release: iDMA 0.7.0

.github/actions/bender-db-cache/action.yml

@@ -0,0 +1,20 @@
+# Copyright 2026 ETH Zurich and University of Bologna.
+# Licensed under the Apache License, Version 2.0, see LICENSE for details.
+# SPDX-License-Identifier: Apache-2.0
+
+# Authors:
+# - Daniel Keller <dankeller@iis.ee.ethz.ch>
+
+name: Cache Bender database
+description: Relocate bender's bare-repo git database to a cached path
+runs:
+  using: composite
+  steps:
+    - shell: bash
+      run: echo "BENDER_DB_DIR=$HOME/.cache/bender-db" >> "$GITHUB_ENV"
+    - uses: actions/cache@v4
+      with:
+        path: ~/.cache/bender-db
+        key: bender-db-${{ runner.os }}-${{ hashFiles('Bender.lock') }}
+        restore-keys: |
+          bender-db-${{ runner.os }}-

.github/actions/verify-setup/action.yml

@@ -0,0 +1,75 @@
+# Copyright 2026 ETH Zurich and University of Bologna.
+# Licensed under the Apache License, Version 2.0, see LICENSE for details.
+# SPDX-License-Identifier: Apache-2.0
+
+# Authors:
+# - Daniel Keller <dankeller@iis.ee.ethz.ch>
+
+name: Set up the public verification toolchain
+description: Bender database cache, uv, Bender and optionally Verilator
+inputs:
+  verilator:
+    description: Install Verilator from apt; ubuntu-24.04 ships 5.020
+    default: 'false'
+  bender-version:
+    description: Bender release to install
+    default: '0.32.1'
+  ccache-key:
+    description: >
+      Distinguishes this job's ccache from its siblings. Matrix legs share a job
+      id, so a shared key makes them race and all but one fail to save.
+    default: shared
+runs:
+  using: composite
+  steps:
+    - uses: ./.github/actions/bender-db-cache
+
+    - uses: astral-sh/setup-uv@v7
+      with:
+        enable-cache: true
+
+    - uses: actions/cache@v4
+      with:
+        path: ~/.cache/bender-bin
+        key: bender-${{ inputs.bender-version }}-${{ runner.os }}
+    - shell: bash
+      run: |
+        if [ -x "$HOME/.cache/bender-bin/bender" ]; then
+          echo "$HOME/.cache/bender-bin" >> "$GITHUB_PATH"
+        fi
+    - uses: pulp-platform/pulp-actions/bender-install@v2.5.0
+      with:
+        version: ${{ inputs.bender-version }}
+    - shell: bash
+      run: |
+        mkdir -p "$HOME/.cache/bender-bin"
+        if [ ! -x "$HOME/.cache/bender-bin/bender" ]; then
+          cp "$(command -v bender)" "$HOME/.cache/bender-bin/bender"
+        fi
+        bender --version
+
+    # ubuntu's verilator ships OBJCACHE empty, so the sims pass OBJCACHE=ccache
+    - if: inputs.verilator == 'true'
+      shell: bash
+      run: |
+        sudo apt-get update
+        sudo apt-get install -y verilator ccache
+        echo "CCACHE_DIR=$HOME/.cache/ccache" >> "$GITHUB_ENV"
+        echo "CCACHE_MAXSIZE=2G" >> "$GITHUB_ENV"
+    - if: inputs.verilator == 'true'
+      uses: actions/cache@v4
+      with:
+        path: ~/.cache/ccache
+        key: ccache-${{ inputs.ccache-key }}-${{ github.sha }}
+        restore-keys: |
+          ccache-${{ inputs.ccache-key }}-
+
+    - if: inputs.verilator == 'true'
+      shell: bash
+      run: |
+        verilator --version
+        verilator --version | grep -qE '^Verilator 5\.' || {
+          echo "expected Verilator 5.x from apt"; exit 1; }
+    - if: inputs.verilator == 'true'
+      shell: bash
+      run: uv run --locked make idma_verify_toolchain

.github/authors-cfg.yaml

@@ -6,10 +6,10 @@
 # - Thomas Benz <tbenz@iis.ee.ethz.ch>
 
 header-regex: >
-  (?:#\!/.*\n)*[/|#]+ Copyright ([0-9]+) ETH Zurich and University of Bologna\.\n[/|#]+ Solderpad Hardware License, Version 0\.51, see LICENSE for details\.\n[/|#]+ SPDX-License-Identifier: SHL-0\.51\n\n[/|#]+ Authors:\n((?:[/#]+ - [0-9A-Za-z ]+<[0-9A-Za-z\.]+@[0-9A-Za-z\.]+>\n)+)
+  (?:#\!/.*\n)*[/|#]+ Copyright ([0-9]+) [^\n]+\n(?:[/|#][^\n]*\n|\n)*?[/|#]+ SPDX-License-Identifier: (?:SHL-0\.51|Apache-2\.0)\n(?:[/|#][^\n]*\n|\n)*?[/|#]+ Authors:\n((?:[/|#]+ - [0-9A-Za-z .]+<[^\s>]+@[^\s>]+>\n)+)
 
 author-regex: >
-  ([0-9A-Za-z ]+)<([0-9A-Za-z\.]+@[0-9A-Za-z\.]+)>
+  ([0-9A-Za-z .]+)<([^\s>]+@[^\s>]+)>
 
 excludes:
   - LICENSE
@@ -27,7 +27,9 @@ exclude-ext:
   - svg
   - txt
   - json
+  - toml
   - md
+  - mdx
   - lock
   - local
 
@@ -38,10 +40,8 @@ allowed-years:
   - 2023
   - 2024
   - 2025
+  - 2026
 
-allowed-authors:
-  Axel Vanoni: axvanoni@ethz.ch
-  Michael Rogenmoser: michaero@iis.ee.ethz.ch
-  Samuel Riedel: sriedel@iis.ee.ethz.ch
-  Thomas Benz: tbenz@iis.ee.ethz.ch
-  Tobias Senti: tsenti@ethz.ch
+allowed-domains:
+  - ethz.ch
+  - mosaic-soc.com

.github/pull_request_template.md

@@ -0,0 +1,29 @@
+<!--
+Thanks for contributing to iDMA. Please target this PR at `devel`, not
+`master`. External PRs against `master` are auto-retargeted to `devel`.
+See CONTRIBUTING.md for the branch policy.
+-->
+
+## Description
+
+<!-- What does this PR change and why? Link related issues. -->
+
+## Type of change
+
+- [ ] Bug fix
+- [ ] New feature
+- [ ] Refactor / cleanup
+- [ ] Documentation
+- [ ] Build / CI
+
+## Checklist
+
+- [ ] This PR targets `devel` (not `master`).
+- [ ] Commits follow [Chris Beams style](https://chris.beams.io/posts/git-commit/) (≤100-char imperative subject, optional `area:` prefix).
+- [ ] `make idma_hw_all` and the relevant lints pass locally.
+- [ ] No AI-attribution lines on commits (e.g. `Co-authored-by:` for AI tools).
+- [ ] Related issues are referenced.
+
+## Notes for reviewers
+
+<!-- Anything to call out: tricky areas, follow-ups, dependencies on other PRs. -->

.github/verible.waiver

@@ -6,3 +6,6 @@
 # - Thomas Benz <tbenz@iis.ee.ethz.ch>
 
 waive --rule=package-filename --location="src/frontend/inst64/idma_inst64_opcode.sv"
+
+# IDMA_DV / IDMA_ND_DV are the exported verification API; renaming breaks downstream
+waive --rule=interface-name-style --location="test/idma_intf.sv"

.github/workflows/analyze.yml

@@ -19,22 +19,18 @@ jobs:
     steps:
     -
       name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
     -
-      name: Install Python
-      uses: actions/setup-python@v5
+      name: Install uv
+      uses: astral-sh/setup-uv@v7
       with:
-          python-version: '3.9'
-          cache: 'pip'
-    -
-      name: Python Requirements
-      run: pip install -r requirements.txt
+          enable-cache: true
     -
       name: List contributors
-      run: scripts/list-contributors | tee contributions.txt
+      run: uv run --locked scripts/list-contributors | tee contributions.txt
     -
       name: Upload contributions.txt
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v5
       with:
         name: contributions
         path: contributions.txt
@@ -46,22 +42,18 @@ jobs:
     steps:
     -
       name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
     -
-      name: Install Python
-      uses: actions/setup-python@v5
+      name: Install uv
+      uses: astral-sh/setup-uv@v7
       with:
-          python-version: '3.9'
-          cache: 'pip'
-    -
-      name: Python Requirements
-      run: pip install -r requirements.txt
+          enable-cache: true
     -
       name: List todos
-      run: scripts/list-todos | tee open_todos.txt
+      run: uv run --locked scripts/list-todos | tee open_todos.txt
     -
       name: Upload todos.txt
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v5
       with:
         name: open_todos
         path: open_todos.txt

.github/workflows/build.yml

@@ -23,48 +23,39 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       -
-        name: Install Python
-        uses: actions/setup-python@v5
-        with:
-          python-version: 3.9
-          cache: pip
-      -
-        name: Install Python requirements
-        run: pip install -r requirements.txt
+        name: Cache Bender database
+        uses: ./.github/actions/bender-db-cache
       -
-        name: Setup Graphviz
-        uses: ts-graphviz/setup-graphviz@v2
+        name: Install uv
+        uses: astral-sh/setup-uv@v7
+        with:
+          enable-cache: true
       -
         name: Install RISC-V GCC toolchain
-        uses: pulp-platform/pulp-actions/riscv-gcc-install@v2
+        uses: pulp-platform/pulp-actions/riscv-gcc-install@v2.5.0
         with:
           distro: ubuntu-22.04
           nightly-date: '2023.03.14'
           target: riscv64-elf
+      -
+        name: Setup Graphviz
+        uses: ts-graphviz/setup-graphviz@v2
       -
         name: Install Bender
-        uses: pulp-platform/pulp-actions/bender-install@v2
+        uses: pulp-platform/pulp-actions/bender-install@v2.5.0
         with:
-          version: 0.27.3
-      -
-        name: Install Morty
-        run: |
-          curl --proto '=https' --tlsv1.2 -sLO https://github.com/pulp-platform/morty/releases/download/v0.9.0/morty-ubuntu.22.04-x86_64.tar.gz
-          tar -xvf morty-ubuntu.22.04-x86_64.tar.gz morty
-          rm -f morty-ubuntu.22.04-x86_64.tar.gz
-          chmod 777 morty
-          echo "PATH=.:$PATH" >> ${GITHUB_ENV}
+          version: 0.32.1
       -
         name: Check clean
-        run: make idma_clean_all
+        run: uv run --locked make idma_clean_all
       -
         name: Check whether clean
         run: git status && test -z "$(git status --porcelain --ignore-submodules)"
       -
         name: Build target
-        run: make -j9 idma_${{ matrix.target }}_all
+        run: uv run --locked make -j9 idma_${{ matrix.target }}_all
       -
         name: Check whether stale
         run: git status && test -z "$(git status --porcelain --ignore-submodules)"

.github/workflows/ci.yml

@@ -9,8 +9,9 @@ name: ci
 
 on:
   push:
-    branches-ignore:
-      - '__deploy__**'
+    branches:
+      - devel
+      - master
   pull_request:
     branches-ignore:
       - '__deploy__**'
@@ -36,12 +37,20 @@ jobs:
     uses: ./.github/workflows/analyze.yml
     secrets: inherit
 
+  verify:
+    needs: lint
+    uses: ./.github/workflows/verify.yml
+    secrets: inherit
+
+  # The licensed EDA pipeline runs only once the license-free matrix is green
   gitlab-ci:
-    needs: build
+    needs: [build, verify]
     uses: ./.github/workflows/gitlab-ci.yml
     secrets: inherit
 
   deploy:
+    permissions:
+      contents: write
     needs: build
     if: github.event_name == 'push'
     uses: ./.github/workflows/deploy.yml