Move UpgradesCheckSpec and upgrade-check from Daml into Canton

sdk/bazel-java-deps.bzl

@@ -17,7 +17,7 @@ load(
     "scalapb_protoc_version",
     "scalapb_version",
 )
-load("//canton:canton_version.bzl", "CANTON_OPEN_SOURCE_TAG", "LOCAL_CANTON_OVERRIDE")
+load("//canton:canton_version.bzl", "CANTON_OPEN_SOURCE_TAG", "LOCAL_CANTON_PATH")
 load("@java_deps_json//:java_deps.bzl", "JAVA_DEPS")
 
 version_specific = {
@@ -48,7 +48,7 @@ pekko_version = "1.2.1"
 pekko_http_version = "1.1.0"
 tapir_version = "1.8.5"
 
-canton_version = "3.5.0-SNAPSHOT" if LOCAL_CANTON_OVERRIDE != None else CANTON_OPEN_SOURCE_TAG
+canton_version = "3.6.0-SNAPSHOT" if LOCAL_CANTON_PATH != None else CANTON_OPEN_SOURCE_TAG
 
 upickle_version = "4.1.0"
 ujson_version = "4.0.2"
@@ -95,6 +95,7 @@ def install_java_deps():
             # TODO(https://github.com/DACH-NY/canton/issues/30144): check whether this dependency can be gotten rid of
             "com.daml:testing-utils_{}:{}".format(scala_major_version, canton_version),
             "com.daml:timer-utils_{}:{}".format(scala_major_version, canton_version),
+            "com.daml:daml-lf-upgrade-check_{}:{}".format(scala_major_version, canton_version),
 
             # TODO(https://github.com/DACH-NY/canton/issues/30144): move these dependencies to shared_dependencies in
             #    the canton repo
@@ -133,7 +134,7 @@ def install_java_deps():
             "https://repo1.maven.org/maven2",
             "https://europe-maven.pkg.dev/da-images/public-maven",
             "https://europe-maven.pkg.dev/da-images/public-maven-unstable",
-        ] + (["m2local"] if LOCAL_CANTON_OVERRIDE != None else []),
+        ] + (["m2local"] if LOCAL_CANTON_PATH != None else []),
         # The strict_visibility attribute controls whether all artifacts should
         # be visible (including transitive dependencies), or whether only
         # explicitly declared artifacts should be visible. The targets

sdk/canton/README.md

@@ -47,7 +47,7 @@ branch.
 To avoid needing to publish a full Canton, the Daml repo can be made to use
 local artifacts from a local Canton repo.
 
-* In `canton/canton_version.bzl`, set `LOCAL_CANTON_OVERRIDE` to an absolute
+* In `canton/canton_version.bzl`, set `LOCAL_CANTON_PATH` to an absolute
   path to the Canton repo in question.
 * Run `./sdk/canton/pull-local-canton-to-daml.sh -v --all` - the script will
   navigate to the local Canton repo, build all of the artifacts, publish them to
@@ -79,3 +79,11 @@ Run the `./canton/push-daml-to-local-canton.sh`, which will:
 * Scrape the Daml version that the local Canton repo is expecting.
 * Overwrite that version's DPM artifacts with our local Damlc, Codegen, and
   daml-script artifacts.
+
+### Update Daml test damls in the Canton repo
+
+The Canton repo has a suite of Daml files for testing upgrade-check coverage
+that is copied from the Daml repo. These are seldom changed, since the SCU
+feature is now stable, but if they do, run the manual script
+`test-common/copy-upgrade-check-unit-tests-to-canton.sh` from inside the SDK
+directory.

sdk/canton/canton_jar.bzl

@@ -3,13 +3,13 @@
 
 load("@bazel_skylib//rules:copy_file.bzl", "copy_file")
 load("@bazel_skylib//rules:write_file.bzl", "write_file")
-load("//canton:canton_version.bzl", "CANTON_OPEN_SOURCE_SHA", "CANTON_OPEN_SOURCE_TAG", "LOCAL_CANTON_OVERRIDE")
+load("//canton:canton_version.bzl", "CANTON_OPEN_SOURCE_SHA", "CANTON_OPEN_SOURCE_TAG", "LOCAL_CANTON_PATH")
 
 def local_canton_repo():
-    if LOCAL_CANTON_OVERRIDE != None:
+    if LOCAL_CANTON_PATH != None:
         native.new_local_repository(
             name = "canton_local",
-            path = LOCAL_CANTON_OVERRIDE,
+            path = LOCAL_CANTON_PATH,
             build_file_content = """
 filegroup(
   name = "bundle.jar",
@@ -38,7 +38,7 @@ def _canton_bucket(tag):
     return "public"
 
 def canton_jar():
-    if LOCAL_CANTON_OVERRIDE != None:
+    if LOCAL_CANTON_PATH != None:
         copy_file(
             name = "canton_open_source_jar",
             src = "@canton_local//:bundle.jar",

sdk/canton/canton_version.bzl

@@ -1,9 +1,9 @@
 # Copyright (c) 2026 Digital Asset (Switzerland) GmbH and/or its affiliates. All rights reserved.
 # SPDX-License-Identifier: Apache-2.0
 
-CANTON_OPEN_SOURCE_TAG = "3.6.0-snapshot.20260729.19783.0.v2f4d4a73"
-CANTON_OPEN_SOURCE_SHA = "sha256:1dd090e3d119080f2d5faefbef90abc1f0df1b46aa3097974a4a2cff2db68aab"
+CANTON_OPEN_SOURCE_TAG = "3.6.0-ad-hoc.20260730.19858.0.v3e402783"
+CANTON_OPEN_SOURCE_SHA = "sha256:4d066e162605be40e0d5a45111d64eba1fbe2201554967935432f9ae6a49d793"
 
 # Use an alternative canton JAR & artifacts from the local maven cache by setting this to an absolute path
 # Consult canton/README.md
-LOCAL_CANTON_OVERRIDE = None
+LOCAL_CANTON_PATH = None

sdk/canton/get-local-canton-path.sh

@@ -8,31 +8,31 @@ DIR="$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )"
 cd "$DIR/.."
 
 {
-  use_local_canton_line_prefix='^LOCAL_CANTON_OVERRIDE *= *'
+  use_local_canton_line_prefix='^LOCAL_CANTON_PATH *= *'
   if ! grep -q -E "$use_local_canton_line_prefix" canton/canton_version.bzl; then
-    echo "Could not find a definition of LOCAL_CANTON_OVERRIDE (matching '$use_local_canton_line_prefix') inside of canton/canton_version.bzl."
-    echo "Expected a line of the form 'LOCAL_CANTON_OVERRIDE = <absolute_path_to_canton_repo>'"
+    echo "Could not find a definition of LOCAL_CANTON_PATH (matching '$use_local_canton_line_prefix') inside of canton/canton_version.bzl."
+    echo "Expected a line of the form 'LOCAL_CANTON_PATH = <absolute_path_to_canton_repo>'"
     echo "Instead got:"
     cat canton/canton_version.bzl
     exit 1
   else
-    LOCAL_CANTON_OVERRIDE=$(grep -E "$use_local_canton_line_prefix" canton/canton_version.bzl | sed -E "s/$use_local_canton_line_prefix//")
-    if echo -n "$LOCAL_CANTON_OVERRIDE" | grep -q -E '^"[^"]+"$'; then
-      LOCAL_CANTON_OVERRIDE=$(echo -n "$LOCAL_CANTON_OVERRIDE" | sed -E 's/^"(.*)"$/\1/')
-      if [[ "$(realpath "$LOCAL_CANTON_OVERRIDE")" != "$LOCAL_CANTON_OVERRIDE" ]]; then
-        echo "LOCAL_CANTON_OVERRIDE inside of canton/canton_version.bzl is not an absolute path."
-        echo "Verbatim path in file: $LOCAL_CANTON_OVERRIDE"
-        echo "Outcome of calling realpath: $(realpath "$LOCAL_CANTON_OVERRIDE")"
+    LOCAL_CANTON_PATH=$(grep -E "$use_local_canton_line_prefix" canton/canton_version.bzl | sed -E "s/$use_local_canton_line_prefix//")
+    if echo -n "$LOCAL_CANTON_PATH" | grep -q -E '^"[^"]+"$'; then
+      LOCAL_CANTON_PATH=$(echo -n "$LOCAL_CANTON_PATH" | sed -E 's/^"(.*)"$/\1/')
+      if [[ "$(realpath "$LOCAL_CANTON_PATH")" != "$LOCAL_CANTON_PATH" ]]; then
+        echo "LOCAL_CANTON_PATH inside of canton/canton_version.bzl is not an absolute path."
+        echo "Verbatim path in file: $LOCAL_CANTON_PATH"
+        echo "Outcome of calling realpath: $(realpath "$LOCAL_CANTON_PATH")"
         exit 1
       fi
-    elif echo -n "$LOCAL_CANTON_OVERRIDE" | grep -q -E '^None$'; then
-      echo "LOCAL_CANTON_OVERRIDE inside of canton/canton_version.bzl is set to None. You must set this to an absolute path to a canton repo."
+    elif echo -n "$LOCAL_CANTON_PATH" | grep -q -E '^None$'; then
+      echo "LOCAL_CANTON_PATH inside of canton/canton_version.bzl is set to None. You must set this to an absolute path to a canton repo."
       exit 1
     else
-      echo 'Could not recognize LOCAL_CANTON_OVERRIDE as a string (must match the pattern: ^"[^"]+"$). You must set this to a path to an absolute path to a canton repo'
+      echo 'Could not recognize LOCAL_CANTON_PATH as a string (must match the pattern: ^"[^"]+"$). You must set this to a path to an absolute path to a canton repo'
       exit 1
     fi
   fi
 } 1>&2
 
-echo "$LOCAL_CANTON_OVERRIDE"
+echo "$LOCAL_CANTON_PATH"

sdk/canton/pull-local-canton-to-daml.sh

@@ -11,7 +11,7 @@ LOG=$(mktemp)
 trap "cat $LOG" EXIT
 
 function print_help () {
-  echo "Builds and locally publishes artifacts from the local canton repository in canton/canton_version.bzl:LOCAL_CANTON_OVERRIDE in such a way that this Daml repository can use them."
+  echo "Builds and locally publishes artifacts from the local canton repository in canton/canton_version.bzl:LOCAL_CANTON_PATH in such a way that this Daml repository can use them."
   echo "For more information on usage, consult canton/README.md"
   echo ""
   echo "Usage: $0 [-h|-v] [--all|--libraries|--app|--repin]"
@@ -77,18 +77,18 @@ if $DO_ALL && { $DO_LIBRARIES || $DO_APP || $DO_REPIN || $DO_SHARED; }; then
   exit 1
 fi
 
-LOCAL_CANTON_OVERRIDE=$(./canton/get-local-canton-path.sh)
+LOCAL_CANTON_PATH=$(./canton/get-local-canton-path.sh)
 
 if $DO_ALL || $DO_SHARED; then
-  echo "Copying '$LOCAL_CANTON_OVERRIDE/shared_dependencies.json' to 'canton/shared_dependencies.json'"
-  cp "$LOCAL_CANTON_OVERRIDE/shared_dependencies.json" canton/shared_dependencies.json
+  echo "Copying '$LOCAL_CANTON_PATH/shared_dependencies.json' to 'canton/shared_dependencies.json'"
+  cp "$LOCAL_CANTON_PATH/shared_dependencies.json" canton/shared_dependencies.json
 else
   echo "Skipping copy of shared_dependencies.json"
 fi
 
 (
-  echo "Changing directory to local canton path '$LOCAL_CANTON_OVERRIDE'"
-  cd "$LOCAL_CANTON_OVERRIDE"
+  echo "Changing directory to local canton path '$LOCAL_CANTON_PATH'"
+  cd "$LOCAL_CANTON_PATH"
 
   if $DO_ALL || $DO_LIBRARIES; then
     echo "Publish JARs to local Maven cache$VERBOSE_TRAILER"

sdk/canton/push-daml-to-local-canton.sh

@@ -15,7 +15,7 @@ function cleanup () {
 trap cleanup EXIT
 
 function print_help () {
-  echo "Builds and locally publishes artifacts from this Daml repository in such a way that the local canton repository in canton/canton_version.bzl:LOCAL_CANTON_OVERRIDE can use them."
+  echo "Builds and locally publishes artifacts from this Daml repository in such a way that the local canton repository in canton/canton_version.bzl:LOCAL_CANTON_PATH can use them."
   echo ""
   echo "For more information on usage, consult canton/README.md"
   echo ""
@@ -51,10 +51,10 @@ if $HELP; then
   exit 0
 fi
 
-LOCAL_CANTON_OVERRIDE=$(./canton/get-local-canton-path.sh)
+LOCAL_CANTON_PATH=$(./canton/get-local-canton-path.sh)
 
-echo "Changing directory to local canton path '$LOCAL_CANTON_OVERRIDE'"
-cd "$LOCAL_CANTON_OVERRIDE"
+echo "Changing directory to local canton path '$LOCAL_CANTON_PATH'"
+cd "$LOCAL_CANTON_PATH"
 
 echo "Getting local Canton's DamlVersion settings..."
 sbt --error 'print community-base / buildInfoKeys; print ThisBuild / damlUseCustomVersion' > $SBT_OUT

sdk/ci/refresh-canton.sh

@@ -56,7 +56,7 @@ CANTON_OPEN_SOURCE_SHA = "${CANTON_DIGEST}"
 
 # Use an alternative canton JAR & artifacts from the local maven cache by setting this to an absolute path
 # Consult canton/README.md
-LOCAL_CANTON_OVERRIDE = None
+LOCAL_CANTON_PATH = None
 EOF