Karlb/celo rebase 17 preview

.github/release-drafter.yml

@@ -0,0 +1,12 @@
+#tag-template: '${{ env.BRANCH_NAME }}-v$RESOLVED_VERSION'
+name-template: 'Celo op-geth v$RESOLVED_VERSION'
+filter-by-commitish: true
+version-resolver:
+  default: patch
+template: |
+  ## What’s Changed
+
+  $CHANGES
+
+  ---
+  **Docker Image:** https://us-west1-docker.pkg.dev/devopsre/celo-blockchain-public/op-geth:$RESOLVED_VERSION.

.github/workflows/check-rebase.yaml

@@ -0,0 +1,57 @@
+name: Check rebase
+
+on:
+  workflow_dispatch:
+    inputs:
+      base_ref:
+        description: 'Base branch, tag, or commit SHA (note branches must be prefixed with "origin/")'
+        required: true
+        type: string
+
+jobs:
+  check-commits:
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v4
+      with:
+        fetch-depth: 0  # Fetch full history
+
+    - uses: actions/setup-go@v5
+      with:
+        go-version: '1.24'
+
+    - name: Get list of new commits
+      id: commits
+      run: |
+        git log --format="%H" "${{ github.event.inputs.base_ref }}"..HEAD > commits.txt
+        echo "Found $(wc -l < commits.txt) new commits"
+        cat commits.txt
+
+    - name: Run checks for each commit
+      run: |
+        failed=0; 
+        while read commit; do
+          git checkout $commit
+          echo -n "commit $commit: "
+          if ! go build > output.log 2>&1; then
+            failed=1
+            echo "failed build"
+            cat output.log
+            continue
+          fi
+          if ! make lint > output.log 2>&1; then
+            failed=1
+            echo "failed lint"
+            cat output.log
+            continue
+          fi
+          if ! make test > output.log 2>&1; then
+            failed=1
+            echo "failed test"
+            cat output.log
+            continue
+          fi
+          echo "good"
+        done < commits.txt
+        exit $failed

.github/workflows/ci.yaml

@@ -0,0 +1,55 @@
+name: CI
+
+on:
+  push:
+    branches:
+      - master
+      - celo*
+
+  pull_request:
+    branches:
+      - master
+      - celo*
+
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  Test:
+    runs-on: ["op-stack", "self-hosted", "org"]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: ./.github/workflows/composite/setup
+
+      - name: Test
+        run: make test
+
+      - name: Run e2e tests local
+        shell: bash
+        run: e2e_test/run_all_tests.sh
+
+  Lint:
+    runs-on: ["op-stack", "self-hosted", "org"]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: ./.github/workflows/composite/setup
+        with:
+          build: false
+          setup-node-e2e: false
+      - name: Lint
+        run: make lint
+
+  Generate:
+    runs-on: ["ubuntu-latest"]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: ./.github/workflows/composite/setup
+        with:
+          build: false
+          setup-node-e2e: false
+      - name: Generate check
+        # Run go generate and see if anything changed.
+        run: |
+          go run build/ci.go check_generate

.github/workflows/composite/setup/action.yaml

@@ -0,0 +1,32 @@
+name: "Setup dependencies & build"
+description: "Checkout, setup dependencies and build go binaries"
+inputs:
+  build:
+    description: "Build"
+    default: true
+  setup-node-e2e:
+    description: "Setup node for e2e tests"
+    default: true
+  setup-foundry:
+    description: "Setup foundry"
+    default: true
+runs:
+  using: "composite"
+  steps:
+    - uses: actions/setup-go@v5
+      with:
+        go-version: "1.24"
+        cache: false
+    - uses: actions/setup-node@v4
+      if: "${{ inputs.setup-node-e2e == 'true' }}"
+      with:
+        node-version-file: "e2e_test/js-tests/package.json"
+    - name: Install Foundry
+      if: "${{ inputs.setup-foundry == 'true' }}"
+      uses: foundry-rs/foundry-toolchain@v1.4.0
+      with:
+        version: v1.1.0
+    - name: Build
+      if: "${{ inputs.build == 'true' }}"
+      shell: bash
+      run: make all

.github/workflows/docker-build-scan.yaml

@@ -0,0 +1,32 @@
+name: Docker Build Push
+on:
+  push:
+    branches:
+      - '**'
+    tags:
+      - '!**'
+  workflow_dispatch:
+
+jobs:
+  build-scan-container-geth:
+    permissions:
+      contents: write
+      actions: read
+      pull-requests: write
+      security-events: write
+      attestations: write
+      id-token: write
+    concurrency:
+      group:   ${{ github.workflow }}-${{ github.head_ref || github.ref }}
+      cancel-in-progress: true
+    uses: celo-org/reusable-workflows/.github/workflows/docker-build.yaml@v3.1
+    with:
+      workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-op-geth/providers/github-by-repos
+      service-account: op-geth-dev@blockchaintestsglobaltestnet.iam.gserviceaccount.com
+      artifact-registry: us-west1-docker.pkg.dev/blockchaintestsglobaltestnet/dev-images/op-geth
+      access-token-lifetime: 60m
+      platforms: ${{ startsWith(github.ref, 'refs/heads/celo') && 'linux/amd64,linux/arm64' || 'linux/amd64' }}
+      tags: ${{ github.sha }}
+      context: .
+      trivy-enabled: false
+      timeout-minutes: 120

.github/workflows/docker-publish-release.yaml

@@ -0,0 +1,45 @@
+name: "[cLabs] Publish Docker Image For Release"
+
+on:
+  workflow_dispatch:
+  release:
+    types: [published]  # Trigger the workflow only when a release is published
+
+jobs:
+  Set-Tags:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Set tags
+        id: set_tags
+        run: |
+          if [[ "${{ github.event.release.tag_name }}" == *"rc"* || "${{ github.event.release.tag_name }}" == *"beta"* || "${{ github.event.release.tag_name }}" == *"alpha"* ]]; then
+            echo "::set-output name=tags::${{ github.event.release.tag_name }}"
+          else
+            echo "::set-output name=tags::${{ github.event.release.tag_name }},stable,latest"
+          fi
+    outputs:
+      tags: ${{ steps.set_tags.outputs.tags }}
+
+  Build-Container-Release:
+    needs: Set-Tags
+    permissions:
+      contents: write
+      actions: read
+      pull-requests: write
+      security-events: write
+      attestations: write
+      id-token: write
+    concurrency:
+      group:   ${{ github.workflow }}-${{ github.head_ref || github.ref }}
+      cancel-in-progress: true
+    uses: celo-org/reusable-workflows/.github/workflows/docker-build.yaml@v3.1
+    with:
+      workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-op-geth-release/providers/github-by-repos
+      service-account: op-geth-release@blockchaintestsglobaltestnet.iam.gserviceaccount.com
+      artifact-registry: us-west1-docker.pkg.dev/devopsre/celo-blockchain-public/op-geth
+      access-token-lifetime: 60m
+      platforms: linux/amd64,linux/arm64
+      tags: ${{ needs.set-tags.outputs.tags }}
+      context: .
+      trivy-enabled: false
+      timeout-minutes: 120

.github/workflows/e2e-test-deployed-network.yaml

@@ -0,0 +1,26 @@
+name: e2e-test-deployed-network
+
+on:
+  schedule:
+    - cron: "0 14 * * *"
+  pull_request:
+    branches:
+      - master
+      - celo*
+    paths:
+      - 'e2e_test/**'
+
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  e2e-tests:
+    runs-on: ["op-stack","self-hosted","org"]
+    steps:
+        - uses: actions/checkout@v4
+        - uses: ./.github/workflows/composite/setup
+        - name: Run e2e tests celo-sepolia
+          shell: bash
+          run: NETWORK=celo-sepolia e2e_test/run_all_tests.sh

.github/workflows/first-release.yaml

@@ -0,0 +1,62 @@
+name: "[cLabs] Create First Draft Release For A Branch"
+
+on:
+  workflow_dispatch:
+    inputs:
+      release_tag:
+        description: 'The tag for the release (e.g., v1.0.0)'
+        required: true
+      forked_from:
+        description: 'The op-geth version this release is forked from (e.g., v1.0.0)'
+        required: true
+
+jobs:
+
+  check-release:
+      runs-on: ubuntu-latest
+      outputs:
+        release_exists: ${{ steps.check_release.outputs.release_exists }}
+      steps:
+        # Query the GitHub API to check for a release
+        - name: Check if release exists
+          id: check_release
+          env:
+            GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          run: |
+            RELEASES=$(curl -s -H "Authorization: Bearer $GITHUB_TOKEN" \
+                        -H "Accept: application/vnd.github.v3+json" \
+                        "https://api.github.com/repos/${{ github.repository }}/releases")
+
+            BRANCH="${{ github.ref }}" # Current branch
+            if echo "$RELEASES" | jq -e ".[] | select(.target_commitish == \"$BRANCH\")" > /dev/null; then
+              echo "Release exists for branch $BRANCH."
+              echo "release_exists=true" >> $GITHUB_OUTPUT
+            else
+              echo "No release found for branch $BRANCH."
+              echo "release_exists=false" >> $GITHUB_OUTPUT
+            fi
+
+  create-release:
+    runs-on: ubuntu-latest
+    needs: check-release
+    if: needs.check-release.outputs.release_exists == 'false'
+    steps:
+      # Checkout the repository
+      - name: Checkout code
+        uses: actions/checkout@v3
+
+      - name: Create Release
+        id: create_release
+        uses: actions/create-release@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # This token is provided by Actions, you do not need to create your own token
+        with:
+          tag_name: ${{ github.event.inputs.release_tag }}
+          release_name: Celo op-geth ${{ github.event.inputs.release_tag }}
+          commitish: ${{ github.ref }}
+          body: |
+            Celo op-geth ${{ github.event.inputs.release_tag }} is forked from [ethereum-optimism/op-geth](https://github.com/ethereum-optimism/op-geth) ${{ github.event.inputs.forked_from }}.
+
+            **Docker Image:** https://us-west1-docker.pkg.dev/devopsre/celo-blockchain-public/op-geth:${{ github.event.inputs.release_tag }}.
+          draft: true
+          prerelease: false