Ss

.github/workflows/ci.yml

@@ -12,48 +12,53 @@ permissions:
 env:
   CARGO_TERM_COLOR: always
   WASM_MAX_BYTES: 262144
-
 jobs:
   check-and-test:
-    name: Lint, Test & Build WASM
+    name: Lint, Test & Build WASM (${{ matrix.toolchain }})
     runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        toolchain: [stable]
+        target: [wasm32v1-none]
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
 
       - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
+        uses: dtolnay/rust-toolchain@master
         with:
-          targets: wasm32-unknown-unknown
+          toolchain: ${{ matrix.toolchain }}
+          targets: ${{ matrix.target }}
           components: rustfmt, clippy
 
       - name: Cache Cargo dependencies and build cache
         uses: Swatinem/rust-cache@v2
         with:
-          key: soroban-contracts
+          key: soroban-contracts-${{ matrix.toolchain }}
 
       - name: Check code formatting
         run: cargo fmt --all -- --check
 
       - name: Run Clippy lints
-        run: cargo clippy --all-targets --all-features -- -D warnings
+        run: cargo clippy --all -- -D warnings
 
       - name: Run workspace unit and integration tests
         run: cargo test --all --verbose
 
       - name: Build WASM contracts in release mode
         run: |
-          cargo build --release --target wasm32-unknown-unknown
+          cargo build --release --target ${{ matrix.target }}
 
       - name: Report WASM artifact sizes
         run: |
           set -euo pipefail
 
           shopt -s nullglob
-          wasm_artifacts=(target/wasm32-unknown-unknown/release/*.wasm)
+          wasm_artifacts=(target/${{ matrix.target }}/release/*.wasm)
 
           if (( ${#wasm_artifacts[@]} == 0 )); then
-            echo "No WASM artifacts found in target/wasm32-unknown-unknown/release" >&2
+            echo "No WASM artifacts found in target/${{ matrix.target }}/release" >&2
             exit 1
           fi
 
@@ -69,10 +74,10 @@ jobs:
           set -euo pipefail
 
           shopt -s nullglob
-          wasm_artifacts=(target/wasm32-unknown-unknown/release/*.wasm)
+          wasm_artifacts=(target/${{ matrix.target }}/release/*.wasm)
 
           if (( ${#wasm_artifacts[@]} == 0 )); then
-            echo "No WASM artifacts found in target/wasm32-unknown-unknown/release" >&2
+            echo "No WASM artifacts found in target/${{ matrix.target }}/release" >&2
             exit 1
           fi
 
@@ -83,3 +88,16 @@ jobs:
               exit 1
             fi
           done
+
+  shellcheck:
+    name: ShellCheck
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Run ShellCheck
+        uses: ludeeus/action-shellcheck@2.0.0
+        with:
+          scandir: scripts
+          additional_files: scripts/*.sh

.github/workflows/contract-ci.yml

@@ -33,4 +33,4 @@ jobs:
         run: cargo fmt -- --check
 
       - name: Run clippy
-        run: cargo clippy -- -D warnings
+        run: cargo clippy --all -- -D warnings

.github/workflows/pr-check.yml

@@ -0,0 +1,44 @@
+name: PR Check
+
+on:
+  pull_request:
+    branches: [dev]
+    types: [opened, edited, synchronize, reopened]
+
+permissions:
+  pull-requests: read
+
+jobs:
+  validate-pr:
+    name: Validate PR Title & Description
+    runs-on: ubuntu-latest
+    steps:
+      - name: Validate PR title (conventional commits)
+        uses: amannn/action-semantic-pull-request@v5
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          types: |
+            feat
+            fix
+            docs
+            style
+            refactor
+            perf
+            test
+            build
+            ci
+            chore
+            revert
+
+      - name: Check PR description for issue reference
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const body = context.payload.pull_request.body || '';
+            const regex = /(closes|fixes|resolves)\s+#\d+/i;
+            if (!regex.test(body)) {
+              core.setFailed('PR description must contain a closing keyword (Closes #XX, Fixes #XX, or Resolves #XX)');
+            } else {
+              core.info('Issue reference found in PR description');
+            }

.github/workflows/smoke-test.yml

@@ -26,7 +26,13 @@ jobs:
 
       - name: Install Stellar CLI
         run: |
-          cargo install --locked stellar-cli --features opt
+          cargo install --locked stellar-cli --version 22.0.0 --features opt
+
+      - name: Verify Stellar CLI Version
+        run: |
+          CLI_VERSION=$(stellar --version 2>/dev/null || soroban --version 2>/dev/null)
+          echo "Installed CLI version: $CLI_VERSION"
+          echo "$CLI_VERSION" | grep -q "22\.0\.0" || { echo "Error: Stellar CLI version is not 22.0.0" >&2; exit 1; }
 
       - name: Run smoke test
         env:

.gitignore

@@ -10,7 +10,6 @@
 # Rust / Cargo
 /target/
 **/target/
-Cargo.lock
 *.rs.bk
 *.pdb
 
@@ -42,4 +41,5 @@ tarpaulin-report.html
 debug/
 
 # Maintainer-only GitHub issue tooling (not published)
+imp
 # NOTE: /scripts/ is intentionally NOT ignored – deployment scripts are public.

CONTRIBUTING.md

@@ -18,6 +18,7 @@ All active development happens on the `dev` branch. The `main` branch is reserve
    git pull origin dev
    git checkout -b feature/your-feature-name
    ```
+   *Note: Always ensure your feature branch branches off `dev`.*
 3. **Make your changes**, adhering to code style guidelines and writing unit tests.
 4. **Commit using [Conventional Commits](https://www.conventionalcommits.org/)**:
    ```bash