chore: retarget upstream portal-tunnel v2.3.8 #89

Merged

gofix merged 1 commit from codex/release-v2.3.8-20260825T131305Z-v2.3.8 into master

2026-08-25 14:11:30 +00:00

gofix commented

2026-08-25 14:08:49 +00:00

Owner

Summary

Retarget the Rust relay compatibility baseline to upstream gosuda/portal-tunnel v2.3.8 (f73614e2fd51481e62fd7cbcb928d349e45eb6f0).
Isolate unverified discovery candidates until direct authoritative verification, cap candidates per signing identity, and protect verified relays during eviction.
Share the upstream-compatible announce rate budget across discovery announces and hop-route POSTs.
Match the v2.3.8 /sdk/domain ENS provider shape and explicitly reject the unsupported embedded DNS provider.
Refresh version metadata, compatibility docs, fixtures, and official-client smoke defaults.

Verification

cargo fmt --all -- --check
cargo test --locked --all (151 passed, 3 capability-dependent ignored)
cargo clippy --locked --all-targets --all-features -- -D warnings
Go v2.3.8 vs Rust API shape comparison
Go v2.3.8 lease JWT verification in Rust
Official v2.3.8 CLI HTTP, lifecycle, TCP, and UDP smokes

Release audit trail

PR CI #154: passed; target-branch CI #155: passed.
Merged revision: 3217a6a3e179a305b3c29ec2c9a28e932cb081cc; source branch deleted.
Dev tag/image: v2.3.8+rs.1-dev.1 / v2.3.8-rs.1-dev.1, run #156 passed, digest sha256:60f8e7fac24b95bfedd556c04e16d4f690c3f849837bda435b8f0f3d20574b82.
Relay-host registry challenge realm and authenticated manifest preflight: passed.
Dev live Axis A direct HTTP and canonical Axis B middle-hop gates: passed.
Production tag/image: v2.3.8+rs.1 / v2.3.8-rs.1, run #157 passed, digest sha256:a57b2eaf6c84614927f34be4b67a0715f9570cd4d1c23bf4c16607199e01e171; latest matches.
Official arm64 CLI v2.3.8 checksum verified and installed; eight production expose services restarted/reattached and public endpoints verified.
Production local/public health, final direct HTTP, and canonical Axis B gates: passed.
One production deployment attempt rolled back on recovery-metadata validation; corrected full env metadata was applied and the immutable production image passed the retry and all final gates.
Cleanup completed without pruning volumes.
Release: https://code.rly.best/gofix/portal-tunnel-rs/releases/tag/v2.3.8+rs.1

## Summary - Retarget the Rust relay compatibility baseline to upstream `gosuda/portal-tunnel` `v2.3.8` (`f73614e2fd51481e62fd7cbcb928d349e45eb6f0`). - Isolate unverified discovery candidates until direct authoritative verification, cap candidates per signing identity, and protect verified relays during eviction. - Share the upstream-compatible announce rate budget across discovery announces and hop-route POSTs. - Match the v2.3.8 `/sdk/domain` ENS provider shape and explicitly reject the unsupported embedded DNS provider. - Refresh version metadata, compatibility docs, fixtures, and official-client smoke defaults. ## Verification - `cargo fmt --all -- --check` - `cargo test --locked --all` (151 passed, 3 capability-dependent ignored) - `cargo clippy --locked --all-targets --all-features -- -D warnings` - Go v2.3.8 vs Rust API shape comparison - Go v2.3.8 lease JWT verification in Rust - Official v2.3.8 CLI HTTP, lifecycle, TCP, and UDP smokes ## Release audit trail - PR CI #154: passed; target-branch CI #155: passed. - Merged revision: `3217a6a3e179a305b3c29ec2c9a28e932cb081cc`; source branch deleted. - Dev tag/image: `v2.3.8+rs.1-dev.1` / `v2.3.8-rs.1-dev.1`, run #156 passed, digest `sha256:60f8e7fac24b95bfedd556c04e16d4f690c3f849837bda435b8f0f3d20574b82`. - Relay-host registry challenge realm and authenticated manifest preflight: passed. - Dev live Axis A direct HTTP and canonical Axis B middle-hop gates: passed. - Production tag/image: `v2.3.8+rs.1` / `v2.3.8-rs.1`, run #157 passed, digest `sha256:a57b2eaf6c84614927f34be4b67a0715f9570cd4d1c23bf4c16607199e01e171`; `latest` matches. - Official arm64 CLI v2.3.8 checksum verified and installed; eight production expose services restarted/reattached and public endpoints verified. - Production local/public health, final direct HTTP, and canonical Axis B gates: passed. - One production deployment attempt rolled back on recovery-metadata validation; corrected full env metadata was applied and the immutable production image passed the retry and all final gates. - Cleanup completed without pruning volumes. - Release: https://code.rly.best/gofix/portal-tunnel-rs/releases/tag/v2.3.8+rs.1

gofix added 1 commit

2026-08-25 14:08:49 +00:00