
 /.github/** @smartcontractkit/devex-cicd @smartcontractkit/devex-tooling @smartcontractkit/core
 /.github/CODEOWNERS @smartcontractkit/core @smartcontractkit/foundations
 /.github/workflows/build-publish.yml @smartcontractkit/devex-cicd
-/.github/workflows/performance-tests.yml @smartcontractkit/devex-tooling
-/.github/workflows/automation-ondemand-tests.yml @smartcontractkit/dev-services
-/.github/workflows/automation-benchmark-tests.yml @smartcontractkit/dev-services
-/.github/workflows/automation-load-tests.yml @smartcontractkit/dev-services
-/.github/workflows/automation-nightly-tests.yml @smartcontractkit/dev-services
-/.github/workflows/devenv-ocr2.yml @smartcontractkit/devex-tooling
-/tools/plugout @smartcontractkit/devex-cicd
+/.github/workflows/devenv* @smartcontractkit/devex-tooling @smartcontractkit/devex-cicd @smartcontractkit/core
+/tools/plugout/ @smartcontractkit/devex-cicd
 
 /core/chainlink.Dockerfile @smartcontractkit/devex-cicd @smartcontractkit/foundations @smartcontractkit/core
 
@@ -122,5 +115,4 @@ flake.nix @smartcontractkit/core
 flake.lock @smartcontractkit/core
 
 # Config
-./docs/CONFIG.md @smartcontractkit/foundations @smartcontractkit/core @smartcontractkit/devrel
-./internal/config/docs.toml @smartcontractkit/foundations @smartcontractkit/core @smartcontractkit/devrel
+/docs/CONFIG.md @smartcontractkit/foundations @smartcontractkit/core @smartcontractkit/devrel

.github/AGENTS.md

@@ -27,15 +27,15 @@ runs:
   using: composite
   steps:
     - name: Checkout repo (full)
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
       # Only do a full checkout on merge_groups
       if: github.event_name == 'merge_group'
       with:
         persist-credentials: false
         fetch-depth: 0
 
     - name: Checkout repo
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
       if: github.event_name != 'merge_group'
       with:
         persist-credentials: false
@@ -70,7 +70,7 @@ runs:
         # golangci-lint runs with absolute path mode: --path-mode=abs
         REPORT_PATH: ${{ github.workspace }}/${{ steps.set-working-directory.outputs.golangci-lint-working-directory }}golangci-lint-report.xml
       with:
-        version: v2.5.0
+        version: v2.11.4
         only-new-issues: true
         args: --output.checkstyle.path=${{ env.REPORT_PATH }}
         working-directory: ${{ steps.set-working-directory.outputs.golangci-lint-working-directory }}
@@ -109,7 +109,7 @@ runs:
     - name: Store Golangci-lint report artifact
       if: always()
       id: upload-artifact
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         # Use a unique suffix for each lint report artifact to avoid duplication errors
         name: golangci-lint-report-${{ steps.suffix.outputs.suffix }}