Clean the espresso crypto lib

.envrc

@@ -0,0 +1,3 @@
+use nix
+watch_file flake.nix
+watch_file flake.lock

.github/actions/docker-image/action.yml

@@ -0,0 +1,68 @@
+name: Espresso Docker Image
+
+inputs:
+  context:
+    required: true
+    type: string
+  images:
+    required: true
+    type: string
+  target:
+    required: true
+    type: string
+  platforms:
+    required: true
+    type: string
+  file:
+    required: true
+    type: string
+
+outputs:
+  digest:
+    value: "${{ steps.build.outputs.digest }}"
+
+runs:
+  using: composite
+  steps:
+
+    - name: Generate docker metadata
+      uses: docker/metadata-action@v5
+      id: metadata
+      with:
+        images: ${{ inputs.images }}
+
+    # Build docker images and push to registry "by digest" later the images for
+    # ARM64 and AMD64 are merged and tagged as the final image.
+    #
+    # This step does not use `tags`. With tags (e.g. :main) push by digest fails.
+    - name: Build and push docker
+      uses: docker/build-push-action@v5
+      id: build
+      with:
+        context: ${{ inputs.context }}
+        file: ${{ inputs.file }}
+        target: ${{ inputs.target }}
+        labels: ${{ steps.metadata.outputs.labels  }}
+        platforms: ${{ inputs.platforms }}
+        cache-from: type=registry,ref=${{ steps.metadata.outputs.tags }}
+        cache-to: type=inline
+        outputs: type=image,name=${{ inputs.images }},push-by-digest=true,name-canonical=true,push=true
+
+    # This will upload the digest for each architecture to the same artifact,
+    # Note: upload-artifact@v4 will no longer support this.
+    # https://github.com/actions/upload-artifact?tab=readme-ov-file#not-uploading-to-the-same-artifact
+    - name: Export digest
+      shell: bash
+      run: |
+        digest_dir="${{ runner.temp }}/${{ inputs.target }}-${{ github.run_number }}-digests"
+        mkdir -p "${digest_dir}"
+        digest="${{ steps.build.outputs.digest }}"
+        touch "${digest_dir}/${digest#sha256:}"
+
+    - name: Upload digest
+      uses: actions/upload-artifact@v3
+      with:
+        name: "${{ inputs.target }}-digests"
+        path: "${{ runner.temp }}/${{ inputs.target }}-${{ github.run_number }}-digests/*"
+        if-no-files-found: error
+        retention-days: 1

.github/dependabot.yml

@@ -0,0 +1,10 @@
+version: 2
+updates:
+  # Make PRs to update the nitro-testnode submodule
+  - package-ecosystem: "gitsubmodule"
+    directory: "/"
+    allow:
+      - dependency-name: "nitro-testnode"
+      - dependency-name: "contracts"
+    schedule:
+      interval: "daily"

.github/workflows/arbitrator-ci.yml

@@ -28,7 +28,7 @@ env:
 jobs:
   arbitrator:
     name: Run Arbitrator tests
-    runs-on: ubuntu-8
+    runs-on: ubuntu-latest
     steps:
       - name: Setup tmate session
         uses: mxschmitt/action-tmate@v3
@@ -121,6 +121,8 @@ jobs:
 
       - name: Install Foundry
         uses: foundry-rs/foundry-toolchain@v1
+        with:
+          version: nightly
 
       - name: Cache cbrotli
         uses: actions/cache@v3

.github/workflows/backport.yml

@@ -0,0 +1,17 @@
+name: Backport merged pull request
+on:
+  pull_request_target:
+    types: [closed]
+permissions:
+  contents: write # so it can comment
+  pull-requests: write # so it can create pull requests
+jobs:
+  backport:
+    name: Backport pull request
+    runs-on: ubuntu-latest
+    # Don't run on closed unmerged pull requests
+    if: github.event.pull_request.merged
+    steps:
+      - uses: actions/checkout@v4
+      - name: Create backport pull requests
+        uses: korthout/backport-action@v2