Cardano Updates

Signed-off-by: Sasha Bogicevic <[email protected]>

Signed-off-by: Sasha Bogicevic <[email protected]>

Signed-off-by: Sasha Bogicevic <[email protected]>

  Embed depositPeriod in the on-chain OpenDatum at Init time so every
  node can validate it against its local --deposit-period config.
  A node with a mismatching value emits IgnoredHeadInitializing, the
  same way contestationPeriod mismatches are already handled.

  - New Plutus type Hydra.Data.DepositPeriod and off-chain
    Hydra.Tx.DepositPeriod (moved out of hydra-node into hydra-tx so
    HeadParameters can reference it)
  - depositPeriod added to OpenDatum and HeadParameters
  - onIdleChainInitTx guard extended with configuredDepositPeriod == depositPeriod
  - validateParameters in Node.hs checks mismatch on restart (DepositPeriodMismatch)
  - prop_ignoresUnrelatedOnInitTx extended with genOnInitWithDifferentDepositPeriod
  - Stale golden files deleted (script hashes and HeadParameters JSON change)
  - Docs updated: --deposit-period is now a protocol parameter

Signed-off-by: Sasha Bogicevic <[email protected]>

The matrix bench ran each cluster directly in `cellDir`, which lives
under the published benchmarks/ output. Node working state (etcd WAL
segments, `cardano-node` db, logs) was published, and since the docs
deploy uses `clean:false` it accumulated on `gh-pages` until the branch
exceeded the GitHub Pages 10GB limit, breaking every deployment.

Run each matrix cell in a throwaway temp dir so only dataset.json and
the aggregated scenarios.md reach the output. Also strip any
etcd/db/logs dirs in the publish workflow as a safety net before
deploying.

<!-- Describe your change here -->

---

<!-- Consider each and tick it off one way or the other -->
* [ ] CHANGELOG updated or not needed
* [ ] Documentation updated or not needed
* [ ] Haddocks updated or not needed
* [ ] No new TODOs introduced or explained herafter

#1723 removed the protobufjs resolution as "redundant" — wrong. Without it the
tree resolves protobufjs 7.2.6 (via @trezor), vulnerable to GHSA-xq3m-2v4x-88gg
(CRITICAL arbitrary code execution, affects < 7.5.5) + 5 high + 4 medium.

This can't be fixed by a parent bump: @trezor/connect 9.7.3 (latest) still pins
@trezor/[email protected] + @trezor/[email protected] (both
latest), which declare @trezor/[email protected] -> protobufjs 7.4.0 (also < 7.5.5).
And even @trezor's patched @trezor/[email protected] only reaches protobufjs 7.5.5,
which still carries 10 open advisories — only 7.6.4 is fully clean, and no @trezor
release reaches it. Documented last-resort pin per the remediation policy.

Pin -> 7.6.4 (clean). Build green. Tracked in #1701 (remove once @trezor aligns).

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

Bumps the npm-prod-deps group with 1 update in the /cloud-agent/client/generator directory: [@openapitools/openapi-generator-cli](https://github.com/OpenAPITools/openapi-generator-cli).


Updates `@openapitools/openapi-generator-cli` from 2.38.0 to 2.39.0
- [Release notes](https://github.com/OpenAPITools/openapi-generator-cli/releases)
- [Commits](https://github.com/OpenAPITools/openapi-generator-cli/compare/v2.38.0...v2.39.0)

---
updated-dependencies:
- dependency-name: "@openapitools/openapi-generator-cli"
  dependency-version: 2.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-prod-deps
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps the actions-deps group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `6.0.3` | `7.0.0` |
| [actions/setup-java](https://github.com/actions/setup-java) | `5.2.0` | `5.3.0` |
| [sbt/setup-sbt](https://github.com/sbt/setup-sbt) | `1.2.1` | `1.4.0` |
| [EnricoMi/publish-unit-test-result-action](https://github.com/enricomi/publish-unit-test-result-action) | `2.23.0` | `2.24.0` |
| [oasdiff/oasdiff-action](https://github.com/oasdiff/oasdiff-action) | `0.0.57` | `0.1.3` |



Updates `actions/checkout` from 6.0.3 to 7.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b4311f1884172cec0e10...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0)

Updates `actions/setup-java` from 5.2.0 to 5.3.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/be666c2fcd27ec809703dec50e508c2fdc7f6654...ad2b38190b15e4d6bdf0c97fb4fca8412226d287)

Updates `sbt/setup-sbt` from 1.2.1 to 1.4.0
- [Release notes](https://github.com/sbt/setup-sbt/releases)
- [Commits](https://github.com/sbt/setup-sbt/compare/af116cce31c00823d3903ce687f9cda3a4f19f1b...3afe9cf056c5d139bfc46579af1192d77a2f0821)

Updates `EnricoMi/publish-unit-test-result-action` from 2.23.0 to 2.24.0
- [Release notes](https://github.com/enricomi/publish-unit-test-result-action/releases)
- [Commits](https://github.com/enricomi/publish-unit-test-result-action/compare/c950f6fb443cb5af20a377fd0dfaa78838901040...d0a4676d0e0b938bc201470d88276b7c74c712b3)

Updates `oasdiff/oasdiff-action` from 0.0.57 to 0.1.3
- [Release notes](https://github.com/oasdiff/oasdiff-action/releases)
- [Commits](https://github.com/oasdiff/oasdiff-action/compare/3530478ec30f84adedbfeb28f0d9527a290f50a9...ccc2442df0d99f8c419ed73e3de88641c91b3bc6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: actions/setup-java
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: sbt/setup-sbt
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: EnricoMi/publish-unit-test-result-action
  dependency-version: 2.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: oasdiff/oasdiff-action
  dependency-version: 0.1.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
...

Signed-off-by: dependabot[bot] <[email protected]>

* test: use cddl and antigen to generate serialization test cases

Signed-off-by: Eric Torreborre <[email protected]>

* test: add a flox environment to install and run the cbor fixture generator

Signed-off-by: Eric Torreborre <[email protected]>

* test: generate serialization test cases

Signed-off-by: Eric Torreborre <[email protected]>

---------

Signed-off-by: Eric Torreborre <[email protected]>

co-authored-by: Adithya Kumar <[email protected]>

* chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.52.0 to 0.53.0.
- [Commits](https://github.com/golang/crypto/compare/v0.52.0...v0.53.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* docs(examples): go mod tidy

Signed-off-by: Chris Gianelloni <[email protected]>

---------

Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: Chris Gianelloni <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Chris Gianelloni <[email protected]>

Bumps [form-data](https://github.com/form-data/form-data) from 4.0.5 to 4.0.6.
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](https://github.com/form-data/form-data/compare/v4.0.5...v4.0.6)

---
updated-dependencies:
- dependency-name: form-data
  dependency-version: 4.0.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.1 to 4.2.0.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.1...4.2.0)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.2.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>