PolkadotSDK stable2606 by UnArbosSix · Pull Request #2837 · RaoFoundation/subtensor

UnArbosSix · 2026-07-07T21:45:52Z

Description

Upgrades Subtensor from the previous Polkadot SDK pin to the RaoFoundation stable2606 SDK revision, along with the matching Frontier fork revision and Rust 1.93.0 toolchain pin required by that SDK line.

What Changed

Updated workspace Polkadot SDK, Frontier, and related dependency pins in Cargo.toml and refreshed Cargo.lock.
Adapted runtime and node code for stable2606 API changes, including authorized transaction creation for drand offchain submissions, updated transaction extension ordering, session key generation API changes, lazy block runtime API signatures, and block length construction.
Updated affected pallets, precompiles, support procedural code, scripts, Dockerfile, and Rust setup docs for the new SDK/toolchain surface.
Bumped runtime/src/lib.rs spec_version from 424 to 425.

Behavioral Impact

This is a runtime-affecting dependency upgrade. The drand offchain worker now submits authorized transactions through the stable2606 transaction-extension path instead of the removed bare unsigned transaction path. Transaction extension construction and metadata hash handling are updated to match the new SDK APIs.

Migration / Spec Version

No storage migration is introduced by this PR. The runtime spec_version is bumped to 425 for the SDK/runtime changes.

Testing

The original PR body did not document testing performed. CI should at minimum cover workspace build/checks, runtime compilation, drand pallet tests, precompile tests, and eco-tests after dependency pins are made consistent.

github-actions · 2026-07-07T21:46:47Z

eco-tests changed — indexer review required

This PR modifies files under eco-tests/. and may affect downstream indexing.
cc @evgeny-s — please review manually

Changed files

eco-tests/Cargo.toml
eco-tests/src/mock.rs

github-actions · 2026-07-07T21:48:39Z

🛡️ AI Review — Skeptic (security review)

VERDICT: SAFE

VERY HIGH account-age/activity scrutiny moderated by repo write permission; no Gittensor association found; branch upgrade-polkadot-v1.24.0 targets devnet-ready.

Static-only review found no changes to .github/ai-review/* or .github/copilot-instructions.md. I reviewed the runtime/pallet changes around drand authorized transactions, transaction extension construction, shielded transaction decoding, scripts/workflow edits, and dependency pin changes; no actionable security issue was identified.

Findings

No findings.

Conclusion

No malicious intent or PR-introduced security vulnerability was found in the current diff.

🔍 AI Review — Auditor (domain review)

VERDICT: 👍

Gittensor UNKNOWN; author is not in the trusted allowlists and has a very new GitHub profile, but has repo write permission, so calibration focused on runtime/dependency correctness.

Description discrepancy: the PR body still says spec_version changed from 424 to 425, but the current runtime has spec_version: 427 and the PR diff does not modify that value. That is stale PR text, not a merge blocker.

The prior dependency-pin concern remains addressed: eco-tests/Cargo.toml now follows the workspace stable2606 Polkadot SDK revision and the same pinned w3f-bls revision. I also checked for stale opentensor/polkadot-sdk and fix-no-std pins and found none in the touched dependency surfaces.

git diff --check passed and no auto-fixes were made. I did not run builds/tests because the review did not require runtime confirmation; the devnet spec-version RPC hostname was not resolvable from this environment, so no network-based spec auto-fix was attempted.

Findings

No findings.

Prior-comment reconciliation

2502492c: addressed — eco-tests/Cargo.toml now uses the same stable2606 Polkadot SDK revision as the workspace and pins w3f-bls to the workspace revision.

Conclusion

The SDK/toolchain upgrade, drand authorized transaction path, transaction-extension wiring, and dependency pins look coherent in the current diff. Approving with only the non-blocking stale PR-body spec-version text noted.

github-actions · 2026-07-07T21:48:52Z

🔄 AI review updated — Skeptic: VULNERABLE

github-actions

AI review — see the sticky summary comment for the verdict and the inline comments below for specific findings.

github-actions · 2026-07-07T21:56:37Z

🔄 AI review updated — Skeptic: SAFE Auditor: 👎

github-actions

AI review — see the sticky summary comment for the verdict and the inline comments below for specific findings.

github-actions · 2026-07-07T22:02:16Z

🔄 AI review updated — Skeptic: SAFE Auditor: 👎

github-actions

AI review — see the sticky summary comment for the verdict and the inline comments below for specific findings.

github-actions · 2026-07-07T23:56:29Z

🔄 AI review updated — Skeptic: VULNERABLE

github-actions · 2026-07-08T01:36:01Z

🔄 AI review updated — Skeptic: SAFE Auditor: 👍

github-actions · 2026-07-08T02:27:59Z

🔄 AI review updated — Skeptic: SAFE Auditor: 👍

github-actions

AI review — see the sticky summary comment for the verdict and the inline comments below for specific findings.

github-actions · 2026-07-08T15:01:53Z

🔄 AI review updated — Skeptic: VULNERABLE

# Conflicts: # pallets/subtensor/src/utils/evm.rs

github-actions · 2026-07-08T16:39:39Z

🔄 AI review updated — Skeptic: SAFE Auditor: 👍

github-actions · 2026-07-08T16:57:37Z

🔄 AI review updated — Skeptic: SAFE Auditor: 👍

vercel · 2026-07-09T01:29:58Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
subtensor	Error		Jul 9, 2026 4:02pm

github-actions · 2026-07-09T14:57:57Z

🔄 AI review updated — Skeptic: SAFE Auditor: 👍

github-actions · 2026-07-09T15:24:42Z

🔄 AI review updated — Skeptic: SAFE Auditor: 👍

github-actions · 2026-07-09T16:09:03Z

🔄 AI review updated — Skeptic: SAFE Auditor: 👍

UnArbosSix added 3 commits July 7, 2026 11:19

Upgrade Subtensor to Polkadot SDK stable2606

4beb626

Pin Rust toolchain for SDK stable2606

06dbc09

update runtime/node for new SDK version

3e7953a

UnArbosSix added the skip-cargo-audit This PR fails cargo audit but needs to be merged anyway label Jul 7, 2026

github-actions Bot requested a review from evgeny-s July 7, 2026 21:46

UnArbosSix added 2 commits July 7, 2026 14:50

bump spec

1f3b2e1

cargo fmt

3085926

github-actions Bot reviewed Jul 7, 2026

View reviewed changes

Comment thread eco-tests/Cargo.toml Outdated

github-actions Bot reviewed Jul 7, 2026

View reviewed changes

Comment thread eco-tests/Cargo.toml Outdated

UnArbosSix added 4 commits July 7, 2026 15:33

clippy

4b3ba80

more lints

36f7897

Merge branch 'devnet-ready' into upgrade-polkadot-v1.24.0

7a373e8

bump spec

cecdfa2

github-actions Bot reviewed Jul 7, 2026

View reviewed changes

Comment thread Cargo.toml Outdated

fix w3f-bls

1308b4b

fix tests

787d0d7

github-actions Bot reviewed Jul 8, 2026

View reviewed changes

Comment thread pallets/subtensor/src/utils/evm.rs Outdated

Merge branch 'devnet-ready' into upgrade-polkadot-v1.24.0

e014eeb

# Conflicts: # pallets/subtensor/src/utils/evm.rs

UnArbosSix force-pushed the upgrade-polkadot-v1.24.0 branch from 37711f2 to e014eeb Compare July 8, 2026 16:33

add libclang-dev

05b2e09

Merge branch 'devnet-ready' into upgrade-polkadot-v1.24.0

855458b

vercel Bot deployed to Preview July 9, 2026 01:30 View deployment

trigger CI

3f6aee8

vercel Bot deployed to Preview July 9, 2026 14:51 View deployment

trigger CI

28e3d80

vercel Bot had a problem deploying to Preview July 9, 2026 15:18 Failure

update dissolutions for new version

f2e5bbe

vercel Bot had a problem deploying to Preview July 9, 2026 16:02 Failure

Uh oh!

Conversation

UnArbosSix commented Jul 7, 2026 • edited by github-actions Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

What Changed

Behavioral Impact

Migration / Spec Version

Testing

Uh oh!

github-actions Bot commented Jul 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

eco-tests changed — indexer review required

Uh oh!

github-actions Bot commented Jul 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🛡️ AI Review — Skeptic (security review)

Findings

Conclusion

🔍 AI Review — Auditor (domain review)

Findings

Prior-comment reconciliation

Conclusion

Uh oh!

github-actions Bot commented Jul 7, 2026

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

github-actions Bot commented Jul 7, 2026

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

github-actions Bot commented Jul 7, 2026

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

github-actions Bot commented Jul 7, 2026

Uh oh!

github-actions Bot commented Jul 8, 2026

Uh oh!

github-actions Bot commented Jul 8, 2026

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

github-actions Bot commented Jul 8, 2026

Uh oh!

github-actions Bot commented Jul 8, 2026

Uh oh!

github-actions Bot commented Jul 8, 2026

Uh oh!

vercel Bot commented Jul 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 9, 2026

Uh oh!

github-actions Bot commented Jul 9, 2026

Uh oh!

github-actions Bot commented Jul 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

UnArbosSix commented Jul 7, 2026 •

edited by github-actions Bot

Loading

github-actions Bot commented Jul 7, 2026 •

edited

Loading

github-actions Bot commented Jul 7, 2026 •

edited

Loading

vercel Bot commented Jul 9, 2026 •

edited

Loading