Merge pull request #614 from dashpay/release_0.11.0

chore(release): update changelog and bump version to 0.11.0

Author: lklimek

.github/ISSUE_TEMPLATE/proposal.md

@@ -0,0 +1,37 @@
+---
+name: Protocol Change Proposal
+about: Create a proposal to request a change to the protocol
+
+---
+
+<!-- < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < ☺ 
+v                            ✰  Thanks for opening an issue! ✰    
+v    Before smashing the submit button please review the template.
+v    Word of caution: Under-specified proposals may be rejected summarily 
+☺ > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > >  -->
+
+# Protocol Change Proposal
+
+## Summary
+
+<!-- Short, concise description of the proposed change -->
+
+## Problem Definition
+
+<!-- Why do we need this change? 
+What problems may be addressed by introducing this change?
+What benefits does Tendermint stand to gain by including this change?
+Are there any disadvantages of including this change? -->
+
+## Proposal
+
+<!-- Detailed description of requirements of implementation -->
+
+____
+
+#### For Admin Use
+
+- [ ] Not duplicate issue
+- [ ] Appropriate labels applied
+- [ ] Appropriate contributors tagged
+- [ ] Contributor assigned/self-assigned

.github/actions/bls/action.yml

@@ -15,7 +15,7 @@ runs:
   steps:
     - uses: actions/setup-go@v2
       with:
-        go-version: "1.17"
+        go-version: "1.19"
     - uses: actions/checkout@v2
       with:
         submodules: true
@@ -29,16 +29,24 @@ runs:
       with:
         path: ~/bls-cache
         key: ${{ runner.os }}-${{ inputs.arch }}-bls-${{ steps.bls-revision.outputs.hash }}
+    - name: install bls deps
+      run: sudo apt-get update -qq && sudo apt-get install -qq --yes libgmp-dev
+      shell: bash
     - name: Build BLS library
-      run: make install-bls
+      run: make build-bls
       if: steps.bls-cache.outputs.cache-hit != 'true'
       shell: bash
     - name: Save BLS library
       run: |
-        mkdir -p ~/bls-cache/include
-        cp -vr /usr/local/include/chiabls ~/bls-cache/include
-        cp -vr /usr/local/include/relic* ~/bls-cache/include
-        cp -v /usr/local/lib/libchiabls.a ~/bls-cache/
+        mkdir -p ~/bls-cache/include/bls-dash
+        mkdir -p ~/bls-cache/lib
+        cp -r ./third_party/bls-signatures/build/depends/mimalloc/libmimalloc-secure.a ~/bls-cache/lib
+        cp -r ./third_party/bls-signatures/build/depends/relic/lib/librelic_s.a ~/bls-cache/lib
+        cp -r ./third_party/bls-signatures/build/src/libdashbls.a ~/bls-cache/lib
+        cp -rv ./third_party/bls-signatures/build/depends/relic/include/* ~/bls-cache/include
+        cp -rv ./third_party/bls-signatures/src/depends/mimalloc/include/* ~/bls-cache/include
+        cp -rv ./third_party/bls-signatures/src/depends/relic/include/* ~/bls-cache/include
+        cp -rv ./third_party/bls-signatures/src/include/* ~/bls-cache/include
       if: steps.bls-cache.outputs.cache-hit != 'true'
       shell: bash
     - uses: actions/cache@v2.1.2
@@ -49,5 +57,5 @@ runs:
     - name: Install BLS library
       run: |
         sudo cp -vr ~/bls-cache/include/* /usr/local/include/
-        sudo cp -vr ~/bls-cache/libchiabls.a /usr/local/lib/
+        sudo cp -vr ~/bls-cache/lib/* /usr/local/lib/
       shell: bash

.github/dependabot.yml

@@ -4,8 +4,7 @@ updates:
   - package-ecosystem: github-actions
     directory: "/"
     schedule:
-      interval: daily
-      time: "11:00"
+      interval: weekly
     open-pull-requests-limit: 10
   #  - package-ecosystem: npm
   #    directory: "/docs"
@@ -18,8 +17,8 @@ updates:
   - package-ecosystem: gomod
     directory: "/"
     schedule:
-      interval: daily
-      time: "11:00"
+      interval: weekly
+    target-branch: "v0.35.x"
     open-pull-requests-limit: 10
     reviewers:
       - shotonoff

.github/workflows/.yamllint

@@ -0,0 +1,6 @@
+extends: default
+
+rules:
+    line-length: disable
+    truthy: disable
+    comments: {min-spaces-from-content: 1}

.github/workflows/build.yml

@@ -1,4 +1,3 @@
----
 name: Build
 # Tests runs different tests (test_abci_apps, test_abci_cli, test_apps)
 # This workflow runs on every push to master or release branch and  every pull requests
@@ -8,9 +7,7 @@ on:
   push:
     branches:
       - master
-      - release/**
-      - v0.*-dev
-
+      - v[0-9]+.[0-9]+-dev
 jobs:
   build:
     name: Build
@@ -22,13 +19,13 @@ jobs:
           - "amd64"
         # - "arm"
         goos: ["linux"]
-    timeout-minutes: 5
+    timeout-minutes: 55
     steps:
-      - uses: actions/setup-go@v2
+      - uses: actions/setup-go@v3.5.0
         with:
-          go-version: "1.17"
-      - uses: actions/checkout@v2.4.0
-      - uses: technote-space/get-diff-action@v5
+          go-version: "1.19"
+      - uses: actions/checkout@v3
+      - uses: technote-space/get-diff-action@v6
         with:
           PATTERNS: |
             **/**.go
@@ -42,7 +39,7 @@ jobs:
         with:
           arch: ${{ matrix.goarch }}
       - name: install-gcc
-        run: sudo apt-get update -qq && sudo apt-get install -qq --yes gcc-10-arm-linux-gnueabi g++-10-arm-linux-gnueabi
+        run: sudo apt-get -qq --yes gcc-10-arm-linux-gnueabi g++-10-arm-linux-gnueabi
         if: "matrix.goarch == 'arm'"
       - name: install
         run: |
@@ -55,11 +52,11 @@ jobs:
     needs: build
     timeout-minutes: 5
     steps:
-      - uses: actions/setup-go@v2
+      - uses: actions/setup-go@v3.5.0
         with:
-          go-version: "1.17"
-      - uses: actions/checkout@v2.4.0
-      - uses: technote-space/get-diff-action@v5
+          go-version: "1.19"
+      - uses: actions/checkout@v3
+      - uses: technote-space/get-diff-action@v6
         with:
           PATTERNS: |
             **/**.go
@@ -80,11 +77,11 @@ jobs:
     needs: build
     timeout-minutes: 5
     steps:
-      - uses: actions/setup-go@v2
+      - uses: actions/setup-go@v3.5.0
         with:
-          go-version: "1.17"
-      - uses: actions/checkout@v2.4.0
-      - uses: technote-space/get-diff-action@v5
+          go-version: "1.19"
+      - uses: actions/checkout@v3
+      - uses: technote-space/get-diff-action@v6
         with:
           PATTERNS: |
             **/**.go

.github/workflows/check-generated.yml

@@ -0,0 +1,80 @@
+# Verify that generated code is up-to-date.
+#
+# Note that we run these checks regardless whether the input files have
+# changed, because generated code can change in response to toolchain updates
+# even if no files in the repository are modified.
+name: Check generated code
+on:
+  pull_request:
+    paths:
+      - "**.go"
+      - "**.proto"
+  push:
+    branches:
+      - master
+      - v[0-9]+.[0-9]+-dev
+
+permissions:
+  contents: read
+
+jobs:
+  check-mocks:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/setup-go@v3.5.0
+        with:
+          go-version: "1.19"
+
+      - uses: actions/checkout@v3
+
+      - name: "Check generated mocks"
+        run: |
+          set -euo pipefail
+
+          readonly MOCKERY=2.23.1  # N.B. no leading "v"
+          curl -sL "https://github.com/vektra/mockery/releases/download/v${MOCKERY}/mockery_${MOCKERY}_Linux_x86_64.tar.gz" | tar -C /usr/local/bin -xzf -
+          make mockery 2>/dev/null
+
+          if ! git diff --stat --exit-code ; then
+            echo ">> ERROR:"
+            echo ">>"
+            echo ">> Generated mocks require update (either Mockery or source files may have changed)."
+            echo ">> Ensure your tools are up-to-date, re-run 'make mockery' and update this PR."
+            echo ">>"
+            exit 1
+          fi
+
+  check-proto:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/setup-go@v3.5.0
+        with:
+          go-version: "1.19"
+
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 1 # we need a .git directory to run git diff
+
+      - name: "Check protobuf generated code"
+        run: |
+          set -euo pipefail
+
+          # Install buf and gogo tools, so that differences that arise from
+          # toolchain differences are also caught.
+          readonly tools="$(mktemp -d)"
+          export PATH="${PATH}:${tools}/bin"
+          export GOBIN="${tools}/bin"
+
+          go install github.com/bufbuild/buf/cmd/buf
+          go install github.com/gogo/protobuf/protoc-gen-gogofaster@latest
+
+          make proto-gen
+
+          if ! git diff --stat --exit-code ; then
+            echo ">> ERROR:"
+            echo ">>"
+            echo ">> Protobuf generated code requires update (either tools or .proto files may have changed)."
+            echo ">> Ensure your tools are up-to-date, re-run 'make proto-gen' and update this PR."
+            echo ">>"
+            exit 1
+          fi

.github/workflows/docker.yml

@@ -1,66 +1,109 @@
 ---
 name: Docker
-# Build & Push rebuilds the Tenderdash docker image every time a release is published
-# and pushes the image to https://hub.docker.com/r/dashpay/tenderdash/tags
+# Build & Push rebuilds the Tenderdash docker image every time a release is
+# published and pushes the image to https://hub.docker.com/r/dashpay/tenderdash
 on:
   workflow_dispatch:
+    inputs:
+      tag:
+        type: string
+        description: 'Docker tag'
+        required: false
   release:
     types:
       - published
 
 jobs:
   build:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v2.3.4
+      - uses: actions/checkout@v3
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@master
         with:
           platforms: all
 
       - name: Set up Docker Build
-        uses: docker/setup-buildx-action@v1.6.0
+        uses: docker/setup-buildx-action@v2.4.1
 
       - name: Login to DockerHub
         if: ${{ github.event_name != 'pull_request' }}
-        uses: docker/login-action@v1.14.1
+        uses: docker/login-action@v2.0.0
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Set suffix to Docker tags
         uses: actions/github-script@v6
         id: suffix
+        if: ${{ github.event.release != null }}
         with:
           result-encoding: string
           script: "return (context.payload.release.tag_name.includes('-dev') ? '-dev' : '');"
 
+      - name: Determine TENDERMINT_BUILD_OPTIONS
+        uses: actions/github-script@v6
+        id: TENDERMINT_BUILD_OPTIONS
+        with:
+          result-encoding: string
+          script: |
+            if (github.ref_type == 'tag' && !contains(github.ref_name,'-dev')) {
+              return 'tenderdash,stable'
+            }
+            return 'tenderdash,dev,deadlock'
+
       - name: Set Docker tags and labels
         id: docker_meta
         uses: docker/metadata-action@v3
         with:
           images: dashpay/tenderdash
           tags: |
+            type=semver,pattern={{version}},value=${{ github.event.inputs.tag }}
+            type=raw,priority=650,value=${{ github.event.inputs.tag }},enable=${{ github.event.inputs.tag != '' }}
+            type=ref,event=branch
+            type=ref,event=pr
             type=match,pattern=v(\d+),group=1
             type=match,pattern=v(\d+.\d+),group=1
             type=match,pattern=v(\d+.\d+.\d+),group=1
             type=match,pattern=v(.*),group=1,suffix=,enable=${{ contains(github.event.release.tag_name, '-dev') }}
           flavor: |
-            latest=${{ !contains(github.event.release.tag_name, '-dev') }}
+            latest=${{ github.event.release != null && !contains(github.event.release.tag_name, '-dev') }}
             suffix=${{ steps.suffix.outputs.result }}
 
+      # We build some dependencies and libraries separately. Layers are cached
+      # on Docker Hub, as Github caches are not available for other branches.
+      - name: Build and cache image with dependencies
+        id: docker_bls
+        uses: docker/build-push-action@v4.0.0
+        with:
+          context: .
+          file: ./DOCKER/Dockerfile
+          platforms: linux/amd64,linux/arm64
+          target: base
+          push: false
+          cache-from: |
+            type=registry,ref=dashpay/tenderdash:buildcache-deps
+          cache-to: |
+            type=registry,ref=dashpay/tenderdash:buildcache-deps,mode=max
+          build-args: |
+            TENDERMINT_BUILD_OPTIONS="${{ steps.TENDERMINT_BUILD_OPTIONS.outputs.result }}"
+
       - name: Publish to Docker Hub
-        uses: docker/build-push-action@v2.9.0
+        id: docker_build
+        uses: docker/build-push-action@v4.0.0
         with:
           context: .
           file: ./DOCKER/Dockerfile
           platforms: linux/amd64,linux/arm64
           push: ${{ github.event_name != 'pull_request' }}
           tags: ${{ steps.docker_meta.outputs.tags }}
           labels: ${{ steps.docker_meta.outputs.labels }}
-          cache-from: type=gha
+          cache-from: |
+            type=gha
+            type=registry,ref=dashpay/tenderdash:buildcache-deps
           cache-to: type=gha,mode=max
-
+          build-args: |
+            TENDERMINT_BUILD_OPTIONS="${{ steps.TENDERMINT_BUILD_OPTIONS.outputs.result }}"
       - name: Show Docker image digest
         run: echo ${{ steps.docker_build.outputs.digest }}