Draft 0.30.2

.changelog/unreleased/SDK/2399-async-light-sdk.md

@@ -0,0 +1,2 @@
+- Both the `reading` and `writing` modules of the light SDK can now be used from
+  within an async runtime. ([\#2399](https://github.com/anoma/namada/pull/2399))

.changelog/unreleased/bug-fixes/2401-tx-host-env.md

@@ -0,0 +1,2 @@
+- Fixed possible panics in transaction host environment functions.
+  ([\#2401](https://github.com/anoma/namada/pull/2401))

.changelog/unreleased/bug-fixes/2408-fix-burn-function.md

@@ -0,0 +1,2 @@
+- Fix the token burn function.
+  ([\#2408](https://github.com/anoma/namada/pull/2408))

.changelog/unreleased/bug-fixes/2415-governance-tally.md

@@ -0,0 +1,2 @@
+- Improving code around governance tally computations.
+  ([\#2415](https://github.com/anoma/namada/pull/2415))

.changelog/unreleased/bug-fixes/2424-change-shielded-rewards.md

@@ -0,0 +1,2 @@
+- Fix the MASP VP to enable changes to the shielded set max reward rate for a
+  token. ([\#2424](https://github.com/anoma/namada/pull/2424))

.changelog/unreleased/bug-fixes/2428-fix-shielded-actions.md

@@ -0,0 +1,2 @@
+- Validates changes to the balance key in masp vp.
+  ([\#2428](https://github.com/anoma/namada/pull/2428))

.changelog/unreleased/bug-fixes/2440-pgf-minors.md

@@ -0,0 +1,2 @@
+- Restrict the reward distribution of a steward to a maximum of 100.
+  ([\#2440](https://github.com/anoma/namada/pull/2440))

.changelog/unreleased/bug-fixes/2443-fix-multitoken-vp.md

@@ -0,0 +1,2 @@
+- Avoid diff overflow in Multitoken VP
+  ([\#2443](https://github.com/anoma/namada/issues/2443))

.changelog/unreleased/features/2417-wallet-zip32-0.30.1.md

@@ -0,0 +1,2 @@
+- Implemented ZIP32 functionality for shielded pool keys.
+  ([\#2417](https://github.com/anoma/namada/pull/2417))

.changelog/unreleased/improvements/2419-protocol-tx-allowlist.md

@@ -0,0 +1,3 @@
+- Added tx WASM code allowlist at protocol level and VP WASM code allowlist in
+  the host environment functions.
+  ([\#2419](https://github.com/anoma/namada/pull/2419))

.changelog/unreleased/improvements/2427-masp-test-vectors-rebased.md

@@ -0,0 +1,2 @@
+- The test vector generator now supports generating MASP transactions.
+  ([\#2427](https://github.com/anoma/namada/pull/2427))

.changelog/unreleased/improvements/2435-opt-jemalloc.md

@@ -0,0 +1,2 @@
+- Disabled RocksDB jemalloc feature by default for non-release builds.
+  ([\#2404](https://github.com/anoma/namada/pull/2404))

.changelog/unreleased/improvements/2438-new-storage-write.md

@@ -0,0 +1,2 @@
+- Skip writing some MASP and IBC storage keys to merkle tree and DB diffs.
+  ([\#2438](https://github.com/anoma/namada/pull/2438))

.changelog/unreleased/improvements/2442-bip39-optional-0.30.1.md

@@ -0,0 +1,2 @@
+- BIP39 passphrase made optional.
+  ([\#2442](https://github.com/anoma/namada/pull/2442))

.changelog/unreleased/testing/2406-masp-unconverted-test.md

@@ -0,0 +1,2 @@
+- Added an integration test to verify that unconverted asset types can be spent
+  in the MASP. ([\#2406](https://github.com/anoma/namada/pull/2406))

.github/workflows/scripts/e2e.json

@@ -15,6 +15,8 @@
     "e2e::ledger_tests::proposal_offline": 21,
     "e2e::ledger_tests::pgf_governance_proposal": 320,
     "e2e::ledger_tests::proposal_submission": 200,
+    "e2e::ledger_tests::proposal_change_shielded_reward": 200,
+    "e2e::pgf_steward_change_commissions": 30,
     "e2e::ledger_tests::run_ledger": 5,
     "e2e::ledger_tests::run_ledger_load_state_and_reset": 23,
     "e2e::ledger_tests::test_namada_shuts_down_if_tendermint_dies": 2,
@@ -34,4 +36,4 @@
     "e2e::wallet_tests::wallet_encrypted_key_cmds": 1,
     "e2e::wallet_tests::wallet_encrypted_key_cmds_env_var": 1,
     "e2e::wallet_tests::wallet_unencrypted_key_cmds": 1
-}
+}

Cargo.toml

@@ -69,6 +69,7 @@ bech32 = "0.8.0"
 bimap = {version = "0.6.2", features = ["serde"]}
 bit-set = "0.5.2"
 blake2b-rs = "0.2.0"
+bls12_381 = "0.8"
 byte-unit = "4.0.13"
 byteorder = "1.4.2"
 borsh = {version = "1.2.0", features = ["unstable__schema", "derive"]}
@@ -105,6 +106,7 @@ ibc-testkit = {version = "0.48.1", default-features = false}
 ics23 = "0.11.0"
 index-set = { git = "https://github.com/heliaxdev/index-set", tag = "v0.8.1", features = ["serialize-borsh", "serialize-serde"] }
 itertools = "0.10.0"
+jubjub = "0.10"
 k256 = { version = "0.13.0", default-features = false, features = ["ecdsa", "pkcs8", "precomputed-tables", "serde", "std"]}
 lazy_static = "1.4.0"
 ledger-namada-rs = { git = "https://github.com/Zondax/ledger-namada", tag = "v0.0.12" }

Makefile

@@ -71,7 +71,10 @@ build-test:
 	$(cargo) +$(nightly) build --tests $(jobs)
 
 build-release:
-	$(cargo) build $(jobs) --release --timings --package namada_apps --manifest-path Cargo.toml
+	$(cargo) build $(jobs) --release --timings --package namada_apps \
+		--manifest-path Cargo.toml \
+		--no-default-features \
+		--features jemalloc
 
 build-debug:
 	$(cargo) build --package namada_apps --manifest-path Cargo.toml
@@ -169,6 +172,7 @@ test-e2e:
 	-Z unstable-options \
 	-- \
 	--test-threads=1 \
+	--nocapture \
 	-Z unstable-options --report-time
 
 # Run integration tests with pre-built MASP proofs

crates/apps/Cargo.toml

@@ -50,7 +50,7 @@ name = "namadar"
 path = "src/bin/namada-relayer/main.rs"
 
 [features]
-default = []
+default = ["no_jemalloc"]
 mainnet = [
   "namada/mainnet",
 ]
@@ -59,6 +59,11 @@ testing = ["namada_test_utils"]
 benches = ["testing", "namada_test_utils"]
 integration = []
 
+# RocksDB's "jemalloc" disabled by default as it takes a long time to build.
+# Note that only exactly one of these features has to be enabled at a time. 
+# Jemalloc is enabled in `make build-release`.
+no_jemalloc = ["dep:rocksdb"]
+jemalloc = ["rocksdb_with_jemalloc"]
 
 [dependencies]
 namada = {path = "../namada", features = ["multicore", "http-client", "tendermint-rpc", "std"]}
@@ -142,10 +147,13 @@ warp = "0.3.2"
 bytes = "1.1.0"
 
 [target.'cfg(not(windows))'.dependencies]
-rocksdb = { workspace = true, features = ['jemalloc'] } # jemalloc is not supported on windows
+rocksdb = { workspace = true, optional = true }
+rocksdb_with_jemalloc = { package = "rocksdb", version = "0.21.0", default-features = false, features = ['zstd', 'jemalloc'], optional = true }
 
 [target.'cfg(windows)'.dependencies]
-rocksdb = { workspace = true }
+rocksdb = { workspace = true, optional = true }
+ # jemalloc is not supported on windows
+rocksdb_with_jemalloc = { package = "rocksdb", version = "0.21.0", default-features = false, features = ['zstd'], optional = true }
 
 [dev-dependencies]
 assert_matches = "1.5.0"

crates/apps/src/lib/cli.rs

@@ -2975,8 +2975,11 @@ pub mod args {
         arg("validator");
     pub const HALT_ACTION: ArgFlag = flag("halt");
     pub const HASH_LIST: Arg<String> = arg("hash-list");
-    pub const HD_WALLET_DERIVATION_PATH: ArgDefault<String> =
+    pub const HD_DERIVATION_PATH: ArgDefault<String> =
         arg_default("hd-path", DefaultFn(|| "default".to_string()));
+    pub const HD_ALLOW_NON_COMPLIANT_DERIVATION_PATH: ArgFlag =
+        flag("allow-non-compliant");
+    pub const HD_PROMPT_BIP39_PASSPHRASE: ArgFlag = flag("bip39-passphrase");
     pub const HISTORIC: ArgFlag = flag("historic");
     pub const IBC_TRANSFER_MEMO_PATH: ArgOpt<PathBuf> = arg_opt("memo-path");
     pub const INPUT_OPT: ArgOpt<PathBuf> = arg_opt("input");
@@ -6196,7 +6199,11 @@ pub mod args {
             let alias_force = ALIAS_FORCE.parse(matches);
             let unsafe_dont_encrypt = UNSAFE_DONT_ENCRYPT.parse(matches);
             let use_device = USE_DEVICE.parse(matches);
-            let derivation_path = HD_WALLET_DERIVATION_PATH.parse(matches);
+            let derivation_path = HD_DERIVATION_PATH.parse(matches);
+            let allow_non_compliant =
+                HD_ALLOW_NON_COMPLIANT_DERIVATION_PATH.parse(matches);
+            let prompt_bip39_passphrase =
+                HD_PROMPT_BIP39_PASSPHRASE.parse(matches);
             Self {
                 scheme,
                 shielded,
@@ -6205,6 +6212,8 @@ pub mod args {
                 unsafe_dont_encrypt,
                 use_device,
                 derivation_path,
+                allow_non_compliant,
+                prompt_bip39_passphrase,
             }
         }
 
@@ -6234,14 +6243,34 @@ pub mod args {
                 "Derive an address and public key from the seed stored on the \
                  connected hardware wallet.",
             ))
-            .arg(HD_WALLET_DERIVATION_PATH.def().help(
+            .arg(HD_DERIVATION_PATH.def().help(
                 "HD key derivation path. Use keyword `default` to refer to a \
-                 scheme default path:\n- m/44'/60'/0'/0/0 for secp256k1 \
-                 scheme\n- m/44'/877'/0'/0'/0' for ed25519 scheme.\nFor \
-                 ed25519, all path indices will be promoted to hardened \
-                 indexes. If none is specified, the scheme default path is \
-                 used.",
+                 scheme default path:\n- m/44'/60'/0'/0/0 for the transparent \
+                 secp256k1 scheme\n- m/44'/877'/0'/0'/0' for the transparent \
+                 ed25519 scheme\n- m/32'/877'/0' for the shielded \
+                 setting\nFor ed25519 scheme, all path indices will be \
+                 promoted to hardened indexes. If none is specified, the \
+                 scheme default path is used.",
             ))
+            .arg(HD_ALLOW_NON_COMPLIANT_DERIVATION_PATH.def().help(
+                "Allow non-compliant HD derivation path. The compliant \
+                 derivation path schemes include:\n- \
+                 m/44'/60'/account'/change/address_index for the transparent \
+                 secp256k1 scheme\n- \
+                 m/44'/877'/account'/change'/address_index' for the \
+                 transparent ed25519 scheme\n- m/32'/877'/account' and\n- \
+                 m/32'/877'/account'/address_index for the shielded setting",
+            ))
+            .group(
+                ArgGroup::new("requires_group")
+                    .args([HD_ALLOW_NON_COMPLIANT_DERIVATION_PATH.name])
+                    .requires(HD_DERIVATION_PATH.name),
+            )
+            .arg(
+                HD_PROMPT_BIP39_PASSPHRASE.def().help(
+                    "Use an additional passphrase for HD-key generation.",
+                ),
+            )
         }
     }
 
@@ -6253,7 +6282,11 @@ pub mod args {
             let alias = ALIAS.parse(matches);
             let alias_force = ALIAS_FORCE.parse(matches);
             let unsafe_dont_encrypt = UNSAFE_DONT_ENCRYPT.parse(matches);
-            let derivation_path = HD_WALLET_DERIVATION_PATH.parse(matches);
+            let derivation_path = HD_DERIVATION_PATH.parse(matches);
+            let allow_non_compliant =
+                HD_ALLOW_NON_COMPLIANT_DERIVATION_PATH.parse(matches);
+            let prompt_bip39_passphrase =
+                HD_PROMPT_BIP39_PASSPHRASE.parse(matches);
             Self {
                 scheme,
                 shielded,
@@ -6262,6 +6295,8 @@ pub mod args {
                 alias_force,
                 unsafe_dont_encrypt,
                 derivation_path,
+                allow_non_compliant,
+                prompt_bip39_passphrase,
             }
         }
 
@@ -6280,7 +6315,7 @@ pub mod args {
             .arg(
                 RAW_KEY_GEN
                     .def()
-                    .conflicts_with(HD_WALLET_DERIVATION_PATH.name)
+                    .conflicts_with(HD_DERIVATION_PATH.name)
                     .help(
                         "Generate a random non-HD secret / spending key. No \
                          mnemonic code is generated.",
@@ -6294,14 +6329,34 @@ pub mod args {
                 "UNSAFE: Do not encrypt the keypair. Do not use this for keys \
                  used in a live network.",
             ))
-            .arg(HD_WALLET_DERIVATION_PATH.def().help(
+            .arg(HD_DERIVATION_PATH.def().help(
                 "HD key derivation path. Use keyword `default` to refer to a \
-                 scheme default path:\n- m/44'/60'/0'/0/0 for secp256k1 \
-                 scheme\n- m/44'/877'/0'/0'/0' for ed25519 scheme.\nFor \
-                 ed25519, all path indices will be promoted to hardened \
-                 indexes. If none is specified, the scheme default path is \
-                 used.",
+                 scheme default path:\n- m/44'/60'/0'/0/0 for the transparent \
+                 secp256k1 scheme\n- m/44'/877'/0'/0'/0' for the transparent \
+                 ed25519 scheme\n- m/32'/877'/0' for the shielded \
+                 setting\nFor ed25519 scheme, all path indices will be \
+                 promoted to hardened indexes. If none is specified, the \
+                 scheme default path is used.",
             ))
+            .arg(HD_ALLOW_NON_COMPLIANT_DERIVATION_PATH.def().help(
+                "Allow non-compliant HD derivation path. The compliant \
+                 derivation path schemes include:\n- \
+                 m/44'/60'/account'/change/address_index for the transparent \
+                 secp256k1 scheme\n- \
+                 m/44'/877'/account'/change'/address_index' for the \
+                 transparent ed25519 scheme\n- m/32'/877'/account' and\n- \
+                 m/32'/877'/account'/address_index for the shielded setting",
+            ))
+            .group(
+                ArgGroup::new("requires_group")
+                    .args([HD_ALLOW_NON_COMPLIANT_DERIVATION_PATH.name])
+                    .requires(HD_DERIVATION_PATH.name),
+            )
+            .arg(
+                HD_PROMPT_BIP39_PASSPHRASE.def().help(
+                    "Use an additional passphrase for HD-key generation.",
+                ),
+            )
         }
     }