Merge branch 'main' into fix/soroban-auth-signing-with-ledger

Author: elizabethengelman

.cargo/config.toml

@@ -2,7 +2,7 @@
 
 [alias] # command aliases
 f = "fmt"
-md-gen = "run --bin doc-gen"
+md-gen = "run --package doc-gen"
 s = "run --quiet --"
 # b = "build"
 # c = "check"

.github/actions/build-and-test/action.yml

@@ -30,6 +30,12 @@ runs:
     - if: runner.os == 'Linux'
       run: sudo apt-get update && sudo apt-get -y install gcc-aarch64-linux-gnu g++-aarch64-linux-gnu libudev-dev libdbus-1-dev
       shell: bash
+    - run: make build-test-wasms
+      shell: bash
+      env:
+        CARGO_TARGET_AARCH64_UNKNOWN_LINUX_GNU_LINKER: aarch64-linux-gnu-gcc
+        CARGO_BUILD_TARGET: ${{ inputs.target }}
+        CI_TESTS: true
     - run: cargo clippy --all-targets --target ${{ inputs.target }}
       shell: bash
     - run: make test

.github/copilot-instructions.md

@@ -113,7 +113,6 @@ stellar keys address test      # Test key operations
 The project uses GitHub Actions with workflows in `.github/workflows/`:
 
 - `rust.yml`: Main CI pipeline with formatting, linting, building, and testing
-- `e2e.yml`: End-to-end system tests
 - `binaries.yml`: Multi-platform binary builds
 
 Always run `make fmt` and `make check` locally before pushing to ensure CI passes.

.github/workflows/action.yml

@@ -14,7 +14,7 @@ jobs:
   action:
     strategy:
       matrix:
-        image: [macos-13, ubuntu-latest, windows-latest]
+        image: [macos-15, macos-15-intel, ubuntu-latest, windows-latest]
     runs-on: ${{ matrix.image }}
 
     steps:

.github/workflows/binaries.yml

@@ -53,9 +53,9 @@ jobs:
           - name: stellar-cli
             binary: stellar
         sys:
-          - os: macos-14
+          - os: macos-15
             target: aarch64-apple-darwin
-          - os: macos-13
+          - os: macos-15-intel
             target: x86_64-apple-darwin
     runs-on: ${{ matrix.sys.os }}
     steps:
@@ -112,7 +112,7 @@ jobs:
       - name: Uncompress Artifact
         run: tar xvf ${{ env.ARTIFACT_NAME }}
       - shell: powershell
-        run: winget install --id JRSoftware.InnoSetup --scope machine --silent --accept-package-agreements --accept-source-agreements
+        run: winget install --id JRSoftware.InnoSetup --scope machine --silent --accept-package-agreements --accept-source-agreements --force
       - shell: powershell
         run: |
           $innoPath = "C:\Program Files (x86)\Inno Setup 6"

.github/workflows/bindings-ts.yml

@@ -16,13 +16,12 @@ jobs:
           - ubuntu-latest-8-cores
           # ARM
           - ubuntu-jammy-8-cores-arm64
-          # Intel
-          - macos-13
+          # Apple Intel (this runner has better support to nested virtualization)
+          - macos-15-large
         exclude:
-          # Only run Linux x64 tests on pull request to save some time
-          - sys:
-              ${{ github.event_name != 'push' && 'ubuntu-jammy-8-cores-arm64' }}
-          - sys: ${{ github.event_name != 'push' && 'macos-13' }}
+          # Only run Linux x64 on non-release PRs to save CI minutes
+          - sys: ${{ github.event_name != 'push' && !startsWith(github.ref_name, 'release/') && 'ubuntu-jammy-8-cores-arm64' }}
+          - sys: ${{ github.event_name != 'push' && !startsWith(github.ref_name, 'release/') && 'macos-15-large' }}
     runs-on: ${{ matrix.sys }}
     steps:
       - uses: stellar/quickstart@main

.github/workflows/dependency-check.yml

@@ -7,10 +7,18 @@ on:
 
 concurrency:
   group:
-    ${{ github.workflow }}-${{ github.ref_protected == 'true' && github.sha || github.ref }}
+    ${{ github.workflow }}-${{ github.ref_protected == 'true' && github.sha ||
+    github.ref }}
   cancel-in-progress: true
 
 jobs:
+  github_context:
+    runs-on: ubuntu-latest
+    steps:
+      - run: |
+          echo "github.sha => ${{ github.sha }}"
+          echo "github.ref => ${{ github.ref }}"
+
   docs-validation:
     uses: stellar/stellar-docs/.github/workflows/build.yml@main
     with:

.github/workflows/docs.yml

@@ -23,30 +23,52 @@ jobs:
           - ubuntu-latest-8-cores
           # ARM
           - ubuntu-jammy-8-cores-arm64
-          # Intel
-          - macos-13
+          # Apple Large Intel (this runner has better support to nested virtualization)
+          # - macos-15-large (temporarily until the runner becomes more reliable. To be re-enabled in https://github.com/stellar/stellar-cli/issues/2299)
         exclude:
-          # Only run Linux x64 tests on pull request to save some time
-          - sys: ${{ github.event_name != 'push' && 'ubuntu-jammy-8-cores-arm64' }}
-          - sys: ${{ github.event_name != 'push' && 'macos-13' }}
+          # Only run Linux x64 on non-release PRs to save CI minutes
+          - sys: ${{ github.event_name != 'push' && !startsWith(github.ref_name, 'release/') && 'ubuntu-jammy-8-cores-arm64' }}
+          - sys: ${{ github.event_name != 'push' && !startsWith(github.ref_name, 'release/') && 'macos-15-large' }}
     runs-on: ${{ matrix.sys }}
     env:
       CI_TESTS: true
+      TEST_THREADS: ${{ contains(matrix.sys, 'macos') && '--test-threads=1' || '' }} # macOS has limited resources, so we run tests (that rely on `testcontainers`) with 1 thread
     steps:
       - uses: actions/checkout@v5
+
       - uses: stellar/actions/rust-cache@main
-      - name: Setup Colima and Docker (macOS only)
+
+      - name: Install Colima & Docker
         if: runner.os == 'macos'
+        env:
+          GH_TOKEN: ${{ github.token }}
+        shell: bash
         run: |
-          brew install docker
-          brew install colima
-          colima start
-      - name: Set DOCKER_HOST to Colima socket
+          echo "::group::Installing Colima & Docker"
+          brew install colima docker
+          echo "::endgroup::"
+
+      - name: Start Colima
         if: runner.os == 'macos'
-        run: echo "DOCKER_HOST=unix:///Users/runner/.colima/default/docker.sock" >> $GITHUB_ENV
+        shell: bash
+        run: |
+          echo "::group::Starting Colima"
+          CPU_COUNT=$(sysctl -n hw.ncpu)
+          TOTAL_MEMORY=$(sysctl hw.memsize | awk '{print $2/1024/1024/1024}')
+          MEMORY=$(awk "BEGIN {printf \"%.0f\", $TOTAL_MEMORY * 0.75}")
+          echo "CPU_COUNT: $CPU_COUNT"
+          echo "TOTAL_MEMORY: $TOTAL_MEMORY"
+          colima start --arch x86_64 --vm-type=vz --mount-type=9p --cpu $CPU_COUNT --memory $TOTAL_MEMORY
+          export DOCKER_HOST=unix:///Users/runner/.colima/default/docker.sock
+          echo "DOCKER_HOST=unix:///Users/runner/.colima/default/docker.sock" >> $GITHUB_ENV
+          echo "::endgroup::"
+
       - name: install optional dependencies (Linux only)
         run: sudo apt update && sudo apt install -y libudev-dev libdbus-1-dev
         if: runner.os == 'Linux'
-      - run: RUST_BACKTRACE=1 cargo test --manifest-path cmd/crates/stellar-ledger/Cargo.toml --features "emulator-tests" -- --nocapture
+
+      - run: RUST_BACKTRACE=1 cargo test --manifest-path cmd/crates/stellar-ledger/Cargo.toml --features "emulator-tests" -- --nocapture $TEST_THREADS
+
       - run: RUST_BACKTRACE=1 cargo build --features emulator-tests,additional-libs
-      - run: RUST_BACKTRACE=1 cargo test --features emulator-tests --package soroban-test --test it -- emulator
+
+      - run: RUST_BACKTRACE=1 cargo test --features emulator-tests --package soroban-test --test it -- emulator $TEST_THREADS