Merge main into staging-0.9.0 by martinflorian-da · Pull Request #7015 · canton-network/splice

martinflorian-da · 2026-08-28T13:22:04Z

Wanted for the the follow-up PR to #6957 (see https://github.com/DACH-NY/canton-network-internal/issues/2106)

Pull Request Checklist

Cluster Testing

If a cluster test is required, comment /cluster_test on this PR to request it, and ping someone with access to the DA-internal system to approve it.
If an upgrade test is required, comment /upgrade_test on this PR to request it, and ping someone with access to the DA-internal system to approve it.
If a hard-migration test is required (from the latest release), comment /hdm_test on this PR to request it, and ping someone with access to the DA-internal system to approve it.
If a logical synchronizer upgrade test is required (from canton-3.5), comment /lsu_test on this PR to request it, and ping someone with access to the DA-internal system to approve it.

PR Guidelines

Include any change that might be observable by our partners or affect their deployment in the release notes.
Specify fixed issues with Fixes #n, and mention issues worked on using #n
Include a screenshot for frontend-related PRs - see README or use your favorite screenshot tool

Merge Guidelines

Make the git commit message look sensible when squash-merging on GitHub (most likely: just copy your PR description).

* Partition overflow problem solved per issue #6919 [ci] Signed-off-by: Kajal <kajal.shah@digitalasset.com>

Signed-off-by: Robert Autenrieth <robert.autenrieth@digitalasset.com>

[static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

Signed-off-by: Puneet Bharti <puneet.bharti@finoa.io> Co-authored-by: Puneet Bharti <puneet.bharti@finoa.io>

…eployment on prod clusters (#6908) Signed-off-by: Mateusz Błażejewski <mateusz.blazejewski@digitalasset.com>

…ttribute (#6926)

Signed-off-by: Vladislav Lapin <v.lapin@scalablesolutions.io> Co-authored-by: Vladislav Lapin <v.lapin@scalablesolutions.io>

…t-yet-ingested (#6694) Signed-off-by: Tim Emiola <adetokunbo@emio.la>

Fixes #4265 This removes `RestartDsoDelegateBasedAutomationTrigger` and updates `SvDsoAutomationService` to construct and start the `DsoDelegateBasedAutomationService`. Signed-off-by: Matt Dziuban <mrdziuban@gmail.com>

I thought about this a bit too late / hit merge on #6935 a bit too quickly... [force] (is fine because that log message doesn't exist anymore) Signed-off-by: Martin Florian <martin.florian@digitalasset.com>

…tionId` (#6744) * Replace all `(Long, CantonTimestamp)` tuples with `TimestampWithMigrationId`. * Fix regex to ignore sbt GC warning. Signed-off-by: Matt Dziuban <mrdziuban@gmail.com>

…#6949) [static] Signed-off-by: Mateusz Błażejewski <mateusz.blazejewski@digitalasset.com>

[ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

Fixes #6640 --------- Signed-off-by: krzysztofczyz-da <krzysztof.czyz@digitalasset.com>

[ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

…6955) Signed-off-by: Puneet Bharti <puneet.bharti@finoa.io>

Signed-off-by: Itai Segall <itai.segall@digitalasset.com>

* Revert "add rate limits by CIDRs (#6660)" This reverts commit 5b48337. * [static] run Signed-off-by: Oriol Muñoz <oriol.munoz@digitalasset.com> --------- Signed-off-by: Oriol Muñoz <oriol.munoz@digitalasset.com>

Signed-off-by: Itai Segall <itai.segall@digitalasset.com> Co-authored-by: Stephen Compall <stephen.compall@digitalasset.com>

Signed-off-by: Itai Segall <itai.segall@digitalasset.com> Co-authored-by: Amanda L Martin <hythloda@gmail.com> Co-authored-by: Stephen Compall <stephen.compall@digitalasset.com>

Signed-off-by: Ilya Silvestrov <tellary@gmail.com>

include target host in legend and add error table with flexible filter [static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

…ers (#6964) We don't keep track of usage for the actual attribute values so the overall reported usage is actually the global usage [static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

…utting-down canton (#6958) --------- Signed-off-by: Oriol Muñoz <oriol.munoz@digitalasset.com>

See DACH-NY/canton-network-internal#6371 Regular alerts for now, plan is to promote at least some of them to sev-2 and/or sev-1 after some testing. - Discarded requests / replays <- also adds this as panels on the Global Synchronizer Utilization dashboard - Failed confirmation requests - TPS drop

* Expose sv app endpoints to the minimum users Also extend open api so the other SVs can easily apply the same restriction [static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

[ci] fixes #6970 Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: Moritz Kiefer <moritz.kiefer@purelyfunctional.org>

Signed-off-by: Robert Autenrieth <robert.autenrieth@digitalasset.com>

Signed-off-by: Puneet Bharti <puneet.bharti@finoa.io>

Fixes #2336 Since #2336 was filed, #4113 deprecated `scan_txlog.py` and removed the code that ran it, but #5922 added a max tap amount of 100,000,000, so the existing test code failed with a "requirement ... was not met" error. This updates the test code to instead tap the max amount. Signed-off-by: Matt Dziuban <mrdziuban@gmail.com>

Signed-off-by: Kajal <kajal.shah@digitalasset.com>

…6978) --------- Signed-off-by: Oriol Muñoz <oriol.munoz@digitalasset.com>

* add the configs Signed-off-by: Itai Segall <itai.segall@digitalasset.com> * [ci] done Signed-off-by: Itai Segall <itai.segall@digitalasset.com> * [ci] fmt Signed-off-by: Itai Segall <itai.segall@digitalasset.com> * [ci] cleanup Signed-off-by: Itai Segall <itai.segall@digitalasset.com> * [ci] fix the test Signed-off-by: Itai Segall <itai.segall@digitalasset.com> * [ci] Signed-off-by: Itai Segall <itai.segall@digitalasset.com> --------- Signed-off-by: Itai Segall <itai.segall@digitalasset.com>

That warning doesn't exist in Canton anymore, see https://github.com/DACH-NY/canton/pull/30310/changes#diff-81c61bdb4b62b057717883fd710a5f662ee23d6769f03115d2db110dfda5829aL127 [ci] Fixes #2706 Signed-off-by: Martin Florian <martin.florian@digitalasset.com>

--------- Signed-off-by: Oriol Muñoz <oriol.munoz@digitalasset.com>

) And also the dashboard panel, and add a new panel that shows duplicate confirmation requests. Follow-up to #6969 [static] Signed-off-by: Martin Florian <martin.florian@digitalasset.com>

[ci] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

[ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

--------- Signed-off-by: Oriol Muñoz <oriol.munoz@digitalasset.com>

[static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

Signed-off-by: Oriol Muñoz <oriol.munoz@digitalasset.com>

* add port 80 to helm VirtualServices * direct GKE gateway to port 80 on istio * also port 80 for cn-release-bundles and docs routes * Cloud Armor got more restrictive about condition regexes * fix sequencer gRPC ingress by forcing HTTP/2 in istio gateway chart - found with docker-compose validator, doing this SEQ_HOST=sequencer-0.sv-2.$GCP_CLUSTER_HOSTNAME curl -sv --http2 \ -H 'content-type: application/grpc' \ -H 'te: trailers' \ --data-binary $'\x00\x00\x00\x00\x00' \ "https://${SEQ_HOST}/grpc.health.v1.Health/Check" \ -o /dev/null yields < HTTP/2 200 < content-type: application/grpc < grpc-status: 14 < grpc-message: upstream connect error or disconnect/reset before headers. reset reason: protocol error < server: istio-envoy < x-envoy-upstream-service-time: 3 < via: 1.1 google whereas with GKE L7 off we get < HTTP/2 200 < content-type: application/grpc < grpc-status: 13 < grpc-message: Half-closed without a request < x-envoy-upstream-service-time: 4 < date: Mon, 24 Aug 2026 22:17:07 GMT < server: istio-envoy --------- Assisted-by: Copilot:gpt-5.3-codex Signed-off-by: Stephen Compall <stephen.compall@digitalasset.com>

Signed-off-by: Itai Segall <itai.segall@digitalasset.com>

Signed-off-by: Puneet Bharti <puneet.bharti@finoa.io>

* [splice] bump resources for deployment tests Signed-off-by: Itai Segall <itai.segall@digitalasset.com> * [static] Signed-off-by: Itai Segall <itai.segall@digitalasset.com> --------- Signed-off-by: Itai Segall <itai.segall@digitalasset.com>

Signed-off-by: Itai Segall <itai.segall@digitalasset.com>

...and use the scan version of that endpoint for SV onboarding. Main part of DACH-NY/canton-network-internal#2106 Signed-off-by: Martin Florian <martin.florian@digitalasset.com>

Wanted for the the follow-up PR to #6957 (see DACH-NY/canton-network-internal#2106) [ci] Signed-off-by: Martin Florian <martin.florian@digitalasset.com>

github-actions · 2026-08-28T13:22:31Z

Deploy upgrade pipeline triggered for Commit b134f89fcc20155ecbe64c36fd3658c5d8c825ed in , please contact a Contributor to approve it in CircleCI: https://app.circleci.com/pipelines/github/DACH-NY/canton-network-internal/80187

canton-network-da · 2026-08-28T13:23:59Z

[backport] Reminder

Please consider backporting to the following branches:

▶️ Please check the boxes for branches that you wish to backport to and backport PRs will
automatically be created when you merge this PR.

And your PR is currently against base branch: staging-0.9.0.

Note: Any PR comment containing [backport] will be considered for auto-backporting upon merge,
you can always add those manually for PRs that did not get these reminders. You can also edit
this comment manually and add more branches that this should be backported to.

kajalshah-da and others added 30 commits August 21, 2026 18:24

Partition overflow problem solved per issue #6919 [ci] (#6923)

8bc2e07

* Partition overflow problem solved per issue #6919 [ci] Signed-off-by: Kajal <kajal.shah@digitalasset.com>

Fix grafana dashboard panel for hidden app reward coupons (#6850)

ba7f572

Signed-off-by: Robert Autenrieth <robert.autenrieth@digitalasset.com>

Enable minimal whitelisting by default (#6928)

99e962c

[static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

Final Implementation Initiate Proposal Flow (#6410)

b959ffb

Signed-off-by: Puneet Bharti <puneet.bharti@finoa.io> Co-authored-by: Puneet Bharti <puneet.bharti@finoa.io>

fix stack references and their mocks to allow migrating to split-SV d…

5031a6a

…eployment on prod clusters (#6908) Signed-off-by: Mateusz Błażejewski <mateusz.blazejewski@digitalasset.com>

Improve splice rate limit dashboard - include rate limiter type and a…

1ad2ac9

…ttribute (#6926)

Use configured client IP headers in request logs (#6924)

1c2b31e

Signed-off-by: Vladislav Lapin <v.lapin@scalablesolutions.io> Co-authored-by: Vladislav Lapin <v.lapin@scalablesolutions.io>

Traffic-Based App Rewards: Clearly distinguish not-ingestable from no…

66f1319

…t-yet-ingested (#6694) Signed-off-by: Tim Emiola <adetokunbo@emio.la>

Remove logic to restart triggers on epoch changes. (#6935)

ce37e33

Fixes #4265 This removes `RestartDsoDelegateBasedAutomationTrigger` and updates `SvDsoAutomationService` to construct and start the `DsoDelegateBasedAutomationService`. Signed-off-by: Matt Dziuban <mrdziuban@gmail.com>

Remove log ignore that is stale after #6935 (#6941)

d105e1c

I thought about this a bit too late / hit merge on #6935 a bit too quickly... [force] (is fine because that log message doesn't exist anymore) Signed-off-by: Martin Florian <martin.florian@digitalasset.com>

Replace all (Long, CantonTimestamp) tuples with `TimestampWithMigra…

1b6c1bb

…tionId` (#6744) * Replace all `(Long, CantonTimestamp)` tuples with `TimestampWithMigrationId`. * Fix regex to ignore sbt GC warning. Signed-off-by: Matt Dziuban <mrdziuban@gmail.com>

fix GCP_GET_DATABASE_INSTANCES mock to include the right cluster name (…

ffbd96d

…#6949) [static] Signed-off-by: Mateusz Błażejewski <mateusz.blazejewski@digitalasset.com>

Upgrade base image to 1.0.13

f17fe6a

[ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

Upgrade base image to 1.0.13 (#6948)

a267c1c

add rate limits by CIDRs (#6660)

5b48337

Fixes #6640 --------- Signed-off-by: krzysztofczyz-da <krzysztof.czyz@digitalasset.com>

Upgrade Canton to 3.5.15-snapshot.20260825.19200.0.va4ea4fe4

20e2030

[ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

Upgrade Canton to 3.5.15-snapshot.20260825.19200.0.va4ea4fe4 (#6956)

44a7b1b

Widen proposal-details IDs/URLs and show requester party ID (#6915) (#…

66dc1a7

…6955) Signed-off-by: Puneet Bharti <puneet.bharti@finoa.io>

[ci] fix race condition in writing s3 objects (#6942)

4d1f63d

Signed-off-by: Itai Segall <itai.segall@digitalasset.com>

Revert "add rate limits by CIDRs" (#6962)

ebd5713

* Revert "add rate limits by CIDRs (#6660)" This reverts commit 5b48337. * [static] run Signed-off-by: Oriol Muñoz <oriol.munoz@digitalasset.com> --------- Signed-off-by: Oriol Muñoz <oriol.munoz@digitalasset.com>

bulk storage: count also committed objects in metrics (#6916)

a6619d1

Signed-off-by: Itai Segall <itai.segall@digitalasset.com> Co-authored-by: Stephen Compall <stephen.compall@digitalasset.com>

script to auto-generate monday.com events for versions (#6775)

48d6bf5

Signed-off-by: Itai Segall <itai.segall@digitalasset.com> Co-authored-by: Amanda L Martin <hythloda@gmail.com> Co-authored-by: Stephen Compall <stephen.compall@digitalasset.com>

Log consensus scan URIs, revert BFT logging (#6413)

1ee0f00

Signed-off-by: Ilya Silvestrov <tellary@gmail.com>

Improve http client dashboard (#6932)

3b10b59

include target host in legend and add error table with flexible filter [static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

Disable alerts for close to max capacity for per attribute rate limit…

356924a

…ers (#6964) We don't keep track of usage for the actual attribute values so the overall reported usage is actually the global usage [static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

TestTokenV2SettlementIntegrationTest prevent validators from using sh…

176a0b5

…utting-down canton (#6958) --------- Signed-off-by: Oriol Muñoz <oriol.munoz@digitalasset.com>

Expose sv app endpoints to the minimum users (#6934)

738a4dc

* Expose sv app endpoints to the minimum users Also extend open api so the other SVs can easily apply the same restriction [static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

Add treasury service metrics (#6971)

6bcae32

[ci] fixes #6970 Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: Moritz Kiefer <moritz.kiefer@purelyfunctional.org>

Introduce optional use of ComputeClasses (#6868)

3525561

Signed-off-by: Robert Autenrieth <robert.autenrieth@digitalasset.com>

puneetfinoa and others added 21 commits August 26, 2026 12:52

Align proposal placeholders and Your Vote styling (#6910, #6912) (#6972)

ce85ac1

Signed-off-by: Puneet Bharti <puneet.bharti@finoa.io>

fixed app activity table primary and partition keys [ci] (#6981)

e6323f4

Signed-off-by: Kajal <kajal.shah@digitalasset.com>

Port from Canton: give native protoc plugins a stable launcher path (#…

7832d95

…6978) --------- Signed-off-by: Oriol Muñoz <oriol.munoz@digitalasset.com>

Move standalone mediator ignores where they're picked up (#6982)

713e1cf

--------- Signed-off-by: Oriol Muñoz <oriol.munoz@digitalasset.com>

Exclude duplicate requests for confirmation request failure alert (#6992

6e96647

) And also the dashboard panel, and add a new panel that shows duplicate confirmation requests. Follow-up to #6969 [static] Signed-off-by: Martin Florian <martin.florian@digitalasset.com>

Add http status label to scan failures (#6996)

a7bed2e

[ci] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

Upgrade Canton to 3.5.15 (#7000)

3fa1d34

[ci] Signed-off-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org> Co-authored-by: moritz.kiefer@digitalasset.com <moritz.kiefer@purelyfunctional.org>

Add new ACS snapshot endpoints using opaque pagination tokens (#6995)

b80adc1

--------- Signed-off-by: Oriol Muñoz <oriol.munoz@digitalasset.com>

Update cantonbft dashboards (#7002)

3ce3c7f

[static] Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

Report how to resolve rate-limit failures in deployment-rest (#7001)

0e5dc2a

Signed-off-by: Oriol Muñoz <oriol.munoz@digitalasset.com>

Support for installing Sweet Security via pulumi (#6989)

a79f2cf

Signed-off-by: Itai Segall <itai.segall@digitalasset.com>

[static] remove redundant ns for sweet-operator (#7006)

badeb6c

Signed-off-by: Itai Segall <itai.segall@digitalasset.com>

Align vote reason URL width and copy with SV IDs (#6914) (#6976)

808b45e

Signed-off-by: Puneet Bharti <puneet.bharti@finoa.io>

bump resources for deployment tests (#7009)

964ff20

* [splice] bump resources for deployment tests Signed-off-by: Itai Segall <itai.segall@digitalasset.com> * [static] Signed-off-by: Itai Segall <itai.segall@digitalasset.com> --------- Signed-off-by: Itai Segall <itai.segall@digitalasset.com>

[ci] changes post release 0.7.5 (#7005)

5370647

Signed-off-by: Itai Segall <itai.segall@digitalasset.com>

SV app: deprecate /v0/dso in favor of authenticated /v1/dso (#6957)

ce85b79

...and use the scan version of that endpoint for SV onboarding. Main part of DACH-NY/canton-network-internal#2106 Signed-off-by: Martin Florian <martin.florian@digitalasset.com>

Merge main into staging-0.9.0

b134f89

Wanted for the the follow-up PR to #6957 (see DACH-NY/canton-network-internal#2106) [ci] Signed-off-by: Martin Florian <martin.florian@digitalasset.com>

martinflorian-da marked this pull request as ready for review August 28, 2026 14:31

martinflorian-da requested review from moritzkiefer-da and pasindutennage-da August 28, 2026 14:31

Navigation Menu

Uh oh!

Merge main into staging-0.9.0 - #7015

Merge main into staging-0.9.0#7015
martinflorian-da wants to merge 51 commits into
staging-0.9.0from
martinflorian-da/cni-2106-sync-0.9.0

martinflorian-da commented Aug 28, 2026

Uh oh!

github-actions Bot commented Aug 28, 2026

Uh oh!

canton-network-da commented Aug 28, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

18 participants

Uh oh!

Conversation

martinflorian-da commented Aug 28, 2026

Pull Request Checklist

Cluster Testing

PR Guidelines

Merge Guidelines

Uh oh!

github-actions Bot commented Aug 28, 2026

Uh oh!

canton-network-da commented Aug 28, 2026

[backport] Reminder

Please consider backporting to the following branches:

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

18 participants