A PR can edit .gitmodules to point vendor/status-go at an arbitrary
remote, letting the policy check validate against attacker-controlled
refs (a fake develop branch containing any pin). Override the configured
URL with the canonical upstream before 'git submodule update' in both
jobs; a pin that doesn't exist upstream now fails the update, which is
the correct verdict.
github.head_ref names a branch in the contributor's fork, which does not
exist in this repository, so actions/checkout fails for every external
PR before the policy steps even run. The head SHA is fetchable from the
base repo, and checking the actual PR head preserves the recency
enforcement (stale pins must catch up with the base branch).
* test(contract): check wakuext FFI method names against vendored status-go
The app sends wakuext_<name> method strings that status-go resolves by name at
runtime, so a renamed or removed method breaks the app with no compile-time
error and no test to catch it. Assert every static wakuext_<name> literal in
the app resolves to a method the vendored status-go (the shipped pin) registers.
Name-existence only; runtime-composed names are reported, not skipped.
Assisted-by: Claude (Anthropic)
feat(CI): Add test hooks for tablet builds
Set test mode param to enable test hooks in tablet builds.
This enables test ids (tid) to be set in component accessibility properties so they can be displayed in "content-desc" via XML and used as locators.
Default is "false" to avoid impacting users that may use accessibility features.
- Adding a config option for the GH action to compile with different qt versions
- Updating build scripts to use standard android env variables
- Fixing mobile targets
- Creating new targets to build, run and clean mobile builds
- Updating the builds to support qt 6.9.0 (and NDK 27.2.12479018)
- Move the GH actions to the main gh folder
- Update the main Makefile to allow cross-compilation. `detected_os` becomes `mkspecs`
Alex Jbanca
marko