upgrade canton 3.5 and add hack for parties not seen by the ledger api (#3385)

* bump canton to latest 3.5

Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

* add workaround for DR when sync is quiet and no event is triggered to start the publishing of parties to the indexer

[ci]

Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

Author: nicu-da

apps/sv/src/main/scala/org/lfdecentralizedtrust/splice/sv/onboarding/domainmigration/DomainMigrationInitializer.scala

@@ -3,6 +3,7 @@
 
 package org.lfdecentralizedtrust.splice.sv.onboarding.domainmigration
 
+import cats.implicits.catsSyntaxApplicativeByName
 import cats.syntax.either.*
 import com.daml.grpc.adapter.ExecutionSequencerFactory
 import org.lfdecentralizedtrust.splice.config.{
@@ -57,9 +58,11 @@ import org.lfdecentralizedtrust.splice.sv.store.{SvDsoStore, SvStore, SvSvStore}
 import org.lfdecentralizedtrust.splice.sv.util.SvUtil
 import org.lfdecentralizedtrust.splice.util.TemplateJsonDecoder
 import com.digitalasset.canton.admin.api.client.data.{NodeStatus, WaitingForInitialization}
+import com.digitalasset.canton.config.RequireTypes.NonNegativeInt
 import com.digitalasset.canton.data.CantonTimestamp
 import com.digitalasset.canton.lifecycle.CloseContext
 import com.digitalasset.canton.logging.NamedLoggerFactory
+import com.digitalasset.canton.protocol.DynamicSynchronizerParameters
 import com.digitalasset.canton.resource.DbStorage
 import com.digitalasset.canton.sequencing.SequencerConnections
 import com.digitalasset.canton.time.Clock
@@ -258,12 +261,29 @@ class DomainMigrationInitializer(
         packageVersionSupport,
         svStore.key.svParty,
       )
+      latestKnownSynchronizerParameters <- participantAdminConnection
+        .getSynchronizerParametersState(decentralizedSynchronizerId)
+      // TODO(#3504) - remove once no longer needed
+      // trigger more or less a noop topology transaction so that the ledger api event notifier is initialized for the sync and propagates all the parties from the genesis import to the ledger api
+      // this will basically be reverted in the trigger
+      _ <- participantAdminConnection
+        .ensureDomainParameters(
+          decentralizedSynchronizerId,
+          _.tryUpdate(confirmationRequestsMaxRate =
+            DynamicSynchronizerParameters.defaultConfirmationRequestsMaxRate + NonNegativeInt.one
+          ),
+        )
+        // only if the synchronizer was not paused during the migration and the latest topology state is before the disaster recovery timestamp
+        .whenA(
+          !migrationDump.domainDataSnapshot.synchronizerWasPaused && latestKnownSynchronizerParameters.base.sequenced
+            .isBefore(migrationDump.domainDataSnapshot.acsTimestamp)
+        )
       _ <- newJoiningNodeInitializer(None, newCometBftNode).onboard(
         decentralizedSynchronizerId,
         dsoAutomationService,
         svAutomation,
         skipTrafficReconciliationTriggers = true,
-        unpauseSynchronizer = true,
+        unpauseSynchronizer = migrationDump.domainDataSnapshot.synchronizerWasPaused,
       )
     } yield (
       decentralizedSynchronizerId,

nix/canton-sources.json

@@ -1,7 +1,7 @@
 {
-  "version": "3.5.0-snapshot.20251203.17571.0.vd0c5d709",
+  "version": "3.5.0-snapshot.20251219.17699.0.v0c2121fb",
   "tooling_sdk_version": "3.3.0-snapshot.20250415.13756.0.vafc5c867",
   "daml_release": "v3.3.0-snapshot.20250417.0",
-  "enterprise_sha256": "sha256:10087gk3b2nq7c0sd77hf5mmgn5d104xhbkx27i3wjhmyimf6q56",
-  "oss_sha256": "sha256:10087gk3b2nq7c0sd77hf5mmgn5d104xhbkx27i3wjhmyimf6q56"
+  "enterprise_sha256": "sha256:02jraib0sx5y8ivcgh4ql38cbam6vffhjscj5hb2055d5yrrh4lz",
+  "oss_sha256": "sha256:02jraib0sx5y8ivcgh4ql38cbam6vffhjscj5hb2055d5yrrh4lz"
 }

scripts/bootstrap/bootstrap-canton-with-unsigned-keys.sc

@@ -12,8 +12,6 @@ import com.digitalasset.canton.console.{
 }
 import com.digitalasset.canton.SynchronizerAlias
 import com.digitalasset.canton.synchronizer.config.SynchronizerParametersConfig
-import com.digitalasset.canton.time
-import com.digitalasset.canton.sequencing
 import com.digitalasset.canton.protocol.DynamicSynchronizerParameters
 import com.digitalasset.canton.topology.transaction.SignedTopologyTransaction.GenericSignedTopologyTransaction
 import com.digitalasset.canton.topology.transaction.{OwnerToKeyMapping, TopologyChangeOp}
@@ -162,16 +160,16 @@ def bootstrapDomainWithUnsignedKeys(
           threshold,
           NonNegativeInt.zero,
           // This should match the SV app defaults so that the SV app does not try to change the connection.
-          sequencing.SubmissionRequestAmplification(
+          SubmissionRequestAmplification(
             PositiveInt.tryCreate(5),
-            time.NonNegativeFiniteDuration.tryOfSeconds(10),
+            NonNegativeFiniteDuration.ofSeconds(10),
           ),
-          sequencing.SequencerConnectionPoolDelays.default,
+          SequencerConnectionPoolDelays.default,
         ),
         // if we run bootstrap ourselves, we should have been able to reach the nodes
         // so we don't want the bootstrapping to fail spuriously here in the middle of
         // the setup
-        sequencing.SequencerConnectionValidation.Disabled,
+        SequencerConnectionValidation.Disabled,
       )
     }