Merge branch 'release'

LedgerHQ · Jan 23, 2024 · f9347bb · f9347bb · vercel · Jan 23, 2024
2 parents 60aeecd + b063e2c
commit f9347bb
Show file tree

Hide file tree

Showing 782 changed files with 363,358 additions and 46,564 deletions.
diff --git a/.github/workflows/backup/version-or-release.yml b/.github/workflows/backup/version-or-release.yml
@@ -8,6 +8,10 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref_name != 'develop' && github.ref || github.run_id }}
   cancel-in-progress: true
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   release:
     name: Release

diff --git a/.github/workflows/bot-portfolio-report.yml b/.github/workflows/bot-portfolio-report.yml
@@ -18,6 +18,10 @@ on:
   schedule:
     - cron: "30 5 * * *"
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   portfolio:
     runs-on: [ledger-live-medium-linux]
@@ -39,8 +43,9 @@ jobs:
       - name: Setup the toolchain
         uses: ./tools/actions/composites/setup-toolchain
         with:
-          aws-access-key: ${{ secrets.AWS_S3_CACHE_ACCESS_KEY }}
-          aws-secret-key: ${{ secrets.AWS_S3_CACHE_SECRET_KEY }}
+          accountId: ${{ secrets.AWS_ACCOUNT_ID_PROD }}
+          roleName: ${{ secrets.AWS_CACHE_ROLE_NAME }}
+          region: ${{ secrets.AWS_CACHE_REGION }}
       - name: install and build
         run: |
           pnpm i --filter="live-cli..." --filter="ledger-live"

diff --git a/.github/workflows/bot-staging-explorer-btc.yml b/.github/workflows/bot-staging-explorer-btc.yml
@@ -31,7 +31,7 @@ jobs:
         id: bot
         timeout-minutes: 120
         with:
-          EXPLORER: https://explorers.api-01.live.ledger-stg.com
+          EXPLORER: https://atlas-stg.ledger-test.com
           SHOW_LEGACY_NEW_ACCOUNT: "1"
           SEED: ${{ secrets.SEED2 }}
           SLACK_API_TOKEN: ${{secrets.SLACK_API_TOKEN}}

diff --git a/.github/workflows/bot-staging-explorer-eth.yml b/.github/workflows/bot-staging-explorer-eth.yml
@@ -31,11 +31,14 @@ jobs:
         id: bot
         timeout-minutes: 120
         with:
-          EXPLORER: https://explorers.api-01.live.ledger-stg.com
+          EXPLORER: https://atlas-stg.ledger-test.com
           SHOW_LEGACY_NEW_ACCOUNT: "1"
           SEED: ${{ secrets.SEED2 }}
           SLACK_API_TOKEN: ${{secrets.SLACK_API_TOKEN}}
           SLACK_ICON_EMOJI: ":bot-seed2:"
           SLACK_CHANNEL: explorer-bot-stg
-          BOT_FILTER_CURRENCIES: avalanche_c_chain,bsc,polygon,ethereum,ethereum_classic,ethereum_goerli
+          # These currencies are not yet handled by ATLAS, should be added back
+          # to the list once they are.
+          # avalanche_c_chain,bsc,polygon,ethereum_classic
+          BOT_FILTER_CURRENCIES: ethereum,ethereum_goerli,ethereum_sepolia,ethereum_holesky
           BOT_ENVIRONMENT: staging
diff --git a/.github/workflows/bot-super-report-custom.yml b/.github/workflows/bot-super-report-custom.yml
@@ -11,6 +11,10 @@ on:
       slackChannel:
         description: channel to use for the report
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   main:
     runs-on: ubuntu-latest
@@ -19,8 +23,10 @@ jobs:
       - name: Setup the toolchain
         uses: ./tools/actions/composites/setup-toolchain
         with:
-          aws-access-key: ${{ secrets.AWS_S3_CACHE_ACCESS_KEY }}
-          aws-secret-key: ${{ secrets.AWS_S3_CACHE_SECRET_KEY }}
+          accountId: ${{ secrets.AWS_ACCOUNT_ID_PROD }}
+          roleName: ${{ secrets.AWS_CACHE_ROLE_NAME }}
+          region: ${{ secrets.AWS_CACHE_REGION }}
+          turbo-server-token: ${{ secrets.TURBOREPO_SERVER_TOKEN }}
       - name: Install dependencies
         run: pnpm i --filter='!./apps/**'
 

diff --git a/.github/workflows/bot-super-report.yml b/.github/workflows/bot-super-report.yml
@@ -3,6 +3,10 @@ on:
   schedule:
     - cron: "0 14 * * 5"
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   main:
     runs-on: ubuntu-latest
@@ -11,8 +15,10 @@ jobs:
       - name: Setup the toolchain
         uses: ./tools/actions/composites/setup-toolchain
         with:
-          aws-access-key: ${{ secrets.AWS_S3_CACHE_ACCESS_KEY }}
-          aws-secret-key: ${{ secrets.AWS_S3_CACHE_SECRET_KEY }}
+          accountId: ${{ secrets.AWS_ACCOUNT_ID_PROD }}
+          roleName: ${{ secrets.AWS_CACHE_ROLE_NAME }}
+          region: ${{ secrets.AWS_CACHE_REGION }}
+          turbo-server-token: ${{ secrets.TURBOREPO_SERVER_TOKEN }}
       - name: Install dependencies
         run: pnpm i --filter='!./apps/**'
 

diff --git a/.github/workflows/bot-transfer.yml b/.github/workflows/bot-transfer.yml
@@ -19,6 +19,10 @@ on:
         description: "a comma separated list of currencies to transfer. If not specified, all currencies will be transferred."
         required: false
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   run-bot:
     runs-on: [ledger-live-medium-linux]
@@ -40,8 +44,10 @@ jobs:
       - name: Setup the toolchain
         uses: ./tools/actions/composites/setup-toolchain
         with:
-          aws-access-key: ${{ secrets.AWS_S3_CACHE_ACCESS_KEY }}
-          aws-secret-key: ${{ secrets.AWS_S3_CACHE_SECRET_KEY }}
+          accountId: ${{ secrets.AWS_ACCOUNT_ID_PROD }}
+          roleName: ${{ secrets.AWS_CACHE_ROLE_NAME }}
+          region: ${{ secrets.AWS_CACHE_REGION }}
+          turbo-server-token: ${{ secrets.TURBOREPO_SERVER_TOKEN }}
       - name: pull docker image
         run: docker pull ghcr.io/ledgerhq/speculos
       - name: install and build

diff --git a/.github/workflows/build-desktop-external.yml b/.github/workflows/build-desktop-external.yml
@@ -59,7 +59,7 @@ jobs:
           python-version: "3.x"
       - uses: ruby/setup-ruby@v1
         with:
-          ruby-version: 3.1.2
+          ruby-version: 3.2.2
           bundler-cache: true
       - name: Setup the toolchain
         uses: ./tools/actions/composites/setup-toolchain
@@ -72,7 +72,7 @@ jobs:
           os: ${{ steps.os.outputs.result }}
       - name: Build the app
         id: build-app
-        run: pnpm build:lld --api="http://127.0.0.1:${{ steps.build-desktop.outputs.port }}" --token="yolo" --team="foo"
+        run: pnpm build:lld
       - name: Save result
         id: save-result
         shell: bash

diff --git a/.github/workflows/build-desktop.yml b/.github/workflows/build-desktop.yml
@@ -30,6 +30,10 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref_name != 'develop' && github.ref || github.run_id }}
   cancel-in-progress: true
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   build-desktop-app:
     strategy:
@@ -61,23 +65,25 @@ jobs:
         uses: ./tools/actions/composites/setup-git-user
 
       - name: Setup the toolchain
+        id: toolchain
         uses: ./tools/actions/composites/setup-toolchain
         with:
-          aws-access-key: ${{ secrets.AWS_S3_CACHE_ACCESS_KEY }}
-          aws-secret-key: ${{ secrets.AWS_S3_CACHE_SECRET_KEY }}
+          accountId: ${{ secrets.AWS_ACCOUNT_ID_PROD }}
+          roleName: ${{ secrets.AWS_CACHE_ROLE_NAME }}
+          region: ${{ secrets.AWS_CACHE_REGION }}
           install_dotnet: ${{ matrix.config.dotnet }}
+          skip_turbo_cache: "false"
+          turbo-server-token: ${{ secrets.TURBOREPO_SERVER_TOKEN }}
 
       - name: Build desktop
         id: build-desktop
         uses: ./tools/actions/composites/setup-build-desktop
         with:
           os: ${{ matrix.config.name }}
-          aws-access-key: ${{ secrets.AWS_S3_CACHE_ACCESS_KEY }}
-          aws-secret-key: ${{ secrets.AWS_S3_CACHE_SECRET_KEY }}
 
       - name: Build the app
         id: build-app
-        run: pnpm build:lld --api="http://127.0.0.1:${{ steps.build-desktop.outputs.port }}" --token="yolo" --team="foo"
+        run: pnpm build:lld --api="http://127.0.0.1:${{ steps.toolchain.outputs.port }}" --token="${{ secrets.TURBOREPO_SERVER_TOKEN }}" --team="foo"
         env:
           GENERATE_METAFILES: 1
 

diff --git a/.github/workflows/build-mobile-external.yml b/.github/workflows/build-mobile-external.yml
@@ -37,7 +37,7 @@ jobs:
         uses: ./tools/actions/composites/setup-toolchain
       - uses: ruby/setup-ruby@v1
         with:
-          ruby-version: 3.1.2
+          ruby-version: 3.2.2
         env:
           ImageOS: ubuntu20
       - uses: actions/setup-java@v3
@@ -63,22 +63,14 @@ jobs:
         env:
           VERSION: ${{ steps.version.outputs.clean }}-sha.${{ steps.slug.outputs.sha8 }}
         run: cd apps/ledger-live-mobile && npm version $VERSION
-      - name: TurboRepo local caching server
-        id: turborepo-cache-server
-        uses: ./tools/actions/turborepo-s3-cache
-        with:
-          server-token: "yolo"
-          cleanup-cache-folder: "true"
-          aws-access-key: ${{ secrets.AWS_S3_CACHE_ACCESS_KEY }}
-          aws-secret-key: ${{ secrets.AWS_S3_CACHE_SECRET_KEY }}
       - name: build the app
         env:
           ANDROID_KEYSTORE_PASS: staging
           ANDROID_KEY_ALIAS: staging
           ANDROID_KEY_PASS: staging
           NODE_OPTIONS: "--max-old-space-size=7168"
           ANDROID_KEYSTORE_FILE: ${{ github.workspace }}/apps/ledger-live-mobile/android/app/staging.kstr
-        run: pnpm build:llm:android --api="http://127.0.0.1:${{ steps.turborepo-cache-server.outputs.port }}" --token="yolo" --team="foo"
+        run: pnpm build:llm:android
       - uses: ./tools/actions/get-package-infos
         id: post-version
         with:
@@ -105,15 +97,7 @@ jobs:
         uses: ./tools/actions/composites/setup-toolchain
       - uses: ruby/setup-ruby@v1
         with:
-          ruby-version: 3.1.2
-      - name: Cache LLM pods
-        uses: actions/cache@v3
-        with:
-          path: |
-            apps/ledger-live-mobile/ios/Pods
-            ~/Library/Caches/CocoaPods
-            ~/.cocoapods
-          key: ${{ runner.os }}-pods-${{ hashFiles('apps/ledger-live-mobile/ios/Podfile.lock') }}
+          ruby-version: 3.2.2
       - name: install dependencies
         run: pnpm i --filter="live-mobile..." --filter="ledger-live" --no-frozen-lockfile --unsafe-perm
 

diff --git a/.github/workflows/build-mobile.yml b/.github/workflows/build-mobile.yml
@@ -30,6 +30,10 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref_name != 'develop' && github.ref || github.run_id }}
   cancel-in-progress: true
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   build-mobile-app-android:
     name: "Build Ledger Live Mobile (Android)"
@@ -44,9 +48,13 @@ jobs:
         uses: ./tools/actions/composites/setup-git-user
       - name: Setup the toolchain
         uses: ./tools/actions/composites/setup-toolchain
+        id: toolchain
         with:
-          aws-access-key: ${{ secrets.AWS_S3_CACHE_ACCESS_KEY }}
-          aws-secret-key: ${{ secrets.AWS_S3_CACHE_SECRET_KEY }}
+          skip_turbo_cache: "false"
+          accountId: ${{ secrets.AWS_ACCOUNT_ID_PROD }}
+          roleName: ${{ secrets.AWS_CACHE_ROLE_NAME }}
+          region: ${{ secrets.AWS_CACHE_REGION }}
+          turbo-server-token: ${{ secrets.TURBOREPO_SERVER_TOKEN }}
       - uses: ruby/setup-ruby@v1
         with:
           ruby-version: 3.2.2
@@ -75,22 +83,14 @@ jobs:
         env:
           VERSION: ${{ steps.version.outputs.clean }}-sha.${{ steps.slug.outputs.sha8 }}
         run: cd apps/ledger-live-mobile && npm version $VERSION
-      - name: TurboRepo local caching server
-        id: turborepo-cache-server
-        uses: ./tools/actions/turborepo-s3-cache
-        with:
-          server-token: "yolo"
-          cleanup-cache-folder: "true"
-          aws-access-key: ${{ secrets.AWS_S3_CACHE_ACCESS_KEY }}
-          aws-secret-key: ${{ secrets.AWS_S3_CACHE_SECRET_KEY }}
       - name: build the app
         env:
           ANDROID_KEYSTORE_PASS: staging
           ANDROID_KEY_ALIAS: staging
           ANDROID_KEY_PASS: staging
           NODE_OPTIONS: "--max-old-space-size=7168"
           ANDROID_KEYSTORE_FILE: ${{ github.workspace }}/apps/ledger-live-mobile/android/app/staging.kstr
-        run: pnpm build-ci:llm:android --api="http://127.0.0.1:${{ steps.turborepo-cache-server.outputs.port }}" --token="yolo" --team="foo"
+        run: pnpm build-ci:llm:android --api="http://127.0.0.1:${{ steps.toolchain.outputs.port }}" --token="${{ secrets.TURBOREPO_SERVER_TOKEN }}" --team="foo"
       - uses: ./tools/actions/get-package-infos
         id: post-version
         with:
@@ -114,33 +114,22 @@ jobs:
         uses: ./tools/actions/composites/setup-git-user
       - name: Setup the toolchain
         uses: ./tools/actions/composites/setup-toolchain
+        id: toolchain
         with:
-          aws-access-key: ${{ secrets.AWS_S3_CACHE_ACCESS_KEY }}
-          aws-secret-key: ${{ secrets.AWS_S3_CACHE_SECRET_KEY }}
+          accountId: ${{ secrets.AWS_ACCOUNT_ID_PROD }}
+          roleName: ${{ secrets.AWS_CACHE_ROLE_NAME }}
+          region: ${{ secrets.AWS_CACHE_REGION }}
+          skip_pod_cache: "false"
+          skip_turbo_cache: "false"
+          turbo-server-token: ${{ secrets.TURBOREPO_SERVER_TOKEN }}
       - uses: ruby/setup-ruby@v1
         with:
           ruby-version: 3.2.2
-      - name: Cache LLM pods
-        uses: actions/cache@v3
-        with:
-          path: |
-            apps/ledger-live-mobile/ios/Pods
-            ~/Library/Caches/CocoaPods
-            ~/.cocoapods
-          key: ${{ runner.os }}-pods-${{ hashFiles('apps/ledger-live-mobile/ios/Podfile.lock') }}
-      - name: TurboRepo local caching server
-        id: turborepo-cache-server
-        uses: ./tools/actions/turborepo-s3-cache
-        with:
-          server-token: "yolo"
-          cleanup-cache-folder: "true"
-          aws-access-key: ${{ secrets.AWS_S3_CACHE_ACCESS_KEY }}
-          aws-secret-key: ${{ secrets.AWS_S3_CACHE_SECRET_KEY }}
       - name: install dependencies
         run: pnpm i --filter="live-mobile..." --filter="ledger-live" --no-frozen-lockfile --unsafe-perm
       - name: bundle ios and android js
         run: |
-          pnpm build:llm:deps
+          pnpm build:llm:deps --api="http://127.0.0.1:${{ steps.toolchain.outputs.port }}" --token="${{ secrets.TURBOREPO_SERVER_TOKEN }}" --team="foo"
           pnpm mobile bundle:ios:prod
           pnpm mobile bundle:android:prod
           pnpm mobile gen-metafile

diff --git a/.github/workflows/cal-importer-stg.yml b/.github/workflows/cal-importer-stg.yml