Merge branch 'main' into asm/transfer

Author: Perelyn-sama

.github/workflows/anchor.yml

@@ -6,6 +6,8 @@ on:
   push:
     branches:
       - main
+      - anchor-1.0
+      - fix-biome-errors
   pull_request:
     types: [opened, synchronize, reopened]
     branches:
@@ -15,6 +17,10 @@ env:
   MAX_JOBS: 64
   MIN_PROJECTS_PER_JOB: 4
   MIN_PROJECTS_FOR_MATRIX: 4
+  # Force all JavaScript-based actions to use Node.js 24 runtime.
+  # Node.js 20 actions are deprecated and will stop working June 2026.
+  # This catches composite actions whose internal dependencies still reference @v4.
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
 
 jobs:
   changes:
@@ -26,8 +32,8 @@ jobs:
       total_projects: ${{ steps.analyze.outputs.total_projects }}
       matrix: ${{ steps.matrix.outputs.matrix }}
     steps:
-      - uses: actions/checkout@v4
-      - uses: dorny/paths-filter@v3
+      - uses: actions/checkout@v5
+      - uses: dorny/paths-filter@v4
         id: changes
         if: github.event_name == 'pull_request'
         with:
@@ -103,8 +109,8 @@ jobs:
     outputs:
       failed_projects: ${{ steps.set-failed.outputs.failed_projects }}
     steps:
-      - uses: actions/checkout@v4
-      - uses: heyAyushh/setup-anchor@v0.31
+      - uses: actions/checkout@v5
+      - uses: heyAyushh/setup-anchor@v4.999
         with:
           anchor-version: 0.32.1
           solana-cli-version: stable
@@ -204,7 +210,7 @@ jobs:
     if: always()
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Create job summary
         run: |
           echo "## Anchor Workflow Summary" >> $GITHUB_STEP_SUMMARY

.github/workflows/rust.yml

@@ -1,5 +1,5 @@
 # The name of your workflow. GitHub displays the names of your workflows on your repository's "Actions" tab
-name: Rust
+name: Rust Lint
 
 # To automatically trigger the workflow
 on:
@@ -9,11 +9,19 @@ on:
   push:
     branches:
       - main
+      - anchor-1.0
+      - fix-biome-errors
   pull_request:
     types: [opened, synchronize, reopened]
     branches:
       - main
 
+env:
+  # Force all JavaScript-based actions to use Node.js 24 runtime.
+  # Node.js 20 actions are deprecated and will stop working June 2026.
+  # This catches composite actions whose internal dependencies still reference @v4.
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
 # A workflow run is made up of one or more jobs, which run in parallel by default
 # Each job runs in a runner environment specified by runs-on
 jobs:
@@ -22,7 +30,7 @@ jobs:
     name: Rustfmt
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: dtolnay/rust-toolchain@stable
         with:
           # Specific to dtolnay/rust-toolchain: Comma-separated string of additional components to install
@@ -35,9 +43,10 @@ jobs:
     name: Clippy
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: dtolnay/rust-toolchain@stable
         with:
           components: clippy
       - name: Linting
-        run: cargo clippy -- -D warnings
+        # Allow diverging_sub_expression: false positive from Anchor 1.0's #[program] macro expansion
+        run: cargo clippy -- -D warnings -A clippy::diverging_sub_expression

.github/workflows/solana-native.yml

@@ -6,6 +6,7 @@ on:
   push:
     branches:
       - main
+      - fix-biome-errors
   pull_request:
     types: [opened, synchronize, reopened]
     branches:
@@ -15,6 +16,10 @@ env:
   MAX_JOBS: 64
   MIN_PROJECTS_PER_JOB: 4
   MIN_PROJECTS_FOR_MATRIX: 4
+  # Force all JavaScript-based actions to use Node.js 24 runtime.
+  # Node.js 20 actions are deprecated and will stop working June 2026.
+  # This catches composite actions whose internal dependencies still reference @v4.
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
 
 jobs:
   changes:
@@ -26,8 +31,8 @@ jobs:
       total_projects: ${{ steps.analyze.outputs.total_projects }}
       matrix: ${{ steps.matrix.outputs.matrix }}
     steps:
-      - uses: actions/checkout@v4
-      - uses: dorny/paths-filter@v3
+      - uses: actions/checkout@v5
+      - uses: dorny/paths-filter@v4
         id: changes
         if: github.event_name == 'pull_request'
         with:
@@ -102,9 +107,10 @@ jobs:
     outputs:
       failed_projects: ${{ steps.set-failed.outputs.failed_projects }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
+      - uses: pnpm/action-setup@v4
       - name: Use Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
           node-version: 'lts/*'
           check-latest: true
@@ -188,10 +194,9 @@ jobs:
           # Make the script executable
           chmod +x build_and_test.sh
 
-          # Install pnpm
-          npm install --global pnpm
+          # pnpm is already installed via pnpm/action-setup
       - name: Setup Solana Stable
-        uses: heyAyushh/setup-solana@v2.02
+        uses: heyAyushh/setup-solana@v5.9
         with:
           solana-cli-version: stable
       - name: Build and Test with Stable
@@ -200,8 +205,12 @@ jobs:
           solana -V
           rustc -V
           process_projects "stable"
+      # continue-on-error because the beta channel may not have a valid release
+      # (e.g. v4.0 returns 404 from release.anza.xyz). This is an upstream issue
+      # with heyAyushh/setup-solana — beta setup clears the stable install first.
       - name: Setup Solana Beta
-        uses: heyAyushh/setup-solana@v2.02
+        continue-on-error: true
+        uses: heyAyushh/setup-solana@v5.9
         with:
           solana-cli-version: beta
       - name: Build and Test with Beta
@@ -228,7 +237,7 @@ jobs:
     if: always()
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Create job summary
         run: |
           echo "## Native Workflow Summary" >> $GITHUB_STEP_SUMMARY

.github/workflows/solana-pinocchio.yml

@@ -6,6 +6,7 @@ on:
   push:
     branches:
       - main
+      - fix-biome-errors
   pull_request:
     types: [opened, synchronize, reopened]
     branches:
@@ -15,6 +16,10 @@ env:
   MAX_JOBS: 64
   MIN_PROJECTS_PER_JOB: 4
   MIN_PROJECTS_FOR_MATRIX: 4
+  # Force all JavaScript-based actions to use Node.js 24 runtime.
+  # Node.js 20 actions are deprecated and will stop working June 2026.
+  # This catches composite actions whose internal dependencies still reference @v4.
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
 
 jobs:
   changes:
@@ -26,8 +31,8 @@ jobs:
       total_projects: ${{ steps.analyze.outputs.total_projects }}
       matrix: ${{ steps.matrix.outputs.matrix }}
     steps:
-      - uses: actions/checkout@v4
-      - uses: dorny/paths-filter@v3
+      - uses: actions/checkout@v5
+      - uses: dorny/paths-filter@v4
         id: changes
         if: github.event_name == 'pull_request'
         with:
@@ -102,9 +107,10 @@ jobs:
     outputs:
       failed_projects: ${{ steps.set-failed.outputs.failed_projects }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
+      - uses: pnpm/action-setup@v4
       - name: Use Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
           node-version: "lts/*"
           check-latest: true
@@ -188,10 +194,9 @@ jobs:
           # Make the script executable
           chmod +x build_and_test.sh
 
-          # Install pnpm
-          npm install --global pnpm
+          # pnpm is already installed via pnpm/action-setup
       - name: Setup Solana Stable
-        uses: heyAyushh/setup-solana@v2.02
+        uses: heyAyushh/setup-solana@v5.9
         with:
           solana-cli-version: stable
       - name: Build and Test with Stable
@@ -200,8 +205,12 @@ jobs:
           solana -V
           rustc -V
           process_projects "stable"
+      # continue-on-error because the beta channel may not have a valid release
+      # (e.g. v4.0 returns 404 from release.anza.xyz). This is an upstream issue
+      # with heyAyushh/setup-solana — beta setup clears the stable install first.
       - name: Setup Solana Beta
-        uses: heyAyushh/setup-solana@v2.02
+        continue-on-error: true
+        uses: heyAyushh/setup-solana@v5.9
         with:
           solana-cli-version: beta
       - name: Build and Test with Beta
@@ -228,7 +237,7 @@ jobs:
     if: always()
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Create job summary
         run: |
           echo "## Pinocchio Workflow Summary" >> $GITHUB_STEP_SUMMARY

.github/workflows/typescript.yml

@@ -0,0 +1,30 @@
+name: TypeScript
+
+on:
+  push:
+    branches:
+      - main
+      - fix-biome-errors
+  pull_request:
+    types: [opened, synchronize, reopened]
+    branches:
+      - main
+
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
+jobs:
+  biome:
+    name: Biome check
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      - uses: pnpm/action-setup@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: pnpm
+      # --frozen-lockfile: fail if pnpm-lock.yaml is out of date
+      # --ignore-workspace: only install root deps, not all 94 subprojects
+      - run: pnpm install --frozen-lockfile --ignore-workspace
+      - run: pnpm run check

.gitignore

@@ -8,6 +8,8 @@ node_modules/
 **/*/node_modules
 **/*/package-lock.json
 **/*/Cargo.lock
+# Exception: escrow native needs Cargo.lock to pin blake3 (see tokens/escrow/native/Cargo.toml)
+!tokens/escrow/native/Cargo.lock
 
 **/*/.anchor
 **/*/.DS_Store

.reference/ANCHOR-1.0-MIGRATION.md

@@ -0,0 +1,41 @@
+# Anchor 1.0.0-rc.5 Migration Reference
+
+## Proven pattern (from basics/counter/anchor)
+
+### Cargo.toml
+- Change `anchor-lang = "0.32.1"` → `anchor-lang = "1.0.0-rc.5"`
+- Change `anchor-lang = { version = "0.32.1", ... }` → `anchor-lang = { version = "1.0.0-rc.5", ... }`
+- Same for `anchor-spl` if present — change to `1.0.0-rc.5`
+- Add comment: `# Anchor 1.0.0-rc.5 — pin to RC until stable release`
+- **REMOVE `interface-instructions` feature** if present (removed in Anchor 1.0). This affects transfer-hook projects.
+- Keep all other features as-is (`idl-build`, `init-if-needed`, `cpi`, etc.)
+
+### Anchor.toml
+- Remove `[registry]` section if present (no longer used in Anchor 1.0)
+- Keep everything else
+
+### package.json
+- Replace `"@coral-xyz/anchor": "..."` with `"@anchor-lang/core": "1.0.0-rc.5"`
+- Bump `"typescript"` to `"^5.3.3"` if it's on 4.x (required for @solana/web3.js peer dep)
+- Keep everything else
+
+### TypeScript files (tests/*.ts, migrations/*.ts)
+- Replace `import ... from "@coral-xyz/anchor"` → `import ... from "@anchor-lang/core"`
+- Replace `import ... from '@coral-xyz/anchor'` → `import ... from '@anchor-lang/core'`
+- Replace `require("@coral-xyz/anchor")` → `require("@anchor-lang/core")` if any
+
+### Rust source code (lib.rs etc.)
+- Usually NO changes needed
+- If `AccountInfo` is used in an Accounts struct, replace with `UncheckedAccount`
+- If duplicate mutable accounts exist, add `#[account(dup)]` constraint
+
+### Build verification
+- Run `cargo build-sbf` in the anchor project directory to verify Rust builds
+- Run `pnpm install` to verify deps install
+- Do NOT run tests (no validator available)
+
+### interface-instructions removal (transfer-hook projects)
+For projects that had `features = ["interface-instructions"]`:
+- Remove that feature from Cargo.toml
+- The `#[interface]` attribute is removed — check if the program source uses it
+- If it does, this needs manual intervention to refactor

.vscode/settings.json

@@ -0,0 +1,4 @@
+{
+  "editor.defaultFormatter": "biomejs.biome",
+  "editor.formatOnSave": true
+}