radixdlt
diff --git a/‎.github/workflows/main.yml‎
Lines changed: 1 addition & 4 deletions b/‎.github/workflows/main.yml‎
Lines changed: 1 addition & 4 deletions
diff --git a/‎.github/workflows/publish-typescript-sdk.yml‎
Lines changed: 10 additions & 18 deletions b/‎.github/workflows/publish-typescript-sdk.yml‎
Lines changed: 10 additions & 18 deletions
diff --git a/‎CHANGELOG.md‎
Lines changed: 12 additions & 0 deletions b/‎CHANGELOG.md‎
Lines changed: 12 additions & 0 deletions
diff --git a/‎Directory.Packages.props‎
Lines changed: 1 addition & 1 deletion b/‎Directory.Packages.props‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎apps/DataAggregator/Dockerfile‎
Lines changed: 2 additions & 2 deletions b/‎apps/DataAggregator/Dockerfile‎
Lines changed: 2 additions & 2 deletions
diff --git a/‎apps/DataAggregator/packages.lock.json‎
Lines changed: 15 additions & 15 deletions b/‎apps/DataAggregator/packages.lock.json‎
Lines changed: 15 additions & 15 deletions
diff --git a/‎apps/DatabaseMigrations/Dockerfile‎
Lines changed: 2 additions & 2 deletions b/‎apps/DatabaseMigrations/Dockerfile‎
Lines changed: 2 additions & 2 deletions
diff --git a/‎apps/DatabaseMigrations/packages.lock.json‎
Lines changed: 13 additions & 13 deletions b/‎apps/DatabaseMigrations/packages.lock.json‎
Lines changed: 13 additions & 13 deletions
diff --git a/‎apps/GatewayApi/Dockerfile‎
Lines changed: 2 additions & 2 deletions b/‎apps/GatewayApi/Dockerfile‎
Lines changed: 2 additions & 2 deletions
diff --git a/‎apps/GatewayApi/OpenApiDocumentHandler.cs‎
Lines changed: 6 additions & 6 deletions b/‎apps/GatewayApi/OpenApiDocumentHandler.cs‎
Lines changed: 6 additions & 6 deletions
@@ -235,9 +235,6 @@ jobs:
       - join-migrations-images
       - setup-tags
     if: github.event_name == 'pull_request'
-    permissions:
-      id-token: write
-      contents: read
     steps:
       - uses: RDXWorks-actions/checkout@main
       - uses: ./.github/actions/fetch-secrets
@@ -348,5 +345,5 @@ jobs:
           dotnetTestArguments: --filter RadixDlt.NetworkGateway.UnitTests --logger trx --collect:"XPlat Code Coverage" -- DataCollectionRunSettings.DataCollectors.DataCollector.Configuration.Format=opencover
           sonarBeginArguments: /d:sonar.cs.opencover.reportsPaths="**/TestResults/**/coverage.opencover.xml" -d:sonar.cs.vstest.reportsPaths="**/TestResults/*.trx"
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.SONAR_GITHUB_TOKEN }}
           SONAR_TOKEN: ${{ env.SONAR_TOKEN }}
@@ -9,7 +9,7 @@ on:
 
 jobs:
   publish-gateway-sdk-npmjs:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-latest
     defaults:
       run:
         working-directory: ./sdk/typescript
@@ -18,22 +18,16 @@ jobs:
       contents: read
     steps:
       - uses: RDXWorks-actions/checkout@main
-      - uses: ./.github/actions/fetch-secrets
-        with:
-          role_name: "arn:aws:iam::308190735829:role/gh-babylon-gateway-secrets-read-access"
-          app_name: "babylon-gateway"
-          step_name: "publish-gateway-sdk-npmjs"
-          secret_prefix: "NPM"
-          secret_name: "github-actions/radixdlt/babylon-gateway/npm-publishing-secret"
-          parse_json: true
+
       - name: Use Node.js
         uses: RDXWorks-actions/setup-node@main
         with:
-          node-version: "18.x"
+          node-version: "20.x"
           registry-url: "https://registry.npmjs.org"
-        env:
-          NODE_AUTH_TOKEN: ${{ env.NPM_TOKEN }}
-      - run: cat $NPM_CONFIG_USERCONFIG
+      
+      - name: Upgrade npm
+        run: npm i -g npm@^11.5.1
+      
       - name: Build alphanet-gateway-sdk
         env:
           VITE_SDK_VERSION: ${{ github.event.inputs.package_version_number || steps.setup_tags.outputs.version-tag }}
@@ -56,8 +50,6 @@ jobs:
           field: version
           value: ${{ github.event.inputs.package_version_number || steps.setup_tags.outputs.version-tag }}
 
-      - run: |
-          npm config set access public
-          npm publish
-        env:
-          NODE_AUTH_TOKEN: ${{ env.NPM_TOKEN }}
+      - name: Publish
+        run: env -u NODE_AUTH_TOKEN -u NPM_CONFIG_USERCONFIG npm publish --access public
+  
@@ -4,6 +4,18 @@ Release built: _not released yet_
 ### Database changes
 - Fixed an invalid `index_in_epoch` value for transactions processed in a batch when they belonged to different epochs.
 
+## 1.10.5
+Release built: 2.03.2026
+
+### What’s new?
+- Updated Radix Engine Toolkit to 2.3.4 to resolve security vulnerabilities.
+
+## 1.10.4
+Release built: 29.10.2025
+
+### What’s new?
+- Updated base Docker images to resolve .NET security vulnerabilities.
+
 ## 1.10.3
 Release built: 25.06.2025
 
 
@@ -22,7 +22,7 @@
     <PackageVersion Include="prometheus-net" Version="8.2.1" />
     <PackageVersion Include="prometheus-net.AspNetCore" Version="8.2.1" />
     <PackageVersion Include="prometheus-net.AspNetCore.HealthChecks" Version="8.2.1" />
-    <PackageVersion Include="RadixDlt.RadixEngineToolkit" Version="2.2.2" />
+    <PackageVersion Include="RadixDlt.RadixEngineToolkit" Version="2.3.4" />
     <PackageVersion Include="Swashbuckle.AspNetCore" Version="6.5.0" />
     <!-- build time dependencies -->
     <PackageVersion Include="coverlet.collector" Version="6.0.1" />
 
@@ -1,10 +1,10 @@
 # This dockerfile should be build with the context at the root of the repo, eg, from the repo root:
 # docker build -f apps/DataAggregator/Dockerfile .
 
-FROM mcr.microsoft.com/dotnet/aspnet:8.0-bookworm-slim AS base
+FROM mcr.microsoft.com/dotnet/aspnet:8.0.21-bookworm-slim AS base
 WORKDIR /app
 
-FROM mcr.microsoft.com/dotnet/sdk:8.0-bookworm-slim AS build
+FROM mcr.microsoft.com/dotnet/sdk:8.0.415-bookworm-slim AS build
 WORKDIR /src
 COPY babylon-gateway.sln \
      babylon-gateway.sln.DotSettings \
 
@@ -614,23 +614,23 @@
           "Microsoft.Extensions.Hosting": "[8.0.0, )",
           "Microsoft.Extensions.Logging.Abstractions": "[8.0.0, )",
           "Newtonsoft.Json": "[13.0.3, )",
-          "RadixDlt.CoreApiSdk": "[1.10.1-develop, )"
+          "RadixDlt.CoreApiSdk": "[1.10.5-develop, )"
         }
       },
       "radixdlt.networkgateway.dataaggregator": {
         "type": "Project",
         "dependencies": {
-          "RadixDlt.NetworkGateway.Abstractions": "[1.10.1-develop, )"
+          "RadixDlt.NetworkGateway.Abstractions": "[1.10.5-develop, )"
         }
       },
       "radixdlt.networkgateway.gatewayapi": {
         "type": "Project",
         "dependencies": {
           "FluentValidation.AspNetCore": "[11.3.0, )",
           "Microsoft.Extensions.Http.Polly": "[8.0.2, )",
-          "RadixDlt.NetworkGateway.Abstractions": "[1.10.1-develop, )",
-          "RadixDlt.NetworkGateway.GatewayApiSdk": "[1.10.1-develop, )",
-          "RadixDlt.RadixEngineToolkit": "[2.2.2, )"
+          "RadixDlt.NetworkGateway.Abstractions": "[1.10.5-develop, )",
+          "RadixDlt.NetworkGateway.GatewayApiSdk": "[1.10.5-develop, )",
+          "RadixDlt.RadixEngineToolkit": "[2.3.4, )"
         }
       },
       "radixdlt.networkgateway.gatewayapisdk": {
@@ -639,7 +639,7 @@
           "JsonSubTypes": "[2.0.1, )",
           "Newtonsoft.Json": "[13.0.3, )",
           "Polly": "[8.3.0, )",
-          "RadixDlt.NetworkGateway.Abstractions": "[1.10.1-develop, )"
+          "RadixDlt.NetworkGateway.Abstractions": "[1.10.5-develop, )"
         }
       },
       "radixdlt.networkgateway.postgresintegration": {
@@ -652,17 +652,17 @@
           "Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore": "[8.0.2, )",
           "Newtonsoft.Json": "[13.0.3, )",
           "Npgsql.EntityFrameworkCore.PostgreSQL": "[8.0.2, )",
-          "RadixDlt.NetworkGateway.Abstractions": "[1.10.1-develop, )",
-          "RadixDlt.NetworkGateway.DataAggregator": "[1.10.1-develop, )",
-          "RadixDlt.NetworkGateway.GatewayApi": "[1.10.1-develop, )",
-          "RadixDlt.RadixEngineToolkit": "[2.2.2, )"
+          "RadixDlt.NetworkGateway.Abstractions": "[1.10.5-develop, )",
+          "RadixDlt.NetworkGateway.DataAggregator": "[1.10.5-develop, )",
+          "RadixDlt.NetworkGateway.GatewayApi": "[1.10.5-develop, )",
+          "RadixDlt.RadixEngineToolkit": "[2.3.4, )"
         }
       },
       "radixdlt.networkgateway.prometheusintegration": {
         "type": "Project",
         "dependencies": {
-          "RadixDlt.NetworkGateway.DataAggregator": "[1.10.1-develop, )",
-          "RadixDlt.NetworkGateway.GatewayApi": "[1.10.1-develop, )",
+          "RadixDlt.NetworkGateway.DataAggregator": "[1.10.5-develop, )",
+          "RadixDlt.NetworkGateway.GatewayApi": "[1.10.5-develop, )",
           "prometheus-net": "[8.2.1, )"
         }
       },
@@ -832,9 +832,9 @@
       },
       "RadixDlt.RadixEngineToolkit": {
         "type": "CentralTransitive",
-        "requested": "[2.2.2, )",
-        "resolved": "2.2.2",
-        "contentHash": "EX3wHoOLXVMSYUUoeAm6clg64G3WRIZOZPF9ptSs3MR5M1knqK64J6jIW5jRmfT/06D+F17haSOEPTpy1EQDbA=="
+        "requested": "[2.3.4, )",
+        "resolved": "2.3.4",
+        "contentHash": "8IMvObwrfsla0U5cw35e98oaV3K2LdWFMJVEfe08Fb+I+1LvHI6YScN1Bu2I/7FY+He/pjZ20e3Q70MRI2c7AQ=="
       }
     }
   }
 
@@ -1,10 +1,10 @@
 # This dockerfile should be build with the context at the root of the repo, eg, from the repo root:
 # docker build -f apps/DatabaseMigrations/Dockerfile .
 
-FROM mcr.microsoft.com/dotnet/aspnet:8.0-bookworm-slim AS base
+FROM mcr.microsoft.com/dotnet/aspnet:8.0.21-bookworm-slim AS base
 WORKDIR /app
 
-FROM mcr.microsoft.com/dotnet/sdk:8.0-bookworm-slim AS build
+FROM mcr.microsoft.com/dotnet/sdk:8.0.415-bookworm-slim AS build
 WORKDIR /src
 COPY babylon-gateway.sln \
      babylon-gateway.sln.DotSettings \
 
@@ -547,23 +547,23 @@
           "Microsoft.Extensions.Hosting": "[8.0.0, )",
           "Microsoft.Extensions.Logging.Abstractions": "[8.0.0, )",
           "Newtonsoft.Json": "[13.0.3, )",
-          "RadixDlt.CoreApiSdk": "[1.10.1-develop, )"
+          "RadixDlt.CoreApiSdk": "[1.10.5-develop, )"
         }
       },
       "radixdlt.networkgateway.dataaggregator": {
         "type": "Project",
         "dependencies": {
-          "RadixDlt.NetworkGateway.Abstractions": "[1.10.1-develop, )"
+          "RadixDlt.NetworkGateway.Abstractions": "[1.10.5-develop, )"
         }
       },
       "radixdlt.networkgateway.gatewayapi": {
         "type": "Project",
         "dependencies": {
           "FluentValidation.AspNetCore": "[11.3.0, )",
           "Microsoft.Extensions.Http.Polly": "[8.0.2, )",
-          "RadixDlt.NetworkGateway.Abstractions": "[1.10.1-develop, )",
-          "RadixDlt.NetworkGateway.GatewayApiSdk": "[1.10.1-develop, )",
-          "RadixDlt.RadixEngineToolkit": "[2.2.2, )"
+          "RadixDlt.NetworkGateway.Abstractions": "[1.10.5-develop, )",
+          "RadixDlt.NetworkGateway.GatewayApiSdk": "[1.10.5-develop, )",
+          "RadixDlt.RadixEngineToolkit": "[2.3.4, )"
         }
       },
       "radixdlt.networkgateway.gatewayapisdk": {
@@ -572,7 +572,7 @@
           "JsonSubTypes": "[2.0.1, )",
           "Newtonsoft.Json": "[13.0.3, )",
           "Polly": "[8.3.0, )",
-          "RadixDlt.NetworkGateway.Abstractions": "[1.10.1-develop, )"
+          "RadixDlt.NetworkGateway.Abstractions": "[1.10.5-develop, )"
         }
       },
       "radixdlt.networkgateway.postgresintegration": {
@@ -585,10 +585,10 @@
           "Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore": "[8.0.2, )",
           "Newtonsoft.Json": "[13.0.3, )",
           "Npgsql.EntityFrameworkCore.PostgreSQL": "[8.0.2, )",
-          "RadixDlt.NetworkGateway.Abstractions": "[1.10.1-develop, )",
-          "RadixDlt.NetworkGateway.DataAggregator": "[1.10.1-develop, )",
-          "RadixDlt.NetworkGateway.GatewayApi": "[1.10.1-develop, )",
-          "RadixDlt.RadixEngineToolkit": "[2.2.2, )"
+          "RadixDlt.NetworkGateway.Abstractions": "[1.10.5-develop, )",
+          "RadixDlt.NetworkGateway.DataAggregator": "[1.10.5-develop, )",
+          "RadixDlt.NetworkGateway.GatewayApi": "[1.10.5-develop, )",
+          "RadixDlt.RadixEngineToolkit": "[2.3.4, )"
         }
       },
       "Dapper": {
@@ -757,9 +757,9 @@
       },
       "RadixDlt.RadixEngineToolkit": {
         "type": "CentralTransitive",
-        "requested": "[2.2.2, )",
-        "resolved": "2.2.2",
-        "contentHash": "EX3wHoOLXVMSYUUoeAm6clg64G3WRIZOZPF9ptSs3MR5M1knqK64J6jIW5jRmfT/06D+F17haSOEPTpy1EQDbA=="
+        "requested": "[2.3.4, )",
+        "resolved": "2.3.4",
+        "contentHash": "8IMvObwrfsla0U5cw35e98oaV3K2LdWFMJVEfe08Fb+I+1LvHI6YScN1Bu2I/7FY+He/pjZ20e3Q70MRI2c7AQ=="
       }
     }
   }
 
@@ -1,10 +1,10 @@
 # This dockerfile should be build with the context at the root of the repo, eg, from the repo root:
 # docker build -f apps/GatewayAPI/Dockerfile .
 
-FROM mcr.microsoft.com/dotnet/aspnet:8.0-bookworm-slim AS base
+FROM mcr.microsoft.com/dotnet/aspnet:8.0.21-bookworm-slim AS base
 WORKDIR /app
 
-FROM mcr.microsoft.com/dotnet/sdk:8.0-bookworm-slim AS build
+FROM mcr.microsoft.com/dotnet/sdk:8.0.415-bookworm-slim AS build
 WORKDIR /src
 COPY babylon-gateway.sln \
      babylon-gateway.sln.DotSettings \
 
@@ -70,7 +70,6 @@
 using RadixDlt.NetworkGateway.Abstractions.Network;
 using RadixDlt.NetworkGateway.GatewayApi;
 using RadixDlt.NetworkGateway.GatewayApi.Services;
-using RadixEngineToolkit;
 using System;
 using System.Collections.Generic;
 using System.Globalization;
@@ -80,6 +79,7 @@
 using System.Text;
 using System.Threading;
 using System.Threading.Tasks;
+using ToolkitModel = RadixEngineToolkit;
 
 namespace GatewayApi;
 
@@ -233,24 +233,24 @@ private static string GenerateRandomPreviewTransactionHex(byte networkId, ulong?
         var privateKey = new byte[32];
         random.NextBytes(privateKey);
 
-        var manifest = new ManifestV2Builder(networkId)
+        var manifest = new ToolkitModel.ManifestV2Builder(networkId)
             .FaucetLockFee()
             .Build();
 
         return Convert.ToHexString(
-            new PreviewTransactionV2Builder()
+            new ToolkitModel.PreviewTransactionV2Builder()
                 .Manifest(manifest)
                 .IntentHeader(
-                    new IntentHeaderV2(
+                    new ToolkitModel.IntentHeaderV2(
                         networkId,
                         currentEpoch ?? 1UL,
                         currentEpoch.HasValue ? currentEpoch.Value + 100UL : 1000UL,
                         null,
                         null,
                         1)
                 )
-                .TransactionHeader(new TransactionHeaderV2(PrivateKey.NewEd25519(privateKey).PublicKey(), false, 5U * 100u))
-                .Message(new MessageV2.None())
+                .TransactionHeader(new ToolkitModel.TransactionHeaderV2(ToolkitModel.PrivateKey.NewEd25519(privateKey).PublicKey(), false, 5U * 100u))
+                .Message(new ToolkitModel.MessageV2.None())
                 .Build()
         );
     }