chore(deps): bump tempo dependencies to 3fa3b52

[github-actions]

Tempo Dependency Updates

Bumped all tempo* dependencies from cf4e080 to 3fa3b52.

Commits

• 9845e88 fix(ci): allow release bump to fetch Git dependencies (#7037)
• c1291e1 fix(ci): use GitHub STS for replay benchmarks (#7084)
• c8eb2a5 fix(ci): require immutable STS subject IDs (#7086)
• 1e33c42 fix(ci): isolate gcloud state in benchmark workflow (#7087)
• bb504be fix(upstream): prevent retry storm due to subscription failure (#7068)
• 3c9fe50 fix(ci): remove benchmark hardfork allowlist (#7072)
• 7cc5a87 feat(release): add release preparation workflow (#7078)
• ed9e24b fix(release): use release-pr environment for preparation workflow (#7090)
• 769b8c0 feat(consensus): add verified finalized block stream (#6961)
• 5ded239 fix(release): use pre-release preparation branch (#7091)
• bc65774 fix: replace deprecated Nushell string command (#7092)
• be0b176 fix(ci): restrict add-hardfork workflow to main (#7096)
• 86e6b83 chore(commonware-p2p): size enforcing sender (#7049)
• c93d08a chore: bump revm to 42.0.1 (#6946)
• c40ff80 feat(revm): add explicit execution context (#7085)
• dc939a1 refactor(follow): make forkchoice targets round-aware (#7041)
• 59e8c54 feat(hardfork): update Zone runtimes (#6996)
• de76092 fix: restore Nushell 0.112 compatibility (#7106)
• 7b3c986 refactor: centralize transaction time-bound checks (#7105)
• b4ab9e6 ci: add Cyclops super-fast audit trigger (#7108)
• db8e7ab feat(tip-1093): extend expiring nonce window at T10 (#7080)
• c4cca1b fix(ci): restore Clippy and Foundry specs (#7125)
• 304fa81 chore(ci): use shared PR audit and enforce gate (#6806)
• 3070d6d feat(alloy): add fee token filler (#7129)
• 671416e test(evm): use production Tempo gas tables in tip20 storage actions test (#7132)
• 25cf8d1 test(consensus): share certificate fixtures (#7042)
• bd00276 chore: allow unmaintained bitmaps advisory (#7135)
• f4079dc feat(node): add tempo/1 wire format (#7043)
• 4814838 chore(ci): remove stale cargo-deny entries (#7136)
• 5ae2204 feat(zone): commit initial token enablement (#7054)
• 2db0379 ci: increase e2e test concurrency (#7141)
• 214a5d9 ci(bench): report total fees in benchmark summaries (#7145)
• 0faafd3 chore: remove Amp tools (#7138)
• b9f0440 fix(zone): enforce initial token enablement bounds (#7150)
• 36f576a refactor(consensus): drive execution layer to the notarized tip (#7057)
• 937001c ci(docker): build partial persistence nightly image (#7161)
• 3968997 feat(hardfork): update Zone runtimes (#7151)
• 6ab24b4 refactor(consensus): generalize TempoConsensus over chain spec (#7166)
• 737d3bc feat(hardfork): add T11 plumbing (#7088)
• ca3e9b6 fix(bench): revert receipt fee reporting (#7168)
• 0f87fa6 feat(tip-1093): activate expanded nonce window at T11 (#7152)
• 9ba2635 feat(hardfork): schedule T10 activation (#7172)
• 15807ed refactor: mirror portal sequencer membership in role storage (#7175)
• 4953f9b refactor: type portal roles and capability storage (#7171)
• 9f7fc92 test(precompiles): expose conformance helpers (#7180)
• fa81d61 ci: use GitHub STS for benchmark acknowledgements (#7190)
• 5c5c855 fix(txpool): enforce AA 2D pool size limits (#7144)
• 2ea901d fix(consensus): read validator state from pending parents (#7192)
• 9851034 fix(bench): extend TIP20 transaction validity (#7197)
• ff796a6 fix(bench): restore default concurrent requests (#7167)
• aa6d5cc refactor(consensus): remove redundant DKG send failure branch (#7200)
• bd44898 chore(release): prepare v1.13.0 (#7184)
• ecabbb9 fix(bench): allow release tags to mint STS tokens (#7205)
• 942ed90 fix(ci): update renamed S3 upload action (#7207)
• e0489df docs(tip-1091): update ZonePortal source link (#7204)
• 14f4bda chore(deps): bump h2 to 0.4.16 (#7210)
• 2d83b69 docs(tip-1016): align spec with TIP-1060 credit split and execution-gas naming (#7213)
• 02aabf8 docs(tip-1096): specify multi-block Tempo imports for Zones (#7164)
• cc3d2ed chore(deps): bump Commonware to v2026.7.1 (#7203)
• a890f97 perf(precompiles): use hash set for zone validation (#7212)
• 2cff6a7 refactor(txpool): scan pool for expired transactions (#7198)
• 8531681 chore(consensus): recover dkg share if revealed & ignore stale state (#6950)
• 3cfd30c feat(node): add tempo/1 transport and peer control (#7044)
• 43a6118 fix(evm): classify invalid subblock transactions as validation errors (#7220)
• eae746b test(primitives): generalize precompile activation checks (#7221)
• a1e2bc2 refactor(txpool): evict transactions using paused tokens (#7217)
• a41e318 refactor(revm): isolate signature gas accounting (#7229)
• fb0d0bd fix(rpc): mark block simulations in tx envs (#7228)
• 92be039 chore: release canary every day instead of weekly (#7224)
• f557cbb docs(tip-1096): clarify activation transition (#7233)
• ae88794 fix(consensus): startup uses all available header sources, not just execution layer (#7244)
• 2ca8e8e chore: release tempo-alloy@1.11.0, tempo-chainspec@1.11.0 and 3 more (#6903)
• 1d61c6f chore(release): prepare v1.13.1 (#7252)
• 11a9182 fix(consensus): reject finalization archives behind marshal state (#7255)
• b512809 fix(download): clear consensus state when forced (#7256)
• f7b32a4 fix(cli): include consensus in snapshot commands by default (#7154)
• 3d16f4a feat: add T12 plumbing (#7258)
• e7209c6 refactor(node): generalize Tempo consensus builder (#7262)
• 69f1351 docs(tip-1096): allow later Zone block timestamps (#7263)
• 4d24816 chore(consensus): log execution task lifecycle (#7251)
• a729a85 feat(evm): add T12 zone runtime upgrade hook (#7226)
• 2ed6c4d fix(download): resolve manifest source for consensus snapshots (#7264)
• 88b5d77 docs(tip-1096): allow only full block batches and specify events (#7235)
• bc05913 docs(tip-1096): target T12 activation (#7272)
• 86ff4de feat: add bootstrapped localnet container (#7050)
• ab1996f ci: use GitHub STS for sync-from-upstream instead of app credentials (#7277)
• fc6c04e ci: authorize tempo-firedrill in the sync-from-upstream STS policy (#7278)
• d656ef5 ci: use GitHub STS for release automation instead of app credentials (#7279)
• 8a1e156 fix(ci): stabilize reth bump lint (#7286)
• eea7bab chore: tag reth team in failed update alerts (#7289)
• 18c1743 ci(bench): enable live ValScope targets (#7107)
• 47fc390 fix(ci): pin Clippy nightly toolchain (#7293)
• ba7c4da test(alloy): re-enable sponsor relay test (#7265)
• bbb7e97 feat(consensus): ingest tempo/1 finalization certificates (#7048)
• 4997a73 refactor(consensus): parameterize & unit test the DKG actor (#7186)
• a68cbf5 test(consensus): add exhaustive unit tests around the executor actor (#7257)
• 50fbac0 fix(ci): update deny workflow pin (#7302)
• b110f4e deps: update reth from main (2026-08-25) (#7142)
• eb37c71 chore: ignore root .envrc (#7301)
• a4875f9 fix(ci): include image digests in Docker build summary (#7291)
• 758e3b7 fix(ci): sync release branches to private copies (#7311)
• 37c0757 fix(ci): update Foundry action pin (#7308)
• 05cf5a7 feat(evm): install TIP-1096 zone runtimes (#7231)
• d9e25ae fix(ci): reduce Clippy build parallelism (#7292)
• 65b2d78 fix(bench): filter noisy HTTP transport logs (#7247)
• 613ec03 chore(ci): remove Amp review workflow (#7309)
• 97db614 chore: remove broken registrar-delegation recipe (#7248)
• fa4ad68 refactor(consensus): remove commented-out block types (#7103)
• 9b8ccc8 fix(consensus): revert back to allow(dead_code) (#7307)
• 547d47d feat(consensus): wire tempo/1 certificate gossip (#7174)
• 2466858 deps: update reth from main (2026-08-27) (#7314)
• 2dbc783 chore(release): bump workspace version to v1.13.2 (#7325)
• 6a5dfde refactor(consensus): remove executor pacing (#7306)
• 10bfb5f fix(ci): remove obsolete partial persistence image (#7334)
• 7670b40 perf(keychain): sort scope keys during validation (#7298)
• 4933384 fix(ci): add upload-binaries environment (#7341)
• d644fea feat(precompiles): increase input gas cost at T11 (#7281)
• 1b625d5 docs(tip-1099): replace nested AccountKeychain ABI inputs with RLP (#7269)
• 29606fc feat(consensus): make equal timestamps configurable (#7331)
• d5c6b38 fix(consensus): wait for execution layer to be ready before driving it (#7230)
• 1eb3f95 chore(ci): lock down sync-from-upstream STS policy (#7356)
• e1a46d0 fix(ci): correct sync-from-upstream STS repositories (#7357)
• 0936fab fix(ci): match sync workflow via OIDC claim (#7359)
• 785da79 fix(ci): skip upstream sync outside organization (#7360)
• d642f9b chore: update GitHub STS action (#7361)
• 92326ce test(tip-1015): match PolicyNotFound revert data (#7352)
• 0989904 docs(tip-1096): retarget activation from T12 to T13 (#7348)
• dc2ba08 feat(precompiles): implement TIP-1099 keychain ABI changes (#7270)
• 3b7ed99 chore(bench): collect consensus performance metrics (#7367)
• 578e96e feat: bump alloy (#7364)
• 81c523f fix(tempoup): exclude draft releases from latest lookup (#7326)
• 867a681 docs(tip-1096): anchor recovery leader to first imported header (#7366)
• 5fd0587 feat(txpool): add configurable address checks (#7363)
• 15920ce fix(follow): executor independent head progression and syncing semantics (#7350)
• 207166f deps: update reth from main (2026-09-01) (#7345)
• 6253663 fix(payload): clear failed prewarm storage actions (#7371)
• 59c6879 chore(bench): collect beacon persistence metric (#7375)
• 34cd1a7 deps: update reth from main (2026-09-01) (#7376)
• 8376f6c deps: update reth from main (2026-09-01) (#7383)
• e48dec1 ci: replace dawidd6/action-download-artifact with actions/download-artifact (#7388)
• f907869 ci: drop unused matrix-outputs-write step from build workflow (#7389)
• f6f76f9 ci: install Terraform via gh-actions setup-terraform (signed releases) (#7394)
• f95e078 ci: install Foundry via gh-actions setup-foundry (attested releases) (#7393)
• 7d625db chore(docker): set nightly engine defaults (#7365)
• d5f2ceb docs(tip-1096): align activation on T13 (#7396)
• dacd1ce fix(consensus): validate decoded block bodies (#7377)
• 4914995 chore(bench): collect persistence phase metrics (#7402)
• 5216376 fix(follow): revert executor independent head progression (#7403)
• ed42940 ci: switch to first-party actions from tempoxyz/gh-actions (#7406)
• b9d7768 ci: use the vendored third-party actions from tempoxyz/gh-actions (#7418)
• e9970c1 ci: use the vendored third-party actions from tempoxyz/gh-actions (#7437)
• 2fa7ac6 ci: re-pin the vendored CodSpeed action to a commit that keeps its installer hashes (#7439)
• c05f16c ci: use the vendored third-party actions from tempoxyz/gh-actions (#7438)
• 3e7968c fix(ci): update reusable workflow pins (#7443)
• 1090ea3 test: update verification profiles for T11 and T12 (#7384)
• 3ad61df perf(builder): release state hook and BAL sender before merging transitions (#7410)
• 933f340 fix(precompiles): remove TIP-1099 keychain ABI changes (#7398)
• e89bc9f feat(primitives): add has_fee_payer_signature_marker helpers (#7245)
• 5e149ec chore(bench): disable Samply for public nightly benchmarks (#7454)
• 734f823 fix(precompiles): enable strict ABI decoding at T11 (#7444)
• 6a03d27 docs(tip-1105): add T11 pricing hardening meta TIP (#7451)
• 2662a45 Enable private Cyclops audit comments (#7448)
• e303b67 fix(precompiles): price duplicate validation (#7447)
• 8641d28 chore(deps): update reth with overlay snapshot fix (#7460)
• aae1753 feat(hardfork): schedule T11 activation (#7466)
• 4e77205 feat(follower): resolve blocks for reported certs over devp2p (#7405)
• de19bd7 fix(node): bound gossip connection poll work (#7260)
• 07a8841 chore: tag reth team in all update alerts (#7477)
• 33d5be5 feat(consensus): make future block time configurable (#7475)
• 265e30b chore(bench): tune nightly persistence settings (#7455)
• fe302cf chore(deps): update reth download defaults (#7479)
• 2fee41a fix(node): configure tempo/1 ingress limits (#7327)
• bbb6761 perf(precompiles): avoid RefCell borrow tracking in HandlerCache::get_or_insert_mut (#7432)
• f50fe61 fix(node): poll receipts in storage credit and liquidity tests (#7493)
• 7331a61 Pin GitHub STS POST action (#7498)
• d093829 fix(ci): suppress successful reth update notifications (#7507)
• 75e7242 docs(tip-1016): update gas accounting specification (#7401)
• 56456df perf(txpool): skip paused token lookups when no token was paused (#7414)
• 84c89d7 perf(precompiles): stop cloning the precompile env on every call (#7419)
• 1cea1dc perf(primitives): implement RLP length for SubBlock (#7417)
• b894f22 perf(precompiles): compute the vec data slot lazily and once per handler (#7431)
• afebc38 perf(txpool): use cached hardfork for expiring nonce check during validation (#7413)
• 022aa6b fix(ci): use allowed action for release PRs (#7513)
• 07761a7 perf(primitives): borrow key authorization fields when RLP encoding (#7416)
• 25b7052 fix(ci): bump setup-mold action to restore non-Linux skip (#7519)
• 346c22e fix(evm): activate TIP-1096 at T13 (#7521)
• c9f2a82 perf(primitives): encode signatures without intermediate allocations (#7415)
• 3f1b3f2 docs(tip-1096): specify hash-based token authentication (#7522)
• 1de2392 chore(ci): migrate deny checks to gh-actions (#7518)
• db87590 deps: update reth from main (2026-09-08) (#7387)
• 87c9e75 perf(txpool): short-circuit the AMM liquidity check for validator-accepted tokens (#7421)
• b96e975 feat(bench): add public mixed workload preset (#7548)
• 58febfd chore(release): bump Cargo version to v1.14.0 (#7551)
• 80895d4 fix(ci): use automation branch for Cargo version bump PR (#7552)
• 461035a feat(bench): expose public-mix in multi-region workflow (#7550)
• ee4c173 fix(ci): run scheduled multi-region benchmarks with public-mix (#7558)
• 951a2c4 feat(bench): add Tempo Earn transaction presets (#7490)
• 4a9874c chore(deps): update reth from main (2026-09-09) (#7554)
• 5f05aca chore: prune unused zepter features (#7563)
• ddcdd6c fix(bench): default multi-region benchmarks to one run pair (#7565)
• 1cfa8e3 fix(bench): use state-bloat recipients for public-mix (#7566)
• a742012 feat(bench): add zone portal txgen preset (#7537)
• 2b055ed fix(ci): repin rust-deny workflow so fork PRs pass Harden Runner (#7573)
• a6d5349 test(ci): terminate hung node integration tests (#7486)
• 9587427 docs(tips): approve TIP-1093 and TIP-1100 (#7485)
• ff8aa97 refactor: remove live subblock machinery (#7449)
• 0c8ab52 fix(faucet): validate --faucet.node-address at parse time (#7310)
• 1db9a3a fix(alloy): use pending block tag for protocol nonce fills (#7532)
• 219fb4a refactor(rpc): use generated Transfer event signature (#7568)
• 9091b41 refactor: compute fixed Keccak hashes at compile time (#7590)
• 133f1ea fix(bench): use plain TIP-20 transfers in public-mix (#7589)
• 1080115 refactor(localnet): use Alloy receipt waiting (#7567)
• 6df35dd chore: remove stale frontend editor settings (#7562)
• f2e5e15 feat(bench): summarize non-INFO/DEBUG logs by message (#7588)
• a1e95b4 chore(bench): increase RPC transaction hash cache to 3 million (#7591)
• b7ff618 chore(deps): bump Commonware to v2026.9.0 (#7450)
• 3631138 refactor(consensus): employ commonware semantics when writing DKG state (#7594)
• 731535b feat(precompiles): allow trailing ABI bytes from T12 (#7598)
• 765f8a0 fix(consensus-config): enable Commonware BLS feature (#7613)
• 59558c5 fix(ci): route Reth bump failures to eng-reth-alerts (#7612)
• b48aed9 fix(consensus): stop the node when any consensus actor exits (#7622)
• f62af41 deps: update reth from main (2026-09-14) (#7584)
• 3fc576f fix(dkg): decouple artifacts from consensus (#7615)
• 3fda470 fix(ci): refresh STS token before benchmark reporting (#7632)
• d286839 fix(deps): update rustls to resolve security advisory (#7633)
• 6957b77 fix(ci): restore precompile dependency coverage (#7635)
• e074a29 docs(tip-1088): unify quote/swap fill logic (#6700)
• 4a635ff docs(tip-1106): allow expiring nonce discriminators (#7468)
• df29d52 docs(tip-1116): add T12 hardfork meta TIP (#7601)
• 034a9ab chore(ci): remove separate benchmark hosting repository (#7528)
• 0643e37 feat(tip-1095): add policy-aware channel transfers (#6957)
• 934bb5a fix(tip-1095): preserve legacy channel policy sender (#7271)
• 0298d48 fix(dex): quote swaps order-by-order at T12 (#6614)
• 30e26cd fix(ci): revert separate nightly image publishing (#7644)
• addbc5a perf(consensus): avoid rehashing locally built proposals (#7650)
• 3912cff feat: allow expiring nonce discriminators (#7474)
• 90fa893 feat(bench): emit compact workload category metadata (#7663)
• 4a11606 feat(ci): trigger Docker image builds from PR comments (#7655)
• f3faaaa fix(xtask): simplify DKG outcome arguments (#7381)
• 69c7467 fix(consensus): enforce network identity baked into binary/chainspec (#7630)
• cdad117 fix(ci): restore Docker PR build notifications (#7667)
• 25b216a feat(consensus): ensure certificate tip epoch matches height index (#7671)
• b571bf6 fix(dex): make ghost-order-compatible (#7662)
• e9f82dd deps: update reth from main (2026-09-17) (#7625)
• ff1ea9b fix(bench): declare vault setup receipt dependencies (#7697)
• 3a3bbd0 fix(bench): wait for neobank deployments before seeding withdrawals (#7698)
• 231584b perf(builder): finish encoded transaction lists without copying (#7412)
• 224d358 chore(deps): update imbl and remove bitmaps exception (#7677)
• cf13134 fix(bench): sort hardforks in protocol order (#7717)
• 3fa3b52 fix(bench): use C4D for GCP multi-region runs (#7720)