Feat/eip8025

.cargo/audit.toml

@@ -0,0 +1,5 @@
+[advisories]
+# protobuf 2.28.0 (via prometheus 0.13.4) - crash due to uncontrolled recursion.
+# Not exploitable in our context: protobuf is only used for Prometheus metrics
+# serialization with trusted internal data, not for parsing untrusted input.
+ignore = ["RUSTSEC-2024-0437"]

.github/workflows/docker-reproducible.yml

@@ -50,13 +50,13 @@ jobs:
           - arch: amd64
             rust_target: x86_64-unknown-linux-gnu
             rust_image: >-
-              rust:1.88-bullseye@sha256:8e3c421122bf4cd3b2a866af41a4dd52d87ad9e315fd2cb5100e87a7187a9816
+              rust:1.91-bullseye@sha256:ed6afcf912afc6aeddf0d1ff0dc6894c9b1c8f865964ef3f533e3ea77a64ffea
             platform: linux/amd64
             runner: ubuntu-22.04
           - arch: arm64
             rust_target: aarch64-unknown-linux-gnu
             rust_image: >-
-              rust:1.88-bullseye@sha256:8b22455a7ce2adb1355067638284ee99d21cc516fab63a96c4514beaf370aa94
+              rust:1.91-bullseye@sha256:2f06f086e3ceb2940b6f400f576aeec1abf6b6a7cbeb55a163ec2f9c0bbb1ed6
             platform: linux/arm64
             runner: ubuntu-22.04-arm
     runs-on: ${{ matrix.runner }}

.github/workflows/test-suite.yml

@@ -26,6 +26,10 @@ env:
   CARGO_INCREMENTAL: 0
   # Enable portable to prevent issues with caching `blst` for the wrong CPU type
   TEST_FEATURES: portable
+  # Use Clang for C/C++ compilation. Required because leveldb-sys uses
+  # -Wthread-safety which is a Clang-only flag unsupported by GCC.
+  CC: clang
+  CXX: clang++
 jobs:
   check-labels:
     runs-on: ubuntu-latest
@@ -96,6 +100,8 @@ jobs:
       uses: foundry-rs/foundry-toolchain@v1
       with:
         version: nightly-ca67d15f4abd46394b324c50e21e66f306a1162d
+    - name: Clear stale leveldb-sys cmake cache
+      run: rm -rf target/release/build/leveldb-sys-*/out/build 2>/dev/null || true
     - name: Run tests in release
       run: make test-release
     - name: Show cache stats

.github/workflows/zkboost-tests.yml

@@ -0,0 +1,72 @@
+name: zkboost-tests
+
+on:
+  push:
+    branches:
+      - stable
+      - staging
+      - trying
+      - 'pr/*'
+  pull_request:
+  merge_group:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+env:
+  RUSTFLAGS: "-D warnings -C debuginfo=0"
+  CARGO_INCREMENTAL: 0
+  TEST_FEATURES: portable
+  # Use Clang for C/C++ compilation. Required because leveldb-sys uses
+  # -Wthread-safety which is a Clang-only flag unsupported by GCC.
+  CC: clang
+  CXX: clang++
+
+jobs:
+  check-labels:
+    runs-on: ubuntu-latest
+    name: Check for 'skip-ci' label
+    outputs:
+      skip_ci: ${{ steps.set-output.outputs.SKIP_CI }}
+    steps:
+      - name: check for skip-ci label
+        id: set-output
+        env:
+          LABELS: ${{ toJson(github.event.pull_request.labels) }}
+        run: |
+          SKIP_CI="false"
+          if [ -z "${LABELS}" ]  || [ "${LABELS}" = "null" ]; then
+            LABELS="none";
+          else
+            LABELS=$(echo ${LABELS} | jq -r '.[].name')
+          fi
+          for label in ${LABELS}; do
+            if [ "$label" = "skip-ci" ]; then
+              SKIP_CI="true"
+              break
+            fi
+          done
+          echo "skip_ci=$SKIP_CI" >> $GITHUB_OUTPUT
+
+  zkboost-tests:
+    name: zkboost-tests
+    needs: [check-labels]
+    if: needs.check-labels.outputs.skip_ci != 'true'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      - name: Install dependencies
+        run: sudo apt update && sudo apt install -y git gcc g++ make cmake pkg-config llvm-dev libclang-dev clang
+      - name: Get latest version of stable Rust
+        uses: moonrepo/setup-rust@v1
+        with:
+          channel: stable
+          cache-target: release
+          bins: cargo-nextest
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Clear stale leveldb-sys cmake cache
+        run: rm -rf target/release/build/leveldb-sys-*/out/build 2>/dev/null || true
+      - name: Run proof_engine_zkboost integration tests
+        run: make test-zkboost