PolkadotSDK stable2606 by UnArbosSix · Pull Request #2837 · RaoFoundation/subtensor

UnArbosSix · 2026-07-07T21:45:52Z

Description

Upgrades Subtensor from the previous Polkadot SDK pin to the RaoFoundation stable2606 SDK revision, along with the matching Frontier fork revision and Rust 1.93.0 toolchain pin required by that SDK line.

What Changed

Updated workspace Polkadot SDK, Frontier, and related dependency pins in Cargo.toml and refreshed Cargo.lock.
Adapted runtime and node code for stable2606 API changes, including authorized transaction creation for drand offchain submissions, updated transaction extension ordering, session key generation API changes, lazy block runtime API signatures, and block length construction.
Updated affected pallets, precompiles, support procedural code, scripts, Dockerfile, and Rust setup docs for the new SDK/toolchain surface.
Bumped runtime/src/lib.rs spec_version from 424 to 425.

Behavioral Impact

This is a runtime-affecting dependency upgrade. The drand offchain worker now submits authorized transactions through the stable2606 transaction-extension path instead of the removed bare unsigned transaction path. Transaction extension construction and metadata hash handling are updated to match the new SDK APIs.

Migration / Spec Version

No storage migration is introduced by this PR. The runtime spec_version is bumped to 425 for the SDK/runtime changes.

Testing

The original PR body did not document testing performed. CI should at minimum cover workspace build/checks, runtime compilation, drand pallet tests, precompile tests, and eco-tests after dependency pins are made consistent.

github-actions · 2026-07-07T21:46:47Z

eco-tests changed — indexer review required

This PR modifies files under eco-tests/. and may affect downstream indexing.
cc @evgeny-s — please review manually

Changed files

eco-tests/Cargo.toml
eco-tests/src/mock.rs

github-actions · 2026-07-07T21:48:39Z

🛡️ AI Review — Skeptic (security review)

VERDICT: SAFE

VERY HIGH account-age/activity scrutiny, moderated by repository write permission; no Gittensor association or author/committer mismatch; upgrade-polkadot-v1.24.0 → main.

Static analysis covered the full SDK/Frontier dependency repin, runtime transaction-extension changes, drand authorization path, shielded extrinsic decoding, vendored cryptographic and execution code, runtime API adaptations, and build/workflow edits. Protected AI-review instructions were not modified, the runtime spec version was bumped, and git dependencies are revision-pinned.

Findings

No findings.

Conclusion

No malicious intent or actionable PR-introduced security vulnerability was found.

🔍 AI Review — Auditor (domain review)

VERDICT: 👍

Gittensor UNKNOWN; the author has a very new public profile but repository write permission, so dependency, runtime, drand, and vendored cryptography changes received heightened scrutiny.

The stable2606 SDK adaptation, Frontier/BLS vendor updates, authorized drand transaction path, and dependency pins are coherent. Overlapping open PRs concern unrelated features or fixes rather than duplicating this SDK upgrade.

The PR description has one stale detail: it says spec_version changed from 424 to 425, while the current diff changes it from 432 to 433.

git diff --check passed; no auto-fixes were needed. No builds or tests were run because no finding required runtime confirmation.

Findings

No findings.

Conclusion

No substantive correctness or domain-rule violations were found. The PR is ready aside from correcting the stale spec-version values in its description.

github-actions · 2026-07-07T21:48:52Z

🔄 AI review updated — Skeptic: VULNERABLE

github-actions

AI review — see the sticky summary comment for the verdict and the inline comments below for specific findings.

github-actions · 2026-07-07T21:56:37Z

🔄 AI review updated — Skeptic: SAFE Auditor: 👎

github-actions

AI review — see the sticky summary comment for the verdict and the inline comments below for specific findings.

github-actions · 2026-07-07T22:02:16Z

🔄 AI review updated — Skeptic: SAFE Auditor: 👎

github-actions

AI review — see the sticky summary comment for the verdict and the inline comments below for specific findings.

github-actions · 2026-07-07T23:56:29Z

🔄 AI review updated — Skeptic: VULNERABLE

github-actions · 2026-07-08T01:36:01Z

🔄 AI review updated — Skeptic: SAFE Auditor: 👍

github-actions · 2026-07-08T02:27:59Z

🔄 AI review updated — Skeptic: SAFE Auditor: 👍

github-actions

AI review — see the sticky summary comment for the verdict and the inline comments below for specific findings.

github-actions · 2026-07-08T15:01:53Z

🔄 AI review updated — Skeptic: VULNERABLE

github-actions · 2026-07-08T16:39:39Z

🔄 AI review updated — Skeptic: SAFE Auditor: 👍

github-actions · 2026-07-08T16:57:37Z

🔄 AI review updated — Skeptic: SAFE Auditor: 👍

vercel · 2026-07-09T01:29:58Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
subtensor	Ready	Preview, Comment	Jul 17, 2026 5:27pm

github-actions · 2026-07-09T14:57:57Z

🔄 AI review updated — Skeptic: SAFE Auditor: 👍

github-actions · 2026-07-09T15:24:42Z

🔄 AI review updated — Skeptic: SAFE Auditor: 👍

github-actions · 2026-07-09T16:09:03Z

🔄 AI review updated — Skeptic: SAFE Auditor: 👍

github-actions · 2026-07-17T16:29:50Z

🔄 AI review updated — Skeptic: SAFE Auditor: 👍

github-actions · 2026-07-17T16:52:31Z

🔄 AI review updated — Skeptic: SAFE Auditor: 👍

github-actions · 2026-07-17T16:55:28Z

🔄 AI review updated — Skeptic: SAFE Auditor: 👍

github-actions · 2026-07-17T17:28:05Z

🔄 AI review updated — Skeptic: SAFE Auditor: 👍

UnArbosSix added the skip-cargo-audit This PR fails cargo audit but needs to be merged anyway label Jul 7, 2026

github-actions Bot requested a review from evgeny-s July 7, 2026 21:46

github-actions Bot reviewed Jul 7, 2026

View reviewed changes

Comment thread eco-tests/Cargo.toml Outdated

github-actions Bot reviewed Jul 7, 2026

View reviewed changes

Comment thread eco-tests/Cargo.toml Outdated

github-actions Bot reviewed Jul 7, 2026

View reviewed changes

Comment thread Cargo.toml Outdated

github-actions Bot reviewed Jul 8, 2026

View reviewed changes

Comment thread pallets/subtensor/src/utils/evm.rs Outdated

UnArbosSix force-pushed the upgrade-polkadot-v1.24.0 branch from 37711f2 to e014eeb Compare July 8, 2026 16:33

vercel Bot deployed to Preview July 9, 2026 01:30 View deployment

vercel Bot deployed to Preview July 9, 2026 14:51 View deployment

vercel Bot had a problem deploying to Preview July 9, 2026 15:18 Failure

vercel Bot had a problem deploying to Preview July 9, 2026 16:02 Failure

UnArbosSix added skip-cargo-audit This PR fails cargo audit but needs to be merged anyway and removed skip-cargo-audit This PR fails cargo audit but needs to be merged anyway labels Jul 9, 2026

This was referenced Jul 13, 2026

ci: harden and accelerate cached runtime checks #2876

Closed

fix(transaction-fee): make swap_hotkey(v2) fees payable in alpha #2891

Closed

This was referenced Jul 15, 2026

Cleanup SubnetUidToLeaseId in do_terminate_lease #2912

Closed

ci: restore public multi-arch localnet images #2919

Closed

Publish tested localnet images and restore clippy #2928

Merged

UnArbosSix added 12 commits July 17, 2026 09:09

Upgrade Subtensor to Polkadot SDK stable2606

608cd59

Pin Rust toolchain for SDK stable2606

f9a5c40

update runtime/node for new SDK version

e8c5087

cargo fmt

4b829c5

clippy

360fb27

more lints

24cf7f3

fix w3f-bls

8c08d64

fix tests

a7a93c8

add libclang-dev

f409f2b

trigger CI

593ae58

trigger CI

b8a23cd

update dissolutions for new version

eb60f1b

UnArbosSix force-pushed the upgrade-polkadot-v1.24.0 branch from f2e5bbe to eb60f1b Compare July 17, 2026 16:26

UnArbosSix changed the base branch from devnet-ready to main July 17, 2026 16:26

vercel Bot deployed to Preview July 17, 2026 16:28 View deployment

UnArbosSix added 2 commits July 17, 2026 09:48

Vendor stable2606 Frontier and BLS updates

d730c55

bump spec

f3f2e80

vercel Bot deployed to Preview July 17, 2026 16:54 View deployment

Fix stable2606 SDK compatibility

2eab240

vercel Bot deployed to Preview July 17, 2026 17:27 View deployment

github-actions Bot mentioned this pull request Jul 17, 2026

ci: cut CI time with trusted routing and Fireactions caches #2926

Open

UnArbosSix closed this Jul 17, 2026

UnArbosSix deleted the upgrade-polkadot-v1.24.0 branch July 17, 2026 20:17

Uh oh!

Conversation

UnArbosSix commented Jul 7, 2026 • edited by github-actions Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

What Changed

Behavioral Impact

Migration / Spec Version

Testing

Uh oh!

github-actions Bot commented Jul 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

eco-tests changed — indexer review required

Uh oh!

github-actions Bot commented Jul 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🛡️ AI Review — Skeptic (security review)

Findings

Conclusion

🔍 AI Review — Auditor (domain review)

Findings

Conclusion

Uh oh!

github-actions Bot commented Jul 7, 2026

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

github-actions Bot commented Jul 7, 2026

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

github-actions Bot commented Jul 7, 2026

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

github-actions Bot commented Jul 7, 2026

Uh oh!

github-actions Bot commented Jul 8, 2026

Uh oh!

github-actions Bot commented Jul 8, 2026

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

github-actions Bot commented Jul 8, 2026

Uh oh!

github-actions Bot commented Jul 8, 2026

Uh oh!

github-actions Bot commented Jul 8, 2026

Uh oh!

vercel Bot commented Jul 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 9, 2026

Uh oh!

github-actions Bot commented Jul 9, 2026

Uh oh!

github-actions Bot commented Jul 9, 2026

Uh oh!

github-actions Bot commented Jul 17, 2026

Uh oh!

github-actions Bot commented Jul 17, 2026

Uh oh!

github-actions Bot commented Jul 17, 2026

Uh oh!

github-actions Bot commented Jul 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

UnArbosSix commented Jul 7, 2026 •

edited by github-actions Bot

Loading

github-actions Bot commented Jul 7, 2026 •

edited

Loading

github-actions Bot commented Jul 7, 2026 •

edited

Loading

vercel Bot commented Jul 9, 2026 •

edited

Loading