Merge branch 'develop' into devx/edit-iota-101-remaining-articles

.github/CODEOWNERS

@@ -61,8 +61,10 @@ prettier.config.js @iotaledger/boxfish @iotaledger/tooling
 turbo.json @iotaledger/boxfish @iotaledger/tooling
 vercel.json @iotaledger/boxfish @iotaledger/tooling
 
-# Docs are for DevEx to approve upon
+# Docs and examples are for DevEx to approve upon
 /docs/ @iotaledger/devx
+/examples/ @iotaledger/devx
+
 # Override ownership of Boxfish Studio and the tooling team for the following files
 /docs/**/package.json @iotaledger/devx
 /docs/**/vercel.json @iotaledger/devx

.github/workflows/_cargo_deny.yml

@@ -2,35 +2,31 @@ name: Cargo deny
 
 on:
   workflow_call:
-    secrets:
-      SSH_PRIVATE_KEY_IOTA_CI:
-        required: true
-      SSH_GITHUB_KNOWN_HOSTS:
-        required: true
+    inputs:
+      manifest-path:
+        type: string
+        required: false
+        default: "./Cargo.toml"
 
 concurrency:
   group: cargo-deny-${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
   cancel-in-progress: true
 
 jobs:
-  rust-crates:
-    name: cargo-deny (advisories, licenses, bans, ...)
+  bans-licenses-sources:
+    name: cargo deny (bans, licenses, sources)
     runs-on: [self-hosted]
     steps:
-      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # pin@v4
-      - uses: EmbarkStudios/cargo-deny-action@8371184bd11e21dcf8ac82ebf8c9c9f74ebf7268 # pin@v2
+      - uses: taiki-e/install-action@684122deb17127bf60d1d99224e12e8fc0012210 # v2.44.58
         with:
-          ssh-key: ${{ secrets.SSH_PRIVATE_KEY_IOTA_CI }}
-          ssh-known-hosts: ${{ secrets.SSH_GITHUB_KNOWN_HOSTS }}
-          use-git-cli: true
+          tool: cargo-deny
+      - run: cargo deny --manifest-path ${{ inputs.manifest-path || './Cargo.toml' }} check bans licenses sources
 
-  external-crates:
-    name: cargo-deny (advisories, licenses, bans, ...)
+  advisories:
+    name: cargo deny (advisories)
     runs-on: [self-hosted]
     steps:
-      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # pin@v4
-      - uses: EmbarkStudios/cargo-deny-action@8371184bd11e21dcf8ac82ebf8c9c9f74ebf7268 # pin@v2
+      - uses: taiki-e/install-action@684122deb17127bf60d1d99224e12e8fc0012210 # v2.44.58
         with:
-          ssh-key: ${{ secrets.SSH_PRIVATE_KEY_IOTA_CI }}
-          ssh-known-hosts: ${{ secrets.SSH_GITHUB_KNOWN_HOSTS }}
-          use-git-cli: true
+          tool: cargo-deny
+      - run: cargo deny --manifest-path ${{ inputs.manifest-path || './Cargo.toml' }} check advisories

.github/workflows/_e2e.yml

@@ -88,6 +88,14 @@ jobs:
           path: apps/explorer/playwright-report/
           retention-days: 30
 
+      - name: Build Kiosk
+        if: inputs.isRust || inputs.isTypescriptSDK
+        run: pnpm turbo --filter=@iota/kiosk build
+
+      - name: Run Kiosk e2e tests
+        if: inputs.isRust || inputs.isTypescriptSDK
+        run: pnpm dlx concurrently --kill-others --success command-1 "$E2E_RUN_LOCAL_NET_CMD" 'pnpm --filter=@iota/kiosk test:e2e'
+
       - name: Run Local net
         run: cargo run --bin iota start --force-regenesis --with-faucet --epoch-duration-ms 10000 &
 

.github/workflows/_rust.yml

@@ -42,7 +42,6 @@ jobs:
 
   deny:
     uses: ./.github/workflows/_cargo_deny.yml
-    secrets: inherit
 
   rust-tests:
     if: |

.github/workflows/_rust_lints.yml

@@ -51,10 +51,6 @@ jobs:
       - rustfmt
     runs-on: [self-hosted]
     steps:
-      - uses: arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b # pin@v3
-        # this avoids rate-limiting
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
       - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # pin@v4
       # TODO(bradh): debug and re-enable this; the caching is breaking the clippy build
       # Enable caching of the 'librocksdb-sys' crate by additionally caching the

.github/workflows/_vercel_deploy.yml

@@ -40,14 +40,16 @@ jobs:
     secrets: inherit
     with:
       isProd: false
+      isStaging: false
 
-  explorer-prod:
-    name: Vercel Explorer Production
+  explorer-staging:
+    name: Vercel Explorer Staging
     if: inputs.isDevelop
     uses: ./.github/workflows/apps_explorer_deploy.yml
     secrets: inherit
     with:
-      isProd: true
+      isProd: false
+      isStaging: true
 
   ui-kit-preview:
     name: Vercel UI Kit Preview

.github/workflows/apps_explorer_deploy.yml

@@ -3,14 +3,25 @@ name: Deploy for Explorer
 env:
   VERCEL_ORG_ID: ${{ secrets.VERCEL_ORG_ID }}
   VERCEL_PROJECT_ID: ${{ secrets.EXPLORER_VERCEL_PROJECT_ID }}
+  EXPLORER_VERCEL_PROJECT_STAGING_URL: ${{ secrets.EXPLORER_VERCEL_PROJECT_STAGING_URL }}
 
 on:
   workflow_dispatch:
+    inputs:
+      isProd:
+        type: boolean
+        required: true
+      isStaging:
+        type: boolean
+        required: true
   workflow_call:
     inputs:
       isProd:
         type: boolean
         required: true
+      isStaging:
+        type: boolean
+        required: true
 
 jobs:
   deploy:
@@ -64,8 +75,11 @@ jobs:
         id: deploy_url
         if: ${{ inputs.isProd == false }}
         run: echo "DEPLOY_URL=$(cat vercel_output.txt | awk 'END{print}')" >> $GITHUB_OUTPUT
+      - name: Alias Staging deploy
+        if: ${{ inputs.isStaging }}
+        run: vercel alias ${{ steps.deploy_url.outputs.DEPLOY_URL }} $EXPLORER_VERCEL_PROJECT_STAGING_URL --token=${{ secrets.VERCEL_TOKEN }} --scope=${{ secrets.VERCEL_SCOPE }}
       - name: Comment on pull request
-        if: ${{ inputs.isProd == false }}
+        if: ${{ inputs.isProd == false && inputs.isStaging == false }}
         uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # pin@v7
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/links_checker.yml

@@ -9,7 +9,7 @@ on:
     - cron: "0 0 * * *"
 
 jobs:
-  link_checker:
+  links-checker:
     name: Check links and create automated issue if needed
     runs-on: self-hosted
     env:
@@ -20,8 +20,9 @@ jobs:
 
       - name: Check all links at *.md and doc files
         id: lychee
-        uses: lycheeverse/lychee-action@ec3ed119d4f44ad2673a7232460dc7dff59d2421 # pin@v1.8.0
+        uses: lycheeverse/lychee-action@2b973e86fc7b1f6b36a93795fe2c9c6ae1118621 # pin@v1.10.0
         with:
+          token: ${{ secrets.GITHUB_TOKEN }}
           output: ${{ env.LYCHEE_OUT }}
           format: markdown
           ## Do not fail this step on broken links
@@ -35,42 +36,23 @@ jobs:
             --max-concurrency 10
             --no-progress
             './**/*.md'
-        env:
-          ## Avoid rate limiting when checking github.com links
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Find the last report issue open
         uses: micalevisk/last-issue-action@305829d9728f47beb0029417167a0af890edfd6e # [email protected]
         id: last_issue
         with:
           state: open
-          labels: |
-            report
-            automated issue
+          labels: broken-links
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Create issue from report file
-        if: steps.last_issue.outputs.has_found == 'false'
-        uses: peter-evans/create-issue-from-file@e8ef132d6df98ed982188e460ebb3b5d4ef3a9cd # pin@v4
-        with:
-          title: Link checker report
-          content-filepath: ${{ env.LYCHEE_OUT }}
-          issue-number: ${{ steps.last_issue.outputs.issue_number }}
-          labels: |
-            report
-            automated issue
-
-      - name: Update last report open issue created
-        if: steps.last_issue.outputs.has_found == 'true'
+      - name: Create or update report
         uses: peter-evans/create-issue-from-file@e8ef132d6df98ed982188e460ebb3b5d4ef3a9cd # pin@v4
         with:
           title: Link checker report
           content-filepath: ${{ env.LYCHEE_OUT }}
           issue-number: ${{ steps.last_issue.outputs.issue_number }}
-          labels: |
-            report
-            automated issue
+          labels: broken-links
 
       - name: Close last report open issue
         if: steps.lychee.outputs.exit_code == 0

.github/workflows/nightly.yml

@@ -29,6 +29,11 @@ env:
   RUST_BACKTRACE: short
 
 jobs:
+  cargo-deny-external:
+    uses: ./.github/workflows/_cargo_deny.yml
+    with:
+      manifest-path: external-crates/move/Cargo.toml
+
   release:
     name: build release binaries
     runs-on: ${{ matrix.os }}