Merge main into staging-0.8.0 by moritzkiefer-da · Pull Request #6937 · canton-network/splice

moritzkiefer-da · 2026-08-24T15:07:52Z

Pull Request Checklist

Cluster Testing

If a cluster test is required, comment /cluster_test on this PR to request it, and ping someone with access to the DA-internal system to approve it.
If an upgrade test is required, comment /upgrade_test on this PR to request it, and ping someone with access to the DA-internal system to approve it.
If a hard-migration test is required (from the latest release), comment /hdm_test on this PR to request it, and ping someone with access to the DA-internal system to approve it.
If a logical synchronizer upgrade test is required (from canton-3.5), comment /lsu_test on this PR to request it, and ping someone with access to the DA-internal system to approve it.

PR Guidelines

Include any change that might be observable by our partners or affect their deployment in the release notes.
Specify fixed issues with Fixes #n, and mention issues worked on using #n
Include a screenshot for frontend-related PRs - see README or use your favorite screenshot tool

Merge Guidelines

Make the git commit message look sensible when squash-merging on GitHub (most likely: just copy your PR description).

…6407) Signed-off-by: Lyutskan Lyutskanov <lyutskan.lyutskanov@finoa.io> Signed-off-by: Tim Pelzer <tim.pelzer@finoa.io> Co-authored-by: Tim Pelzer <tim.pelzer@finoa.io>

[static] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

* remove base-errors and google-common-protos-scala * remove empty pekko-fork * use binary util-external * fix util-external call in HttpScanAppClient * remove adjustable-clock * remove upstream-removed ledger-common * remove kms-driver-api * remove wartremover-annotations * remove scalatest-addon --------- Signed-off-by: Stephen Compall <stephen.compall@digitalasset.com>

* move ApiCodecCompressed to hard fork library lf-value-json * restore codec tests from DACH-NY/canton#27917 * remove tests that need JsonEncodingTest.dar - dealing with LF Record - decode a JSON array of the right length - fail to decode if missing fields - fail to decode if extra fields - dealing with LF Variant - decode Foo/Baz from JSON - fail decoding Foo/Qux from JSON if 'value' field is missing - decode Foo/Qux (empty value) from JSON - dealing with Contract Key - decode type Key = Party from JSON - decode type Key = (Party, Int) from JSON - decode type Key = (Party, (Int, Foo, BazRecord)) from JSON * proper dependencies for lf-value-json * use lf-value-json in apps-common --------- Signed-off-by: Stephen Compall <stephen.compall@digitalasset.com>

…gSvIntegrationTest (#6606) sv1 is stopped mid-test; the plugin accesses sv1Scan.automation after sv1's participant is down, throwing 'Node doesn't have any app state'. This also prevents proper port release, causing three subsequent tests to fail with 'Could not create Prometheus HTTP server'. Signed-off-by: Raymond Roestenburg <raymond.roestenburg@digitalasset.com>

…cy nodes and rewards store (#6605) Signed-off-by: Raymond Roestenburg <raymond.roestenburg@digitalasset.com>

Signed-off-by: Raymond Roestenburg <raymond.roestenburg@digitalasset.com>

…ordStoreTest and DbScanAppRewardsStoreTest (#6564) Signed-off-by: JYC11 <jaeyoon.c@gmail.com> Co-authored-by: Divam <681060+dfordivam@users.noreply.github.com>

* helm, info, status: Print position and exit code on error Signed-off-by: Stanislav German-Evtushenko <ginermail@gmail.com> * helm, info, status: Ignore CantonBFT node when unable to fetch URL Before: - If the URL for a single CantonBFT node can't be fetched no results for all CantonBFT nodes are generated After: - If the URL for a single CantonBFT node can't be fetched the result only for this node is missing Signed-off-by: Stanislav German-Evtushenko <ginermail@gmail.com> --------- Signed-off-by: Stanislav German-Evtushenko <ginermail@gmail.com>

Signed-off-by: Paweł Perek <pawel.perek@digitalasset.com>

[ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

To recover more quickly from nodes that are down. Not gonna do much for the cases where someone times out every X epochs but still a better default. [ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

* [static] Close scan connections when BFT scan connection init fails Signed-off-by: Raymond Roestenburg <raymond.roestenburg@digitalasset.com> * [ci] Format Signed-off-by: Raymond Roestenburg <raymond.roestenburg@digitalasset.com> --------- Signed-off-by: Raymond Roestenburg <raymond.roestenburg@digitalasset.com>

[static] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

[ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

maxAccepted was the exact theoretical ceiling with no slack, so any timing jitter that stretches the 5s emission window lets one more refill batch through (seen accepting 31). Signed-off-by: Raymond Roestenburg <raymond.roestenburg@digitalasset.com>

…#6622) The at_or_before query ran after advanceTime, so it resolved a different earliest open mining round than the exact query and the holding fees differed by one round. Signed-off-by: Raymond Roestenburg <raymond.roestenburg@digitalasset.com>

#6618) Signed-off-by: Raymond Roestenburg <raymond.roestenburg@digitalasset.com>

[ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

#6626) Signed-off-by: Raymond Roestenburg <raymond.roestenburg@digitalasset.com>

#6627) * [ci] Make wallet service closes failure-isolated and clean up on partial construction Signed-off-by: Raymond Roestenburg <raymond.roestenburg@digitalasset.com>

Signed-off-by: Paweł Perek <pawel.perek@digitalasset.com>

Fixes #6599 This PR adds: per IP rate limits validation for the schema example usage: perIpLimits: maxTokens: 120 tokensPerFill: 120 fillInterval: 60s overrides: test: ips: - 192.68.78.50 maxTokens: 220 tokensPerFill: 220 fillInterval: 60s Note: the change is backwards-compatible.

Signed-off-by: Puneet Bharti <puneet.bharti@finoa.io>

#6601) Signed-off-by: Raymond Roestenburg <raymond.roestenburg@digitalasset.com>

[static] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

Signed-off-by: Julien Tinguely <julien.tinguely@digitalasset.com>

--------- Signed-off-by: Oriol Muñoz <oriol.munoz@digitalasset.com> Co-authored-by: moritzkiefer-da <45630097+moritzkiefer-da@users.noreply.github.com>

Signed-off-by: Puneet Bharti <puneet.bharti@finoa.io>

… expiry (#6813) * added purge datatransfer job for manually deleting records after 7 days from staging tables Signed-off-by: Kajal <kajal.shah@digitalasset.com> * Addressed PR comments [ci] Signed-off-by: Kajal <kajal.shah@digitalasset.com> * Addressed PR comments - sharing IAMMember [ci] Signed-off-by: Kajal <kajal.shah@digitalasset.com> * Addressed PR comments - sharing IAMMember with defaul removed for 7 days [ci] Signed-off-by: Kajal <kajal.shah@digitalasset.com> * Addressed PR comments - sharing IAMMember with defaul removed for 7 days [ci] new Signed-off-by: Kajal <kajal.shah@digitalasset.com> * fixed zod error messages [ci] Signed-off-by: Kajal <kajal.shah@digitalasset.com> * npm run fix changes [[ci] Signed-off-by: Kajal <kajal.shah@digitalasset.com> * formatting cahnges to cloudArmor.ts [ci] Signed-off-by: Kajal <kajal.shah@digitalasset.com> * [ci] Signed-off-by: Kajal <kajal.shah@digitalasset.com> --------- Signed-off-by: Kajal <kajal.shah@digitalasset.com>

…han wrapped eventually (#6869) Signed-off-by: Stephen Compall <stephen.compall@digitalasset.com>

[static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

--------- Signed-off-by: jarekr-da <jaroslaw.ratajski@digitalasset.com>

…ore` (#6875) [static] A client gets rate limited on this on MainNet DA-2. Upon closer inspection, this endpoint triggers a very cheap query answered by an index scan: https://github.com/canton-network/splice/blob/1973921ef727fded6d6d3734b00e7eeca4010b51/apps/scan/src/main/scala/org/lfdecentralizedtrust/splice/scan/store/AcsSnapshotStore.scala#L72 This doesn't sound as if special rate-limiting is needed at all. Signed-off-by: Martin Florian <martin.florian@digitalasset.com>

[ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

[static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

[ci] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

* [ci] handle missing objects correctly when getting s3 checksums Signed-off-by: Itai Segall <itai.segall@digitalasset.com> * [ci] better logging Signed-off-by: Itai Segall <itai.segall@digitalasset.com> * [ci] . Signed-off-by: Itai Segall <itai.segall@digitalasset.com> * [ci] fmt Signed-off-by: Itai Segall <itai.segall@digitalasset.com> --------- Signed-off-by: Itai Segall <itai.segall@digitalasset.com>

…eStagProdDatastream=true) to main (#6893) --------- Signed-off-by: Stephen Compall <stephen.compall@digitalasset.com> Signed-off-by: DA Automation <splice-maintainers@digitalasset.com> Co-authored-by: Stephen Compall <stephen.compall@digitalasset.com> Co-authored-by: DA Automation <splice-maintainers@digitalasset.com>

Signed-off-by: Julien Tinguely <julien.tinguely@digitalasset.com>

Seen here as a failure https://github.com/canton-network/splice/actions/runs/32459976647/job/96705530387?pr=6896 [ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

fixes DACH-NY/cn-test-failures#9447 and supersedes #6642 Imho this is the proper fix: Avoid making a separate query after the retry when the state may already have changed. [ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

* client ip rate limiting - configurable headers [ci] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

* Partition overflow problem solved per issue #6919 [ci] Signed-off-by: Kajal <kajal.shah@digitalasset.com>

Signed-off-by: Robert Autenrieth <robert.autenrieth@digitalasset.com>

[static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

Signed-off-by: Puneet Bharti <puneet.bharti@finoa.io> Co-authored-by: Puneet Bharti <puneet.bharti@finoa.io>

…eployment on prod clusters (#6908) Signed-off-by: Mateusz Błażejewski <mateusz.blazejewski@digitalasset.com>

…ttribute (#6926)

Signed-off-by: Vladislav Lapin <v.lapin@scalablesolutions.io> Co-authored-by: Vladislav Lapin <v.lapin@scalablesolutions.io>

…t-yet-ingested (#6694) Signed-off-by: Tim Emiola <adetokunbo@emio.la>

[ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

canton-network-da · 2026-08-24T15:08:17Z

[backport] Reminder

Please consider backporting to the following branches:

▶️ Please check the boxes for branches that you wish to backport to and backport PRs will
automatically be created when you merge this PR.

And your PR is currently against base branch: staging-0.8.0.

Note: Any PR comment containing [backport] will be considered for auto-backporting upon merge,
you can always add those manually for PRs that did not get these reminders. You can also edit
this comment manually and add more branches that this should be backported to.

github-actions · 2026-08-24T15:08:22Z

Deploy upgrade pipeline triggered for Commit e4a9dd4c752d6a2f61ad743631c0722c29b68a6a in , please contact a Contributor to approve it in CircleCI: https://app.circleci.com/pipelines/github/DACH-NY/canton-network-internal/79549

aonif and others added 30 commits July 29, 2026 13:51

Implement governance form field styling (Fixes #2656, #2657, #2659) (#…

ed5f0f1

…6407) Signed-off-by: Lyutskan Lyutskanov <lyutskan.lyutskanov@finoa.io> Signed-off-by: Tim Pelzer <tim.pelzer@finoa.io> Co-authored-by: Tim Pelzer <tim.pelzer@finoa.io>

Document staging branches (#6598)

e4763ce

[static] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

[ci] Close all scan resources even when one close fails; include lega…

ea72627

…cy nodes and rewards store (#6605) Signed-off-by: Raymond Roestenburg <raymond.roestenburg@digitalasset.com>

[ci] Release netty buffers on zstd compression failures (#6603)

9534110

Signed-off-by: Raymond Roestenburg <raymond.roestenburg@digitalasset.com>

[ci] Delete all toxiproxy proxies even when one delete fails (#6604)

6de7b14

Signed-off-by: Raymond Roestenburg <raymond.roestenburg@digitalasset.com>

replace storage.underlying with storage in tests for DbAppActivityRec…

0b45eb2

…ordStoreTest and DbScanAppRewardsStoreTest (#6564) Signed-off-by: JYC11 <jaeyoon.c@gmail.com> Co-authored-by: Divam <681060+dfordivam@users.noreply.github.com>

SV UI strings adjustment (#6243)

2643774

Signed-off-by: Paweł Perek <pawel.perek@digitalasset.com>

Upgrade Canton to 3.5.11-snapshot.20260730.19128.0.ve4f54d89 (#6613)

4226f52

[ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

Clear out upcoming release notes (#6620)

40feff1

[static] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

Upgrade Canton to 3.5.11 (#6619)

46277a7

[ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

[ci] Close channel and snapshot stream on synchronous failures in Seq… (

8cf35c2

#6618) Signed-off-by: Raymond Roestenburg <raymond.roestenburg@digitalasset.com>

Bump versions after 0.7.0 release (#6625)

05ff88a

[ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

[ci] Close additionalLegacy synchronizer nodes and isolate node closes (

fc336be

#6626) Signed-off-by: Raymond Roestenburg <raymond.roestenburg@digitalasset.com>

[ci] Make wallet service closes failure-isolated and clean up on part… (

8a91700

#6627) * [ci] Make wallet service closes failure-isolated and clean up on partial construction Signed-off-by: Raymond Roestenburg <raymond.roestenburg@digitalasset.com>

Fix at threshold decoding in old proposals (#6632)

bfe7e35

Signed-off-by: Paweł Perek <pawel.perek@digitalasset.com>

SV UI Redesign Look & Feel: Component: Layout (#6383)

d08cf34

Signed-off-by: Puneet Bharti <puneet.bharti@finoa.io>

[ci] Recover accepted DUPLICATE_COMMAND in SpliceLedgerConnection ded… (

fca2076

#6601) Signed-off-by: Raymond Roestenburg <raymond.roestenburg@digitalasset.com>

Update to latest version of cantonbft dashboards (#6651)

e200180

[static] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

Add timeout to the grpcClients in splice (#6597)

6f52e08

Signed-off-by: Julien Tinguely <julien.tinguely@digitalasset.com>

Support splice helm chart migration to Postgres 18 image (#6637)

69df645

--------- Signed-off-by: Oriol Muñoz <oriol.munoz@digitalasset.com> Co-authored-by: moritzkiefer-da <45630097+moritzkiefer-da@users.noreply.github.com>

SV UI: add Submitted By column to governance tables (#3691) (#6460)

0dfa468

Signed-off-by: Puneet Bharti <puneet.bharti@finoa.io>

kajalshah-da and others added 23 commits August 19, 2026 14:12

in splitwell test, wait longer for checkWallets via argument rather t…

6f68f6b

…han wrapped eventually (#6869) Signed-off-by: Stephen Compall <stephen.compall@digitalasset.com>

Enable gcp enhanced insights for enterprise plus (#6873)

0b8bbe1

[static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

fix: added missing feature flag for multisync (#6809)

49c7708

--------- Signed-off-by: jarekr-da <jaroslaw.ratajski@digitalasset.com>

Bump Canton to 3.5.14 (#6887)

7b1084b

[ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

Clear release notes for 0.7.4 (#6888)

386eaff

[static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

Update versions after 0.7.4 (#6890)

7ac21fe

[ci] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

Stop scan connection alerts triggering when value is NaN (#6898)

7fc63dd

Signed-off-by: Julien Tinguely <julien.tinguely@digitalasset.com>

client ip rate limiting - configurable headers (#6905)

24b1a8a

* client ip rate limiting - configurable headers [ci] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

Partition overflow problem solved per issue #6919 [ci] (#6923)

8bc2e07

* Partition overflow problem solved per issue #6919 [ci] Signed-off-by: Kajal <kajal.shah@digitalasset.com>

Fix grafana dashboard panel for hidden app reward coupons (#6850)

ba7f572

Signed-off-by: Robert Autenrieth <robert.autenrieth@digitalasset.com>

Enable minimal whitelisting by default (#6928)

99e962c

[static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

Final Implementation Initiate Proposal Flow (#6410)

b959ffb

Signed-off-by: Puneet Bharti <puneet.bharti@finoa.io> Co-authored-by: Puneet Bharti <puneet.bharti@finoa.io>

fix stack references and their mocks to allow migrating to split-SV d…

5031a6a

…eployment on prod clusters (#6908) Signed-off-by: Mateusz Błażejewski <mateusz.blazejewski@digitalasset.com>

Improve splice rate limit dashboard - include rate limiter type and a…

1ad2ac9

…ttribute (#6926)

Use configured client IP headers in request logs (#6924)

1c2b31e

Signed-off-by: Vladislav Lapin <v.lapin@scalablesolutions.io> Co-authored-by: Vladislav Lapin <v.lapin@scalablesolutions.io>

Traffic-Based App Rewards: Clearly distinguish not-ingestable from no…

66f1319

…t-yet-ingested (#6694) Signed-off-by: Tim Emiola <adetokunbo@emio.la>

Merge remote-tracking branch 'origin/main' into staging-0.8.0

e4a9dd4

[ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

moritzkiefer-da requested a review from nicu-da August 24, 2026 15:08

moritzkiefer-da marked this pull request as ready for review August 24, 2026 15:08

nicu-da approved these changes Aug 24, 2026

View reviewed changes

moritzkiefer-da merged commit ed443c5 into staging-0.8.0 Aug 25, 2026
127 of 129 checks passed

moritzkiefer-da deleted the cocreature/merge-main-0.8.0 branch August 25, 2026 06:41

Navigation Menu

Uh oh!

Merge main into staging-0.8.0 - #6937

Merge main into staging-0.8.0#6937
moritzkiefer-da merged 151 commits into
staging-0.8.0from
cocreature/merge-main-0.8.0

moritzkiefer-da commented Aug 24, 2026

Uh oh!

canton-network-da commented Aug 24, 2026

Uh oh!

github-actions Bot commented Aug 24, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants

Uh oh!

Conversation

moritzkiefer-da commented Aug 24, 2026

Pull Request Checklist

Cluster Testing

PR Guidelines

Merge Guidelines

Uh oh!

canton-network-da commented Aug 24, 2026

[backport] Reminder

Please consider backporting to the following branches:

Uh oh!

github-actions Bot commented Aug 24, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants