Merge branch 'main' into 2025-10-rm-js-sha256

Author: 45930

.config/cspell.json

@@ -0,0 +1,12 @@
+{
+  // Version of the setting file.  Always 0.2
+  "version": "0.2",
+  // language - current active spelling language
+  "language": "en",
+  // words - list of words to be always considered correct
+  "words": ["tarides", "nixbuild", "stefanzweifel", "ACMRT", "Oxlint"],
+  // flagWords - list of words to be always considered incorrect
+  // This is useful for offensive words and common spelling errors.
+  // For example "hte" should be "the"
+  "flagWords": []
+}

.github/workflows/checks.yml

@@ -38,6 +38,15 @@ jobs:
   Prepare:
     runs-on: ubuntu-latest
     steps:
+      - name: Free space on runner
+        run: |
+          df -h
+          sudo rm -rf /usr/local/lib/android \
+                      /usr/share/dotnet \
+                      /opt/ghc \
+                      "$AGENT_TOOLSDIRECTORY" || true
+          docker system prune -af --volumes || true
+          df -h
       - name: Checkout repository with submodules
         uses: actions/checkout@v4
         with:
@@ -51,7 +60,7 @@ jobs:
           ref: ${{ inputs.target_ref || github.ref }}
           proof_systems_commit: ${{ inputs.proof_systems_commit }}
 
-  Lint-Format-and-TypoCheck:
+  Lint-and-Format:
     strategy:
       matrix:
         node: [20]
@@ -99,21 +108,20 @@ jobs:
       - name: Run Markdown Format Check
         run: npm run format:md:check
 
-      - name: Run codespell
-        if: steps.get_changed_files.outputs.files_changed == 'true' && github.event.pull_request.labels.*.name != 'no-typo-check'
-        uses: codespell-project/actions-codespell@master
-        with:
-          check_filenames: true
-          path: ${{ steps.get_changed_files.outputs.files }}
-          skip: "*.json,./node_modules,./dist,./.husky,./.git,./src/mina/**/*,./src/bindings/compiled/**/*"
-          check_hidden: false
-          ignore_words_list: "tHi,modul,optin,deriver,PRing,toWords,iSelf"
-
   Upload-bindings:
     name: upload bindings artifact
     if: ${{ inputs.proof_systems_commit == '' }}
     runs-on: ubuntu-latest
     steps:
+      - name: Free space on runner
+        run: |
+          df -h
+          sudo rm -rf /usr/local/lib/android \
+                      /usr/share/dotnet \
+                      /opt/ghc \
+                      "$AGENT_TOOLSDIRECTORY" || true
+          docker system prune -af --volumes || true
+          df -h
       - uses: actions/checkout@v4
         with:
           submodules: recursive
@@ -143,6 +151,7 @@ jobs:
             'Verification Key Regression Check 1',
             'Verification Key Regression Check 2',
             'CommonJS test',
+            'Cache Regression',
           ]
     steps:
       - name: Checkout repository with submodules
@@ -158,6 +167,10 @@ jobs:
           repository: ${{ inputs.target_repo || github.repository }}
           ref: ${{ inputs.target_ref || github.ref }}
           proof_systems_commit: ${{ inputs.proof_systems_commit }}
+      - uses: 'google-github-actions/auth@v3'
+        name: Setup gcloud authentication
+        with:
+          credentials_json: '${{ secrets.GCP_O1JS_CI_BUCKET_SERVICE_ACCOUNT_KEY }}'
       - name: Prepare for tests
         run: touch profiling.md
       - name: Execute tests

.github/workflows/pull_requests.yml

@@ -39,3 +39,56 @@ jobs:
         with:
           commit_message: "auto update npmDepsHash"
           file_pattern: "npmDepsHash"
+
+
+  Lint-Format-and-TypoCheck:
+    if: github.event.pull_request.labels.*.name != 'skip-lint'
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 1
+
+      - name: Setup Node.JS
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+
+      - name: Install Dependencies
+        run: npm ci
+
+      - name: Get changed files
+        id: changed_files
+        run: |
+          git fetch --depth=1 origin ${{ github.event.pull_request.base.sha }}
+          git fetch --depth=1 origin ${{ github.event.pull_request.head.sha }}
+          git diff --name-only --diff-filter=ACMRT ${{ github.event.pull_request.base.sha }} ${{ github.event.pull_request.head.sha }} > changed_files.txt
+          TOTAL=$(wc -l < changed_files.txt)
+          echo "count=$TOTAL" >> $GITHUB_OUTPUT
+
+      - name: Run Prettier Check
+        if: steps.changed_files.outputs.count > 0
+        run: xargs npm run format:check < changed_files.txt
+        continue-on-error: true
+
+      - name: Run Oxlint
+        if: steps.changed_files.outputs.count > 0
+        run: xargs npm run lint:strict < changed_files.txt
+        continue-on-error: true
+
+      - name: Run Markdown Format Check
+        run: npm run format:md:check
+        continue-on-error: true
+
+      - name: Run cspell
+        if: github.event.pull_request.labels.*.name != 'no-typo-check'
+        uses: streetsidesoftware/cspell-action@v7
+        continue-on-error: true
+        with:
+          config: .config/cspell.json
+      
+      - name: Fail if any checks fail
+        if: failure()
+        run: echo "Some checks failed, failing" && exit 1

.github/workflows/push_main.yml

@@ -87,10 +87,10 @@ jobs:
         uses: ./.github/actions/build
       - name: Build o1js and mina-signer
         run: |
-          npm run prepublishOnly
+          npm run prepublish:full
           cd src/mina-signer
           npm ci
-          npm run prepublishOnly
+          npm run prepublish:full
       - name: Publish o1js and mina-signer on pkg-pr-new
         run: npx pkg-pr-new publish ./ ./src/mina-signer # Enable `--compact` once published to NPM with `repository` in package.json
 
@@ -123,7 +123,7 @@ jobs:
       - name: Build o1js
         run: |
           npm ci
-          npm run prepublishOnly
+          npm run prepublish:full
 
       - name: Publish to NPM if version has changed
         id: publish

.github/workflows/upload-cache-regressions-artifacts.yml

@@ -0,0 +1,21 @@
+name: Upload Cache Regressions Artifacts
+on:
+  workflow_dispatch:
+
+jobs:
+  upload-artifacts:
+    name: Upload Cache Regressions Artifacts
+    runs-on: ubuntu-latest
+    steps:
+    - name: Checkout repository with submodules
+      uses: actions/checkout@v4
+      with:
+        submodules: recursive
+    - name: Build
+      uses: ./.github/actions/build
+    - uses: 'google-github-actions/auth@v3'
+      name: Setup gcloud authentication
+      with:
+        credentials_json: '${{ secrets.GCP_O1JS_CI_BUCKET_SERVICE_ACCOUNT_KEY }}'
+    - name: Generate artifacts and upload to GS
+      run: ./scripts/tests/dump-cache-regressions.sh

.oxlintrc.json

@@ -1,13 +1,14 @@
 {
-  "extends": "oxlint/recommended",
+  "extends": ["oxlint/recommended"],
   "rules": {
     "erasing-op": "off",
     "no-new-array": "off",
     "no-this-alias": "off",
     "no-unsafe-finally": "off",
     "no-unused-labels": "off",
     "no-useless-escape": "off",
-    "no-wrapper-object-types": "off"
+    "no-wrapper-object-types": "off",
+    "no-unused-vars": "off"
   },
   "ignorePatterns": [
     "_build/",

.prettierrc.cjs

@@ -13,4 +13,5 @@ module.exports = {
       },
     },
   ],
+  plugins: [require.resolve('prettier-plugin-organize-imports')],
 };

CHANGELOG.md

@@ -16,27 +16,40 @@ This project adheres to
     _Security_ in case of vulnerabilities.
  -->
 
-## [Unreleased](https://github.com/o1-labs/o1js/compare/114acff...HEAD)
+## [Unreleased](https://github.com/o1-labs/o1js/compare/3453d1e53...HEAD)
+
+## [2.10.0](https://github.com/o1-labs/o1js/compare/114acff...3453d1e53) - 2025-09-27
 
 ### Added
 
 - Internal o1js and protocol constants, hashes and prefixes are now exported via
   the `Core´ namespace. https://github.com/o1-labs/o1js/pull/2421
+- Support for string type input to `Transaction.fromJSON`
+  https://github.com/o1-labs/o1js/pull/2436
+- Improved the runtime table API with a `RuntimeTable` class with better
+  readability https://github.com/o1-labs/o1js/pull/2402
 
-## [2.9.0](https://github.com/o1-labs/o1js/compare/4b1dccdd...114acff) - 2025-09-02
-
-### Added
+### Fixed
 
-- Support for `ForeignField.Unsafe.fromField` as an alternative constructor
-  https://github.com/o1-labs/o1js/pull/2322
-
-- Improved the runtime table API with a `RuntimeTable` class with better
-  readability.
+- Fixed a verification key regression that was caused by incorrectly enabling a
+  proof system feature that wasn't needed.
+  https://github.com/o1-labs/o1js/pull/2449
+- Fixed an edge case where not all the artefacts needed for the cache were
+  stored properly, resulting in them being re-computed after loading the cache.
+  https://github.com/o1-labs/o1js/pull/2460
 
 ### Deprecated
 
 - Deprecate the `Gates.addRuntimeTableConfig` and `Gadgets.inTable` functions in
-  favor of the `RuntimeTable` class API.
+  favor of the `RuntimeTable` class API
+  https://github.com/o1-labs/o1js/pull/2402
+
+## [2.9.0](https://github.com/o1-labs/o1js/compare/70bca22...2265adc) - 2025-09-02
+
+### Added
+
+- Support for `ForeignField.Unsafe.fromField` as an alternative constructor
+  https://github.com/o1-labs/o1js/pull/2322
 
 ### Fixed
 

README-dev.md

@@ -83,7 +83,7 @@ Much like the mina repo, we use the nix registry to conveniently handle git
 submodules. You can enter the devshell with `./pin.sh` and
 `nix develop o1js#default` or by using direnv with the `.envrc` provided. This
 devshell provides all the dependencies required for npm scripts including
-`npm run build:update-bindings`.
+`npm run build:bindings-all`.
 
 ## Building Bindings
 
@@ -112,7 +112,7 @@ for more information. After you have configured your environment to build mina,
 you can build the bindings:
 
 ```sh
-npm run build:update-bindings
+npm run build:bindings-all
 ```
 
 This command builds the OCaml and Rust artifacts and copies them to the
@@ -170,7 +170,8 @@ generated from the OCaml source files, and are located under
 `src/bindings/crypto/constants.ts` and `src/bindings/mina-transaction/gen`. When
 building the bindings, these constants are auto-generated by Dune. If you wish
 to add a new constant, you can edit the `src/bindings/ocaml/o1js_constants`
-file, and then run `npm run build:bindings` to regenerate the TypeScript files.
+file, and then run `npm run build:bindings-node` to regenerate the TypeScript
+files.
 
 o1js uses these types to ensure that the constants used in the protocol are
 consistent with the OCaml source files.
@@ -419,7 +420,7 @@ npm link o1js
 
 If you need to debug a call into the OCaml code, the process is a little more
 complicated. The OCaml is compiled into JavaScript with js_of_ocaml during
-`npm run build:update-bindings`, so you'll need to add your logs into the OCaml
+`npm run build:bindings-all`, so you'll need to add your logs into the OCaml
 code and rebuild the bindings to see them. Logging from OCaml in a way that will
 reflect as JS `console.log`s in the compiled code can be done like this:
 

README-nix.md

@@ -97,7 +97,7 @@ From within the shell, you can build o1js and update the bindings.
 
 ```console
 npm run build
-npm run build:update-bindings
+npm run build:bindings-all
 ```
 
 If you need to update the underlying `mina` code, you can also do so with Nix,