mjain/make program cache infallible

.config/nextest.toml

@@ -53,7 +53,7 @@ filter = 'package(solana-local-cluster) & test(/^test_fork_choice_refresh_old_vo
 slow-timeout = { period = "60s", terminate-after = 5 }
 
 [[profile.ci.overrides]]
-filter = 'package(solana-local-cluster) & test(/^test_cluster_partition$/)'
+filter = 'package(solana-local-cluster) & test(/^test_cluster_partition/)'
 slow-timeout = { period = "60s", terminate-after = 4 }
 
 [[profile.ci.overrides]]
@@ -65,7 +65,7 @@ filter = 'package(solana-local-cluster) & test(/^test_slot_hash_expiry$/)'
 slow-timeout = { period = "60s", terminate-after = 4 }
 
 [[profile.ci.overrides]]
-filter = 'package(solana-local-cluster) & test(/^test_kill_heaviest_partition$/)'
+filter = 'package(solana-local-cluster) & test(/^test_kill_heaviest_partition/)'
 slow-timeout = { period = "60s", terminate-after = 4 }
 
 [[profile.ci.overrides]]

.github/CODEOWNERS

@@ -1,8 +1,8 @@
 # Please keep this file sorted
 /bloom/ @anza-xyz/networking
 /bls-cert-verify/ @anza-xyz/consensus
+/bls-sigverify/ @anza-xyz/consensus
 /compute-budget-instruction/ @anza-xyz/fees
-/core/src/bls_sigverify/ @anza-xyz/consensus
 /core/src/consensus.rs @anza-xyz/consensus
 /core/src/consensus/ @anza-xyz/consensus
 /core/src/repair/ @anza-xyz/networking @anza-xyz/consensus

.github/PULL_REQUEST_TEMPLATE.md

@@ -4,4 +4,7 @@
 #### Summary of Changes
 
 
+#### Testing
+
+
 Fixes #

.github/dependabot.yml

@@ -8,6 +8,16 @@ updates:
       time: "08:00"
       timezone: Etc/UTC
     open-pull-requests-limit: 6
+    cooldown:
+      default-days: 7
+      # crates published by anza-team bypass the cooldown
+      exclude:
+        - "solana-*"
+        - "agave-*"
+        - "spl-*"
+        - "rts-alloc"
+        - "shaq"
+        - "wincode"
 
   # split from root directory schedule to avoid duplicate checks
   - package-ecosystem: cargo
@@ -20,20 +30,16 @@ updates:
       time: "14:00"
       timezone: Etc/UTC
     open-pull-requests-limit: 6
-
-  - package-ecosystem: "npm"
-    directory: "/docs"
-    schedule:
-      interval: weekly
-      time: "08:00"
-      timezone: Etc/UTC
-    open-pull-requests-limit: 3
     cooldown:
       default-days: 7
-    groups:
-      docs-dependencies:
-        patterns:
-          - "*"
+      # crates published by anza-team bypass the cooldown
+      exclude:
+        - "solana-*"
+        - "agave-*"
+        - "spl-*"
+        - "rts-alloc"
+        - "shaq"
+        - "wincode"
 
   - package-ecosystem: "github-actions"
     directory: "/"
@@ -42,3 +48,5 @@ updates:
       time: "08:00"
       timezone: Etc/UTC
     open-pull-requests-limit: 3
+    cooldown:
+      default-days: 7

.github/workflows/benchmark.yml

@@ -6,7 +6,7 @@ on:
 
 jobs:
   benchmark:
-    if: github.repository == 'anza-xyz/agave'
+    if: github.repository_owner == 'anza-xyz'
     name: benchmark
     runs-on: benchmark
     strategy:
@@ -61,7 +61,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10  # v6.0.3
 
       - name: Before Command
         if: ${{ matrix.test.before_command != '' }}

.github/workflows/bump-version.yml

@@ -17,14 +17,33 @@ on:
 
 jobs:
   version-bump:
-    if: github.repository == 'anza-xyz/agave'
+    if: github.repository_owner == 'anza-xyz'
     runs-on: ubuntu-24.04
+    permissions:
+      pull-requests: write
+    environment: "Version Bump"
     steps:
+      - name: Create github app token
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        id: app-token
+        with:
+          client-id: ${{ vars.CLIENT_ID }}
+          private-key: ${{ secrets.PRIVATE_KEY }}
+
+      - name: Set git config
+        run: |
+          git config --global user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git config --global user.name "github-actions[bot]"
+          git config --global url."https://x-access-token:${GITHUB_TOKEN}@github.com/".insteadOf https://github.com/
+        env:
+          GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
+
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10  # v6.0.3
         with:
           fetch-depth: 0
-          token: ${{ secrets.VERSION_BUMP_PAT }}
+          token: ${{ steps.app-token.outputs.token }}
+          persist-credentials: false
 
       - name: Setup
         run: |
@@ -37,10 +56,6 @@ jobs:
             --rev 930e3baec27a17cb4491b5585515b33f94dbd039 \
             --bin xtask
 
-          # git config
-          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
-          git config user.name "github-actions[bot]"
-
       - name: Process
         id: process
         env:
@@ -71,6 +86,7 @@ jobs:
               owner: context.repo.owner,
               repo: context.repo.repo,
               title: `Bump version to ${process.env.NEW_VERSION}`,
+              draft: true,
               head: `version-bump-${process.env.NEW_VERSION}`,
               base: process.env.TARGET_BRANCH
             })

.github/workflows/cargo.yml

@@ -30,7 +30,7 @@ env:
 
 jobs:
   clippy-nightly:
-    if: github.repository == 'anza-xyz/agave'
+    if: github.repository_owner == 'anza-xyz'
     strategy:
       matrix:
         os:
@@ -53,7 +53,7 @@ jobs:
           apk update
           apk add bash git
 
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10  # v6.0.3
 
       - uses: mozilla-actions/sccache-action@9e7fa8a12102821edf02ca5dbea1acd0f89a2696  # v0.0.10
         with:
@@ -69,10 +69,10 @@ jobs:
 
   clippy-nightly-windows-2025:
     name: clippy-nightly (windows-2025)
-    if: github.repository == 'anza-xyz/agave' && github.event_name == 'push'
+    if: github.repository_owner == 'anza-xyz' && github.event_name == 'push'
     runs-on: windows-2025
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10  # v6.0.3
 
       - uses: mozilla-actions/sccache-action@9e7fa8a12102821edf02ca5dbea1acd0f89a2696  # v0.0.10
         with:

.github/workflows/changelog-label.yml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-24.04
 
     steps:
-    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10  # v6.0.3
       with:
         fetch-depth: 0
     - name: Check if changes to CHANGELOG.md

.github/workflows/crate-check.yml

@@ -1,4 +1,4 @@
-name: crate-check
+name: Crate Check
 
 on:
   push:
@@ -15,10 +15,10 @@ on:
 jobs:
   check:
     name: crate check
-    if: github.repository == 'anza-xyz/agave'
+    if: github.repository_owner == 'anza-xyz'
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10  # v6.0.3
         with:
           fetch-depth: 0
 

.github/workflows/dependabot-pr.yml

@@ -9,13 +9,29 @@ jobs:
   dependabot:
     timeout-minutes: 10
     runs-on: ubuntu-24.04
-    if: github.event.pull_request.user.login == 'dependabot[bot]'
+    if: github.actor == 'dependabot[bot]'
     steps:
+      - name: Create github app token
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        id: app-token
+        with:
+          client-id: ${{ secrets.CLIENT_ID }}
+          private-key: ${{ secrets.PRIVATE_KEY }}
+
+      - name: Set git config
+        run: |
+          git config --global user.email "49699333+dependabot[bot]@users.noreply.github.com"
+          git config --global user.name "dependabot[bot]"
+          git config --global url."https://x-access-token:${GITHUB_TOKEN}@github.com/".insteadOf https://github.com/
+        env:
+          GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
+
       - name: checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10  # v6.0.3
         with:
           ref: ${{ github.event.pull_request.head.ref }}
-          token: ${{ secrets.PAT }}
+          token: ${{ steps.app-token.outputs.token }}
+          persist-credentials: false
 
       - name: update code
         env:
@@ -45,8 +61,6 @@ jobs:
           if [ -z "$(git status --porcelain)" ]; then
             echo "✅ Nothing to update"
           else
-            git config user.email "49699333+dependabot[bot]@users.noreply.github.com"
-            git config user.name "dependabot[bot]"
             git add **/Cargo.toml
             git add **/Cargo.lock
             git commit -am "Update all workspaces"