Skip to content

Conversation

@philipliu
Copy link
Contributor

@philipliu philipliu commented Nov 28, 2025

What

This merges develop into feature/c-accounts

Why

Keep feature branch in sync

Known limitations

N/A

Checklist

  • Title follows SDP-1234: Add new feature or Chore: Refactor package xyz format. The Jira ticket code was included if available.
  • PR has a focused scope and doesn't mix features with refactoring
  • Tests are included (if applicable)
  • CHANGELOG.md is updated (if applicable)
  • CONFIG/SECRETS changes are updated in helmcharts and deployments (if applicable)
  • Preview deployment works as expected
  • Ready for production

philipliu and others added 28 commits October 27, 2025 20:20
### What

This implements contract account disbursments through the 'User Managed
Wallet" provider. It cherry picks the necessary commits from the
`feature/c-accounts` branch with minimal changes to get the build
working.

### Why

We want to release this as a standalone feature.

### Known limitations

N/A

### Checklist

- [x] Title follows `SDP-1234: Add new feature` or `Chore: Refactor
package xyz` format. The Jira ticket code was included if available.
- [x] PR has a focused scope and doesn't mix features with refactoring
- [x] Tests are included (if applicable)
- [x] `CHANGELOG.md` is updated (if applicable)
- [x] CONFIG/SECRETS changes are updated in helmcharts and deployments
(if applicable)
- [x] Preview deployment works as expected
- [x] Ready for production

---------

Co-authored-by: Copilot <[email protected]>
Co-authored-by: Jiahui Hu <[email protected]>
### What

This adds support for direct payments to contract addresses.

### Why

We support contracts in disbursements and receiver creation, but not in
direct payments.

### Known limitations

N/A

### Checklist

- [x] Title follows `SDP-1234: Add new feature` or `Chore: Refactor
package xyz` format. The Jira ticket code was included if available.
- [x] PR has a focused scope and doesn't mix features with refactoring
- [x] Tests are included (if applicable)
- [x] `CHANGELOG.md` is updated (if applicable)
- [x] CONFIG/SECRETS changes are updated in helmcharts and deployments
(if applicable)
- [x] Preview deployment works as expected
- [x] Ready for production
### What

This implements contract account support for the patch receiver API.

### Why

Creating receivers with known contract account addresses works, but the
patch API needs to be updated to handle memos.

### Known limitations

N/A

### Checklist

- [x] Title follows `SDP-1234: Add new feature` or `Chore: Refactor
package xyz` format. The Jira ticket code was included if available.
- [x] PR has a focused scope and doesn't mix features with refactoring
- [x] Tests are included (if applicable)
- [x] `CHANGELOG.md` is updated (if applicable)
- [x] CONFIG/SECRETS changes are updated in helmcharts and deployments
(if applicable)
- [x] Preview deployment works as expected
- [x] Ready for production
### What

This marks any SAC transfers that fail due to the SAC entries being
archived as a failure in TSS.

Example error:

```
time="2025-10-29T18:42:13.479Z" level=error msg="🔴 Error processing job: horizon response error: StatusCode=400, Type=https://stellar.org/horizon-errors/transaction_failed, Title=Transaction Failed, Detail=The transaction failed when submitted to the stellar network. The `extras.result_codes` field on this response contains further details.  Descriptions of each code can be found at: https://developers.stellar.org/api/errors/http-status-codes/horizon-specific/transaction-failed/, Extras=transaction: tx_fee_bump_inner_failed - inner transaction: tx_failed - operation codes: [ entry_archived ]" app_version=4.1.0 asset=SWAG channel_account=GCWA6XL65OSKAVRM7XOSQXVETPZMIDF3VJ6CVSAGQU6PTLLKF3Q642AH created_at="2025-10-29 18:38:05.182759 +0000 UTC" destination_account=CD5H2UP7HJDO6KQCNQDKQCGEE5OJPGJUC3JKKP5A6H2HA2BXYM5VDYIW event_id=9c0644d8-780d-4dbe-b73b-29f8e78c8f97 git_commit_hash= pid=30 tenant_id=d84b7181-1c39-42f4-9a8d-40d0065787f1 tx_id=4741c113-00a8-48b2-a7fa-8ef3d6a78b83 updated_at="2025-10-29 18:42:11.852279 +0000 UTC"
```

### Why

Currently, these transactions will remain in retry unless the operator
checks the logs. It's better to mark them as failures so that the
stellar.expert link is accessible in the UI, and the operator can
manually restore the archived entries.

This limitation exists because we use the Go SDK's helper function to
manually construct the SAC transfer and submit it through Horizon, which
will not automatically restore any archived entries.

### Known limitations

N/A

### Checklist

- [x] Title follows `SDP-1234: Add new feature` or `Chore: Refactor
package xyz` format. The Jira ticket code was included if available.
- [x] PR has a focused scope and doesn't mix features with refactoring
- [x] Tests are included (if applicable)
- [x] `CHANGELOG.md` is updated (if applicable)
- [x] CONFIG/SECRETS changes are updated in helmcharts and deployments
(if applicable)
- [x] Preview deployment works as expected
- [x] Ready for production
Co-authored-by: Marwen Abid <[email protected]>
…ages (#931)

### What

This PR fixes the HTML validation logic to properly allow apostrophes
and other safe characters in invitation messages while maintaining
robust XSS protection.

### Why

The previous implementation of `ValidateNoHTML` was very restrictive.

### Known limitations

N/A

### Checklist

- [x] Title follows \`SDP-1234: Add new feature\` or \`Chore: Refactor
package xyz\` format. The Jira ticket code was included if available.
- [x] PR has a focused scope and doesn't mix features with refactoring
- [x] Tests are included (if applicable)
- [x] \`CHANGELOG.md\` is updated (if applicable)
- [ ] CONFIG/SECRETS changes are updated in helmcharts and deployments
(if applicable)
- [ ] Preview deployment works as expected
- [ ] Ready for production

---------

Co-authored-by: Copilot <[email protected]>
### What

This PR introduces configurable database connection pool settings for
the SDP backend, allowing fine-grained control over connection pool
behavior across all database pools (Admin, Multi-tenant, and TSS).

- Added new environment variables for DB pool configuration:
- `DB_MAX_OPEN_CONNS` - Maximum open connections per pool (default: 20,
previously 30)
- `DB_MAX_IDLE_CONNS` - Maximum idle connections retained (default: 2,
previously unset)
- `DB_CONN_MAX_IDLE_TIME_SECONDS` - Close idle connections after N
seconds (default: 10)
- `DB_CONN_MAX_LIFETIME_SECONDS` - Recycle connections after N seconds
(default: 300)

### Why

In multi-tenant deployments with scheduled jobs, idle database
connections can accumulate over time, leading to exhausted connection
limits on constrained databases.

### Known limitations

N/A

### Checklist

- [x] Title follows `SDP-1234: Add new feature` or `Chore: Refactor
package xyz` format. The Jira ticket code was included if available.
- [x] PR has a focused scope and doesn't mix features with refactoring
- [x] Tests are included (if applicable)
- [x] `CHANGELOG.md` is updated (if applicable)
- [x] CONFIG/SECRETS changes are updated in helmcharts and deployments
(if applicable)
- [ ] Preview deployment works as expected
- [ ] Ready for production
Bumps the minor-and-patch group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) |
`1.39.4` | `1.39.5` |
|
[github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2)
| `1.31.15` | `1.31.16` |
|
[github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2)
| `1.18.19` | `1.18.20` |
|
[github.com/aws/aws-sdk-go-v2/service/ses](https://github.com/aws/aws-sdk-go-v2)
| `1.34.7` | `1.34.8` |
|
[github.com/aws/aws-sdk-go-v2/service/sns](https://github.com/aws/aws-sdk-go-v2)
| `1.39.1` | `1.39.2` |
|
[github.com/getsentry/sentry-go](https://github.com/getsentry/sentry-go)
| `0.36.1` | `0.36.2` |
| [github.com/twilio/twilio-go](https://github.com/twilio/twilio-go) |
`1.28.4` | `1.28.5` |

Updates `github.com/aws/aws-sdk-go-v2` from 1.39.4 to 1.39.5
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/d8ed081e9bcc22e6c5eb63fb6bbacfa38d7bcce3"><code>d8ed081</code></a>
Release 2025-10-30</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/a2c9cb47051246e43a65f78696b8189aaa48c871"><code>a2c9cb4</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/7af054b46fade69938d2682163c4abbbf126b9c7"><code>7af054b</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/2e5ed49bd27c797319223fe6454411c6dc3f62cc"><code>2e5ed49</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/f3a3b6c778eed688dc91940a6d9160e7445a218f"><code>f3a3b6c</code></a>
remove arbitrary response read timeout in kinesis GetRecords (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3221">#3221</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/56af15521102c665ba33e5512cd66068c7c32506"><code>56af155</code></a>
Release 2025-10-29</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/b23832ac9b9505202125cf5c448c72cd333c819b"><code>b23832a</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/33ea965f3eb459c22ba41a8e5da55115da5686bc"><code>33ea965</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/f70c7889fa7e09fba31a68c6dbef1e178bbb9964"><code>f70c788</code></a>
Release 2025-10-28</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/f8aa1f373d60ee159a2aac412311edad2eaad752"><code>f8aa1f3</code></a>
Regenerated Clients</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/v1.39.4...v1.39.5">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.31.15 to 1.31.16
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/d8ed081e9bcc22e6c5eb63fb6bbacfa38d7bcce3"><code>d8ed081</code></a>
Release 2025-10-30</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/a2c9cb47051246e43a65f78696b8189aaa48c871"><code>a2c9cb4</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/7af054b46fade69938d2682163c4abbbf126b9c7"><code>7af054b</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/2e5ed49bd27c797319223fe6454411c6dc3f62cc"><code>2e5ed49</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/f3a3b6c778eed688dc91940a6d9160e7445a218f"><code>f3a3b6c</code></a>
remove arbitrary response read timeout in kinesis GetRecords (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3221">#3221</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/56af15521102c665ba33e5512cd66068c7c32506"><code>56af155</code></a>
Release 2025-10-29</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/b23832ac9b9505202125cf5c448c72cd333c819b"><code>b23832a</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/33ea965f3eb459c22ba41a8e5da55115da5686bc"><code>33ea965</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/f70c7889fa7e09fba31a68c6dbef1e178bbb9964"><code>f70c788</code></a>
Release 2025-10-28</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/f8aa1f373d60ee159a2aac412311edad2eaad752"><code>f8aa1f3</code></a>
Regenerated Clients</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/config/v1.31.15...config/v1.31.16">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.18.19 to
1.18.20
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/aws/aws-sdk-go-v2/blob/config/v1.18.20/CHANGELOG.md">github.com/aws/aws-sdk-go-v2/credentials's
changelog</a>.</em></p>
<blockquote>
<h1>Release (2023-04-07)</h1>
<h2>General Highlights</h2>
<ul>
<li><strong>Dependency Update</strong>: Updated to the latest SDK module
versions</li>
</ul>
<h2>Module Highlights</h2>
<ul>
<li><code>github.com/aws/aws-sdk-go-v2/service/dlm</code>: <a
href="https://github.com/aws/aws-sdk-go-v2/blob/config/v1.18.20/service/dlm/CHANGELOG.md#v1150-2023-04-07">v1.15.0</a>
<ul>
<li><strong>Announcement</strong>: This release includes breaking
changes for the timestamp trait on the data lifecycle management
client.</li>
<li><strong>Feature</strong>: Updated timestamp format for
GetLifecyclePolicy API</li>
<li><strong>Bug Fix</strong>: Correct timestamp type for data lifecycle
manager.</li>
</ul>
</li>
<li><code>github.com/aws/aws-sdk-go-v2/service/docdb</code>: <a
href="https://github.com/aws/aws-sdk-go-v2/blob/config/v1.18.20/service/docdb/CHANGELOG.md#v1210-2023-04-07">v1.21.0</a>
<ul>
<li><strong>Feature</strong>: This release adds a new parameter
'DBClusterParameterGroupName' to 'RestoreDBClusterFromSnapshot' API to
associate the name of the DB cluster parameter group while performing
restore.</li>
</ul>
</li>
<li><code>github.com/aws/aws-sdk-go-v2/service/fsx</code>: <a
href="https://github.com/aws/aws-sdk-go-v2/blob/config/v1.18.20/service/fsx/CHANGELOG.md#v1288-2023-04-07">v1.28.8</a>
<ul>
<li><strong>Documentation</strong>: Amazon FSx for Lustre now supports
creating data repository associations on Persistent_1 and Scratch_2 file
systems.</li>
</ul>
</li>
<li><code>github.com/aws/aws-sdk-go-v2/service/lambda</code>: <a
href="https://github.com/aws/aws-sdk-go-v2/blob/config/v1.18.20/service/lambda/CHANGELOG.md#v1310-2023-04-07">v1.31.0</a>
<ul>
<li><strong>Feature</strong>: This release adds a new Lambda
InvokeWithResponseStream API to support streaming Lambda function
responses. The release also adds a new InvokeMode parameter to Function
Url APIs to control whether the response will be streamed or
buffered.</li>
</ul>
</li>
<li><code>github.com/aws/aws-sdk-go-v2/service/quicksight</code>: <a
href="https://github.com/aws/aws-sdk-go-v2/blob/config/v1.18.20/service/quicksight/CHANGELOG.md#v1340-2023-04-07">v1.34.0</a>
<ul>
<li><strong>Feature</strong>: This release has two changes: adding the
OR condition to tag-based RLS rules in CreateDataSet and UpdateDataSet;
adding RefreshSchedule and Incremental RefreshProperties operations for
users to programmatically configure SPICE dataset ingestions.</li>
</ul>
</li>
<li><code>github.com/aws/aws-sdk-go-v2/service/redshiftdata</code>: <a
href="https://github.com/aws/aws-sdk-go-v2/blob/config/v1.18.20/service/redshiftdata/CHANGELOG.md#v1193-2023-04-07">v1.19.3</a>
<ul>
<li><strong>Documentation</strong>: Update documentation of API
descriptions as needed in support of temporary credentials with IAM
identity.</li>
</ul>
</li>
<li><code>github.com/aws/aws-sdk-go-v2/service/servicecatalog</code>: <a
href="https://github.com/aws/aws-sdk-go-v2/blob/config/v1.18.20/service/servicecatalog/CHANGELOG.md#v1181-2023-04-07">v1.18.1</a>
<ul>
<li><strong>Documentation</strong>: Updates description for
property</li>
</ul>
</li>
</ul>
<h1>Release (2023-04-06)</h1>
<h2>Module Highlights</h2>
<ul>
<li><code>github.com/aws/aws-sdk-go-v2/service/cloudformation</code>: <a
href="https://github.com/aws/aws-sdk-go-v2/blob/config/v1.18.20/service/cloudformation/CHANGELOG.md#v1270-2023-04-06">v1.27.0</a>
<ul>
<li><strong>Feature</strong>: Including UPDATE_COMPLETE as a failed
status for DeleteStack waiter.</li>
</ul>
</li>
<li><code>github.com/aws/aws-sdk-go-v2/service/greengrassv2</code>: <a
href="https://github.com/aws/aws-sdk-go-v2/blob/config/v1.18.20/service/greengrassv2/CHANGELOG.md#v1220-2023-04-06">v1.22.0</a>
<ul>
<li><strong>Feature</strong>: Add support for SUCCEEDED value in
coreDeviceExecutionStatus field. Documentation updates for Greengrass
V2.</li>
</ul>
</li>
<li><code>github.com/aws/aws-sdk-go-v2/service/proton</code>: <a
href="https://github.com/aws/aws-sdk-go-v2/blob/config/v1.18.20/service/proton/CHANGELOG.md#v1210-2023-04-06">v1.21.0</a>
<ul>
<li><strong>Feature</strong>: This release adds support for the AWS
Proton service sync feature. Service sync enables managing an AWS Proton
service (creating and updating instances) and all of it's corresponding
service instances from a Git repository.</li>
</ul>
</li>
<li><code>github.com/aws/aws-sdk-go-v2/service/rds</code>: <a
href="https://github.com/aws/aws-sdk-go-v2/blob/config/v1.18.20/service/rds/CHANGELOG.md#v1421-2023-04-06">v1.42.1</a>
<ul>
<li><strong>Documentation</strong>: Adds and updates the SDK
examples</li>
</ul>
</li>
</ul>
<h1>Release (2023-04-05)</h1>
<h2>Module Highlights</h2>
<ul>
<li><code>github.com/aws/aws-sdk-go-v2/service/configservice</code>: <a
href="https://github.com/aws/aws-sdk-go-v2/blob/config/v1.18.20/service/configservice/CHANGELOG.md#v1310-2023-04-05">v1.31.0</a>
<ul>
<li><strong>Feature</strong>: This release adds resourceType enums for
types released in March 2023.</li>
</ul>
</li>
<li><code>github.com/aws/aws-sdk-go-v2/service/ecs</code>: <a
href="https://github.com/aws/aws-sdk-go-v2/blob/config/v1.18.20/service/ecs/CHANGELOG.md#v1243-2023-04-05">v1.24.3</a>
<ul>
<li><strong>Documentation</strong>: This is a document only updated to
add information about Amazon Elastic Inference (EI).</li>
</ul>
</li>
<li><code>github.com/aws/aws-sdk-go-v2/service/identitystore</code>: <a
href="https://github.com/aws/aws-sdk-go-v2/blob/config/v1.18.20/service/identitystore/CHANGELOG.md#v1167-2023-04-05">v1.16.7</a>
<ul>
<li><strong>Documentation</strong>: Documentation updates for Identity
Store CLI command reference.</li>
</ul>
</li>
<li><code>github.com/aws/aws-sdk-go-v2/service/ivsrealtime</code>: <a
href="https://github.com/aws/aws-sdk-go-v2/blob/config/v1.18.20/service/ivsrealtime/CHANGELOG.md#v110-2023-04-05">v1.1.0</a>
<ul>
<li><strong>Feature</strong>: Fix ParticipantToken ExpirationTime
format</li>
</ul>
</li>
<li><code>github.com/aws/aws-sdk-go-v2/service/networkfirewall</code>:
<a
href="https://github.com/aws/aws-sdk-go-v2/blob/config/v1.18.20/service/networkfirewall/CHANGELOG.md#v1260-2023-04-05">v1.26.0</a>
<ul>
<li><strong>Feature</strong>: AWS Network Firewall now supports
IPv6-only subnets.</li>
</ul>
</li>
<li><code>github.com/aws/aws-sdk-go-v2/service/servicecatalog</code>: <a
href="https://github.com/aws/aws-sdk-go-v2/blob/config/v1.18.20/service/servicecatalog/CHANGELOG.md#v1180-2023-04-05">v1.18.0</a>
<ul>
<li><strong>Feature</strong>: removed incorrect product type value</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/30383d567f67c2a67b2b40a462a8c284c49d1796"><code>30383d5</code></a>
Release 2023-04-07</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/352f89c2d23ec6249a699c732ba5c9ae050f833f"><code>352f89c</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/50429391777bf4f0d6229e7adfb11c4e59f0f99c"><code>5042939</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/d40a16e950d99852243ba56e04536237483b92fa"><code>d40a16e</code></a>
NXDOMAIN errors should not be retried (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/2083">#2083</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/439f88c4e09f137340366d509e296924e297d978"><code>439f88c</code></a>
Add announcement for next release for dlm</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/e4036a9c3b835693a3f6bc4d9f006bdadb995f26"><code>e4036a9</code></a>
Release 2023-04-06</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/1c455e29efcc1bf6681db35faf3455bc3171da81"><code>1c455e2</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/adb09d335d690060cf1fcb2a5390543268b3f1db"><code>adb09d3</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/3d4ed442f89b68918b77b9322ac876b3a9880660"><code>3d4ed44</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/296e00587eb442c06d03e095daa61d3e9b1c80ed"><code>296e005</code></a>
Release 2023-04-05</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/config/v1.18.19...config/v1.18.20">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/aws/aws-sdk-go-v2/service/ses` from 1.34.7 to 1.34.8
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/service/mq/v1.34.7...service/ses/v1.34.8">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/aws/aws-sdk-go-v2/service/sns` from 1.39.1 to 1.39.2
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/67db6904b816b95073883b7ad378384c4839b28c"><code>67db690</code></a>
Release 2025-09-26</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/32ee1b5d75fc303c0626a6f5e769f4e08cc491a8"><code>32ee1b5</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/0b431223309a815cffc048072556aa651ee1455f"><code>0b43122</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/44786d920f3627b73a99e81c7b6399dbfcf7ab42"><code>44786d9</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/c98edb73809256823906d7e307ecf3c9abc16700"><code>c98edb7</code></a>
update internal endpts comment that was wrong (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3194">#3194</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/88da3c8c5569dece0e99802dab638faa047a0db0"><code>88da3c8</code></a>
Release 2025-09-25</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/74a74fc179f8bbd879383cc75fa29a1937266dcc"><code>74a74fc</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/5e6f7ae6139ca69044bb706664b4dbdc31227a32"><code>5e6f7ae</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/0e722ab42ff6bc6bb810c2937b8e1b41937e17c3"><code>0e722ab</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/41a7d004b9ff794f6007d30168afc825031f2c61"><code>41a7d00</code></a>
Release 2025-09-24</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/v1.39.1...v1.39.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/getsentry/sentry-go` from 0.36.1 to 0.36.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/sentry-go/releases">github.com/getsentry/sentry-go's
releases</a>.</em></p>
<blockquote>
<h2>0.36.2</h2>
<p>The Sentry SDK team is happy to announce the immediate availability
of Sentry Go SDK v0.36.2.</p>
<h3>Bug Fixes</h3>
<ul>
<li>Fix context propagation for logs to ensure logger instances
correctly inherit span and hub information from their creation context
(<a
href="https://redirect.github.com/getsentry/sentry-go/pull/1118">#1118</a>)
<ul>
<li>Logs now properly propagate trace context from the logger's original
context, even when emitted in a different context</li>
<li>The logger will first check the emission context, then fall back to
its creation context, and finally to the current hub</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/sentry-go/blob/master/CHANGELOG.md">github.com/getsentry/sentry-go's
changelog</a>.</em></p>
<blockquote>
<h2>0.36.2</h2>
<p>The Sentry SDK team is happy to announce the immediate availability
of Sentry Go SDK v0.36.2.</p>
<h3>Bug Fixes</h3>
<ul>
<li>Fix context propagation for logs to ensure logger instances
correctly inherit span and hub information from their creation context
(<a
href="https://redirect.github.com/getsentry/sentry-go/pull/1118">#1118</a>)
<ul>
<li>Logs now properly propagate trace context from the logger's original
context, even when emitted in a different context</li>
<li>The logger will first check the emission context, then fall back to
its creation context, and finally to the current hub</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/getsentry/sentry-go/commit/2aecd6ed8f56c837a4d4e6ad6cef8069ede88fec"><code>2aecd6e</code></a>
release: 0.36.2</li>
<li><a
href="https://github.com/getsentry/sentry-go/commit/a30c2b8d1ae64601a0f8652bd0b1d02e23ab7b7d"><code>a30c2b8</code></a>
Prepare 0.36.2 (<a
href="https://redirect.github.com/getsentry/sentry-go/issues/1119">#1119</a>)</li>
<li><a
href="https://github.com/getsentry/sentry-go/commit/97e65bfdd61eeae5034afba1f772d7501c6c2c67"><code>97e65bf</code></a>
fix: add correct context propagation for logs (<a
href="https://redirect.github.com/getsentry/sentry-go/issues/1118">#1118</a>)</li>
<li><a
href="https://github.com/getsentry/sentry-go/commit/c982e6f7a63b36c976bc94cff84db597172eb3c2"><code>c982e6f</code></a>
feat: add new envelope transport (<a
href="https://redirect.github.com/getsentry/sentry-go/issues/1094">#1094</a>)</li>
<li><a
href="https://github.com/getsentry/sentry-go/commit/10448bc1d8a15179042d12b135d9977b186b919d"><code>10448bc</code></a>
feat: add ring buffers (<a
href="https://redirect.github.com/getsentry/sentry-go/issues/1093">#1093</a>)</li>
<li><a
href="https://github.com/getsentry/sentry-go/commit/839f710a0bcebc4d72f6d74f591d959a574c39be"><code>839f710</code></a>
Merge branch 'release/0.36.1'</li>
<li>See full diff in <a
href="https://github.com/getsentry/sentry-go/compare/v0.36.1...v0.36.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/twilio/twilio-go` from 1.28.4 to 1.28.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/twilio/twilio-go/releases">github.com/twilio/twilio-go's
releases</a>.</em></p>
<blockquote>
<h2>v1.28.5</h2>
<h2><strong>Release Notes</strong></h2>
<p><strong>Ai</strong></p>
<ul>
<li>Add <code>error</code> as possible transcript status</li>
<li>Add <code>error</code> as possible transcript status</li>
</ul>
<p><strong>Chat</strong></p>
<ul>
<li>Updated v2 UserChannel <code>channel_status</code> from
<code>not_participating</code> to <code>notParticipating</code></li>
</ul>
<p><strong>Intelligence</strong></p>
<ul>
<li>Make intelligence work with RestProxy</li>
<li>Add additional enums to better represent the possible states</li>
<li>Add <code>error</code> enum to transcription status to better align
with possible outputs</li>
<li>Add <code>json</code> output type to text classification</li>
</ul>
<p><strong>Trusthub</strong></p>
<ul>
<li>Remove required parameter Primary Profile Sid from
compliance_inquiry and compliance_inquiry_individual</li>
</ul>
<p><strong>Accounts</strong></p>
<ul>
<li>Add Messaging GeoPermissions API changes</li>
</ul>
<p><strong><a
href="https://pkg.go.dev/github.com/twilio/[email protected]">Docs</a></strong></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/twilio/twilio-go/blob/main/CHANGES.md">github.com/twilio/twilio-go's
changelog</a>.</em></p>
<blockquote>
<h2>[2025-10-28] Version 1.28.5</h2>
<p><strong>Ai</strong></p>
<ul>
<li>Add <code>error</code> as possible transcript status</li>
<li>Add <code>error</code> as possible transcript status</li>
</ul>
<p><strong>Chat</strong></p>
<ul>
<li>Updated v2 UserChannel <code>channel_status</code> from
<code>not_participating</code> to <code>notParticipating</code></li>
</ul>
<p><strong>Intelligence</strong></p>
<ul>
<li>Make intelligence work with RestProxy</li>
<li>Add additional enums to better represent the possible states</li>
<li>Add <code>error</code> enum to transcription status to better align
with possible outputs</li>
<li>Add <code>json</code> output type to text classification</li>
</ul>
<p><strong>Trusthub</strong></p>
<ul>
<li>Remove required parameter Primary Profile Sid from
compliance_inquiry and compliance_inquiry_individual</li>
</ul>
<p><strong>Accounts</strong></p>
<ul>
<li>Add Messaging GeoPermissions API changes</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/twilio/twilio-go/commit/b9d54eb016463afa7a49e7aa64e477d32504013c"><code>b9d54eb</code></a>
Release v1.28.5</li>
<li><a
href="https://github.com/twilio/twilio-go/commit/d3475d230b782dd78d4c5ab199e50e61b26092fb"><code>d3475d2</code></a>
[Librarian] Regenerated @ a264875856b0343f622eafc05d7b82d1a272cd01
36d9907dbc...</li>
<li>See full diff in <a
href="https://github.com/twilio/twilio-go/compare/v1.28.4...v1.28.5">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marwen Abid <[email protected]>
…834)

### What

Implemented partial SEP-10/SEP-24 support to eliminate Anchor Platform
dependency and make SDP self-sufficient for wallet registration. Key
additions include:
- SEP-10 Authentication: Basic challenge/response flow for wallet
authentication
- SEP-24 Interactive Deposits: Minimal implementation focused on wallet
registration flow
- Native JWT Management: Custom JWT token handling for SEP-24
transactions

### Why

This implementation enables SDP platform independence:
- Remove Anchor Platform Dependency: Eliminates external service
dependency for wallet registration
- Self-Sufficient Platform: SDP can now handle wallet registration
without third-party services
- Simplified Architecture: Reduces system complexity by removing
external integrations
- Focused Implementation: Only implements SEP-10/SEP-24 features
required for wallet registration, not full compliance

### Known limitations

[TODO or N/A]

### Checklist

- [ ] Title follows `SDP-1234: Add new feature` or `Chore: Refactor
package xyz` format. The Jira ticket code was included if available.
- [ ] PR has a focused scope and doesn't mix features with refactoring
- [ ] Tests are included (if applicable)
- [ ] `CHANGELOG.md` is updated (if applicable)
- [ ] CONFIG/SECRETS changes are updated in helmcharts and deployments
(if applicable)
- [ ] Preview deployment works as expected
- [ ] Ready for production

---------

Co-authored-by: Marwen Abid <[email protected]>
### What

- Add a launch / setup wizard for the SDP that supports run
configurations and mainnet config.

### Why

- Provide better user experience with interactive prompts for starting
up with the SDP.
### What

Load `SINGLE_TENANT_MODE` from env file, default to false.


### Why

This prevents single tenant mode from starting.

### Known limitations

N/A

### Checklist

- [ ] Title follows `SDP-1234: Add new feature` or `Chore: Refactor
package xyz` format. The Jira ticket code was included if available.
- [ ] PR has a focused scope and doesn't mix features with refactoring
- [ ] Tests are included (if applicable)
- [ ] `CHANGELOG.md` is updated (if applicable)
- [ ] CONFIG/SECRETS changes are updated in helmcharts and deployments
(if applicable)
- [ ] Preview deployment works as expected
- [ ] Ready for production
### What

Forward `DISABLE_MFA` to cli to ensure single-tenant wizard honors MFA
env flags

### Why

In single tenant mode, organization didn't inherits the `DISABLE_MFA`
security settings

### Known limitations

N/A

### Checklist

- [ ] Title follows `SDP-1234: Add new feature` or `Chore: Refactor
package xyz` format. The Jira ticket code was included if available.
- [ ] PR has a focused scope and doesn't mix features with refactoring
- [ ] Tests are included (if applicable)
- [ ] `CHANGELOG.md` is updated (if applicable)
- [ ] CONFIG/SECRETS changes are updated in helmcharts and deployments
(if applicable)
- [ ] Preview deployment works as expected
- [ ] Ready for production
### What
* chore: remove `EVENT_BROKER_TYPE` from sdp docker compose

### Why
`EVENT_BROKER_TYPE` is decommissionned. 


### Checklist

- [x] Title follows `SDP-1234: Add new feature` or `Chore: Refactor
package xyz` format. The Jira ticket code was included if available.
- [x] PR has a focused scope and doesn't mix features with refactoring
- [ ] Tests are included (if applicable)
- [ ] `CHANGELOG.md` is updated (if applicable)
- [ ] CONFIG/SECRETS changes are updated in helmcharts and deployments
(if applicable)
- [ ] Preview deployment works as expected
- [ ] Ready for production
### What
* Make all docker compose environment variables configurable
* Add an `.env.example` file that documents the various env variables. 

### Why
* Make it easier to deploy docker compose outside of local development
### What

Update the Stellar Go SDK dependency from `github.com/stellar/go` to
`github.com/stellar/go-stellar-sdk`.

### Why

Dependency Update. 

### Checklist

- [x] Title follows `SDP-1234: Add new feature` or `Chore: Refactor
package xyz` format. The Jira ticket code was included if available.
- [x] PR has a focused scope and doesn't mix features with refactoring
- [x] Tests are included (if applicable) - Tests verified to pass with
new module path
- [x] `CHANGELOG.md` is updated (if applicable)
- [x] CONFIG/SECRETS changes are updated in helmcharts and deployments
(if applicable) - No config changes required
- [ ] Preview deployment works as expected
- [ ] Ready for production
…up (#954)

Bumps the all-actions group with 1 update:
[actions/checkout](https://github.com/actions/checkout).

Updates `actions/checkout` from 5 to 6
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/releases">actions/checkout's
releases</a>.</em></p>
<blockquote>
<h2>v6.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update README to include Node.js 24 support details and requirements
by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/2248">actions/checkout#2248</a></li>
<li>Persist creds to a separate file by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2286">actions/checkout#2286</a></li>
<li>v6-beta by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2298">actions/checkout#2298</a></li>
<li>update readme/changelog for v6 by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2311">actions/checkout#2311</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v5.0.0...v6.0.0">https://github.com/actions/checkout/compare/v5.0.0...v6.0.0</a></p>
<h2>v6-beta</h2>
<h2>What's Changed</h2>
<p>Updated persist-credentials to store the credentials under
<code>$RUNNER_TEMP</code> instead of directly in the local git
config.</p>
<p>This requires a minimum Actions Runner version of <a
href="https://github.com/actions/runner/releases/tag/v2.329.0">v2.329.0</a>
to access the persisted credentials for <a
href="https://docs.github.com/en/actions/tutorials/use-containerized-services/create-a-docker-container-action">Docker
container action</a> scenarios.</p>
<h2>v5.0.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Port v6 cleanup to v5 by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2301">actions/checkout#2301</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v5...v5.0.1">https://github.com/actions/checkout/compare/v5...v5.0.1</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/blob/main/CHANGELOG.md">actions/checkout's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>V6.0.0</h2>
<ul>
<li>Persist creds to a separate file by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2286">actions/checkout#2286</a></li>
<li>Update README to include Node.js 24 support details and requirements
by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/2248">actions/checkout#2248</a></li>
</ul>
<h2>V5.0.1</h2>
<ul>
<li>Port v6 cleanup to v5 by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2301">actions/checkout#2301</a></li>
</ul>
<h2>V5.0.0</h2>
<ul>
<li>Update actions checkout to use node 24 by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li>
</ul>
<h2>V4.3.1</h2>
<ul>
<li>Port v6 cleanup to v4 by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2305">actions/checkout#2305</a></li>
</ul>
<h2>V4.3.0</h2>
<ul>
<li>docs: update README.md by <a
href="https://github.com/motss"><code>@​motss</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li>
<li>Add internal repos for checking out multiple repositories by <a
href="https://github.com/mouismail"><code>@​mouismail</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li>
<li>Documentation update - add recommended permissions to Readme by <a
href="https://github.com/benwells"><code>@​benwells</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li>
<li>Adjust positioning of user email note and permissions heading by <a
href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2044">actions/checkout#2044</a></li>
<li>Update README.md by <a
href="https://github.com/nebuk89"><code>@​nebuk89</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li>
<li>Update CODEOWNERS for actions by <a
href="https://github.com/TingluoHuang"><code>@​TingluoHuang</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/2224">actions/checkout#2224</a></li>
<li>Update package dependencies by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li>
</ul>
<h2>v4.2.2</h2>
<ul>
<li><code>url-helper.ts</code> now leverages well-known environment
variables by <a href="https://github.com/jww3"><code>@​jww3</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li>
<li>Expand unit test coverage for <code>isGhes</code> by <a
href="https://github.com/jww3"><code>@​jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li>
</ul>
<h2>v4.2.1</h2>
<ul>
<li>Check out other refs/* by commit if provided, fall back to ref by <a
href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li>
</ul>
<h2>v4.2.0</h2>
<ul>
<li>Add Ref and Commit outputs by <a
href="https://github.com/lucacome"><code>@​lucacome</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1180">actions/checkout#1180</a></li>
<li>Dependency updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>- <a
href="https://redirect.github.com/actions/checkout/pull/1777">actions/checkout#1777</a>,
<a
href="https://redirect.github.com/actions/checkout/pull/1872">actions/checkout#1872</a></li>
</ul>
<h2>v4.1.7</h2>
<ul>
<li>Bump the minor-npm-dependencies group across 1 directory with 4
updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1739">actions/checkout#1739</a></li>
<li>Bump actions/checkout from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1697">actions/checkout#1697</a></li>
<li>Check out other refs/* by commit by <a
href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1774">actions/checkout#1774</a></li>
<li>Pin actions/checkout's own workflows to a known, good, stable
version. by <a href="https://github.com/jww3"><code>@​jww3</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1776">actions/checkout#1776</a></li>
</ul>
<h2>v4.1.6</h2>
<ul>
<li>Check platform to set archive extension appropriately by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1732">actions/checkout#1732</a></li>
</ul>
<h2>v4.1.5</h2>
<ul>
<li>Update NPM dependencies by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1703">actions/checkout#1703</a></li>
<li>Bump github/codeql-action from 2 to 3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1694">actions/checkout#1694</a></li>
<li>Bump actions/setup-node from 1 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1696">actions/checkout#1696</a></li>
<li>Bump actions/upload-artifact from 2 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1695">actions/checkout#1695</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/checkout/commit/1af3b93b6815bc44a9784bd300feb67ff0d1eeb3"><code>1af3b93</code></a>
update readme/changelog for v6 (<a
href="https://redirect.github.com/actions/checkout/issues/2311">#2311</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/71cf2267d89c5cb81562390fa70a37fa40b1305e"><code>71cf226</code></a>
v6-beta (<a
href="https://redirect.github.com/actions/checkout/issues/2298">#2298</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/069c6959146423d11cd0184e6accf28f9d45f06e"><code>069c695</code></a>
Persist creds to a separate file (<a
href="https://redirect.github.com/actions/checkout/issues/2286">#2286</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493"><code>ff7abcd</code></a>
Update README to include Node.js 24 support details and requirements (<a
href="https://redirect.github.com/actions/checkout/issues/2248">#2248</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/checkout/compare/v5...v6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/checkout&package-manager=github_actions&previous-version=5&new-version=6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…sep24frontend/app in the npm_and_yarn group across 1 directory (#947)
…ll-docker group (#940)

Bumps the all-docker group with 1 update: golang.

Updates `golang` from 1.25.3-alpine to 1.25.4-alpine


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang&package-manager=docker&previous-version=1.25.3-alpine&new-version=1.25.4-alpine)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
### What

This adds an HTTPS mode to the setup wizard. The protocol is set at the
.env level, meaning a profile created with HTTPS cannot be used over
HTTP later, and vice versa.

### Why

HTTPS is required to work with passkeys in a multitenant setup. It's
been implemented in the `feature/c-accounts` branch in the `dev/main.sh`
script, but needs to be ported to the setup wizard.

### Known limitations

N/A

### Checklist

- [x] Title follows `SDP-1234: Add new feature` or `Chore: Refactor
package xyz` format. The Jira ticket code was included if available.
- [x] PR has a focused scope and doesn't mix features with refactoring
- [ ] Tests are included (if applicable)
- [x] `CHANGELOG.md` is updated (if applicable)
- [ ] CONFIG/SECRETS changes are updated in helmcharts and deployments
(if applicable)
- [ ] Preview deployment works as expected
- [ ] Ready for production
@philipliu philipliu temporarily deployed to Internal SEP Tests November 28, 2025 01:53 — with GitHub Actions Inactive
@philipliu philipliu temporarily deployed to Receiver Registration - E2E Integration Tests (Stellar) November 28, 2025 01:53 — with GitHub Actions Inactive
@socket-security
Copy link

socket-security bot commented Nov 28, 2025

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

@stellar-jenkins
Copy link

Conflicts:
	.env.example
	.github/workflows/docker_image_public_release.yml
	.gitignore
	cmd/serve.go
	cmd/serve_test.go
	cmd/transaction_submitter.go
	dev/README.md
	dev/docker-compose-https-frontend.yml
	dev/docker-compose-sdp-anchor.yml
	dev/docker-compose-tss.yml
	dev/main.sh
	dev/nginx-https.conf
	go.list
	go.mod
	helmchart/sdp/README.md
	helmchart/sdp/values.yaml
	internal/data/receivers_wallet.go
	internal/integrationtests/docker/docker-compose-e2e-tests.yml
	internal/scheduler/jobs/patch_anchor_platform_transactions_job.go
	internal/scheduler/jobs/patch_anchor_platform_transactions_job_test.go
	internal/serve/httphandler/receiver_wallets_handler.go
	internal/serve/httphandler/stellar_toml_handler.go
	internal/serve/httphandler/stellar_toml_handler_test.go
	internal/serve/serve.go
	internal/serve/serve_test.go
	internal/serve/validators/receiver_validator.go
	internal/services/payment_from_submitter_service_test.go
	internal/services/paymentdispatchers/memo_resolver.go
	internal/services/paymentdispatchers/memo_resolver_test.go
	internal/services/paymentdispatchers/stellar_payment_dispatcher.go
	internal/transactionsubmission/scripts/tss_payments_loadtest.go
	internal/transactionsubmission/store/fixtures.go
	internal/transactionsubmission/store/fixtures_test.go
	internal/transactionsubmission/store/transactions.go
	internal/transactionsubmission/store/transactions_test.go
	internal/transactionsubmission/transaction_worker.go
	internal/transactionsubmission/transaction_worker_test.go
	internal/transactionsubmission/utils/errors_test.go
@philipliu philipliu temporarily deployed to Receiver Registration - E2E Integration Tests (Stellar) November 28, 2025 18:08 — with GitHub Actions Inactive
@stellar-jenkins
Copy link

@philipliu philipliu temporarily deployed to Internal SEP Tests November 28, 2025 18:14 — with GitHub Actions Inactive
marwen-abid and others added 3 commits November 28, 2025 11:22
### What

- add `--build` to  `docker compose` for the `make setup` tool 

### Why

- enables local development and testing on current builds of the SDP. 

### Known limitations

- Later: add an option to configure build/image of the SDP backend and
frontend from the `.env` file
@philipliu philipliu temporarily deployed to Receiver Registration - E2E Integration Tests (Stellar) November 28, 2025 19:59 — with GitHub Actions Inactive
@philipliu philipliu temporarily deployed to Internal SEP Tests November 28, 2025 19:59 — with GitHub Actions Inactive
@stellar-jenkins
Copy link

@philipliu philipliu marked this pull request as ready for review November 28, 2025 20:05
Copilot AI review requested due to automatic review settings November 28, 2025 20:05
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

@philipliu philipliu merged commit 72f820e into feature/c-accounts Nov 28, 2025
16 checks passed
@philipliu philipliu deleted the philip/sync-11-27 branch November 28, 2025 20:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants