[release-line-3.4] Update 2026-01-13.21 (#423)

Reference commit: 6e82f37059

Author: canton-machine

UNRELEASED.md

@@ -15,11 +15,7 @@ Template for a bigger topic
 #### Impact and Migration
 
 ### Minor Improvements
-- Protect the admin participant from self lock-out. It is now impossible for an admin to remove own admin rights or
-  delete itself.
-- LedgerAPI ListKnownParties supports an optional prefix filter argument filterParty.
-  The respective JSON API endpoint now additionally supports `identity-provider-id` as
-  an optional argument, as well as `filter-party`.
+- improvement
 
 ### Preview Features
 - preview feature
@@ -58,7 +54,3 @@ Canton has been tested against the following versions of its dependencies:
 |----------------------------|----------------------------|
 | Java Runtime               | JAVA_VERSION               |
 | Postgres                   | POSTGRES_VERSION           |
-
-## Upgrade GRPC to 1.77.0
-
-prevent report of CVE-2025-58057.

VERSION

@@ -1 +1 @@
-3.4.10-SNAPSHOT
+3.4.11-SNAPSHOT

community/app-base/src/main/scala/com/digitalasset/canton/config/CantonConfig.scala

@@ -11,6 +11,7 @@ package com.digitalasset.canton.config
 import cats.data.Validated
 import cats.syntax.either.*
 import cats.syntax.functor.*
+import ch.qos.logback.classic.Level
 import com.daml.jwt.JwtTimestampLeeway
 import com.daml.metrics.api.MetricQualification
 import com.daml.metrics.{HistogramDefinition, MetricsFilterConfig}
@@ -525,6 +526,7 @@ final case class CantonConfig(
           sequencerNodeConfig.parameters.unsafeEnableOnlinePartyReplication,
         requestLimits = sequencerNodeConfig.publicApi.limits,
         maxAuthTokensPerMember = sequencerNodeConfig.publicApi.maxAuthTokensPerMember,
+        progressSupervisor = sequencerNodeConfig.parameters.progressSupervisor,
       )
     }
 
@@ -1226,6 +1228,21 @@ object CantonConfig {
           deriveReader[ApiLoggingConfig]
         implicit val gcLoggingConfigReader: ConfigReader[GCLoggingConfig] =
           deriveReader[GCLoggingConfig]
+        implicit val logbackLogLevelReader: ConfigReader[Level] = (cur: ConfigCursor) =>
+          cur.asString.flatMap { s =>
+            Try {
+              Level.toLevel(s)
+            }.toOption match {
+              case Some(level) => Right(level)
+              case None =>
+                val failureReason =
+                  CannotConvert(s, "ch.qos.logback.classic.Level", s"Log level is not valid: $s")
+                Left(ConfigReaderFailures(ConvertFailure(failureReason, cur)))
+            }
+          }
+
+        implicit val startupLoggingConfigReader: ConfigReader[StartupLoggingConfig] =
+          deriveReader[StartupLoggingConfig]
         deriveReader[LoggingConfig]
       }
       deriveReader[MonitoringConfig]
@@ -1349,6 +1366,8 @@ object CantonConfig {
       deriveReader[CantonFeatures]
     lazy implicit final val cantonWatchdogConfigReader: ConfigReader[WatchdogConfig] =
       deriveReader[WatchdogConfig]
+    lazy implicit final val progressSupervisorConfigReader: ConfigReader[ProgressSupervisorConfig] =
+      deriveReader[ProgressSupervisorConfig]
 
     lazy implicit final val reportingLevelReader
         : ConfigReader[StartupMemoryCheckConfig.ReportingLevel] =
@@ -1918,6 +1937,10 @@ object CantonConfig {
       lazy implicit val loggingConfigWriter: ConfigWriter[LoggingConfig] = {
         implicit val gcLoggingConfigWriter: ConfigWriter[GCLoggingConfig] =
           deriveWriter[GCLoggingConfig]
+        implicit val logLevelConfigWriter: ConfigWriter[Level] = (value: Level) =>
+          ConfigValueFactory.fromAnyRef(value.levelStr)
+        implicit val startupLoggingConfigWriter: ConfigWriter[StartupLoggingConfig] =
+          deriveWriter[StartupLoggingConfig]
         deriveWriter[LoggingConfig]
       }
       deriveWriter[MonitoringConfig]
@@ -2020,6 +2043,9 @@ object CantonConfig {
       deriveWriter[CantonFeatures]
     lazy implicit final val cantonWatchdogConfigWriter: ConfigWriter[WatchdogConfig] =
       deriveWriter[WatchdogConfig]
+    lazy implicit final val cantonProgressSupervisorConfigWriter
+        : ConfigWriter[ProgressSupervisorConfig] =
+      deriveWriter[ProgressSupervisorConfig]
 
     lazy implicit final val reportingLevelWriter
         : ConfigWriter[StartupMemoryCheckConfig.ReportingLevel] =

community/app-base/src/main/scala/com/digitalasset/canton/metrics/MetricsRegistry.scala

@@ -29,6 +29,7 @@ import io.opentelemetry.api.OpenTelemetry
 import io.opentelemetry.api.metrics.Meter
 import io.opentelemetry.exporter.prometheus.PrometheusHttpServer
 import io.opentelemetry.instrumentation.runtimemetrics.java8.*
+import io.opentelemetry.instrumentation.runtimemetrics.java8.internal.ExperimentalBufferPools
 import io.opentelemetry.sdk.metrics.SdkMeterProviderBuilder
 import io.opentelemetry.sdk.metrics.`export`.{MetricExporter, MetricReader, PeriodicMetricReader}
 import io.opentelemetry.sdk.metrics.internal.state.MetricStorage
@@ -85,6 +86,7 @@ object MetricsConfig {
       memoryPools: Boolean = true,
       threads: Boolean = true,
       gc: Boolean = true,
+      buffers: Boolean = true,
   ) extends UniformCantonConfigValidation
 
   object JvmMetrics {
@@ -98,6 +100,7 @@ object MetricsConfig {
         if (config.memoryPools) MemoryPools.registerObservers(openTelemetry).discard
         if (config.threads) Threads.registerObservers(openTelemetry).discard
         if (config.gc) GarbageCollector.registerObservers(openTelemetry).discard
+        if (config.buffers) ExperimentalBufferPools.registerObservers(openTelemetry).discard
       }
   }
 

community/app/src/main/scala/com/digitalasset/canton/CantonAppDriver.scala

@@ -8,7 +8,7 @@ import cats.syntax.either.*
 import ch.qos.logback.classic.{Logger, LoggerContext}
 import ch.qos.logback.core.status.{ErrorStatus, Status, StatusListener, WarnStatus}
 import com.daml.nonempty.NonEmpty
-import com.digitalasset.canton.CantonAppDriver.installGCLogging
+import com.digitalasset.canton.CantonAppDriver.{installGCLogging, installStartupLoggingLevel}
 import com.digitalasset.canton.buildinfo.BuildInfo
 import com.digitalasset.canton.cli.Command.Sandbox
 import com.digitalasset.canton.cli.{Cli, Command, LogFileAppender}
@@ -19,10 +19,11 @@ import com.digitalasset.canton.config.{
   DefaultPorts,
   GCLoggingConfig,
   Generate,
+  StartupLoggingConfig,
 }
 import com.digitalasset.canton.discard.Implicits.DiscardOps
 import com.digitalasset.canton.environment.{Environment, EnvironmentFactory}
-import com.digitalasset.canton.logging.{NamedLoggerFactory, NamedLogging}
+import com.digitalasset.canton.logging.{NamedLoggerFactory, NamedLogging, NodeLoggingUtil}
 import com.digitalasset.canton.tracing.{NoTracing, TraceContext}
 import com.digitalasset.canton.util.JarResourceUtils
 import com.digitalasset.canton.version.ReleaseVersion
@@ -31,8 +32,8 @@ import com.typesafe.config.{Config, ConfigFactory}
 import org.slf4j.LoggerFactory
 
 import java.lang.management.ManagementFactory
-import java.util.concurrent.TimeUnit
 import java.util.concurrent.atomic.{AtomicLong, AtomicReference}
+import java.util.concurrent.{ScheduledExecutorService, TimeUnit}
 import javax.management.openmbean.CompositeData
 import javax.management.{NotificationEmitter, NotificationListener}
 import scala.jdk.CollectionConverters.*
@@ -238,6 +239,11 @@ abstract class CantonAppDriver extends App with NamedLogging with NoTracing {
     Config.bootstrapFile.map(CantonScriptFromFile.apply)
 
   val environment = environmentFactory.create(Config.startupConfig, loggerFactory)
+  installStartupLoggingLevel(
+    loggerFactory,
+    Config.startupConfig.monitoring.logging.startup,
+    environment.scheduler,
+  )
   val runner: Runner = cliOptions.command match {
     case Some(Command.Sandbox) =>
       startupConfigFileMonitoring(environment)
@@ -356,4 +362,38 @@ object CantonAppDriver {
       }
     }
 
+  private def installStartupLoggingLevel(
+      loggerFactory: NamedLoggerFactory,
+      config: Option[StartupLoggingConfig],
+      scheduler: ScheduledExecutorService,
+  ): Unit =
+    config.foreach { startupLoggingConfig =>
+      val logger = loggerFactory.getLogger(getClass)
+      try {
+        logger.info(
+          s"Setting startup log level to ${startupLoggingConfig.logLevel} temporarily for ${startupLoggingConfig.resetAfter}"
+        )
+        NodeLoggingUtil.setLevel(
+          level = startupLoggingConfig.logLevel.toString
+        )
+        scheduler.schedule(
+          new Runnable {
+            override def run(): Unit = {
+              logger.info(
+                s"Resetting log level to original ${NodeLoggingUtil.originalRootLoggerLevel}"
+              )
+              NodeLoggingUtil.setLevel(
+                level = NodeLoggingUtil.originalRootLoggerLevel.toString
+              )
+            }
+          },
+          startupLoggingConfig.resetAfter.duration.toMillis,
+          java.util.concurrent.TimeUnit.MILLISECONDS,
+        )
+      } catch {
+        case NonFatal(e) =>
+          logger.warn("Failed to setup startup logging level", e)
+      }
+    }
+
 }

community/app/src/pack/examples/09-json-api/model/daml.yaml

@@ -1,9 +1,9 @@
-sdk-version: 3.3.0-snapshot.20250305.0
-build-options:
+sdk-version: 3.4.10
+build-options: 
 - --enable-interfaces=yes
 name: model-tests
 source: .
 version: 1.0.0
-dependencies:
+dependencies: 
 - daml-prim
 - daml-stdlib

community/app/src/test/daml/CantonLfDev/daml.yaml

@@ -1,4 +1,4 @@
-sdk-version: 3.4.10-snapshot.20251210.14372.0.v29f7da9c
+sdk-version: 3.4.10
 build-options: 
 - --target=2.dev
 name: CantonLfDev

community/app/src/test/daml/CantonLfV21/daml.yaml

@@ -1,4 +1,4 @@
-sdk-version: 3.4.10-snapshot.20251210.14372.0.v29f7da9c
+sdk-version: 3.4.10
 build-options: 
 - --target=2.2
 - --enable-interfaces=yes

community/app/src/test/daml/CantonTest/daml.yaml

@@ -1,4 +1,4 @@
-sdk-version: 3.4.10-snapshot.20251210.14372.0.v29f7da9c
+sdk-version: 3.4.10
 build-options: 
 - --target=2.2
 name: CantonTests

community/app/src/test/daml/CantonTestDev/daml.yaml

@@ -1,4 +1,4 @@
-sdk-version: 3.4.10-snapshot.20251210.14372.0.v29f7da9c
+sdk-version: 3.4.10
 build-options: 
 - --target=2.dev
 name: CantonTestsDev