Protocol 28 GA: remaining pins + release workflow fix (#211)

* Protocol 28 GA: verify-range core 28.0.0, SDK P28 pseudo-version, release workflow fix

- verify-range STELLAR_CORE_VERSION → 28.0.0-3486.2332980a1.noble (the
  integration legs' pins were already flipped on protocol-next)
- go-stellar-sdk → v0.6.1-0.20260803175255-2b16db0ecd45 (P28 GA merge);
  loadtest call sites migrated to the multi-bundle LedgersFilePaths API
  (go-stellar-sdk#5959)
- horizon-release.yml: strip 'v' (not 'horizon-v') from the tag so VERSION
  and the deprecation grep are correct — latent since the tag rename (#144)
- CHANGELOG: Unreleased → 28.0.0

Train: stellar/go-stellar-sdk#5967

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* flip: SDK v0.7.0 (released), P28 CI image via unsafe-stellar-core

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* ci: run the P27 leg on the updated core build

Testing the previous protocol against the previous core is redundant — the
prev leg exists to verify the NEW core binary still serves protocol 27.
Both legs now run 28.0.0-3486.2332980a1 (via unsafe-stellar-core until the
GA-repo image publishes).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* ci: run the P27 leg on the new rpc image too

Same reasoning as the core bump: the N-1 leg verifies the updated binaries
serve the previous protocol (the real upgrade-window configuration). The
new rpc supports P27 via its -prev host. Both legs' rpc pins get replaced
by the compatible post-flip image once stellar/stellar-rpc#913 merges.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

Author: Shaptic

.github/workflows/horizon-release.yml

@@ -13,7 +13,7 @@ jobs:
       - name: Run deprecation tests
         shell: bash
         run: |
-          export VERSION=${GITHUB_REF_NAME#horizon-v}
+          export VERSION=${GITHUB_REF_NAME#v}
           echo "Searching for \"Action needed in release ${VERSION}\" tags..."
           # Negate the result so process exits with 1 if anything found
           ! egrep -irn -A 1 --include=*.go "Action.+needed.+in.+release:.+$VERSION" ./

.github/workflows/horizon.yml

@@ -11,9 +11,13 @@ jobs:
     uses: ./.github/workflows/integration-tests.yml
     with:
       protocol_version: '27'
-      core_deb_version: '27.1.0-3365.3589a696b.jammy~buildtests'
-      core_docker_img: 'stellar/stellar-core:27.1.0-3365.3589a696b.jammy'
-      stellar_rpc_docker_img: 'stellar/stellar-rpc:27.1.1'
+      # The P27 leg runs the NEW core and rpc builds at protocol 27 — the point
+      # is verifying the updated binaries still serve the previous protocol
+      # (the real configuration during the upgrade window), not re-testing
+      # already-shipped versions against each other.
+      core_deb_version: '28.0.0-3486.2332980a1.jammy~buildtests'
+      core_docker_img: 'stellar/unsafe-stellar-core:28.0.0-3486.2332980a1.jammy'
+      stellar_rpc_docker_img: 'stellar/stellar-rpc:28.0.0-vnext-unstable-195'
       full_matrix: true
 
   integration-p28-pkg:
@@ -22,7 +26,7 @@ jobs:
     with:
       protocol_version: '28'
       core_deb_version: '28.0.0-3486.2332980a1.jammy~buildtests'
-      core_docker_img: 'stellar/stellar-core:28.0.0-3486.2332980a1.jammy'
+      core_docker_img: 'stellar/unsafe-stellar-core:28.0.0-3486.2332980a1.jammy'
       stellar_rpc_docker_img: 'stellar/stellar-rpc:28.0.0-vnext-unstable-195'
       full_matrix: true
 
@@ -39,7 +43,7 @@ jobs:
     runs-on: ubuntu-24.04
     env:
       GO_VERSION: 1.25.0
-      STELLAR_CORE_VERSION: 27.1.0-3365.3589a696b.noble
+      STELLAR_CORE_VERSION: 28.0.0-3486.2332980a1.noble
     steps:
       - uses: actions/checkout@v3
         with:

CHANGELOG.md

@@ -3,7 +3,9 @@
 All notable changes to this project will be documented in this
 file. This project adheres to [Semantic Versioning](http://semver.org/).
 
-## Unreleased
+## 28.0.0
+
+**This release adds support for Protocol 28.**
 
 ### Added
 - Added Protocol 28 (CAP-0085) ingestion support: decode of the new `ContractExecutable` external-reference variant and the `SCV_EXECUTABLE_TAG` `SCVal` arm, delivered via the regenerated `go-stellar-sdk` XDR ([go-stellar-sdk#5965](https://github.com/stellar/go-stellar-sdk/pull/5965)) ([#207](https://github.com/stellar/stellar-horizon/pull/207)). `MaxSupportedProtocolVersion` is already 28, so no bump is required.

go.mod

@@ -48,7 +48,7 @@ require (
 require (
 	github.com/creachadair/jrpc2 v1.2.0
 	github.com/fsouza/fake-gcs-server v1.49.2
-	github.com/stellar/go-stellar-sdk v0.6.1-0.20260722220414-82df7643786e
+	github.com/stellar/go-stellar-sdk v0.7.0
 )
 
 require (

go.sum

@@ -429,8 +429,8 @@ github.com/spf13/pflag v1.0.5 h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA=
 github.com/spf13/pflag v1.0.5/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
 github.com/spf13/viper v1.17.0 h1:I5txKw7MJasPL/BrfkbA0Jyo/oELqVmux4pR/UxOMfI=
 github.com/spf13/viper v1.17.0/go.mod h1:BmMMMLQXSbcHK6KAOiFLz0l5JHrU89OdIRHvsk0+yVI=
-github.com/stellar/go-stellar-sdk v0.6.1-0.20260722220414-82df7643786e h1:Q6t+I7yt2Fwe38JgZ5hFqrNVOTrBz74tiCBv5yEpoZE=
-github.com/stellar/go-stellar-sdk v0.6.1-0.20260722220414-82df7643786e/go.mod h1:IkcqcrE9UQi7n/1y+MxKB+7qzdjG1T2kGOD7Ss8dqjw=
+github.com/stellar/go-stellar-sdk v0.7.0 h1:nzEOPA+OdRKKKnBdDAZfgrs7s3cLVST8dC1umJ4vSaU=
+github.com/stellar/go-stellar-sdk v0.7.0/go.mod h1:IkcqcrE9UQi7n/1y+MxKB+7qzdjG1T2kGOD7Ss8dqjw=
 github.com/stellar/go-xdr v0.0.0-20260529210834-0bf8f4956364 h1:gOKrfuWdZ92LFlv0TAwgZ7OsWKeBsOMDlGLyFgduI1w=
 github.com/stellar/go-xdr v0.0.0-20260529210834-0bf8f4956364/go.mod h1:If+U9Z1W5xU97VrOgJandQT+2dN7/iOpkCrxBJEyF80=
 github.com/stellar/throttled v2.2.3-0.20190823235211-89d75816f59d+incompatible h1:jMXXAcz6xTarGDQ4VtVbtERogcmDQw4RaE85Cr9CgoQ=

internal/ingest/main.go

@@ -706,7 +706,7 @@ func (s *system) LoadTest(ledgersFilePath, fixturesFilePath string, merge bool,
 	// 4. Set up loadtest backend and run FSM
 	config := loadtest.LedgerBackendConfig{
 		NetworkPassphrase:   s.config.NetworkPassphrase,
-		LedgersFilePath:     ledgersFilePath,
+		LedgersFilePaths:    []string{ledgersFilePath},
 		LedgerCloseDuration: closeDuration,
 	}
 	if merge {

internal/integration/ingestion_load_test.go

@@ -69,13 +69,13 @@ func TestLoadTestLedgerBackend(t *testing.T) {
 
 	replayConfig := loadtest.LedgerBackendConfig{
 		NetworkPassphrase:   "invalid passphrase",
-		LedgersFilePath:     filepath.Join("testdata", fmt.Sprintf("load-test-ledgers-v%d.xdr.zstd", itest.Config().ProtocolVersion)),
+		LedgersFilePaths:    []string{filepath.Join("testdata", fmt.Sprintf("load-test-ledgers-v%d.xdr.zstd", itest.Config().ProtocolVersion))},
 		LedgerCloseDuration: 3 * time.Second / 2,
 		LedgerBackend:       newCaptiveCore(itest),
 	}
 	var generatedLedgers []xdr.LedgerCloseMeta
 
-	readFile(t, replayConfig.LedgersFilePath,
+	readFile(t, replayConfig.LedgersFilePaths[0],
 		func() *xdr.LedgerCloseMeta { return &xdr.LedgerCloseMeta{} },
 		func(ledger *xdr.LedgerCloseMeta) {
 			generatedLedgers = append(generatedLedgers, *ledger)
@@ -204,12 +204,12 @@ func TestLoadTestLedgerBackendWithoutMerge(t *testing.T) {
 	fixturePassphrase := loadTestNetworkPassphraseFor(horizoningest.MaxSupportedProtocolVersion)
 	replayConfig := loadtest.LedgerBackendConfig{
 		NetworkPassphrase:   "invalid passphrase",
-		LedgersFilePath:     filepath.Join("testdata", fmt.Sprintf("load-test-ledgers-v%d.xdr.zstd", horizoningest.MaxSupportedProtocolVersion)),
+		LedgersFilePaths:    []string{filepath.Join("testdata", fmt.Sprintf("load-test-ledgers-v%d.xdr.zstd", horizoningest.MaxSupportedProtocolVersion))},
 		LedgerCloseDuration: 3 * time.Second / 2,
 	}
 	var generatedLedgers []xdr.LedgerCloseMeta
 
-	readFile(t, replayConfig.LedgersFilePath,
+	readFile(t, replayConfig.LedgersFilePaths[0],
 		func() *xdr.LedgerCloseMeta { return &xdr.LedgerCloseMeta{} },
 		func(ledger *xdr.LedgerCloseMeta) {
 			generatedLedgers = append(generatedLedgers, *ledger)