Merge branch 'main' into feat/split-address-collision-weekly

Author: fluentcrafter

.github/actions/linea-besu-package/build-plugins-and-assemble/action.yml

@@ -70,13 +70,7 @@ runs:
     - name: Setup Tracer Environment
       uses: ./.github/actions/setup-tracer-environment
       with:
-        enable-ssh: false
-    
-    - name: Build besu from source 
-      shell: bash
-      run: cd linea-besu-package && make build-besu-local-and-update-lib-version
-      env:
-        JAVA_OPTS: -Xmx2g -Dorg.gradle.daemon=false
+        skip-download-besu-dist: false
 
     - name: Compute linea-besu-package metadata
       id: metadata
@@ -92,7 +86,7 @@ runs:
       shell: bash
       run: cd linea-besu-package && make build-tracer-and-sequencer
       env:
-        JAVA_OPTS: -Xmx2g -Dorg.gradle.daemon=false
+        JAVA_OPTS: -Xmx2g
         TRACER_PLUGIN_VERSION: ${{ steps.metadata.outputs.tracer_plugin_version }}
         SEQUENCER_PLUGIN_VERSION: ${{ steps.metadata.outputs.sequencer_plugin_version }}
 

.github/actions/setup-tracer-environment/action.yml

@@ -1,13 +1,14 @@
-name: 'Setup Tracer Environment'
-description: 'Checkout repository and install what is needed for building / testing'
+name: 'Setup Tracer Environment (build Besu if needed)'
+description: 'Install what is needed for building / testing, and build Besu if needed'
 inputs:
   enable-ssh:
     description: 'Enable ability to ssh into session'
     required: false
-    default: false
-  github-token:
-    description: 'Github token (needed for downloading corset)'
+    default: 'false'
+  skip-download-besu-dist:
+    description: 'Skip downloading Besu distribution from public maven'
     required: false
+    default: 'true'
 
 runs:
   using: 'composite'
@@ -26,3 +27,10 @@ runs:
         uses: ./.github/actions/setup-java-and-gradle
         with:
           java-version: '21'
+
+      - name: Build besu from source (if needed)
+        shell: bash
+        run: ./gradlew buildAndUpdateBesuVersionInLibsVersions -PskipDownloadBesuDist="$SKIP_DOWNLOAD_BESU_DIST"
+        env:
+          SKIP_DOWNLOAD_BESU_DIST: ${{ inputs.skip-download-besu-dist }}
+          JAVA_OPTS: -Xmx2g

.github/workflows/claude-code-review.yml

@@ -2,18 +2,46 @@ name: Claude Code Review
 
 on:
   pull_request:
-    types: [opened, synchronize, ready_for_review, reopened]
-    # Optional: Only run on specific file changes
-    # paths:
-    #   - "src/**/*.ts"
-    #   - "src/**/*.tsx"
-    #   - "src/**/*.js"
-    #   - "src/**/*.jsx"
+    types: [opened, edited, synchronize, ready_for_review, reopened]
+    paths:
+      - "**/*.js"
+      - "**/*.jsx"
+      - "**/*.ts"
+      - "**/*.tsx"
+      - "**/*.java"
+      - "**/*.kt"
+      - "**/*.go"
+      - "**/*.py"
+      - "**/*.rs"
+      - "**/*.sol"
+      - "**/*.zkasm"
+      - "**/*.lisp"
+      - "**/Makefile"
+      - "**/*.mk"
+      - "**/Dockerfile"
+      - "**/Dockerfile.*"
+      - "**/*.dockerfile"
+      - "**/*.sh"
+      - "**/*.bash"
+      - "**/*.gradle"
+      - "**/*.gradle.kts"
+      - "**/gradlew"
+      - "**/gradle.properties"
+      - "**/settings.gradle"
+      - "**/settings.gradle.kts"
 
 jobs:
   claude-review:
-    # Only run on PRs from the same repo (team members), not forks
-    if: github.event.pull_request.head.repo.full_name == github.repository
+    # Only run when '@claude-review' is present in the PR description
+    # and the author is a repo owner, member, or collaborator (i.e. team member)
+    if: |
+      github.event.pull_request.head.repo.full_name == github.repository &&
+      contains(github.event.pull_request.body, '@claude-review') &&
+      (
+        github.event.pull_request.author_association == 'OWNER' ||
+        github.event.pull_request.author_association == 'MEMBER' ||
+        github.event.pull_request.author_association == 'COLLABORATOR'
+      )
 
     runs-on: ubuntu-latest
     permissions:
@@ -33,9 +61,21 @@ jobs:
         uses: anthropics/claude-code-action@5d0cc745cd0cce4c0e9e0b3511de26c3bc285eb5 #v1.0.71
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
-          plugin_marketplaces: 'https://github.com/anthropics/claude-code.git'
-          plugins: 'code-review@claude-code-plugins'
-          prompt: '/code-review:code-review ${{ github.repository }}/pull/${{ github.event.pull_request.number }}'
-          # See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
-          # or https://code.claude.com/docs/en/cli-reference for available options
+          # use_sticky_comment: false
+          direct_prompt: |
+            You are a senior software engineer performing a thorough code review on PR #${{ github.event.pull_request.number }} in ${{ github.repository }}.
 
+            Review ONLY changed files with the following extensions or names:
+            .js .jsx .ts .tsx .java .kt .go .py .rs .sol .sh .bash .gradle .gradle.kts .mk .dockerfile .zkasm .lisp
+            Makefile gradlew gradle.properties settings.gradle settings.gradle.kts Dockerfile Dockerfile.*
+
+            For each issue you find, post an inline pull request review comment on the exact file and line where the problem occurs.
+
+            Focus on:
+            - Bugs and logic errors
+            - Security vulnerabilities (injection, unsafe deserialization, improper auth, etc.)
+            - Performance problems
+            - Code quality, readability, and maintainability issues
+            - Incorrect or missing error handling
+
+            Be specific, actionable, and constructive. Do NOT post a general top-level PR summary comment.

.github/workflows/coordinator-build-and-publish.yml

@@ -82,6 +82,12 @@ jobs:
           distribution: temurin
           java-version: 21
 
+      - name: Build besu from source 
+        shell: bash
+        run: ./gradlew buildAndUpdateBesuVersionInLibsVersions -PskipDownloadBesuDist=true
+        env:
+          JAVA_OPTS: -Xmx2g
+
       - name: Build dist
         run: ./gradlew coordinator:app:installDist
 

.github/workflows/coordinator-testing.yml

@@ -44,6 +44,11 @@ jobs:
         uses: ./.github/actions/setup-nodejs
         with:
           pnpm-install-options: '--frozen-lockfile --prefer-offline --filter contracts --ignore-scripts'
+      - name: Build besu from source 
+        shell: bash
+        run: ./gradlew buildAndUpdateBesuVersionInLibsVersions -PskipDownloadBesuDist=true
+        env:
+          JAVA_OPTS: -Xmx2g
       - name: Build coordinator and Unit tests
         run: |
           ./gradlew -V coordinator:app:buildNeeded

.github/workflows/linea-sequencer-plugin-testing.yml

@@ -14,28 +14,20 @@ concurrency:
 jobs:
   run-linea-sequencer-plugins-unit-tests:
     name: "Sequencer Plugin Unit Tests"
-    runs-on: gha-runner-scale-set-ubuntu-22.04-amd64-small
+    runs-on: gha-runner-scale-set-ubuntu-22.04-amd64-large
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
 
-      - name: Setup Tracer Environment # configures Go, Java, Gradle, and gets submodules
+      - name: Setup Tracer Environment # configures Go, Java, and Gradle
         uses: ./.github/actions/setup-tracer-environment
-        with:
-          enable-ssh: false
 
       - name: spotless
         run: ./gradlew --parallel besu-plugins:linea-sequencer:spotlessCheck
 
       - name: Build
         run: ./gradlew besu-plugins:linea-sequencer:build
 
-      - name: Upload distribution artifacts
-        uses: actions/upload-artifact@v4
-        with:
-          name: distributions
-          path: besu-plugins/linea-sequencer/sequencer/build/libs
-
       - name: Run unit tests
         run: ./gradlew besu-plugins:linea-sequencer:sequencer:test
 
@@ -63,8 +55,6 @@ jobs:
 
       - name: Setup Tracer Environment
         uses: ./.github/actions/setup-tracer-environment
-        with:
-          enable-ssh: false
 
       - name: Run acceptance tests
         run: ./gradlew besu-plugins:linea-sequencer:acceptance-tests:acceptanceTests

.github/workflows/linea-tracer-plugin-release.yml

@@ -43,13 +43,6 @@ jobs:
 
       - name: Setup Tracer Environment
         uses: ./.github/actions/setup-tracer-environment
-        with:
-          enable-ssh: false
-
-      - name: Build artifacts
-        run: ./gradlew :tracer:artifacts -PreleaseVersion=${{ steps.config.outputs.VERSION_TAG }}
-        env:
-          JAVA_OPTS: -Xmx2g -Dorg.gradle.daemon=false
 
       - name: Set up GCC
         uses: egor-tensin/setup-gcc@a2861a8b8538f49cf2850980acccf6b05a1b2ae4 #v2.0
@@ -59,12 +52,6 @@ jobs:
         env:
           JAVA_OPTS: -Xmx2g -Dorg.gradle.daemon=false
 
-      - name: Store distribution artifacts
-        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
-        with:
-          name: distributions
-          path: tracer/arithmetization/build/libs
-
       - name: Run spotless
         run: ./gradlew --no-daemon --parallel :tracer:clean :tracer:spotlessCheck
 
@@ -93,8 +80,6 @@ jobs:
 
       - name: Setup Tracer Environment
         uses: ./.github/actions/setup-tracer-environment
-        with:
-          enable-ssh: false
 
       - name: Run replay tests
         run: GOMEMLIMIT=26GiB ./gradlew :tracer:arithmetization:fastReplayTests

.github/workflows/reusable-tracer-blockchain-tests.yml

@@ -61,13 +61,9 @@ jobs:
 
       - name: Download execution spec fixtures
         run: ./gradlew :tracer:reference-tests:downloadExecutionSpecFixtures
-        env:
-          JAVA_OPTS: -Dorg.gradle.daemon=false
 
       - name: Generate execution spec blockchain reference tests
         run: ./gradlew :tracer:reference-tests:generateExecutionSpecBlockchainTests -Dorg.gradle.caching=true
-        env:
-          JAVA_OPTS: -Dorg.gradle.daemon=false
 
       - name: Download artifact
         uses: dawidd6/action-download-artifact@ac66b43f0e6a346234dd65d4d0c8fbb31cb316e5 # v11
@@ -88,7 +84,6 @@ jobs:
         timeout-minutes: 360
         env:
           JUNIT_TESTS_PARALLELISM: 2
-          JAVA_OPTS: -Dorg.gradle.daemon=false
           GOCORSET_FLAGS: -b1024 -v --ansi-escapes=false --report --air
           FAILED_TEST_JSON_DIRECTORY: ${{ github.workspace }}/tmp/${{ steps.extract_branch.outputs.branch }}/
           FAILED_MODULE: ${{ inputs.failed_module || '' }}

.github/workflows/staterecovery-testing.yml

@@ -33,14 +33,16 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
-      - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #v5.2.0
+      - name: Setup Java and Gradle
+        uses: ./.github/actions/setup-java-and-gradle
         with:
           distribution: temurin
           java-version: 21
-      - name: Setup Gradle
-        # Configure Gradle for optimal use in GiHub Actions, including caching of downloaded dependencies.
-        # See: https://github.com/gradle/actions/blob/main/setup-gradle/README.md
-        uses: gradle/actions/setup-gradle@8379f6a1328ee0e06e2bb424dadb7b159856a326 # 4.4.0
+      - name: Build besu from source 
+        shell: bash
+        run: ./gradlew buildAndUpdateBesuVersionInLibsVersions -PskipDownloadBesuDist=true
+        env:
+          JAVA_OPTS: -Xmx2g
       - name: Staterecovery - Build and Unit tests
         run: |
           ./gradlew besu-plugins:state-recovery:besu-plugin:buildNeeded

.github/workflows/testing.yml

@@ -135,10 +135,8 @@ jobs:
         with:
           submodules: recursive
 
-      - name: Setup Tracer Environment # configures Go, Java, Gradle, and gets submodules
+      - name: Setup Tracer Environment # configures Go, Java, and Gradle
         uses: ./.github/actions/setup-tracer-environment
-        with:
-          enable-ssh: false
 
       - name: Download Jacoco execution data from coordinator
         if: needs.coordinator.result != 'skipped'