AtHeartEngineer/roadmap
1
0
Fork 0
mirror of https://github.com/vacp2p/roadmap.git synced 2026-01-09 07:37:59 -05:00
Code Issues Packages Projects Releases Wiki Activity

chore: weekly-updates-2025-12-29 (#365)

Browse Source
This commit is contained in:
fbarbu15
2025-12-30 10:28:32 +02:00
committed by GitHub
parent 077c797fc6
commit 340c86ef65
1 changed files with 258 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

258
content/weeklies/2025-12-29.md Normal file
View File

@@ -0,0 +1,258 @@
---
title: 2025-12-29 Vac weekly
tags:
- vac-updates
date: 2025-12-29
lastmod: 2025-12-29
draft: false
---
## Vac 2025/12/29
### highlights
- BI: Renamed GitHub sources and fixed dbt model issues to stabilize synchronization pipelines for reporting.
- BI: Started LLM benchmarks across models and tooling to inform future RAG evaluation decisions for the team.
- BI: Finished finance dashboard dbt models and began building dashboard views for weekly internal reporting.
- DST: Status-go chat protocol benchmark setup nearly finished, with runs and data collection queued next week.
- DST: Added go-libp2p test node Prometheus metrics, aligning names for shared Grafana dashboards across teams.
- DST: Implemented Vaclab bandwidth-aware scheduler and documented scheduling logic with validation results in a Notion write-up.
- Infra: Investigated missed validator proposals, updated cachix, and added ultrasound to Hoodi MEV-Boost list updates.
- Infra: Continued Status mobile signing and Nix build work, unblocking iOS updates and Android PR signing.
- Infra: Cleaned DigitalOcean space after security alert and documented CiviCRM backup procedure for office ops.
- Nim: Landed Nimble fixes for package list reading, parser warnings, and bootstrap config paths updates.
- Nim: Advanced confutils updates and core fixes while tracking closure iterator traceback issues in Nim.
- Nim: Progressed intops refactor and langserver shutdown debugging with new PRs and issue analysis work.
- P2P: Advanced IPv6 support with CI interop updates, address work, and transport review follow-through across repos.
- P2P: Shipped maintenance PRs improving docs, interop cosmetics, and flaky test behavior for nim-libp2p core.
- P2P: Continued QUIC stabilization with nim-lsquic CI improvements and dependency cleanup for Windows builds support.
- QA: Expanded Status-go wallet testing with token-gated community cases and tracked new blocker issues for releases.
- QA: Addressed Status Desktop maintenance items including join-community, crash, and E2E regression fixes this week.
- QA: Closed emoji reactions, local backup, and Qt6 migration activities in the desktop QA track.
- RFC: Drafted mantle specification work for Nomos and opened the initial RFC index PR this week.
- RFC: Produced bootstrap sync draft for Nomos and shared the specification PR for early review.
- RFC: Completed RFC index maintenance responses while drafting LIPs definitions and follow-up items from calls.
- SC: Fixed KarmaAirdrop delegatee validation to prevent invalid first-claim delegatees in production flows and tests.
- SC: Addressed PoseidonHasher modulo handling and StakeManager emergency pause signaling changes across contracts this week.
- SC: Advanced contract maintenance with MP variable removal and RLN CI asm-keccak256 rule bypass updates.
- Security: Continued secure signing environment documentation and annual signing account revalidation work for treasury process.
- Security: Completed broad security code reviews across PRs, CI changes, and dependency updates this week.
- Security: Performed proactive Vulma/IR reviews, including CodeQL follow-ups and incident remediation support across teams recently.
- TKE: Continued Logos digital twin modeling in Machinations to refine stock-and-flow diagrams for planning work.
- TKE: Updated the Logos token sales spreadsheet and reviewed EcoDev support status for Q1 planning.
- TKE: Continued reading on virtual worlds and economies to inform research support work this quarter.
- Web: Released WETH vault updates and multiple Status Hub fixes while debugging TVL on VPN.
- Web: Built Karma UI updates and investigated Vercel bot protection impacts during Status Hub TVL debugging.
- Web: Progressed SEO and maintenance work, including contribution portal updates and press engine fixes this week.
### vac:bi:
- `vac:bi:ift:2025q4-github-extractions`
- Renamed sources and fixed dbt model issues for GitHub synchronization.
- `vac:bi:ift:2025q4-llm-rag`
- Started LLM benchmarks across models and tools.
- `vac:bi:ift:2025q4-finance-dashboard`
- Finished dbt models and started the finance dashboard.
### vac:dst:
- `admin/misc`
- Revisited lab documentation and planned future changes.
- OOO: 7 CC days.
- [`vac:dst:status:2025q4-status-evaluation:chat-protocol-benchmarks-followup`](/dst/status/2025q4-status-evaluation#chat-protocol-benchmarks-followup)
- Continued status-go benchmarks; setup nearly finished, pending runs and data collection.
- Planned a future PR adding async functionality for status interop tests.
- [`vac:dst:ift:2025q4-dst-tooling:general-tooling`](/dst/ift/2025q4-dst-tooling#general-tooling-recurring)
- Added Prometheus metrics for the go-libp2p test node.
- go-libp2p metrics are directly available; pubsub metrics required callback aggregation.
- Metric names aligned with nim exports for shared Grafana dashboards.
- Tested on the shadow simulator; K8s testing still pending.
- [dst-libp2p-test-node#13](https://github.com/vacp2p/dst-libp2p-test-node/pull/13) added pubsub metrics for the go-libp2p test node.
- [`vac:dst:ift:2025q4-dst-tooling:local-stack-analysis`](/dst/ift/2025q4-dst-tooling#scenario-workflow-manager)
- Ran more libp2p test node deployments and reviewed Grafana and Victoria UIs.
- Reset Rancher Desktop on the guest OS and planned a shift to the host OS.
- [`vac:dst:ift:2025q4-dst-lab:lab-duplication`](/dst/ift/2025q4-dst-lab#lab-duplication)
- [vaclab-k8s-plugins#2](https://github.com/vacp2p/vaclab-k8s-plugins/pull/2) implemented the bandwidth-aware scheduler with multiple extension points.
- Enforced workload locality scoring, refined admission control defaults, and created a Helm chart.
- Fixed a bandwidth operator bug and added a Helm chart; [vaclab-k8s-plugins commit 2b9accf](https://github.com/vacp2p/vaclab-k8s-plugins/pull/2/commits/2b9accfadee2da90553b1d64587622e1ceee16ed).
- Tested the Vaclab operator and scheduler on a local Kubernetes cluster.
- Added Vaclab Scheduler documentation with diagrams, validation results, and walkthrough ([Notion: Vaclab 2.0 - Bandwidth-Aware Scheduling](https://www.notion.so/Vaclab-2-0-Bandwidth-Aware-Scheduling-2d08f96fb65c804eb44fdc7b75e079f9)).
### vac:infra:
- `lido & ethereum validator`
- Investigated missed proposal.
- Updated cachix.
- Added ultrasound to the Hoodi MEV-Boost list.
- `misc`
- Cleaned DigitalOcean space following a security alert.
- `status`
- Fixed broken Status Go update for the iOS signing PR.
- Continued Android PR signing work.
- Worked on the Nix build.
- `office`
- Documented the CiviCRM backup procedure.
### vac:nim:
- [`vac:nim:ift:2025q4-nimble:nimble-1.0.0`](/nim/ift/2025q4-nimble#nimble-100)
- [nimble#1545](https://github.com/nim-lang/nimble/pull/1545) Fixes infinite reading of official package list.
- [nimble#1544](https://github.com/nim-lang/nimble/pull/1544) Filters declarative parser warnings to solution packages only.
- [nimble#1543](https://github.com/nim-lang/nimble/pull/1543) Adds paths to nimble.nim.cfg to circumvent skipParentConfig when bootstrapping.
- Adds paths to nimble.nim.cfg for bootstrapping.
- Fixes typo.
- Adds new line to config file.
- [nimble#1538](https://github.com/nim-lang/nimble/pull/1538) Adds Nim by default to the lock file.
- Fixes locking when `useSystemNim` is present.
- Only adds Nim to the lock file when root explicitly requires Nim.
- Fixes an issue where the solver was not running in some cases.
- Investigated Web3 issues.
- [`vac:nim:ift:2025q4-nim-core-libs:command-line-parsers`](/nim/ift/2025q4-nim-core-libs#command-line-parsers)
- [nim-confutils#123](https://github.com/status-im/nim-confutils/pull/123) Fix #112; add results.Opt support.
- [nimbus-eth2#7826](https://github.com/status-im/nimbus-eth2/pull/7826) Use confutils `obsolete` for deprecated beacon node conf options.
- [nim-confutils#138](https://github.com/status-im/nim-confutils/pull/138) Fix #60; display default subcommand desc in help message.
- `vac:nim:ift:2025q4-nim-core-libs:misc`
- [nim#25320](https://github.com/nim-lang/Nim/pull/25320) Fix #24670; closure iterator wrong line info traceback under ORC.
- [`vac:nim:ift:2025q4-nim-core-libs:cpu-integer-library`](/nim/ift/2025q4-nim-core-libs#create-standalone-cpu-integer-library)
- [nim-intops#8](https://github.com/vacp2p/nim-intops/pull/8) Worked on merging the refactoring PR.
- Pinged Jacek on Discord; holiday timing slowed review.
- [nim-intops#9](https://github.com/vacp2p/nim-intops/pull/9) Worked on merging the book PR.
- [nim-intops#11](https://github.com/vacp2p/nim-intops/pull/11) Added benchmarks.
- Added universal benchmark harness code.
- Covered the add module with benchmarks.
- [`vac:nim:ift:2025q4-nim-ide-tooling:langserver-maintenance`](/nim/ift/2025q4-nim-ide-tooling#langserver-maintenance)
- [langserver#372](https://github.com/nim-lang/langserver/pull/372) Worked on graceful shutdown for nimsuggest.
- Closed the previous PR after deeper debugging.
- [langserver#377](https://github.com/nim-lang/langserver/pull/377) Opened a new PR with a refined fix.
- [langserver#351](https://github.com/nim-lang/langserver/issues/351#issuecomment-3689567103) Added a detailed issue explanation.
### vac:p2p:
- `admin/misc`
- OOO: 10 CC days.
- [`vac:p2p:ift:2025q4-nimlibp2p-ipv6:testing`](/p2p/ift/2025q4-nimlibp2p-ipv6#testing-interop-ci)
- [nim-libp2p#1985](https://github.com/vacp2p/nim-libp2p/pull/1985) CI interop: use IPv6.
- [`vac:p2p:ift:2025q4-nimlibp2p-ipv6:addresses`](/p2p/ift/2025q4-nimlibp2p-ipv6#addresses-identity)
- Implemented address work alongside related PRs.
- [`vac:p2p:ift:2025q4-nimlibp2p-ipv6:transport`](/p2p/ift/2025q4-nimlibp2p-ipv6#core-transports-tcpquic)
- Continued PR review for IPv6 transport changes.
- [`vac:p2p:ift:2025q4-nimlibp2p-maintenance:maintenance`](/p2p/ift/2025q4-nimlibp2p-maintenance#maintenance)
- [nim-libp2p#1986](https://github.com/vacp2p/nim-libp2p/pull/1986) Interop cosmetics.
- [nim-libp2p#1989](https://github.com/vacp2p/nim-libp2p/pull/1989) Improve docs and README structure.
- [nim-libp2p#1983](https://github.com/vacp2p/nim-libp2p/pull/1983) Improve flaky test behavior.
- [`vac:p2p:ift:2025q4-nimlibp2p-quic:stabilization`](/p2p/ift/2025q4-nimlibp2p-quic#quic-stabilization)
- [nim-lsquic#51](https://github.com/vacp2p/nim-lsquic/pull/51) chore(nimble): task improvements.
- [nim-lsquic#48](https://github.com/vacp2p/nim-lsquic/pull/48) chore: remove duplicate Nim deps.
- [nim-lsquic#49](https://github.com/vacp2p/nim-lsquic/pull/49) CI: add ORC check.
- [nim-lsquic#50](https://github.com/vacp2p/nim-lsquic/pull/50) CI: add linters.
- [nim-lsquic#46](https://github.com/vacp2p/nim-lsquic/pull/46) Revert: use makefile for Windows.
### vac:qa:
- [`vac:qa:status:2025q4-status-go-functional-testing:wallet`](/qa/status/2025q4-status-go-functional-testing#wallet-features)
- [status-go#7215](https://github.com/status-im/status-go/pull/7215) Token gated communities test TC 7128 refactoring.
- [status-go#7187](https://github.com/status-im/status-go/pull/7187) Token gated communities test TC 7129 PoC.
- [status-app#19620](https://github.com/status-im/status-app/issues/19620) Unable to join community with "anyone can become member" permission.
- [status-go#7258](https://github.com/status-im/status-go/issues/7258) Linux_arm64 not supported by choosenim in docker build.
- `admin/misc`
- OOO: 17 CC days.
- [`vac:qa:status:2025q4-status-qa-desktop:maintenance`](/qa/status/2025q4-status-qa-desktop#maintenance)
- [status-app#19644](https://github.com/status-im/status-app/pull/19644) Add object name for join community button.
- [status-app#19390](https://github.com/status-im/status-app/issues/19390) Windows failure for minting community tokens test.
- [status-app#19643](https://github.com/status-im/status-app/issues/19643) Community shows 0 members when joining from the Portal.
- [status-app#19631](https://github.com/status-im/status-app/issues/19631) Windows crash on login.
- [status-app#19641](https://github.com/status-im/status-app/issues/19641) Cannot send ETH after importing seed to a clean app.
- [status-app#19642](https://github.com/status-im/status-app/pull/19642) Add clearing group chat history.
- [status-app#19630](https://github.com/status-im/status-app/pull/19630) Fix community link verifications.
- [`vac:qa:status:2025q4-status-qa-desktop:emoji-reactions`](/qa/status/2025q4-status-qa-desktop#emoji-reactions)
- Closed remaining activities.
- [`vac:qa:status:2025q4-status-qa-desktop:local-backup`](/qa/status/2025q4-status-qa-desktop#local-backup)
- Closed remaining activities.
- [`vac:qa:status:2025q4-status-qa-desktop:qt6-migration`](/qa/status/2025q4-status-qa-desktop#qt6-migration)
- Closed remaining activities.
### vac:rfc:
- `vac:rfc:nomos:2025q4-rfc-iteration:mantle-specification`
- [rfc-index#245](https://github.com/vacp2p/rfc-index/pull/245) Draft specification.
- [`vac:rfc:nomos:2025q4-rfc-iteration:bootstrap-sync`](/rfc/nomos/2025q4-rfc-iteration#cryptarchia-v1-bootstrapping-synchronization)
- [rfc-index#244](https://github.com/vacp2p/rfc-index/pull/244) Draft specification.
- [`vac:rfc:ift:2025q4-rfc-index-maintenance:maintenance`](/rfc/ift/2025q4-rfc-index-maintenance#maintenance)
- Responded to current PRs and addressed feedback.
- Drafted a LIPs definition document and other follow-up items from the call.
### vac:sc:
- [`vac:sc:status-l2:2025q4-maintaining-status-l2-contracts:maintenance`](/sc/status-l2/2025q4-maintaining-status-l2-contracts#contract-maintenance-recurring)
- [status-network-monorepo#122](https://github.com/status-im/status-network-monorepo/pull/122) fix(KarmaAirdrop): ensure valid delegatees on first claim.
- [status-network-monorepo#123](https://github.com/status-im/status-network-monorepo/pull/123) fix(PoseidonHasher): apply modulo Q to input.
- [status-network-monorepo#121](https://github.com/status-im/status-network-monorepo/pull/121) fix(CI): ignore asm-keccak256 rule in RLN contract.
- [status-network-monorepo#120](https://github.com/status-im/status-network-monorepo/pull/120) fix(StakeManager): signal paused state when emergency mode is enabled.
- [status-network-monorepo#119](https://github.com/status-im/status-network-monorepo/pull/119) refactor/remove MP vars.
### vac:sec:
- `ift:2025q4-secure-signing-environment:build-cold-signing-workstation`
- Continued refining documentation about the secure signing environment.
- `ift:2025q4-treasury-continuity-plan:signing-accounts-revalidation`
- Continued annual revalidation of signing accounts (request for signing).
- `ift:2025q4-treasury-continuity-plan:implement-backup-requirements`
- Tested local safe environment multisig (prepare tx for rejection).
- `ift:2025q4-cicd-security-review:code-reviews`
- Reviewed newly opened IFT PRs for security feature usage, key handling, and secret lifecycle boundaries ([status-go#7237](https://github.com/status-im/status-go/pull/7237)).
- Audited dApp PRs for navigation logic, origin enforcement, permission checks, and sandbox escape regressions.
- Reviewed storage and persistence changes across Nimbus, Logos, and Keycard for plaintext handling risks.
- Examined dependency update PRs for supply-chain risk and unexpected post-install behavior.
- Reviewed CI and GitHub Actions changes for permission scope increases, token usage, and secret exposure.
- `ift:2025q4-vulma-and-ir:proactive-review`
- Reviewed dependency diffs across Status, Waku, and VAC repos for malicious indicators.
- Validated security-related PR mitigations, including dependabot alerts.
- [status-web dependabot#204](https://github.com/status-im/status-web/security/dependabot/204)
- [status-web dependabot#142](https://github.com/status-im/status-web/security/dependabot/142)
- [status-web dependabot#229](https://github.com/status-im/status-web/security/dependabot/229)
- [status-web dependabot#91](https://github.com/status-im/status-web/security/dependabot/91)
- Re-checked serialization, auth, and parsing anti-patterns in new code.
- Reviewed build logs and CI outputs for anomalous dependency resolution or network activity.
- Investigated the Trust Wallet incident ([report](https://x.com/i/status/2004316503701958786)).
- `ift:2025q4-vulma-and-ir:follow-ups`
- Re-reviewed CodeQL findings after recent merges.
- Performed secondary reviews on PRs labeled security or infra.
- Coordinated with maintainers on high-risk PRs to unblock reviews.
- Investigated and supported remediation of the Status-361 S3 bucket incident ([report](https://dashboard.hackenproof.com/manager/companies/ift/status/reports/Status-361)).
- `admin/misc`
- OOO: 5 CC days.
### vac:tke:
- `admin`
- OOO: 7 CC days.
- `vac:tke:ift:logos-token:logos-digital-twin`
- Continued implementing Logos stock and flow diagrams in Machinations.
- `vac:tke:ift:logos-token::logos-token-sales`
- Updated the spreadsheet.
- `vac:tke:ift:support-to-ift-units::ecodev-support`
- Reviewed current state.
- `vac:tke:ift:support-to-ift-units:reading-by-jarrad`
- Continued reading about virtual worlds and economies.
### vac:web:
- `vac:web:status:2025q4-sn-hub`
- [status-web#898](https://github.com/status-im/status-web/pull/898) Released WETH vault.
- [status-web#902](https://github.com/status-im/status-web/issues/902) Debugged TVL on VPN.
- [status-web#917](https://github.com/status-im/status-web/pull/917) Fixed opengraph data.
- [status-web#920](https://github.com/status-im/status-web/pull/920) Fixed opengraph data.
- [status-web#918](https://github.com/status-im/status-web/pull/918) Updated promo bar copy.
- [status-web#897](https://github.com/status-im/status-web/pull/897#issuecomment-3681162272) Added promo bar.
- `admin/misc`
- [roadmap#345](https://github.com/vacp2p/roadmap/pull/345) Opened and ordered GitHub issues.
- OOO: 8 CC days.
- [`vac:web:status:2025q4-sn-hub:karma`](/web/status/2025q4-sn-hub#karma)
- [status-web#916](https://github.com/status-im/status-web/pull/916) Added KarmaButton component and removed the testnet tag.
- [status-web#902](https://github.com/status-im/status-web/issues/902#issuecomment-3693079761) Debugged TVL on VPN; Vercel bot protection blocked requests.
- Tried bypassing Vercel bot protection with local `/api` endpoints without success.
- [`vac:web:status:2025q4-status-website:seo`](/web/status/2025q4-status-website#seo)
- [status-web#895](https://github.com/status-im/status-web/pull/895) Implemented technical SEO for status.app, status.network, and hub.status.network.
- [`vac:web:ift:2025q4-psf-website:website`](/web/ift/2025q4-psf-website#website)
- [admin-acid.logos.co#29](https://github.com/acid-info/admin-acid.logos.co/pull/29) Implemented auto-reply email template for forms.
- [`vac:web:ift:2025q4-maintenance:maintenance`](/web/ift/2025q4-maintenance#maintenance)
- [contribute.logos.co#349](https://github.com/acid-info/contribute.logos.co/pull/349) Contribute portal copy updates.
- [admin-acid.logos.co#28](https://github.com/acid-info/admin-acid.logos.co/pull/28) Admin-acid leaderboard implementation.
- press.logos.co: removed credential build arguments to move the image to a public registry ([logos-press-engine#251](https://github.com/acid-info/logos-press-engine/pull/251)).
- Updated Take Action link and checked develop deployment ([logos-press-engine#250](https://github.com/acid-info/logos-press-engine/pull/250)).
- `vac:web:status:2025q4-status-wallet-extension`
- [status-web#697](https://github.com/status-im/status-web/issues/697) Integrate LI.FI provider and investigate swap tx not added to mempool.
- [`vac:web:ift:2025q4-logos-contributions-portal:contribution-guidelines`](/web/ift/2025q4-logos-contributions-portal#contribution-guidelines)
- [contribute.logos.co#31](https://github.com/acid-info/contribute.logos.co/pull/31) Reviewed Translate Resources content to French.
- [contribute.logos.co#30](https://github.com/acid-info/contribute.logos.co/pull/30) Merged activists page 404 fix for non-English languages.
- [contribute.logos.co#35](https://github.com/acid-info/contribute.logos.co/pull/35#issuecomment-3685438717) Fixed activists page content mismatch in Korean and French.
- [`vac:web:ift:2025q4-logos-website:social-proof`](/web/ift/2025q4-logos-website#social-proof)
- [data-docs#137](https://github.com/status-im/data-docs/issues/137) Followed up on BI fix for circles data correctness.