2.15 merge

.github/actions/build-sign-publish-chainlink/action.yml

@@ -68,6 +68,13 @@ inputs:
     description: When set to the string boolean value of "true", the resulting build image signature will be verified
     default: "false"
     required: false
+outputs:
+  docker-image-tag:
+    description: The docker image tag that was built and pushed
+    value: ${{ steps.save-non-root-image-name-env.outputs.image-tag }}
+  docker-image-digest:
+    description: The docker image digest that was built and pushed
+    value: ${{ steps.save-non-root-image-name-env.outputs.image-digest }}
 
 runs:
   using: composite
@@ -208,10 +215,13 @@ runs:
         IMAGES_NAME_RAW=${{ fromJSON(steps.buildpush-nonroot.outputs.metadata)['image.name'] }}
         IMAGE_DIGEST=${{ fromJSON(steps.buildpush-nonroot.outputs.metadata)['containerimage.digest'] }}
         IMAGE_NAME=$(echo "$IMAGES_NAME_RAW" | cut -d"," -f1)
+        IMAGE_TAG=$(echo "$IMAGES_NAME_RAW" | cut -d":" -f2)
         echo "nonroot_image_name=${IMAGE_NAME}" >> $GITHUB_ENV
         echo '### Docker Image' >> $GITHUB_STEP_SUMMARY
         echo "Image Name: ${IMAGE_NAME}"  >> $GITHUB_STEP_SUMMARY
         echo "Image Digest: ${IMAGE_DIGEST}"  >> $GITHUB_STEP_SUMMARY
+        echo "image-tag=${IMAGE_TAG}" >> $GITHUB_OUTPUT
+        echo "image-digest=${IMAGE_DIGEST}" >> $GITHUB_OUTPUT
 
     - name: Check if non-root image runs as root
       id: check-nonroot-runs-root

.github/workflows/automation-ondemand-tests.yml

@@ -146,7 +146,7 @@ jobs:
           - name: chaos
             id: chaos
             suite: chaos
-            nodes: 15
+            nodes: 20
             os: ubuntu-latest
             enabled: ${{ inputs.enableChaos }}
             pyroscope_env: ci-automation-on-demand-chaos

.github/workflows/build-publish.yml

@@ -8,6 +8,10 @@ on:
     branches:
       - "release/**"
 
+env:
+  ECR_HOSTNAME: public.ecr.aws
+  ECR_IMAGE_NAME: chainlink/chainlink
+
 jobs:
   checks:
     name: "Checks"
@@ -30,17 +34,23 @@ jobs:
     permissions:
       id-token: write
       contents: read
+    outputs:
+      docker-image-tag: ${{ steps.build-sign-publish.outputs.docker-image-tag }}
+      docker-image-digest: ${{ steps.build-sign-publish.outputs.docker-image-digest }}
     steps:
       - name: Checkout repository
         uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
 
       - name: Build, sign and publish chainlink image
+        id: build-sign-publish
         uses: ./.github/actions/build-sign-publish-chainlink
         with:
           publish: true
           aws-role-to-assume: ${{ secrets.AWS_OIDC_IAM_ROLE_ARN }}
           aws-role-duration-seconds: ${{ secrets.AWS_ROLE_DURATION_SECONDS }}
           aws-region: ${{ secrets.AWS_REGION }}
+          ecr-hostname: ${{ env.ECR_HOSTNAME }}
+          ecr-image-name: ${{ env.ECR_IMAGE_NAME }}
           sign-images: true
           sign-method: "keypair"
           cosign-private-key: ${{ secrets.COSIGN_PRIVATE_KEY }}
@@ -60,3 +70,44 @@ jobs:
           hostname: ${{ secrets.GRAFANA_INTERNAL_HOST }}
           this-job-name: build-sign-publish-chainlink
         continue-on-error: true
+
+  # Notify Slack channel for new git tags.
+  slack-notify:
+    if: github.ref_type == 'tag'
+    needs: [build-sign-publish-chainlink]
+    runs-on: ubuntu-24.04
+    environment: build-publish
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
+      - name: Notify Slack
+        uses: smartcontractkit/.github/actions/slack-notify-git-ref@31e00facdd8f57a2bc7868b5e4c8591bf2aa3727 # [email protected]
+        with:
+          slack-channel-id: ${{ secrets.SLACK_CHANNEL_RELEASE_NOTIFICATIONS }}
+          slack-bot-token: ${{ secrets.SLACK_BOT_TOKEN_RELENG }} # Releng Bot
+          git-ref: ${{ github.ref_name }}
+          git-ref-type: ${{ github.ref_type }}
+          changelog-url: >-
+            ${{
+              github.ref_type == 'tag' &&
+              format(
+                'https://github.com/{0}/blob/{1}/CHANGELOG.md',
+                github.repository,
+                github.ref_name
+              ) || ''
+            }}
+          docker-image-name: >-
+            ${{ 
+              github.ref_type == 'tag' && 
+              format(
+                '{0}/{1}:{2}', 
+                env.ECR_HOSTNAME, 
+                env.ECR_IMAGE_NAME, 
+                needs.build-sign-publish-chainlink.outputs.docker-image-tag
+              ) || ''
+            }}
+          docker-image-digest: >-
+            ${{ 
+              github.ref_type == 'tag' && 
+              needs.build-sign-publish-chainlink.outputs.docker-image-digest || ''
+            }}

.github/workflows/client-compatibility-tests.yml

@@ -54,6 +54,12 @@ jobs:
       - name: Check for go.mod changes
         id: changes
         run: |
+          if [ -z "${{ github.base_ref }}" ]; then
+            echo "No base branch found, this should not happen in a PR or MQ. Please reach out to the Test Tooling team."
+            echo "Github even that triggered the workflow: $GITHUB_EVENT_NAME"
+            echo "Github ref that triggered the workflow: $GITHUB_REF"
+            exit 1
+          fi
           git fetch origin ${{ github.base_ref }}
           # if no match is found then grep exits with code 1, but if there is a match it exits with code 0
           # this will return a match if there are any changes on that corresponding line, for example if spacing was changed
@@ -120,6 +126,7 @@ jobs:
       evm_implementations: ${{ steps.select-implementations.outputs.evm_implementations }}
       chainlink_version: ${{ steps.select-chainlink-version.outputs.chainlink_version }}
       latest_image_count: ${{ steps.get-image-count.outputs.image_count }}
+      chainlink_ref_path:  ${{ steps.select-chainlink-version.outputs.cl_ref_path }}
     steps:
       # ghlatestreleasechecker is a tool to check if new release is available for a given repo
       - name: Set Up ghlatestreleasechecker
@@ -186,28 +193,39 @@ jobs:
             # we use 100 days since we really want the latest one, and it's highly improbable there won't be a release in last 100 days
             chainlink_version=$(ghlatestreleasechecker "smartcontractkit/chainlink" 100)
             echo "chainlink_version=$chainlink_version" >> $GITHUB_OUTPUT
+            cl_ref_path="release"
           elif [ "$GITHUB_EVENT_NAME" = "workflow_dispatch" ]; then
             echo "Fetching Chainlink version from input"
             if [ -n "${{ github.event.inputs.chainlinkVersion }}" ]; then
               echo "Chainlink version provided in input"
               chainlink_version="${{ github.event.inputs.chainlinkVersion }}"
+              if [[ "$chainlink_version" =~ ^[0-9a-f]{40}$ ]]; then
+                cl_ref_path="commit"
+              else
+                cl_ref_path="release"
+              fi
             else
               echo "Chainlink version not provided in input. Using latest commit SHA."
               chainlink_version=${{ github.sha }}
+              cl_ref_path="commit"
             fi
             echo "chainlink_version=$chainlink_version" >> $GITHUB_OUTPUT
+            echo "cl_ref_path=$cl_ref_path" >> $GITHUB_OUTPUT
           elif [ "$GITHUB_EVENT_NAME" = "pull_request" ]; then
             echo "Fetching Chainlink version from PR's head commit"
             chainlink_version="${{ github.event.pull_request.head.sha }}"
             echo "chainlink_version=$chainlink_version" >> $GITHUB_OUTPUT
+            echo "cl_ref_path=commit" >> $GITHUB_OUTPUT
           elif [ "$GITHUB_EVENT_NAME" = "merge_queue" ]; then
             echo "Fetching Chainlink version from merge queue's head commit"
             chainlink_version="${{ github.event.merge_group.head_sha }}"
             echo "chainlink_version=$chainlink_version" >> $GITHUB_OUTPUT
+            echo "cl_ref_path=commit" >> $GITHUB_OUTPUT
           elif [ "$GITHUB_REF_TYPE" = "tag" ]; then
             echo "Fetching Chainlink version from tag"
             chainlink_version="${{ github.ref_name }}"
             echo "chainlink_version=$chainlink_version" >> $GITHUB_OUTPUT
+            echo "cl_ref_path=release" >> $GITHUB_OUTPUT
           else
             echo "Unsupported trigger event. It's probably an issue with the pipeline definition. Please reach out to the Test Tooling team."
             exit 1
@@ -511,7 +529,7 @@ jobs:
 
   run-client-compatibility-matrix:
     name: ${{ matrix.evm_node.product }} compatibility with ${{ matrix.evm_node.docker_image }}
-    if: always() && needs.should-run.outputs.should_run == 'true' && needs.build-chainlink.result == 'success' && needs.prepare-compatibility-matrix.outputs.matrix != ''
+    if: always() && needs.should-run.outputs.should_run == 'true' && (needs.build-chainlink.result == 'success' || needs.build-chainlink.result == 'skipped') && needs.prepare-compatibility-matrix.outputs.matrix != ''
     environment: integration
     permissions:
       checks: write
@@ -671,7 +689,7 @@ jobs:
                       "type": "section",
                       "text": {
                         "type": "mrkdwn",
-                        "text": "<${{ github.server_url }}/${{ github.repository }}/releases/tag/${{ github.ref_name }}|${{ github.ref_name }}> | <${{ github.server_url }}/${{ github.repository }}/commit/${{ needs.select-versions.outputs.chainlink_version }}|${{ needs.select-versions.outputs.chainlink_version }}> | <${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}|Run>"
+                        "text": "<${{ github.server_url }}/${{ github.repository }}/${{ needs.select-versions.outputs.chainlink_ref_path }}/${{ needs.select-versions.outputs.chainlink_version }}|${{ needs.select-versions.outputs.chainlink_version }}> | <${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}|Run>"
                       }
                     }
                   ]

.mockery.yaml

@@ -258,14 +258,10 @@ packages:
       ORM:
       Runner:
       PipelineParamUnmarshaler:
-  github.com/smartcontractkit/chainlink/v2/core/services/headreporter:
+  github.com/smartcontractkit/chainlink/v2/core/services/promreporter:
     config:
-      dir: "{{ .InterfaceDir }}"
-      filename: "{{ .InterfaceName | snakecase }}_mock.go"
-      inpackage: true
-      mockname: "Mock{{ .InterfaceName | camelcase }}"
+      dir: core/internal/mocks
     interfaces:
-      HeadReporter:
       PrometheusBackend:
   github.com/smartcontractkit/libocr/commontypes:
     config: