Cardano Updates

From https://github.com/IntersectMBO/ouroboros-consensus at 5c351f45160e2576782ac25919e3fdca21beaca9

Documented the details of the Validity Review 20 meeting held on April 8, 2026, including attendees, agenda items, and follow-up notes.

Signed-off-by: bee 🐝 <[email protected]>

Enable PR number validation against changelog fragment in GHA

cardano-testnet | Refactor `getEpochStateDetails` to return immediately on foldEpochState` failure.

Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 7.0.0 to 7.1.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/d08e5c354a6adb9ed34480a06d141179aa583294...bcafcacb16a39f128d818304e6c9c0c18556b85f)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

feat(scripts): improve tx-generator setup and reliability

Signed-off-by: Doc Holiday <[email protected]>

Signed-off-by: Doc Holiday <[email protected]>

Signed-off-by: Doc Holiday <[email protected]>

Signed-off-by: Doc Holiday <[email protected]>

Signed-off-by: Doc Holiday <[email protected]>

Signed-off-by: Doc Holiday <[email protected]>

Fixes #553 — replaced console.log with silent catch in verification
error path, consistent with JWT.verify behavior.

Fixes #554 — added exp and nbf temporal claim validation per
RFC 7519 §4.1.4 and §4.1.5. SDJWT.verify now returns false for
expired or not-yet-valid credentials.

Changes:
- Check exp claim before signature verification; return false if expired
- Check nbf claim before signature verification; return false if too early
- Remove console.log(err) from catch block (was leaking error details)
- Change import from type-only to value import for Domain (needed for
  runtime access to JWT.Claims enum)

Signed-off-by: abhigyan1102 <[email protected]>
Signed-off-by: Abhigyan Singh <[email protected]>

Signed-off-by: Abhigyan Singh <[email protected]>

Signed-off-by: Abhigyan Singh <[email protected]>

Signed-off-by: Abhigyan Singh <[email protected]>

  Move SQLite event writes off the hot path using a bounded TBQueue
  (capacity 1000) and a single background writer thread. Events are
  JSON-encoded eagerly and enqueued; the writer drains the queue and
  batch-inserts via executeMany in a single transaction.

  Key changes:
  - EventSink gains a putEvents field for batch writes; mkEventSink
    provides a default sequential fallback
  - putEventsToSinks switches from event-major to sink-major loop order
  - SQLiteBased uses BLOB storage instead of TEXT, WAL mode with
    synchronous=NORMAL, and 64 MB page cache
  - Flush marker pattern (TMVar) lets rotate and tests block until all
    queued writes hit disk
  - Migration bypasses the async queue and writes directly via executeMany
  - Node replay collects events into a list then calls putEventsToSinks
    once instead of per-event mapM_
  - Rotation module delegates to underlying putEvents for batch support

Replaces 13 instances of generic `throw new Error()` with domain-specific
error types (`PolluxError.InvalidCredentialError`, `CastorError.NotPossibleToResolveDID`,
`CastorError.InvalidKeyError`) across the JWT/SDJWT utility layer.

This enables callers to programmatically distinguish between error types
(e.g., invalid DID document vs invalid key vs invalid credential), which
is essential for the Identity Portal to display meaningful error messages.

Files changed:
- SDJWT.ts: 6 errors replaced
- JWT.ts: 4 errors replaced
- ResolveDID.ts: 1 error replaced
- CreateJwt.ts: 1 error replaced
- CreateSDJWT.ts: 1 error replaced
- Added tests for error type verification

Signed-off-by: Abhigyan Singh <[email protected]>

Signed-off-by: Doc Holiday <[email protected]>

Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 7.0.0 to 7.1.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/d08e5c354a6adb9ed34480a06d141179aa583294...bcafcacb16a39f128d818304e6c9c0c18556b85f)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: Doc Holiday <[email protected]>

Signed-off-by: Doc Holiday <[email protected]>