[codex] refresh dependency and toolchain versions

.github/workflows/claude.yml

@@ -27,7 +27,7 @@ jobs:
     timeout-minutes: 20
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
         with:
           fetch-depth: 0
 

.github/workflows/e2e.yml

@@ -58,7 +58,7 @@ jobs:
         if: env.OPENROUTER_API_KEY != ''
         uses: actions/setup-go@v6
         with:
-          go-version: '1.24.x'
+          go-version: '1.25.10'
 
       - name: Set up Rust
         if: env.OPENROUTER_API_KEY != ''
@@ -68,7 +68,7 @@ jobs:
         if: env.OPENROUTER_API_KEY != ''
         uses: oven-sh/setup-bun@v2
         with:
-          bun-version: '1.3.13'
+          bun-version: '1.3.14'
 
       - name: Install JS deps
         if: env.OPENROUTER_API_KEY != ''

.github/workflows/go-lint.yml

@@ -29,7 +29,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v6
         with:
-          go-version: '1.24.x'
+          go-version: '1.25.10'
           cache-dependency-path: gateway/go.sum
 
       - name: Go vet

.github/workflows/go-tests.yml

@@ -22,30 +22,17 @@ concurrency:
 jobs:
   go-tests:
     runs-on: ubuntu-latest
-
-    services:
-      redis:
-        image: redis:7-alpine
-        ports:
-          - 6379:6379
-        options: >-
-          --health-cmd "redis-cli ping"
-          --health-interval 10s
-          --health-timeout 5s
-          --health-retries 5
-
+
     steps:
       - name: Checkout
         uses: actions/checkout@v6
 
       - name: Set up Go
         uses: actions/setup-go@v6
         with:
-          go-version: '1.24.x'
+          go-version: '1.25.10'
           cache-dependency-path: gateway/go.sum
 
       - name: Run Go tests
         working-directory: gateway
         run: go test -v ./...
-        env:
-          REDIS_URL: localhost:6379

.github/workflows/sdk-tests.yml

@@ -37,7 +37,7 @@ jobs:
       - name: Set up Bun
         uses: oven-sh/setup-bun@v2
         with:
-          bun-version: '1.3.13'
+          bun-version: '1.3.14'
 
       - name: Install SDK deps
         working-directory: sdk/typescript

.github/workflows/web-lint-build.yml

@@ -27,7 +27,7 @@ jobs:
       - name: Set up Bun
         uses: oven-sh/setup-bun@v2
         with:
-          bun-version: '1.3.13'
+          bun-version: '1.3.14'
 
       - name: Install deps
         working-directory: web

CONTRIBUTING.md

@@ -36,8 +36,8 @@ flowchart LR
 
 Install:
 
-- Bun `1.3.13+`
-- Go `1.24.x`
+- Bun `1.3.14+`
+- Go `1.25.x`
 - Rust stable
 - Docker and Redis only when using Docker Compose or Redis-backed local receipts/cache
 

README.md

@@ -212,8 +212,8 @@ flowchart LR
 
 | Tool | Version | Used by |
 | --- | --- | --- |
-| Bun | `1.3.13+` recommended | Root scripts, web install/build, E2E tests |
-| Go | `1.24.x` | Gateway |
+| Bun | `1.3.14+` recommended | Root scripts, web install/build, E2E tests |
+| Go | `1.25.x` | Gateway |
 | Rust | Stable | Verifier |
 | Docker | Optional | Compose stack and Redis |
 | Redis | Optional for quick start | Required for Docker/production-style Redis receipts |

gateway/Dockerfile

@@ -1,5 +1,5 @@
 # Build Stage
-FROM golang:1.24-alpine AS builder
+FROM golang:1.25-alpine AS builder
 WORKDIR /app
 COPY go.mod go.sum ./
 RUN go mod download

gateway/cache_integration_test.go

@@ -12,19 +12,19 @@ import (
 	"testing"
 	"time"
 
+	"github.com/alicebob/miniredis/v2"
 	"github.com/gin-gonic/gin"
 	"github.com/redis/go-redis/v9"
 )
 
 func TestCacheIntegration_FullFlow(t *testing.T) {
-	// 1. Check Redis availability
+	redisServer := miniredis.RunT(t)
 	rdb := redis.NewClient(&redis.Options{
-		Addr: "127.0.0.1:6379",
+		Addr: redisServer.Addr(),
 	})
+	defer rdb.Close()
+
 	ctx := context.Background()
-	if err := rdb.Ping(ctx).Err(); err != nil {
-		t.Skipf("Redis unavailable, skipping integration test: %v", err)
-	}
 
 	// 3. Setup Dependencies (Environment)
 	// Mock Verifier
@@ -66,7 +66,7 @@ func TestCacheIntegration_FullFlow(t *testing.T) {
 	// Set Env Vars using t.Setenv for auto-cleanup
 	t.Setenv("CACHE_ENABLED", "true")
 	t.Setenv("RECEIPT_STORE", "memory")
-	t.Setenv("REDIS_URL", "127.0.0.1:6379")
+	t.Setenv("REDIS_URL", redisServer.Addr())
 	t.Setenv("VERIFIER_URL", verifier.URL)
 	t.Setenv("AI_PROVIDER", "openrouter")
 	t.Setenv("OPENROUTER_URL", aiServer.URL)

gateway/go.mod

@@ -1,19 +1,19 @@
 module gateway
 
-go 1.24.0
+go 1.25.0
 
-toolchain go1.24.13
+toolchain go1.25.10
 
 require (
 	github.com/alicebob/miniredis/v2 v2.38.0
-	github.com/ethereum/go-ethereum v1.16.8
-	github.com/gin-contrib/cors v1.7.6
-	github.com/gin-contrib/gzip v1.2.5
-	github.com/gin-gonic/gin v1.11.0
+	github.com/ethereum/go-ethereum v1.17.3
+	github.com/gin-contrib/cors v1.7.7
+	github.com/gin-contrib/gzip v1.2.6
+	github.com/gin-gonic/gin v1.12.0
 	github.com/google/uuid v1.6.0
 	github.com/joho/godotenv v1.5.1
 	github.com/prometheus/client_golang v1.23.2
-	github.com/redis/go-redis/v9 v9.17.2
+	github.com/redis/go-redis/v9 v9.20.0
 	github.com/stretchr/testify v1.11.1
 	gopkg.in/yaml.v3 v3.0.1
 )
@@ -22,20 +22,19 @@ require (
 	github.com/ProjectZKM/Ziren/crates/go-runtime/zkvm_runtime v0.0.0-20251001021608-1fe7b43fc4d6 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
 	github.com/bytedance/gopkg v0.1.3 // indirect
-	github.com/bytedance/sonic v1.14.1 // indirect
-	github.com/bytedance/sonic/loader v0.3.0 // indirect
+	github.com/bytedance/sonic v1.15.0 // indirect
+	github.com/bytedance/sonic/loader v0.5.0 // indirect
 	github.com/cespare/xxhash/v2 v2.3.0 // indirect
 	github.com/cloudwego/base64x v0.1.6 // indirect
 	github.com/davecgh/go-spew v1.1.1 // indirect
 	github.com/decred/dcrd/dcrec/secp256k1/v4 v4.0.1 // indirect
-	github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f // indirect
-	github.com/gabriel-vasile/mimetype v1.4.10 // indirect
+	github.com/gabriel-vasile/mimetype v1.4.12 // indirect
 	github.com/gin-contrib/sse v1.1.0 // indirect
 	github.com/go-playground/locales v0.14.1 // indirect
 	github.com/go-playground/universal-translator v0.18.1 // indirect
-	github.com/go-playground/validator/v10 v10.28.0 // indirect
+	github.com/go-playground/validator/v10 v10.30.1 // indirect
 	github.com/goccy/go-json v0.10.5 // indirect
-	github.com/goccy/go-yaml v1.18.0 // indirect
+	github.com/goccy/go-yaml v1.19.2 // indirect
 	github.com/holiman/uint256 v1.3.2 // indirect
 	github.com/json-iterator/go v1.1.12 // indirect
 	github.com/klauspost/cpuid/v2 v2.3.0 // indirect
@@ -51,15 +50,17 @@ require (
 	github.com/prometheus/common v0.66.1 // indirect
 	github.com/prometheus/procfs v0.16.1 // indirect
 	github.com/quic-go/qpack v0.6.0 // indirect
-	github.com/quic-go/quic-go v0.57.0 // indirect
+	github.com/quic-go/quic-go v0.59.0 // indirect
 	github.com/twitchyliquid64/golang-asm v0.15.1 // indirect
-	github.com/ugorji/go/codec v1.3.0 // indirect
+	github.com/ugorji/go/codec v1.3.1 // indirect
 	github.com/yuin/gopher-lua v1.1.1 // indirect
+	go.mongodb.org/mongo-driver/v2 v2.5.0 // indirect
+	go.uber.org/atomic v1.11.0 // indirect
 	go.yaml.in/yaml/v2 v2.4.2 // indirect
-	golang.org/x/arch v0.22.0 // indirect
-	golang.org/x/crypto v0.45.0 // indirect
-	golang.org/x/net v0.47.0 // indirect
-	golang.org/x/sys v0.38.0 // indirect
-	golang.org/x/text v0.31.0 // indirect
-	google.golang.org/protobuf v1.36.10 // indirect
+	golang.org/x/arch v0.23.0 // indirect
+	golang.org/x/crypto v0.48.0 // indirect
+	golang.org/x/net v0.51.0 // indirect
+	golang.org/x/sys v0.41.0 // indirect
+	golang.org/x/text v0.35.0 // indirect
+	google.golang.org/protobuf v1.36.11 // indirect
 )