* cannon: Add post-state assertions

* cannon: Bump MIPS64 contract version

This updates the markdown table in security-reviews/README.md to:
1. Correct the scope of the 2024-03 Sherlock audit to Fault Proofs.
2. Rename pdfs to match the existing convetion
3. Fix Reviewer attribution on the Mips and no Mips audits.

* cannon: Add godoc to ExecMipsCoreStepLogic

* update MIPS64.sol

* update semver

* feat(semgrep): add sol-force-require-msg rule
Signed-off-by: jsvisa <delweng@gmail.com>

* feat(semgrep): exclude packages temporary
Signed-off-by: jsvisa <delweng@gmail.com>

* feat(semgrep): add testcase
Signed-off-by: jsvisa <delweng@gmail.com>

* test script example
Signed-off-by: jsvisa <delweng@gmail.com>

* require msg more clear
Signed-off-by: jsvisa <delweng@gmail.com>

---------
Signed-off-by: jsvisa <delweng@gmail.com>

* Change the name

* Update op-challenger/README.md
Co-authored-by: smartcontracts <kelvinfichter@gmail.com>

---------
Co-authored-by: smartcontracts <kelvinfichter@gmail.com>

* Add Holocene action tests

* fix invalid batch tests

* Handle rpc.Errors directly instead of relying on eth.InputErrors

The fault proof program's L2 Engine API doesn't return eth.InputErrors,
like the sources engine client, but directly returns rpc.Errors.
So instead of relying on this translation, derivers need to deal
directly with rpc.Errors.

* In TryBackupUnsafeReorg, only reset on InvalidForkchoiceState error code

* Add logs

* include genesis FPP tests

---------
Co-authored-by: Sebastian Stammler <seb@oplabs.co>

op-program: Run until all events are exhausted instead of running until the derivation is idle (#12804)

* op-e2e: Add action test for op-program trace extension behaviour.

* op-program: Run until all events are exhausted instead of running until the derivation is idle.

Adds a new deployment script for deploying a new dispute game
implementation.

Bumps [github.com/kurtosis-tech/kurtosis/api/golang](https://github.com/kurtosis-tech/kurtosis) from 1.4.0 to 1.4.1.
- [Release notes](https://github.com/kurtosis-tech/kurtosis/releases)
- [Changelog](https://github.com/kurtosis-tech/kurtosis/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kurtosis-tech/kurtosis/compare/1.4.0...1.4.1)

---
updated-dependencies:
- dependency-name: github.com/kurtosis-tech/kurtosis/api/golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

This is one of our flakiest tests since it's very dependent on the test runner's CPU usage.

The ConnectedF callback was sending to a channel that was only ever read from once. This causes the test to time out under certain conditions.

* use RWMap for Supervisor Backend

* adjust Clear method

Adds a new semgrep rule that blocks the usage of public functions
in libraries. We don't use linked libraries and they cause issues
with foundry.

Co-authored-by: Matthew Slipper <me@matthewslipper.com>

* interop-devnet: add grafana/loki/promtrail

Revival of PR https://github.com/ethereum-optimism/optimism/pull/11628
to enhance local interop devnet.
Co-authored-by: Ethen Pociask <ethenpo@gmail.com>
Co-authored-by: Samuel Laferriere <samlaf92@gmail.com>

* interop-devnet: use custom grafana port

* interop-devnet: fix ports

* interop-devnet: enable op-supervisor metrics

---------
Co-authored-by: Ethen Pociask <ethenpo@gmail.com>
Co-authored-by: Samuel Laferriere <samlaf92@gmail.com>

* refactor: Move interop e2e test contracts to e2eutils/interop.

* refactor: Move interop e2e test contracts to e2eutils/interop/contracts.

Bumps [github.com/fsnotify/fsnotify](https://github.com/fsnotify/fsnotify) from 1.7.0 to 1.8.0.
- [Release notes](https://github.com/fsnotify/fsnotify/releases)
- [Changelog](https://github.com/fsnotify/fsnotify/blob/main/CHANGELOG.md)
- [Commits](https://github.com/fsnotify/fsnotify/compare/v1.7.0...v1.8.0)

---
updated-dependencies:
- dependency-name: github.com/fsnotify/fsnotify
  dependency-type: direct:production
  update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [github.com/multiformats/go-multiaddr](https://github.com/multiformats/go-multiaddr) from 0.13.0 to 0.14.0.
- [Release notes](https://github.com/multiformats/go-multiaddr/releases)
- [Commits](https://github.com/multiformats/go-multiaddr/compare/v0.13.0...v0.14.0)

---
updated-dependencies:
- dependency-name: github.com/multiformats/go-multiaddr
  dependency-type: direct:production
  update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* cannon: Set up fuzz tests to run across 32- and 64-bit VMs

Update preimage read fuzz test to work on 64-bit vms

* cannon: Run both 32- and 64-bit Cannon tests in CI

* cannon: Separate log and coverage files for 32- and 64-bit tests

* cannon: Clean up evm validation code

* cannon: Move skip utility to testutil

* cannon: Make TestState_EncodeWitness 64-bit compatible

* cannon: Skip failing 64-bit tests

* cannon: Update TestEVM_EmptyThreadStacks to work across 32- and 64-bit vms

* cannon: Update version state tests, add build tags

* cannon: Fix code coverage upload paths

* cannon: Fix code coverage file extensions

* cannon: Run 32/64-bit tests using a matrix

* cannon: Try to set better name for arch-specific cannon tests

* cannon: Use generated job names in bedrock requirements list

* cannon: Add comment on new validator util

---------
Co-authored-by: Matthew Slipper <me@matthewslipper.com>

* cannon: Add stat syscall to MIP64 contracts

* cannon: Run semver lock task

* ci: Parallelize fuzz jobs

Parallelize fuzz `make` targets using `xargs`. Previously, they were all running serially which led to long job runtimes.

* Use machine

* reduce executors to 8

* op-e2e: interop cross L2 inbox system test
Co-authored-by: Axel Kingsley <axel.kingsley@gmail.com>

* point at latest interop op-geth commit

* lint

* test fixes

* update to latest geth commit

* op-supervisor: uint32 log index, improve chainid test

* correct uint64 to uint32 everywhere ; point at latest geth commit

* use tagged geth version

---------
Co-authored-by: Axel Kingsley <axel.kingsley@gmail.com>

* feat(ct): DeployDelayedWETH script

Adds a new deployment script for deploying a new DelayedWETH
proxy contract.

* fix tests

* lint

* delete letter o

* move testdata

---------
Co-authored-by: Matthew Slipper <me@matthewslipper.com>

* local interop devnet

* interop-devnet: experimental op-geth docker image, connect with op-supervisor

* interop-devnet: port and path fixes

* interop-devnet: datadir fix

* interop-local: more fixes

* interop-devnet: connect op-supervisor to L2 EL nodes using RPC

* more fixes

* ops-bedrock: fix l2 op geth dockerfile for interop

* interop-devnet: fix supervisor RPC add workaround

* interop-devnet: implement review suggestions

* fixes from run-testing

* Add op-deployer to dockerignore exceptions

* use latest geth rc

* use RW Locks in Update Functions

* add log for new cross-safe head

* make updates much more frequent

* use LocalDB for LastDerivedFrom

* Add log message for finalization update

* op-supervisor: fix db locking, fix crossdb usage

* interop-devnet: use chain IDs as chain indices, since it's not translated everywhere yet

* op-supervisor: cross-derived-from RPC method

* Work Process ErrFuture to Debug Log

---------
Co-authored-by: axelKingsley <axel.kingsley@gmail.com>

* op-deployer: add 'inspect superchain-registry' subcommand

* op-deployer: generate artifacts at runtime of superchain-registry cmd

* op-deployer: add missing err handler

* op-deployer: add Printf to prompt user to populate .env vals

* op-deployer: reformat addresses to superchain.AddressList

Also renames fields `IsLastInSpan` to `Safe` because that's semantically
clearer. That a last batch in a span batch is pre-Holocene the indicator
for a safe block promotion is an implementation detail. It's better to
name the effect rather than the reason.

* dependabot(gomod): bump github.com/kurtosis-tech/kurtosis/api/golang

Bumps [github.com/kurtosis-tech/kurtosis/api/golang](https://github.com/kurtosis-tech/kurtosis) from 1.3.1 to 1.4.0.
- [Release notes](https://github.com/kurtosis-tech/kurtosis/releases)
- [Changelog](https://github.com/kurtosis-tech/kurtosis/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kurtosis-tech/kurtosis/compare/1.3.1...1.4.0)

---
updated-dependencies:
- dependency-name: github.com/kurtosis-tech/kurtosis/api/golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>

* ci: update kurtosis version

---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Mark Tyneway <mark.tyneway@gmail.com>

* op-node/rollup: Implement Holocene invalid payload handling

* op-node: update comment about block-processing errors

---------
Co-authored-by: protolambda <proto@protolambda.com>

Bumps [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) from 7.0.79 to 7.0.80.
- [Release notes](https://github.com/minio/minio-go/releases)
- [Commits](https://github.com/minio/minio-go/compare/v7.0.79...v7.0.80)

---
updated-dependencies:
- dependency-name: github.com/minio/minio-go/v7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>