1.4.1 upgrade

.cargo/audit.toml

@@ -0,0 +1,4 @@
+[advisories]
+  # an older version of tracing-subscriber 0.2.25 is used in ark-bn254 but it is an optional dependency that is not included in the crate graph even with all features enabled
+  # unfortunately cargo audit includes optional dependencies from Cargo.lock even if they are not in the crate graph
+  ignore = ["RUSTSEC-2025-0055"]

.github/runs-on.yml

@@ -9,7 +9,7 @@ images:
 runners:
   # runners for running tests
   test-gpu-nvidia:
-    family: ["g6", "g5", "g6e"]
+    family: ["g6", "g5", "g4dn", "g6e"]
     image: ubuntu24-gpu-x64
     cpu: [4, 8, 16, 32]
     disk: default
@@ -18,3 +18,4 @@ runners:
     preinstall: |
       nvidia-smi
       nvidia-smi -L
+      echo 'CUDA_ARCH=75,86,89' >> $GITHUB_ENV

.github/workflows/base-tests.cuda.yml

@@ -22,11 +22,12 @@ concurrency:
 env:
   CARGO_TERM_COLOR: always
   OPENVM_FAST_TEST: "1"
+  OPENVM_SKIP_DEBUG: "1"
 
 jobs:
   tests-cuda:
     runs-on:
-      - runs-on=${{ github.run_id }}-base-tests-cuda-${{ github.run_attempt }}/family=g6+g4dn+g6e/image=ubuntu24-gpu-x64/extras=s3-cache
+      - runs-on=${{ github.run_id }}-base-tests-cuda-${{ github.run_attempt }}/runner=test-gpu-nvidia/family=g6+g5 # ensure 24G vram for async test
 
     steps:
       - uses: runs-on/action@v2
@@ -64,3 +65,8 @@ jobs:
         working-directory: extensions/native/recursion
         run: |
           cargo nextest run --features cuda
+
+      - name: Run async concurrency test
+        working-directory: benchmarks/prove
+        run: |
+          CUDA_OPT_LEVEL=3 MAX_CONCURRENCY=5 cargo run --bin async_regex --features cuda,async -- --max-segment-length $((1<<20)) --segment-max-cells 150000000

.github/workflows/benchmark-call.yml

@@ -223,6 +223,7 @@ jobs:
           MAX_SEGMENT_LENGTH="--max_segment_length ${{ inputs.max_segment_length }}"
           OUTPUT_PATH="--output_path $(pwd)/$METRIC_PATH"
           echo "INPUT_ARGS=${FEATURES} ${APP_ARG} ${AGG_ARG} ${MAX_SEGMENT_LENGTH} ${OUTPUT_PATH} ${INPUT_ARGS}" >> $GITHUB_ENV
+          echo "VPMM_PAGES=2048" >> $GITHUB_ENV # 4GB
 
       ##########################################################################
       # Find working directory based on benchmark_name and run the benchmark   #

.github/workflows/benchmarks-execute.yml

@@ -66,7 +66,7 @@ jobs:
 
       - name: Build benchmarks
         working-directory: benchmarks/execute
-        run: cargo $TOOLCHAIN codspeed build --profile maxperf --features tco
+        run: cargo $TOOLCHAIN codspeed build --profile maxperf --features tco --bench execute
       - name: Run benchmarks
         uses: CodSpeedHQ/action@v3
         with:
@@ -108,7 +108,7 @@ jobs:
 
       - name: Build benchmarks
         working-directory: benchmarks/execute
-        run: cargo $TOOLCHAIN codspeed build --features tco
+        run: cargo $TOOLCHAIN codspeed build --features tco --bench execute
       - name: Run benchmarks
         uses: CodSpeedHQ/action@v3
         with:

.github/workflows/benchmarks.yml

@@ -73,7 +73,7 @@ jobs:
     outputs:
       matrix: ${{ steps.create-matrix.outputs.matrix }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           ref: ${{ env.CURRENT_SHA }}
           repository: ${{ env.REPO }}
@@ -178,7 +178,7 @@ jobs:
       ##########################################################################
       # Download individual result .md files from S3 and combine them          #
       ##########################################################################
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           ref: ${{ env.CURRENT_SHA }}
           repository: ${{ env.REPO }}
@@ -298,7 +298,7 @@ jobs:
       ##########################################################################
       # Update benchmark-results branch with summary                           #
       ##########################################################################
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           ref: benchmark-results
 

.github/workflows/cli.yml

@@ -46,7 +46,7 @@ jobs:
       - uses: taiki-e/install-action@nextest
       - name: Install solc # svm should support arm64 linux
         run: |
-          (hash svm 2>/dev/null || cargo install --version 0.2.23 svm-rs) && svm install 0.8.19 && solc --version
+          (hash svm 2>/dev/null || cargo install --locked --version 0.2.23 svm-rs) && svm install 0.8.19 && solc --version
 
       - name: Install cargo-openvm
         working-directory: crates/cli

.github/workflows/docs.yml

@@ -10,6 +10,11 @@ on:
     branches: [main]
     paths:
       - ".github/workflows/docs.yml"
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: "Tag name for S3 bucket"
+        required: true
 
 env:
   CARGO_NET_GIT_FETCH_WITH_CLI: true
@@ -22,7 +27,7 @@ jobs:
     concurrency:
       group: ${{ github.workflow_ref }}-docs-${{ github.ref }}
     runs-on:
-      - runs-on=${{ github.run_id }}/runner=64cpu-linux-arm64
+      - runs-on=${{ github.run_id }}/runner=test-gpu-nvidia/cpu=32
     steps:
       - uses: actions/checkout@v5
       - name: Set up Rust toolchain
@@ -32,7 +37,7 @@ jobs:
         run: cargo check
 
       - name: Build documentation
-        run: cargo +nightly doc --workspace --exclude "openvm-benchmarks" --exclude "*-tests" --exclude "*-test"
+        run: cargo +nightly doc --workspace --exclude "openvm-benchmarks" --exclude "*-tests" --exclude "*-test" --features "cuda"
 
       # We only want the index page to display workspace crates, so we build
       # separately and copy over the index as a hack
@@ -62,3 +67,10 @@ jobs:
         env:
           S3_BUCKET: ${{ vars.CRATE_DOCS_S3_BUCKET }}
         run: s5cmd sync . s3://${S3_BUCKET%/}/${{ github.ref_name }}/
+
+      - name: Sync tagged version S3 bucket
+        working-directory: target/doc
+        if: github.event_name == 'workflow_dispatch'
+        env:
+          S3_BUCKET: ${{ vars.CRATE_DOCS_S3_BUCKET }}
+        run: s5cmd sync . s3://${S3_BUCKET%/}/${{ github.event.inputs.tag }}/

.github/workflows/extension-tests.cuda.yml

@@ -21,6 +21,7 @@ concurrency:
 env:
   CARGO_TERM_COLOR: always
   OPENVM_FAST_TEST: "1"
+  OPENVM_SKIP_DEBUG: "1"
 
 jobs:
   extension-tests-cuda:
@@ -96,9 +97,9 @@ jobs:
       - name: Check CUDA status and set environment variables
         run: |
           nvcc --version
-          echo "NEXTEST_ENV=CUDA_OPT_LEVEL=1" >> $GITHUB_ENV
+          echo "NEXTEST_ENV=CUDA_OPT_LEVEL=3" >> $GITHUB_ENV
           echo "FEATURE_ARGS=--features=cuda" >> $GITHUB_ENV
-          echo "CIRCUIT_TEST_FILTER=cuda" >> $GITHUB_ENV
+          echo "VPMM_PAGES=1" >> $GITHUB_ENV
 
       - name: Run extension tests
         env:
@@ -114,14 +115,14 @@ jobs:
               # Run circuit tests
               if [ -d "extensions/$ext/circuit" ]; then
                 pushd extensions/$ext/circuit
-                ${{ env.NEXTEST_ENV }} cargo nextest run ${{ env.CIRCUIT_TEST_FILTER }} ${{ env.FEATURE_ARGS }} --features=touchemall --profile=heavy --no-tests=pass
+                ${{ env.NEXTEST_ENV }} cargo nextest run cuda ${{ env.FEATURE_ARGS }} --features=touchemall --profile=heavy --no-tests=pass
                 popd
               fi
 
               # Run integration tests
               if [ -d "extensions/$ext/tests" ]; then
                 pushd extensions/$ext/tests
-                rustup component add rust-src --toolchain nightly-2025-02-14
+                rustup component add rust-src --toolchain nightly-2025-08-02
                 ${{ env.NEXTEST_ENV }} cargo nextest run ${{ env.FEATURE_ARGS }} --profile=heavy --no-tests=pass
                 popd
               fi

.github/workflows/extension-tests.yml

@@ -21,6 +21,7 @@ concurrency:
 env:
   CARGO_TERM_COLOR: always
   OPENVM_FAST_TEST: "1"
+  OPENVM_SKIP_DEBUG: "1"
 
 jobs:
   extension-tests:
@@ -74,7 +75,7 @@ jobs:
           if [[ "${{ matrix.extension.name }}" == "algebra" ]]; then
             TEST_THREADS="--test-threads=4"
           fi
-          cargo nextest run ${{ env.CIRCUIT_TEST_FILTER }} --cargo-profile=fast ${{ env.FEATURE_ARGS }} $TEST_THREADS --no-tests=pass
+          cargo nextest run --cargo-profile=fast $TEST_THREADS --no-tests=pass
 
         # We only need to run guest crate tests on CPU since we are not testing prover functionality
       - name: Run ${{ matrix.extension.name }} guest crate tests
@@ -91,5 +92,5 @@ jobs:
         if: hashFiles(format('extensions/{0}/tests', matrix.extension.path)) != ''
         working-directory: extensions/${{ matrix.extension.path }}/tests
         run: |
-          rustup component add rust-src --toolchain nightly-2025-02-14
-          cargo nextest run --cargo-profile=fast ${{ env.FEATURE_ARGS }} --profile=heavy --no-tests=pass
+          rustup component add rust-src --toolchain nightly-2025-08-02
+          cargo nextest run --cargo-profile=fast --profile=heavy --no-tests=pass

.github/workflows/guest-lib-tests.cuda.yml

@@ -23,17 +23,18 @@ concurrency:
 env:
   CARGO_TERM_COLOR: always
   OPENVM_FAST_TEST: "1"
+  OPENVM_SKIP_DEBUG: "1"
 
 jobs:
   guest-lib-tests-cuda:
     strategy:
       matrix:
         crates: # group crates on the same runner based on test time
-          - { names: "sha2 keccak256 verify_stark", family: "g6+g5+g6e" }
-          - { names: "ff_derive k256 p256 ruint", family: "g6+g5+g6e" }
-          - { names: "pairing", family: "g6+g5+g6e" }
+          - { names: "sha2 keccak256 verify_stark" }
+          - { names: "ruint k256 p256" }
+          - { names: "ff_derive pairing" }
     runs-on:
-      - runs-on=${{ github.run_id }}-guest-lib-cuda-${{ github.run_attempt }}-${{ strategy.job-index }}/family=${{ matrix.crates.family }}/image=ubuntu24-gpu-x64/cpu=8+32/spot=capacity-optimized/extras=s3-cache
+      - runs-on=${{ github.run_id }}-guest-lib-cuda-${{ github.run_attempt }}-${{ strategy.job-index }}/runner=test-gpu-nvidia/cpu=8+32/family=g6+g5+g6e
 
     steps:
       - uses: runs-on/action@v2
@@ -122,7 +123,7 @@ jobs:
           FILTER_OUTPUTS: ${{ toJSON(steps.filter.outputs) }}
         run: |
           COMMON_CHANGED=$(echo $FILTER_OUTPUTS | jq -r .common)
-          rustup component add rust-src --toolchain nightly-2025-02-14
+          rustup component add rust-src --toolchain nightly-2025-08-02
 
           for crate in ${{ matrix.crates.names }}; do
             crate_changed=$(echo $FILTER_OUTPUTS | jq -r .$crate)

.github/workflows/guest-lib-tests.yml

@@ -23,6 +23,7 @@ concurrency:
 env:
   CARGO_TERM_COLOR: always
   OPENVM_FAST_TEST: "1"
+  OPENVM_SKIP_DEBUG: "1"
 
 jobs:
   integration-tests:
@@ -70,18 +71,12 @@ jobs:
           cache-on-failure: true
       - uses: taiki-e/install-action@nextest
 
-      - name: Check CUDA status and set environment variables
-        if: contains(matrix.platform.runner, 'gpu')
-        run: |
-          nvcc --version
-          echo "FEATURE_ARGS=--features=cuda" >> $GITHUB_ENV
-
       - name: Run ${{ matrix.crate.name }} guest library tests
         working-directory: guest-libs/${{ matrix.crate.path }}
         run: |
-          rustup component add rust-src --toolchain nightly-2025-02-14
+          rustup component add rust-src --toolchain nightly-2025-08-02
           PAIRING_FEATURE_ARGS=""
           if [[ "${{ matrix.crate.name }}" == "pairing" ]]; then
             PAIRING_FEATURE_ARGS="--features=bn254,bls12_381"
           fi
-          cargo nextest run --cargo-profile=fast ${{ env.FEATURE_ARGS }} $PAIRING_FEATURE_ARGS --no-tests=pass --test-threads=1
+          cargo nextest run --cargo-profile=fast $PAIRING_FEATURE_ARGS --no-tests=pass --test-threads=1

.github/workflows/lints.yml

@@ -120,3 +120,12 @@ jobs:
           # includes GPU specific features cuda and touchemall
           cargo clippy --all-targets --all --tests --features "aggregation bls12_381 bn254 build-elfs cuda default entrypoint evm-prove evm-verify export-intrinsics export-libm function-span getrandom-unsupported halo2-compiler halo2curves heap-embedded-alloc jemalloc jemalloc-prof metrics nightly-features panic-handler parallel perf-metrics rust-runtime static-verifier std test-utils touchemall" -- -D warnings
           cargo clippy --all-targets --all --tests --no-default-features --features "jemalloc jemalloc-prof" -- -D warnings
+
+      - name: Run clang-tidy
+        run: |
+          set -eux
+          wget -qO- https://apt.llvm.org/llvm-snapshot.gpg.key | sudo tee /etc/apt/trusted.gpg.d/apt.llvm.org.asc >/dev/null
+          echo "deb http://apt.llvm.org/noble/ llvm-toolchain-noble main" | sudo tee /etc/apt/sources.list.d/llvm-toolchain.list
+          sudo apt-get update
+          sudo apt-get install -y clang-tidy
+          ./scripts/run_clang_tidy.sh

.github/workflows/recursion.yml

@@ -36,7 +36,7 @@ jobs:
           cache-on-failure: true
       - uses: taiki-e/install-action@nextest
       - name: Install solc # svm should support arm64 linux
-        run: (hash svm 2>/dev/null || cargo install --version 0.2.23 svm-rs) && svm install 0.8.19 && solc --version
+        run: (hash svm 2>/dev/null || cargo install --locked --version 0.2.23 svm-rs) && svm install 0.8.19 && solc --version
 
       - name: Run recursion crate tests
         working-directory: extensions/native/recursion

.github/workflows/release.yml

@@ -0,0 +1,57 @@
+# Workflow to upload release artifacts such as proving keys. In the future pre-built binaries will also be added to this workflow.
+name: Upload Release Artifacts
+
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: "Version tag (e.g., v1.4.1)"
+        required: true
+        default: "v1.4.1"
+        type: string
+
+env:
+  S3_BUCKET: openvm-public-artifacts-us-east-1
+
+jobs:
+  upload-setup:
+    runs-on:
+      - runs-on=${{ github.run_id }}/runner=64cpu-linux-x64/extras=s3-cache/disk=large
+    steps:
+      - name: Checkout base branch
+        uses: actions/checkout@v5
+
+      - name: Set version
+        run: echo "version=${{ github.event.inputs.version || 'v1.4.1' }}" >> $GITHUB_ENV
+
+      - name: Install solc # svm should support arm64 linux
+        run: (hash svm 2>/dev/null || cargo install --locked --version 0.2.23 svm-rs) && svm install 0.8.19 && solc --version
+
+      - name: Install Rust
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          toolchain: stable
+
+      - name: Cache Cargo dependencies
+        uses: Swatinem/rust-cache@v2
+
+      # Checkout and test tagged version
+      - name: Checkout tagged version
+        uses: actions/checkout@v5
+        with:
+          ref: ${{ env.version }}
+
+      - name: Build tagged CLI
+        run: cargo install --force --locked --path crates/cli cargo-openvm
+
+      - name: Run setup from tagged version
+        run: |
+          cargo openvm setup --evm
+
+      - name: Install s5cmd
+        run: |
+          source ci/scripts/utils.sh
+          install_s5cmd
+
+      - name: Sync ~/.openvm with S3 bucket in tagged dir
+        run: s5cmd sync ~/.openvm/ s3://${S3_BUCKET%/}/${{ env.version }}/

.github/workflows/riscv.yml

@@ -23,6 +23,7 @@ concurrency:
 env:
   CARGO_TERM_COLOR: always
   OPENVM_FAST_TEST: "1"
+  OPENVM_SKIP_DEBUG: "1"
 
 jobs:
   riscv-test-vector:
@@ -54,6 +55,7 @@ jobs:
         run: |
           nvcc --version
           echo "FEATURE_ARGS=--features=cuda,touchemall" >> $GITHUB_ENV
+          echo "VPMM_PAGES=1" >> $GITHUB_ENV
 
       - name: Download and install risc64-elf-gcc
         if: contains(matrix.platform.image, 'x64')
@@ -78,7 +80,7 @@ jobs:
       - name: Run RISC-V test vector tests
         working-directory: crates/toolchain/tests
         run: |
-          rustup component add rust-src --toolchain nightly-2025-02-14
+          rustup component add rust-src --toolchain nightly-2025-08-02
           if [[ ${{ matrix.platform.runner }} == *"gpu"* ]]; then
             TEST_NAME=test_rv32im_riscv_vector_prove
           else

.github/workflows/sdk.yml

@@ -40,10 +40,12 @@ jobs:
           cache-on-failure: true
       - uses: taiki-e/install-action@nextest
       - name: Install solc # svm should support arm64 linux
-        run: (hash svm 2>/dev/null || cargo install --version 0.2.23 svm-rs) && svm install 0.8.19 && solc --version
+        run: (hash svm 2>/dev/null || cargo install --locked --version 0.2.23 svm-rs) && svm install 0.8.19 && solc --version
 
       - name: Install Foundry
         uses: foundry-rs/foundry-toolchain@v1
+        with:
+          version: v1.3.5
 
       - name: Install architecture specific tools
         run: |