chore(deps): bump soroban-sdk from 23.4.1 to 26.1.0 in /app/onchain

[dependabot]

Bumps soroban-sdk from 23.4.1 to 26.1.0.

Release notes

Sourced from soroban-sdk's releases.

26.1.0

What's Changed

Deprecations

• Deprecate and ignore export for spec generation in spec shaking v2 — When experimental_spec_shaking_v2 is enabled, the export argument on contracttype, contracterror, and contractevent is ignored. A deprecation warning is emitted if used. (stellar/rs-soroban-sdk#1876)

Improvements

• Fix cfg handling for contracttrait and contractimpl blocks — #[contractimpl] methods with cfg attributes now correctly gate their generated args helpers and testutils registration. cfg-gated override methods in #[contractimpl(contracttrait)] blocks are also properly supported. Both cfg and cfg_attr result in compiler errors when used on #[contracttrait] default functions. (stellar/rs-soroban-sdk#1871)

All Changes

• Deprecate export for spec generation in spec shaking v2 by @​mootz12 in stellar/rs-soroban-sdk#1876
• Fix cfg handling for contracttrait and contractimpl blocks by @​mootz12 in stellar/rs-soroban-sdk#1871
• Fix failing OpenZeppelin CI jobs by @​leighmcculloch in stellar/rs-soroban-sdk#1884

Full Changelog: stellar/rs-soroban-sdk@v26.0.1...v26.1.0

26.0.1

What's Changed

Improvements

• Update docs clarifying guarantees of the Hash type (stellar/rs-soroban-sdk#1870)
• Surface env!/include! deps in contractmeta! to dep-info (stellar/rs-soroban-sdk#1872)
• Zero-copy improvement for U256 and I256 (stellar/rs-soroban-sdk#1867)

All Changes

• Set empty top-level permissions in claude-review by @​leighmcculloch in stellar/rs-soroban-sdk#1864
• Harden Claude review workflow by @​leighmcculloch in stellar/rs-soroban-sdk#1865
• Clarify guarantees for Hash by @​mootz12 in stellar/rs-soroban-sdk#1870
• Surface env!/include! deps in contractmeta! to dep-info by @​leighmcculloch in stellar/rs-soroban-sdk#1872
• Zero-copy improvement for U256 and I256 by @​dkcumming in stellar/rs-soroban-sdk#1867
• Bump version to 26.0.1 by @​github-actions[bot] in stellar/rs-soroban-sdk#1877

New Contributors

• @​dkcumming made their first contribution in stellar/rs-soroban-sdk#1867

Full Changelog: stellar/rs-soroban-sdk@v26.0.0...v26.0.1

v26.0.0

What's Changed

Breaking Changes

• Renamed assert_in_contract to debug_assert_in_contract — The assert_in_contract macro has been renamed to debug_assert_in_contract and hidden from public documentation, as it is intended for internal use only. The old name has been deprecated. (#1806)

• Removed deprecated token event format from soroban-token-sdk — The deprecated TokenUtils::events() helper, the legacy event module, and the Events wrapper have been removed. These were originally deprecated in v23. (#1822)

• Removed #[macro_export] from internal impl_bytesn_repr macro — This macro was only intended as an internal helper. Its public export has been removed. (#1829)

Deprecations

... (truncated)

Commits

• 175aa41 chore: for CI cargo update use precise version
• 67c90dc chore: run cargo update for patched crates in ci
• d3978e6 chore: make and make expand-tests
• 1eb4551 Fix failing OpenZeppelin CI jobs (#1884)
• 18f288e Fix cfg handling for contracttrait and contractimpl blocks (#1871)
• be46eb9 Deprecate export for spec generation in spec shaking v2 (#1876)
• 14fd094 Update fuzz Cargo.lock for 26.1.0
• 892fb2b Bump version to 26.1.0
• f52b6aa Bump version to 26.0.1 (#1877)
• 0dd79fe Zero-copy improvement for U256 and I256 (#1867)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[kilodesodiq-arch]

Heads up, maintainers — this is a major version bump. Holding for human review of breaking changes. Please skim the upstream changelog / migration guide before approving.

[kilodesodiq-arch]

Closing: Dependabot version updates are being disabled on this repository. See .github/dependabot.yml on main for the disable configuration.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.