diff --git a/.github/actions/private-evm-ssh/action.yml b/.github/actions/private-evm-ssh/action.yml index 78f622c..749734a 100644 --- a/.github/actions/private-evm-ssh/action.yml +++ b/.github/actions/private-evm-ssh/action.yml @@ -3,7 +3,7 @@ description: "Start an ssh-agent holding the read-only EVM deploy key, and optio inputs: ssh-key: - description: "Private key of the read-only deploy key for github.com/xrplevm/evm-priv-jul2026." + description: "Private key of the read-only deploy key for github.com/xrplevm/evm-ghsa-aug-2026." required: true configure-go: description: "Also set GOPRIVATE and git insteadOf on the runner (for jobs that run go directly instead of in Docker)." @@ -29,7 +29,7 @@ runs: if: inputs.configure-go == 'true' shell: bash run: | - echo "GOPRIVATE=github.com/xrplevm/evm-priv-jul2026" >> "$GITHUB_ENV" + echo "GOPRIVATE=github.com/xrplevm/evm-ghsa-aug-2026" >> "$GITHUB_ENV" git config --global \ - url."ssh://git@github.com/xrplevm/evm-priv-jul2026".insteadOf \ - "https://github.com/xrplevm/evm-priv-jul2026" + url."ssh://git@github.com/xrplevm/evm-ghsa-aug-2026".insteadOf \ + "https://github.com/xrplevm/evm-ghsa-aug-2026" diff --git a/.github/workflows/goreleaser.yml b/.github/workflows/goreleaser.yml index 4aafe95..e454fdd 100644 --- a/.github/workflows/goreleaser.yml +++ b/.github/workflows/goreleaser.yml @@ -35,7 +35,7 @@ jobs: docker run --rm \ -e CGO_ENABLED \ -e GITHUB_TOKEN="${{ secrets.GITHUB_TOKEN }}" \ - -e GOPRIVATE=github.com/xrplevm/evm-priv-jul2026 \ + -e GOPRIVATE=github.com/xrplevm/evm-ghsa-aug-2026 \ -e SSH_AUTH_SOCK=/ssh-agent \ -v "$SSH_AUTH_SOCK:/ssh-agent" \ -v "$HOME/.ssh/known_hosts:/root/.ssh/known_hosts:ro" \ @@ -45,5 +45,5 @@ jobs: --entrypoint /bin/sh \ goreleaser/goreleaser-cross:v1.22 -c \ 'git config --global --add safe.directory /go/src/exrp && \ - git config --global url."ssh://git@github.com/xrplevm/evm-priv-jul2026".insteadOf "https://github.com/xrplevm/evm-priv-jul2026" && \ + git config --global url."ssh://git@github.com/xrplevm/evm-ghsa-aug-2026".insteadOf "https://github.com/xrplevm/evm-ghsa-aug-2026" && \ goreleaser release --clean --skip validate' diff --git a/Dockerfile b/Dockerfile index 88a21c3..1171f13 100644 --- a/Dockerfile +++ b/Dockerfile @@ -9,12 +9,12 @@ RUN apt update && \ WORKDIR /app # Private Go module access via a forwarded SSH agent (no key is written to disk) -ENV GOPRIVATE=github.com/xrplevm/evm-priv-jul2026 +ENV GOPRIVATE=github.com/xrplevm/evm-ghsa-aug-2026 RUN mkdir -p -m 0700 /root/.ssh && \ ssh-keyscan github.com >> /root/.ssh/known_hosts && \ git config --global \ - url."ssh://git@github.com/xrplevm/evm-priv-jul2026".insteadOf \ - "https://github.com/xrplevm/evm-priv-jul2026" + url."ssh://git@github.com/xrplevm/evm-ghsa-aug-2026".insteadOf \ + "https://github.com/xrplevm/evm-ghsa-aug-2026" COPY go.mod go.sum ./ RUN --mount=type=ssh go mod download diff --git a/go.mod b/go.mod index d82c5b4..d46e0fd 100644 --- a/go.mod +++ b/go.mod @@ -285,7 +285,7 @@ replace ( // use Cosmos-SDK fork to enable Ledger functionality github.com/cosmos/cosmos-sdk => github.com/xrplevm/cosmos-sdk v0.53.6-xrplevm.1 // cosmos evm private fork - github.com/cosmos/evm => github.com/xrplevm/evm-priv-jul2026 v0.6.1-xrplevm.1 + github.com/cosmos/evm => github.com/xrplevm/evm-ghsa-aug-2026 v0.6.2-august-2026-hotfix-xrplevm.1 // fix cosmos-sdk store path mismatch // github.com/cosmos/cosmos-sdk/store => cosmossdk.io/store v1.1.2 github.com/ethereum/go-ethereum => github.com/cosmos/go-ethereum v0.0.0-20250806193535-2fc7571efa91 diff --git a/go.sum b/go.sum index dbb5ce1..41cc433 100644 --- a/go.sum +++ b/go.sum @@ -1727,8 +1727,8 @@ github.com/xrash/smetrics v0.0.0-20240521201337-686a1a2994c1 h1:gEOO8jv9F4OT7lGC github.com/xrash/smetrics v0.0.0-20240521201337-686a1a2994c1/go.mod h1:Ohn+xnUBiLI6FVj/9LpzZWtj1/D6lUovWYBkxHVV3aM= github.com/xrplevm/cosmos-sdk v0.53.6-xrplevm.1 h1:fBMklkMKZbrVoEhGU0JyeaINkRA9lVA9K/zRY73EGh0= github.com/xrplevm/cosmos-sdk v0.53.6-xrplevm.1/go.mod h1:N6YuprhAabInbT3YGumGDKONbvPX5dNro7RjHvkQoKE= -github.com/xrplevm/evm-priv-jul2026 v0.6.1-xrplevm.1 h1:OptrUbYmCgsjLy6qG9aVoTkNAZe4DZ9oax7WgkbaIHM= -github.com/xrplevm/evm-priv-jul2026 v0.6.1-xrplevm.1/go.mod h1:QnaJDtxqon2mywiYqxM8VwW8FKeFazi0au0qzVpFAG8= +github.com/xrplevm/evm-ghsa-aug-2026 v0.6.2-august-2026-hotfix-xrplevm.1 h1:iVDeiE0THu1umFvXAq6pH1ms7B6pTEkTGbzhLLJTjIM= +github.com/xrplevm/evm-ghsa-aug-2026 v0.6.2-august-2026-hotfix-xrplevm.1/go.mod h1:QnaJDtxqon2mywiYqxM8VwW8FKeFazi0au0qzVpFAG8= github.com/yuin/goldmark v1.1.25/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= github.com/yuin/goldmark v1.1.32/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=