Merge branch 'master' into mablr/sign-authorization-keychain

Author: mablr

.gitattributes

@@ -1,6 +1,5 @@
 crates/cheatcodes/assets/*.json linguist-generated
 testdata/cheats/Vm.sol linguist-generated
-bun.lock linguist-generated
 
 # See <https://git-scm.com/docs/gitattributes#_defining_a_custom_hunk_header>
 *.rs diff=rust

.github/dependabot.yml

@@ -24,16 +24,3 @@ updates:
         applies-to: "version-updates"
         patterns: ["*"]
         update-types: ["minor", "patch"]
-
-  - package-ecosystem: "npm"
-    directory: "/npm"
-    schedule:
-      interval: "weekly"
-    cooldown:
-      default-days: 7
-    open-pull-requests-limit: 5
-    groups:
-      npm-weekly:
-        applies-to: "version-updates"
-        patterns: ["*"]
-        update-types: ["minor", "patch"]

.github/workflows/benchmarks.yml

@@ -5,10 +5,6 @@ permissions: {}
 on:
   workflow_dispatch:
     inputs:
-      pr_number:
-        description: "PR number to comment on (optional)"
-        required: false
-        type: string
       versions:
         description: "Comma-separated list of Foundry versions to benchmark (optional, defaults to 'v1.5.1,v1.7.0')"
         required: false
@@ -88,11 +84,6 @@ jobs:
       - name: Build benchmark binary
         run: cargo build --locked --release --bin foundry-bench
 
-      - name: Setup Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
-        with:
-          node-version: "24"
-
       - name: Install hyperfine
         run: |
           curl -L https://github.com/sharkdp/hyperfine/releases/download/v1.19.0/hyperfine-v1.19.0-x86_64-unknown-linux-gnu.tar.gz | tar xz
@@ -118,7 +109,7 @@ jobs:
           VERSIONS: ${{ github.event.inputs.versions || env.DEFAULT_VERSIONS }}
           REPOS: ${{ github.event.inputs.repos || env.ISOLATE_TEST_REPOS }}
         run: |
-          ./target/release/foundry-bench --output-dir ./benches --force-install \
+          ./target/release/foundry-bench --output-dir ./benches \
             --versions "$VERSIONS" \
             --repos "$REPOS" \
             --benchmarks forge_isolate_test \
@@ -131,7 +122,7 @@ jobs:
           VERSIONS: ${{ github.event.inputs.versions || env.DEFAULT_VERSIONS }}
           REPOS: ${{ github.event.inputs.repos || env.BUILD_REPOS }}
         run: |
-          ./target/release/foundry-bench --output-dir ./benches --force-install \
+          ./target/release/foundry-bench --output-dir ./benches \
             --versions "$VERSIONS" \
             --repos "$REPOS" \
             --benchmarks forge_build_no_cache,forge_build_with_cache \
@@ -144,7 +135,7 @@ jobs:
           VERSIONS: ${{ github.event.inputs.versions || env.DEFAULT_VERSIONS }}
           REPOS: ${{ github.event.inputs.repos || env.COVERAGE_REPOS }}
         run: |
-          ./target/release/foundry-bench --output-dir ./benches --force-install \
+          ./target/release/foundry-bench --output-dir ./benches \
             --versions "$VERSIONS" \
             --repos "$REPOS" \
             --benchmarks forge_coverage \
@@ -154,10 +145,6 @@ jobs:
       - name: Combine benchmark results
         run: ./.github/scripts/combine-benchmarks.sh benches
 
-      - name: Read benchmark results
-        id: benchmark_results
-        run: ./.github/scripts/read-benchmark-results.sh benches
-
       - name: Upload benchmark results as artifacts
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
@@ -169,9 +156,6 @@ jobs:
             benches/forge_coverage_bench.md
             benches/LATEST.md
 
-    outputs:
-      pr_comment: ${{ steps.benchmark_results.outputs.pr_comment }}
-
   publish-results:
     name: Publish Results
     needs: run-benchmarks
@@ -181,6 +165,7 @@ jobs:
     permissions:
       contents: write
       pull-requests: write
+
     steps:
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
@@ -203,13 +188,10 @@ jobs:
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           BRANCH_NAME: ${{ steps.commit_results.outputs.branch_name }}
-          PR_COMMENT: ${{ needs.run-benchmarks.outputs.pr_comment }}
         with:
           script: |
             const branchName = process.env.BRANCH_NAME;
-            const prComment = process.env.PR_COMMENT;
 
-            // Create the pull request
             const { data: pr } = await github.rest.pulls.create({
               owner: context.repo.owner,
               repo: context.repo.repo,
@@ -220,36 +202,9 @@ jobs:
 
             This PR contains the latest benchmark results from a manual workflow run.
 
-            ${prComment}
-
             ---
 
             🤖 This PR was automatically generated by the [Foundry Benchmarks workflow](https://github.com/${{ github.repository }}/actions).`
             });
 
             console.log(`Created PR #${pr.number}: ${pr.html_url}`);
-
-      - name: Comment on PR
-        if: github.event.inputs.pr_number != '' || github.event_name == 'pull_request'
-        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
-        env:
-          PR_COMMENT: ${{ needs.run-benchmarks.outputs.pr_comment }}
-        with:
-          script: |
-            const prNumber = ${{ github.event.inputs.pr_number || github.event.pull_request.number }};
-            const prComment = process.env.PR_COMMENT;
-
-            const comment = `${prComment}
-
-            ---
-
-            🤖 This comment was automatically generated by the [Foundry Benchmarks workflow](https://github.com/${{ github.repository }}/actions).
-
-            To run benchmarks manually: Go to [Actions](https://github.com/${{ github.repository }}/actions/workflows/benchmarks.yml) → "Run workflow"`;
-
-            github.rest.issues.createComment({
-              issue_number: prNumber,
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              body: comment
-            });

.github/workflows/ci-mpp.yml

@@ -18,6 +18,10 @@ env:
 
 jobs:
   mpp-check:
+    # Skip on PRs from forks (only run for branches in foundry-rs/foundry, i.e. maintainer PRs).
+    if: |
+      github.event_name != 'pull_request' ||
+      github.event.pull_request.head.repo.full_name == github.repository
     runs-on: depot-ubuntu-latest
     timeout-minutes: 60
     permissions:

.github/workflows/ci-tempo.yml

@@ -39,6 +39,10 @@ env:
 
 jobs:
   tempo-check:
+    # Skip on PRs from forks (only run for branches in foundry-rs/foundry, i.e. maintainer PRs).
+    if: |
+      github.event_name != 'pull_request' ||
+      github.event.pull_request.head.repo.full_name == github.repository
     runs-on: depot-ubuntu-latest
     timeout-minutes: 60
     permissions:
@@ -71,7 +75,6 @@ jobs:
 
       - name: Run Tempo check on mainnet
         if: |
-          github.event_name == 'schedule' ||
           github.event.inputs.network == 'mainnet' ||
           github.event.inputs.network == 'all'
         env:

.github/workflows/ci.yml

@@ -78,7 +78,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
-      - uses: crate-ci/typos@bbaefadf97b0ec5fdc942684b647f1a6ab250274 # v1.46.0
+      - uses: crate-ci/typos@5374cbf686e897b15713110e233094e2874de7ef # v1.46.1
 
   shellcheck:
     runs-on: depot-ubuntu-latest
@@ -171,12 +171,12 @@ jobs:
         with:
           persist-credentials: false
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
+        uses: github/codeql-action/init@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build-mode }}
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
+        uses: github/codeql-action/analyze@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
         with:
           category: "/language:${{matrix.language}}"
 

.github/workflows/crate-checks.yml

@@ -29,7 +29,7 @@ jobs:
         with:
           toolchain: stable
       - uses: rui314/setup-mold@9c9c13bf4c3f1adef0cc596abc155580bcb04444 # v1
-      - uses: taiki-e/install-action@cca35edeb1d01366c2843b68fc3ca441446d73d3 # v2.77.1
+      - uses: taiki-e/install-action@c070f87102a1c75b3183910f391c1cb887fe13c8 # v2.77.6
         with:
           tool: cargo-hack
       - uses: mozilla-actions/sccache-action@9e7fa8a12102821edf02ca5dbea1acd0f89a2696 # v0.0.10