Sui

Bump sui-rust-sdk to fc8391c

Nick

rpc: end an ascending page at its after cursor past the tip instead of failing OUT_OF_RANGE, and read light-client events through the ledger streams

Nick

rpc: mark ledger OUT_OF_RANGE errors as above latest or below earliest available

Nick

[graphql] Own transaction, event, and checkpoint cursors; carry ledger cursors as opaque bytes

Nick

rpc: start and end positions within a checkpoint for ListTransactions and ListEvents

Nick

sui-indexer-alt-reader: merge AlphaLedgerGrpcReader into LedgerGrpcReader (#27723)

Evan Wall

sui-kv-rpc: remove enable-list-apis flag, always serve the List APIs (#27712)

Evan Wall

sui-indexer-alt-graphql: remove Postgres pagination for transactions and events (#27666)

Evan Wall

Bump libz-sys to 1.1.31 for RUSTSEC-2026-0418 (#28514)

Mark Logan

[fix] Reject an overflowing x-coordinate in secp256r1_ecrecover behind a protocol flag (#28460)

mahdi-mysten

Cover more object lifecycles and tx kinds in the composite workload (#28431)

Mark Logan

graphql: end empty List API pages between two cursors (#28483)

hayes-mysten

state-sync: hedge slow checkpoint contents downloads (#28425)

Nick Vikeras

Fix cargo-deny advisories (#28485)

sui-merge-bot[bot]

Bump fastcrypto to 0a26327 (#28502)

mahdi-mysten

Split simulator nightly into seed-search and stress/determinism jobs (#28450)

Alex Stek | Mysten Labs

grpc: opt-in address-alias checking for VerifySignature (#28471)

hayes-mysten

graphql: opt-in address-alias checking for verifySignature (#28470)

hayes-mysten

[move-compiler] Remove `acquires` as a keyword and token (#28480)

Todd Nowacki

Remove `spec` from tree-sitter and prettier-move (#28477)

Todd Nowacki

[move-compiler] Remove the ID leak verifier from Sui mode (#28481)

Todd Nowacki

[cli] Serve GraphQL subscriptions from `sui start --with-graphql` (#28479)

hayes-mysten

[chore] Delete the unused upgrade policy fixtures that are not valid Move (#28473)

Todd Nowacki

Fix GraphQL transactional tests protocol version pinning (#28474)

Todd Nowacki

Graceful random restarts in test_simulated_load_reconfig_restarts (#28255)

Mark Logan

grpc: verify both supported zkLogin circuits (#28412)

Ashok Menon

graphql: decouple signature verification from protocol activation (#28395)

Ashok Menon

[kv-rpc] Optionally set the served checkpoint from kvstore indexers' watermark streams (#28451)

Nick Vikeras

[e2e] Add a simtest for releasing and re-claiming derived objects (#28421)

Todd Nowacki

[graphql] Test object history across derived object re-creation (#28420)

Todd Nowacki