Skip to content

infra: bump portal submodule to 9d734b5#199

Merged
marc0olo merged 2 commits intomainfrom
infra/bump-portal
May 5, 2026
Merged

infra: bump portal submodule to 9d734b5#199
marc0olo merged 2 commits intomainfrom
infra/bump-portal

Conversation

@marc0olo
Copy link
Copy Markdown
Member

@marc0olo marc0olo commented May 5, 2026

Summary

  • Bumps .sources/portal from d1da46d to 9d734b5 (3 new commits)
  • Applies portal spec changes to the split docs/references/ic-interface-spec/ files

Portal commits covered

  • 9d734b5 — feat: allow HTTP requests with effective subnet ID (#6224)
  • 7581650 — Disallow canister signatures from engines on mainnet (#6213)
  • 3b53578 — fix: pin cbor2<6 to fix preview deployment workflow (no doc impact)

Spec changes applied

index.md (Pervasive concepts):

  • Canister signature delegation now requires subnet type to be present and not cloud_engine

https-interface.md (HTTPS Interface):

  • New /api/v4/subnet/<ESID>/call endpoint (restricted to canister creation for subnet admins)
  • New /api/v3/subnet/<ESID>/query endpoint (restricted to list_canisters for subnet admins)
  • verify_response refactored to extract verify_node_signatures; new verify_subnet_response for subnet queries
  • New "Effective subnet id" section (#http-effective-subnet-id)
  • effective_canister_id read state condition updated to cover subnet-scoped requests

abstract-behavior.md (Abstract behavior):

  • subnet_admins : SubnetId ↦ Set Principal field added to state type S
  • is_effective_canister_id updated to use method_name = with quoted strings
  • New is_effective_subnet_id rules
  • New "Submitted request to /api/v4/subnet/<ESID>/call" submission block
  • validate_sender_canister_version updated to use method_name = with double-quoted strings
  • list_canisters section extended to cover /api/v3/subnet/<ESID>/query path
  • Subnet read_state conditions: verify_envelope result captured as TS; new path condition for request_status
  • may_read_path_for_subnet: <effective_subnet_id>ESID; new request_status/* paths

changelog.md:

  • Added v0.60.0 entry

Sync recommendation

informed by dfinity/portal — docs/references/ic-interface-spec.md, docs/references/_attachments/interface-spec-changelog.md

Covers 3 new commits: effective-subnet-id HTTP endpoints (9d734b5),
cloud_engine canister signature restriction (7581650), and a build fix (3b53578).

Portal changes applied to split spec files:
- index.md: cloud_engine subnet type must not appear in canister signatures
- https-interface.md: new /api/v4/subnet/<ESID>/call and /api/v3/subnet/<ESID>/query endpoints; verify_response refactored to extract verify_node_signatures; new verify_subnet_response; new "Effective subnet id" section
- abstract-behavior.md: subnet_admins field added to state; is_effective_subnet_id rules; new subnet call submission block; validate_sender_canister_version uses method_name; list_canisters updated for subnet queries; read_state conditions updated; may_read_path_for_subnet extended with request_status paths
- changelog.md: v0.60.0 entry added
@marc0olo marc0olo requested a review from a team as a code owner May 5, 2026 16:07
…aragraph

One sentence was missed during the portal sync: the "API Request submission"
intro paragraph in abstract-behavior.md did not include the new subnet-scoped
call endpoint alongside the canister-scoped endpoints.
@marc0olo marc0olo merged commit 70fdc17 into main May 5, 2026
7 checks passed
@marc0olo marc0olo deleted the infra/bump-portal branch May 5, 2026 16:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants