fix(events): refuse submit and withdraw after winner selection and track updated_at #173
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Verify Build | |
| on: | |
| push: | |
| branches: | |
| - main | |
| - develop | |
| - testnet | |
| paths: | |
| - 'contracts/**' | |
| - 'docs/**' | |
| - 'Cargo.toml' | |
| - 'Cargo.lock' | |
| - 'rust-toolchain.toml' | |
| - 'deploy_mainnet.sh' | |
| - 'scripts/**' | |
| - '.github/actions/setup-rust-stellar/**' | |
| - '.github/workflows/verify-build.yml' | |
| # Use pull_request (not pull_request_target): the check must run the workflow | |
| # from the PR head so branch-filter changes take effect on the PR itself, and | |
| # the build/test job needs no secrets, so the pull_request_target foot-gun | |
| # (secrets + write token against PR head code) is avoided. | |
| pull_request: | |
| branches: | |
| - main | |
| - develop | |
| - testnet | |
| paths: | |
| - 'contracts/**' | |
| - 'docs/**' | |
| - 'Cargo.toml' | |
| - 'Cargo.lock' | |
| - 'rust-toolchain.toml' | |
| - 'deploy_mainnet.sh' | |
| - 'scripts/**' | |
| - '.github/actions/setup-rust-stellar/**' | |
| - '.github/workflows/verify-build.yml' | |
| - '.github/workflows/rustfmt.yml' | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| actions: read | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout your repository using git | |
| uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 | |
| with: | |
| persist-credentials: false | |
| - name: Setup Rust and Stellar | |
| uses: ./.github/actions/setup-rust-stellar | |
| - name: Check release script syntax | |
| run: | | |
| bash -n deploy_mainnet.sh | |
| bash -n scripts/capture-mainnet-compat-snapshot.sh | |
| bash -n scripts/test-sdk27-compat.sh | |
| bash -n scripts/test-mainnet-upgrade-guards.sh | |
| bash -n scripts/testdata/mock-stellar | |
| - name: Verify mainnet upgrade guards | |
| run: ./scripts/test-mainnet-upgrade-guards.sh | |
| - name: Build contracts reproducibly | |
| run: stellar contract build --locked | |
| - name: Check WASM sizes (64 KB ceiling) | |
| run: | | |
| for f in target/wasm32v1-none/release/*.wasm; do | |
| size=$(stat -c%s "$f") | |
| name=$(basename "$f") | |
| echo "$name: $size bytes" | |
| if [ "$size" -gt 65536 ]; then | |
| echo "::error::$name exceeds 64 KB ceiling ($size bytes)" | |
| exit 1 | |
| fi | |
| done | |
| - name: Verify SDK 23 to SDK 27 storage compatibility | |
| env: | |
| VERIFY_SDK27_BUILD: "1" | |
| run: ./scripts/test-sdk27-compat.sh | |
| - name: Run tests | |
| run: cargo test --release |