chore(deps): bump tempo dependencies to 87bd32a

[github-actions]

Tempo Dependency Updates

Bumped all tempo* dependencies from cf4e080 to 87bd32a.

Commits

• 89da7d6 feat(node): stop Zone block production while the portal is paused (#1429)
• 9e07ee3 fix(p2p): use the node datadir for runtime storage (#1522)
• 2e26f45 feat(nitro-attestation): expose AWS-LC backend and root certificate (#7903)
• db84be9 docs(tip-1098): specify temporary verifier rollout fallback (#7776)
• e6e8bb1 feat(precompiles): allow NoProof verifier mode during rollout (#7891)
• bd0fdc6 feat(alloy): expose hardfork schedule queries (#7905)
• 845549c feat(prover): add proofless verifier fallback mode (#1489)
• 74a9089 feat(verifier): expose a local PCR policy entry point (#7832)
• 7af7bdc feat(sequencer): route provers by live L1 hardfork (#1490)
• 900725f fix(sequencer): reject inconsistent Portal checkpoints during recovery (#1487)
• 1372c18 fix(node): gate hardfork catch-up on finalized L1, not the queued tip (#1521)
• dce888d chore(ci): bump Cyclops audit workflow (#7913)
• 9fe03f0 chore(ci): bump Cyclops audit workflow (#1526)
• f7a9ec7 feat(prover): verify shadow Nitro proofs before T13 (#1497)
• b098306 feat(hardfork): add T14 plumbing (#7910)
• 65992df ASYM-1: avoid untrusted SPF transaction pre-allocation (#1528)
• b3d7f27 ASYM-2: reject SPF parents without a base fee (#1529)
• a1e45a1 chore(ci): bump gh-actions to bd66336e (#7915)
• d2f3d45 chore(ci): update gh-actions pins to bd66336e (#1530)
• a0a307f fix(rpc): stop consensus_subscribe tasks when the client goes away (#7916)
• a59930c chore(ci): update gh-actions pins to ee2960a6 (#1531)
• 0edc0c7 chore(ci): update gh-actions pins to ee2960a6 (#7917)
• 87cb558 feat(precompiles): expose zone_verifier::approved_pcrs (#7932)
• 5a7216e test(payload): remove racy prewarming worker slot test (#7926)
• 8a83e29 fix(p2p-proxy): bound concurrent header and body requests (#7920)
• bdd8968 fix(p2p-proxy): don't carry a block body over to a different block (#7918)
• f17f296 fix(sequencer): use no-proof mode without a prover (#1533)
• c0789cd fix(p2p-proxy): serve headers older than the cached range (#7919)
• 53b0f8c deps: update reth from main (2026-09-28) (#7897)
• c341c14 feat(xtask): add T12 and T13 genesis flags (#1534)
• 412b784 chore(txpool): correct the lagged AA 2D notification comment (#7921)
• 2c71756 refactor(precompiles): add TIP20Token::metadata helper (#7928)
• bacac9d fix(payload): include typed tx RLP headers in the block size estimate (#7922)
• 4ad4b7a Support hardfork routed prover in Zones benchmark (#1532)
• 613ee7a fix(evm): harden SSTORE as per EIP-2200 (#7647)
• 2fd1280 chore(precompiles): halt state mutations in static calls (#7643)
• 1cc5000 chore(ci): bump gh-actions to ac946e06 (#1535)
• a358450 chore(ci): bump gh-actions to ac946e06 (#7942)
• 4f51c71 perf(rpc): cache TIP-20 metadata in tempo_simulateV1 (#7927)
• 8d1745d chore(deps): update Tempo to latest main (#1525)
• 27e92f5 refactor(precompiles): enforce dispatcher mutability of calls (#7709)
• 5ced730 fix(rpc): take a blocking IO permit for simulate token metadata (#7925)
• d522b19 feat(consensus): expand block retention to 3 epochs (#7896)
• 50b30d1 fix(e2e): retry failed DKG ceremonies during fast sync (#7911)
• 3ff608b docs(tip-1070): mark current committee state as mainnet (#7909)
• 3d0768d feat(consensus): deferred verification (#7866)
• 0581b9d docs(tip-1006): harden burnAt spec (#7881)
• 4c9cfe9 feat(tip20): implement TIP-1006 burnAt at T12 (#7935)
• 74ce250 chore(bench): default to deferred verification (#7952)
• c356cdc feat(consensus): enable finalization gossip by default (#7950)
• 2f14651 fix(chainspec): preserve custom chain fork schedules (#1536)
• 9d82d15 fix(txpool): don't let stale AMM lookups overwrite cached reserves (#7924)
• 7f2fb1b chore: pin gh-actions references to 55fe3b63 (#1544)
• ca2c32d chore: pin gh-actions references to 55fe3b63 (#7956)
• e4d4b36 chore: bump workspace to v0.3.2 (#1546)
• 3bdcd50 feat(node): shadow replayer (#7636)
• 862ead2 Capture prover metrics at measured flow start (#1537)
• 01c7c1c feat(ci): run network E2E for consensus and Reth changes (#7939)
• 4f127ce perf(bench): enable Depot sccache for multi-region builds (#7943)
• 91c9e9b fix(ci): filter release artifact downloads (#1551)
• 8c4edcd refactor: use Tempo hardforks for zones (#1496)
• 2b034ec fix(xtask): default all Tempo genesis forks to timestamp zero (#1547)
• 6404642 chore(deps): align telemetry dependencies (#7963)
• e79ab5f Expose Tempo hardfork input in Zones prover workflow (#1552)
• 42c7db7 chore: bump workspace to v0.3.3 (#1555)
• c4ea9f8 fix(docker): isolate prover genesis from compilation cache (#1554)
• 1a552a8 fix(spf): validate millisecond timestamps (#1556)
• b820f53 docs: clarify channel close monitoring requirements (#7965)
• 00fe54c perf(sequencer): pipeline batch preparation and submission (#1543)
• 05aa47f fix(ztip20): reject burnAt calls on zones (#1539)
• 4916683 refactor(prover): use EthCallParams for the verifier eth_call (#1563)
• 0ccf15f refactor(rpc): use Signature::as_rsy (#1561)
• 0467a97 test(prover): reject non-canonical verifier returns (#1564)
• 121e702 refactor(rpc): build the token digest preimage in an array (#1560)
• cac5f92 refactor(sequencer): use Signature::as_bytes (#1562)
• c73ca0d test: use Signature::as_rsy in auth token helpers (#1565)
• dd259a4 refactor(sequencer): use Signature::v_byte (#1566)
• a576f09 refactor: reuse register_encryption_key (#1567)
• 2ed661f perf(consensus): reduce feed broadcast capacity to 128 blocks (#7953)
• 9a7c3ef fix(alloy): preserve configuration when selecting nonce fillers (#7750)
• ffa4705 perf(rpc): serialize consensus subscription events once (#7954)
• 570f654 fix(consensus): reject zero durations in PositiveDuration (#7941)
• c2860f5 fix(consensus): explain stale execution state on backfill failure (#7949)
• 27d270d refactor(node): resolve a single prover config per node (#1569)
• dfeb509 refactor: use TransactionReceipt::decoded_log (#1570)
• aa92603 refactor(spf): use B256/U256 From conversions (#1571)
• 6e6d996 refactor(l1): use B256/U256 From conversions (#1573)
• 0b5a05d refactor(node): use B256/U256 From conversions (#1574)
• cee4250 test: use B256/U256 From conversions (#1575)
• 364ac28 refactor(xtask): use B256: From (#1576)
• 296b957 refactor: use ZonePortal bindings for portal views (#1578)
• fb1d37f refactor: use Address::from_public_key (#1579)
• f84de30 refactor(prover): use NITRO_VERIFIER_CONFIG_V1_HASH (#1580)
• 9ca5453 refactor(prover): use Bytes: From<&'static [u8]> (#1581)
• cca0110 refactor: use RpcWithBlock::number (#1582)
• 97275d2 refactor(sequencer): use BlockId::finalized (#1583)
• 2668414 refactor: use alloy_rlp::encode (#1584)
• b3ab63d test: use Sealable::hash_slow (#1585)
• 19e5164 refactor: use tempo_contracts STABLECOIN_DEX_ADDRESS (#1587)
• 4b7dde6 refactor(sequencer): use PrivateKeySigner::credential (#1588)
• 96f3600 refactor: use Log::topic0 (#1589)
• b778ed1 refactor: use Bytes: From<[u8; N]> (#1590)
• 989e1ad test: use hex::encode_prefixed (#1591)
• 2adcdb5 test: use KECCAK_EMPTY (#1592)
• 40fac71 test: use address!, b256! and hex! literals (#1593)
• db8f165 test: use Event::select for single-block event queries (#1594)
• df2d55e test: use Provider::get_chain_id (#1595)
• bb2c81f test: use alloy's IMulticall3 binding (#1596)
• b720377 refactor: use alloy_rlp::decode_exact (#1597)
• 2f8361a refactor(spf): pass TempoState slot constants directly (#1572)
• f785aa3 refactor: use Address::into_word (#1577)
• bbe9f52 refactor: use tempo_contracts IStablecoinDEX (#1586)
• 869218c chore(deps): update keccak-asm to 0.1.9 (#7938)
• 45a0233 docs(tip-1119): explicit block system calls (#7672)
• a189cda fix(consensus): preserve timestamp safety when updating Tempo (#1568)
• fb446ab chore(deps): let Dependabot update indirect Cargo dependencies (#1598)
• 46d9a45 fix(p2p-proxy): cap the number of bodies served per request (#7990)
• 7f49742 feat(tracing): correlate block execution and payload workers (#7955)
• c8cf43a refactor: share state bloat commands with derived chains (#7969)
• 20b8dec feat(hardfork): schedule T12 activation (#8007)
• 6724b7e chore(deps): bump the cargo-weekly group across 1 directory with 13 updates (#1520)
• b43b912 feat(precompiles): allow custom zone verifier PCRs in devnet builds (#8005)
• fc46f7e perf: persist compiler and prover image layers (#1601)
• 1c11757 perf: share prover dependencies and isolate node caches (#1600)
• c5f3e0a chore(ci): publish devnet image with custom PCR support (#8008)
• 6a8b230 chore(bench): set the general gas cap to 1.5 Ggas (#8009)
• c2bd4a0 refactor: derive hardfork genesis fields and generator flags from the fork list (#7966)
• 8974a42 docs(revm): correct AA batch cold-account-access gas formula (#7978)
• 3428d3b fix(ci): report network E2E statuses for fork PRs (#8016)
• 6687555 perf(bench): make TCP sampling opt-in outside nightlies (#8010)
• 4248c54 refactor: use signing and transaction-building helpers (#1610)
• 273c373 refactor: use ecies and k256 key helpers (#1611)
• 81aef9a refactor(xtask): reuse and share zone_utils helpers (#1616)
• 6adda6f refactor: use alloy RPC type helpers (#1606)
• 0b4f5b2 refactor: use reth/revm helpers (#1607)
• 1f5b649 test: use helpers for derived test values (#1612)
• ef9a21b test: reuse node test signer, provider and genesis helpers (#1613)
• 400b3a0 test: reuse existing e2e helpers (#1614)
• 4978378 fix(ci): skip reth update when already on latest rev (#8006)
• 28e7cc9 refactor(xtask): reuse admin invariants helpers in sequencer_set (#1617)
• d926a9d test(node): share fetch_submit_batch_call (#1615)
• 9d7369d refactor: use upstream constants and bindings (#1608)
• c72e3f0 refactor: use primitive constructors and conversions (#1609)
• bd9a65e refactor(xtask): use Tempo's generated hardfork genesis arguments (#1558)
• 7b41228 fix(node): recognize router storage and SSTORE sentry replay differences (#7975)
• 22318d9 refactor(xtask): pass PrivateKeySigner directly to ProviderBuilder::wallet (#1618)
• f5c0b78 docs(tip-1098): match the per-signature Nitro gas to the verifier (#7994)
• 6ef1f81 docs: make network identities visible in README (#7958)
• 27b3534 docs(prover): fix enclave README protocol version and genesis loading (#1622)
• 344ff78 docs(prover): add enclave architecture, glossary, and verifier configs (#1625)
• 69ed318 fix(consensus): enable commonware-cryptography std for consensus-config tests (#8037)
• c6a41b6 deps: update reth from main (2026-10-01) (#7957)
• 0db3bc3 chore(ci): lower e2e threads-required to 4 (#1624)
• 851a3db perf(ci): reuse sccache for reth crates and scope e2e builds (#8040)
• e42f9d8 chore(ci): push Docker images to Docker Hub (#1631)
• f337b98 ci: run prover E2E on merge queue and full ancestry after merges (#1599)
• e3c4008 fix(release): allow preparing releases from release branches (#8045)
• cc82e02 chore(ci): run check-abi in nextest (#1623)
• 50c9a78 perf(ci): compile enclave prover early and package genesis afterward (#1632)
• 4bace55 perf(ci): pin SOURCE_DATE_EPOCH so sccache reuses reth/tempo crates (#1634)
• ea210f6 fix(bench): use a shared default benchmark preset (#7848)
• 810dd4d chore: add Amp orb setup scripts (#8050)
• d653f30 feat(prover): bootstrap Nitro-attested TLS (#1518)
• 8a09d17 bugfix(tempo_cmd): remove rpc_url default from info cmd (#8025)
• 54d15f5 fix(revm): avoid poisoning T12 expiring nonces (#8049)
• 1bfb235 fix(payload): avoid buffer scans for expiring nonce rejections (#7945)
• 088c721 fix(ci): pin semver checks to Rust 1.98.1 (#8056)
• a4e04a6 fix(chainspec): update testnet network identities (#8054)
• c3cda60 perf(txpool): refresh AA 2D pool base fee on canonical state change (#7409)
• 5b90c68 docs: update README testnet DKG identity for epoch 1747 (#8057)
• 5939d14 chore(bench): log NVMe device models (#8063)
• 077d2c7 chore(deps): let Dependabot update indirect Cargo dependencies (#7979)
• 84e3c44 ci(bench): pin e2e to Rust 1.98.1 (#8071)
• e3f350a fix(grafana): fix CW Peers panel and add finalization lag (#7973)
• 5c0bb59 fix(rpc): treat pending as latest in eth_call and eth_estimateGas (#1629)
• 8a9ea32 fix(consensus): reset forkchoice batch on stale-skipped updates (#8070)
• 1f66599 chore(ci): bump gh-actions to e813067e (#8084)
• 6959760 feat(precompiles): load zone verifier PCRs from pcrs.json and verify them in CI (#8046)
• 96c28fa fix(ci): enable benchmark frame pointers (#7882)
• 9de3549 deps: update reth from main (2026-10-02) (#8077)
• b13a6ba test(node): migrate e2e tests to reth's test utils (#8092)
• 4caada9 test(node): expire tx via block timestamp in evict test (#8086)
• 61c979a chore(ci): bump clippy to nightly-2026-10-02 (#8081)
• 1b07dcc chore(deps): update Tempo and Reth dependencies (#1643)
• 1d67b93 ci: verify reproducible candidate image (#1262)
• fc26c2f chore: bump workspace version to 0.3.4 (#1645)
• 25dbb43 fix(test): check genesis base fee instead of latest block (#8107)
• 9fc66e3 chore: fix manifest warnings from newer nightly cargo (#1640)
• 1b9b54f refactor: apply machine-applicable helper lints (#1639)
• 0fdc67e fix(txpool): take state provider for the cached tip (#8109)
• de5f5d3 fix(p2p-proxy): keep cached headers across fetches (#8110)
• 9bb6395 refactor: normalize byte and integer literals (#8117)
• 0293b65 refactor: normalize byte and integer literals (#1652)
• c0e1627 refactor: use zero and enum comparison predicates (#8122)
• c8f7361 refactor: use zero and enum comparison predicates (#1657)
• 75a3b6a feat(bench): target all preset compositions by gas (#8100)
• c0bc022 refactor: use BlockId helpers (#8124)
• 7bff751 refactor: use InMemoryDB (#1659)
• 3c6f9ad refactor: use Option::is_none_or (#1660)
• c681847 deps: update reth from main (2026-10-05) (#8099)
• 4ad0bc9 docs(tip-1124): specify calldata floor increase (#7902)
• c58821e chore: release tempo-alloy@1.16.0, tempo-chainspec@1.16.0 and 3 more (#7743)
• 3e1aefc refactor: use TempoSignature::from and into_signed (#8130)
• b19020f refactor: use TempoSignature::from and into_signed (#8131)
• 0b511ac refactor: use InMemoryDB (#8132)
• dbf9cd4 refactor: use alloy-primitives conversions and literals (#8133)
• 96245f4 refactor: use existing accessors, aliases and predicates (#8134)
• 0f4baf5 chore(release): v1.16.0 (#8128)
• 7c4fc9a ci: audit every PR push with Cyclops (#1664)
• a37a7c7 ci: audit every PR push with Cyclops (#8148)
• 3113606 feat(precompiles): add role-aware TIP-20 minting (#8078)
• f2c82d1 fix(ci): exclude Aegis logs from release artifacts (#8126)
• ad28b7b feat(evm): implement TIP-1119 system calls (#7710)
• 9ff4bfd docs(tip-1119): specify T13 activation (#8153)
• 3bfcf42 refactor: remove BAL feature and gated code (#8143)
• d48214a feat(xtask): add Safe multisig support for create-zone and portal operations (#1663)
• c464303 fix: derive zone genesis forks from L1 RPC (#1665)
• d3f3b28 docs(tip-1122): adopt SWAPN, DUPN, and EXCHANGE (#7828)
• 8b39ff7 test(node): adopt new reth e2e harness features (#8101)
• d268768 chore: bump workspace version to 0.3.5 (#1668)
• 1569c78 fix(ci): include required preview devnet event fields (#8164)
• 3ad932a chore: warm test builds in orb setup and avoid librocksdb-sys rebuilds (#8163)
• 0e114a0 chore(zones): relocate sources for the Tempo workspace
• 446e948 feat(evm): construct TempoEvm with custom precompiles (#8169)
• 3358c51 fix(evm): build zone EVM without the Tempo L1 precompile set (#1670)
• 59a356a feat(bench): prefill expiring nonce state in bloat dumps (#8175)
• 12e2dfc fix(node): advance dev miner timestamps past the parent (#8189)
• feb5dff fix(payload): borrow parent span in roots task (#8197)
• 24a51dd feat(checker): track deposit and withdrawal latencies (#1678)
• ffe96cf chore(zones): import complete Zones history
• 3a00115 chore(zones): register relocated submodules in root .gitmodules
• ad84076 perf(ci): stop serializing look-alike e2e tests (#8223)
• c6ba019 fix(bench): right-size e2e bloat rebuild space check (#8226)
• 3be53a0 deps: update reth from main (2026-10-09) (#8139)
• a927afd chore(zones): sync the latest Zones history
• 400852c chore(ci): reconcile Tempo and Zones workflows (#8173)
• b807918 test: speed up regenesis, p2p proxy, and live RPC matrix tests (#8229)
• 4a34b6c chore(zones): import Zones with preserved commit history (#8171)
• a043ad1 fix(zones): revert the Zones history import (#8231)
• 2b9cfb0 feat(dst): add optimized builds and gate expensive debug checks (#8198)
• dd36dba fix(rpc): log only block number and hashes for certified blocks (#8234)
• 3a3f36d chore(zones): import Zones with preserved commit history
• 3ce35ab fix(ci): track SDK releases by git tag in release PR workflow (#8224)
• 52082e5 docs: remove README shadowing the repository homepage (#8243)
• 7eddfee chore(zones): guard imported workflows and repoint relocated paths (#8230)
• a2e4fa3 perf(ci): build only the RPC test binary in RPC Tests (#8248)
• b3174ec refactor(contracts): consolidate Zone and Tempo bindings (#8240)
• 40aeb11 ci: drop the Cyclops audit run gate (#8201)
• 538c296 test: run fsync-heavy tempo tests on tmpfs (#8250)
• 87bd32a perf(ci): move multi-GB cache jobs to Depot runners (#8247)