Cardano Updates

Signed-off-by: Chris Guiney <[email protected]>

Audit docs for stale Buildkite references, document the benchmark
history pipeline, and update contributor guides following the GHA
migration.

Signed-off-by: William Hankins <[email protected]>

Adapt to the cli version automatically

Bumps [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) from 1.41.5 to 1.41.6.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.41.5...v1.41.6)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.41.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) from 1.32.13 to 1.32.16.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.32.13...config/v1.32.16)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.32.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps [github.com/blockfrost/blockfrost-go](https://github.com/blockfrost/blockfrost-go) from 0.3.0 to 0.4.0.
- [Release notes](https://github.com/blockfrost/blockfrost-go/releases)
- [Commits](https://github.com/blockfrost/blockfrost-go/compare/v0.3.0...v0.4.0)

---
updated-dependencies:
- dependency-name: github.com/blockfrost/blockfrost-go
  dependency-version: 0.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.275.0 to 0.276.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.275.0...v0.276.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-version: 0.276.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps [github.com/blinklabs-io/gouroboros](https://github.com/blinklabs-io/gouroboros) from 0.165.1 to 0.165.2.
- [Release notes](https://github.com/blinklabs-io/gouroboros/releases)
- [Changelog](https://github.com/blinklabs-io/gouroboros/blob/main/RELEASE_NOTES.md)
- [Commits](https://github.com/blinklabs-io/gouroboros/compare/v0.165.1...v0.165.2)

---
updated-dependencies:
- dependency-name: github.com/blinklabs-io/gouroboros
  dependency-version: 0.165.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [blinklabs-io/cardano-cli](https://github.com/blinklabs-io/docker-cardano-cli) from 10.14.0.0-1 to 10.15.1.0-1.
- [Release notes](https://github.com/blinklabs-io/docker-cardano-cli/releases)
- [Commits](https://github.com/blinklabs-io/docker-cardano-cli/compare/v10.14.0.0-1...v10.15.1.0-1)

---
updated-dependencies:
- dependency-name: blinklabs-io/cardano-cli
  dependency-version: 10.15.1.0-1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: William Hankins <[email protected]>

Adapt to the cli version automatically

Signed-off-by: Chris Gianelloni <[email protected]>

## Problem

The CI build host (`zur1-s-d-029`) runs ~28 GHA self-hosted runners
as a single user against **one shared tmpfs `/tmp`**. Any job running
`rm -rf /tmp/e2e-* /tmp/test-cluster*` on `if: always()` will wipe
sibling runners' **live** VolatileDB files.

Under UTxO-HD (cardano-node >= 10.7.0) the consensus layer re-opens
VolatileDB files by path through `fs-api`, so an unlinked
`blocks-*.dat` now crashes the node with
`ApiMisuse (ClosedDBError (UnexpectedFailure (FileSystemError
FsResourceDoesNotExist …)))`
instead of tolerating the unlink via open fd's.

This reproduced on master (`253d290bfd`) — Conway Integration Tests
crashed at 15:46:43 UTC on 2026-04-20 with two pool nodes failing
simultaneously on
`/tmp/test-cluster436150/pool-*/db/volatile/blocks-0.dat`.
See also upstream ouroboros-consensus#1991.

## Fix

- Set `TMPDIR: ${{ runner.temp }}` on every job that launches a local
  test cluster or E2E run. `$RUNNER_TEMP` is per-job, per-runner, and
  auto-cleaned by the runner service between jobs, so clusters live
  in a private directory that sibling runners cannot touch.
- Drop the pre-existing dangerous cleanup in
  `.github/workflows/linux-e2e.yml` and `.github/workflows/release.yml`
  — `$RUNNER_TEMP` makes them redundant.
- Replace the shared fixed path `TMPDIR: /tmp/gha-bench` in
  `linux-benchmarks.yml` and `restoration-benchmarks.yml` for the
  same reason.

No new cleanup steps are introduced.

* refactor(ledger): add applyEraTransition function to encapulate all era rollovers

Signed-off-by: Chris Guiney <[email protected]>

---------

Signed-off-by: Chris Guiney <[email protected]>

Signed-off-by: Chris Gianelloni <[email protected]>

* fix(chain): reject unset or zero Ouroboros security parameter K

Signed-off-by: cryptodj413 <[email protected]>

* fix(chain): enforce security parameter init and update rollback fixtures

Signed-off-by: cryptodj413 <[email protected]>

---------

Signed-off-by: cryptodj413 <[email protected]>

Signed-off-by: Chris Gianelloni <[email protected]>

Signed-off-by: William Hankins <[email protected]>

No longer allow leftover bytes when decoding IPv4/IPv6 addresses regardless
of decoder version.