Skip to content

Conversation

@avernikoz
Copy link
Collaborator

This PR introduces SLSA (Supply-chain Levels for Software Artifacts) compliance and MVR (Move Verification Registry) provenance for verified package publishing. It also updates the Sui compiler version and refines CI workflows.

Key Changes

  • SLSA & MVR Provenance:
    • Added a new GitHub workflow .github/workflows/publish_package.yml that utilizes the sui-mvr-provenance action for secure, verified deployments with SLSA Level 3 compliance.
    • Introduced packages/deeptrade-core/mvr.config.json to configure registry metadata (name, description, contact info, etc.) for the MVR.
  • Sui Version Upgrade:
    • Bumped the Sui version from 1.56.2 to 1.62.1 across CI configurations (move_test.yml) and the project lockfile.
  • CI/CD Enhancements:
    • Optimized triggers in .github/workflows/move_test.yml to specifically target relevant Move and workflow file changes.
  • Contract Configuration:
    • Reset the deeptrade_core address to 0x0 in Move.toml, following deployment best practices for upgrades and new builds.
  • Dependency & Environment Updates:
    • Updated Move.lock with the new compiler version and latest framework revisions.
    • Removed legacy environment-specific deployment IDs from Move.lock to ensure a clean build state.
  • Documentation: Removed the redundant packages/deeptrade-core/README.md to consolidate documentation within the repository root.

@avernikoz avernikoz requested a review from bathord January 5, 2026 19:30
@avernikoz avernikoz merged commit 7838028 into DeeptradeProtocol:main Jan 5, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants