Merge branch 'release'

.github/workflows/account-migration.yml

@@ -14,7 +14,7 @@ on:
 jobs:
   account_migration:
     name: "account-migration"
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - name: generate token
         id: generate-token

.github/workflows/bot-super-report-custom.yml

@@ -17,7 +17,7 @@ permissions:
 
 jobs:
   main:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v4
       - name: Setup the toolchain

.github/workflows/bot-super-report.yml

@@ -9,7 +9,7 @@ permissions:
 
 jobs:
   main:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v4
       - name: Setup the toolchain

.github/workflows/build-and-test-external.yml

@@ -14,7 +14,7 @@ permissions:
 jobs:
   determine-affected:
     name: "Turbo Affected"
-    if: ${{github.event.pull_request.head.repo.full_name != github.repository }}
+    if: ${{github.event.pull_request.head.repo.fork }}
     uses: LedgerHQ/ledger-live/.github/workflows/turbo-affected-reusable.yml@develop
     with:
       head_branch: ${{ github.event.pull_request.head.ref || github.event.merge_group.head_ref }}
@@ -24,7 +24,7 @@ jobs:
   build-desktop-external:
     name: "[External] Build Desktop"
     needs: determine-affected
-    if: ${{contains(needs.determine-affected.outputs.paths, 'ledger-live-desktop') && github.event.pull_request.head.repo.full_name != github.repository }}
+    if: ${{contains(needs.determine-affected.outputs.paths, 'ledger-live-desktop') && github.event.pull_request.head.repo.fork }}
     uses: LedgerHQ/ledger-live/.github/workflows/build-desktop-external-reusable.yml@develop
     with:
       ref: ${{ github.event.pull_request.head.ref }}
@@ -34,7 +34,7 @@ jobs:
   test-desktop-external:
     name: "[External] Test Desktop"
     needs: determine-affected
-    if: ${{contains(needs.determine-affected.outputs.paths, 'ledger-live-desktop') && github.event.pull_request.head.repo.full_name != github.repository }}
+    if: ${{contains(needs.determine-affected.outputs.paths, 'ledger-live-desktop') && github.event.pull_request.head.repo.fork }}
     uses: LedgerHQ/ledger-live/.github/workflows/test-desktop-external-reusable.yml@develop
     with:
       ref: ${{ github.event.pull_request.head.ref }}
@@ -44,7 +44,7 @@ jobs:
   build-mobile-external:
     name: "[External] Build Mobile"
     needs: determine-affected
-    if: ${{contains(needs.determine-affected.outputs.paths, 'ledger-live-mobile') && github.event.pull_request.head.repo.full_name != github.repository}}
+    if: ${{contains(needs.determine-affected.outputs.paths, 'ledger-live-mobile') && github.event.pull_request.head.repo.fork}}
     uses: LedgerHQ/ledger-live/.github/workflows/build-mobile-external-reusable.yml@develop
     with:
       ref: ${{ github.event.pull_request.head.ref }}
@@ -59,7 +59,7 @@ jobs:
       - test-desktop-external
       - build-mobile-external
     runs-on: ubuntu-22.04
-    if: ${{ always() && !cancelled() && github.event.pull_request.head.repo.full_name != github.repository }}
+    if: ${{ always() && !cancelled() && github.event.pull_request.head.repo.fork }}
     steps:
       - name: Check result
         if: contains(needs.*.result, 'failure')

.github/workflows/build-and-test-pr.yml

@@ -14,7 +14,7 @@ permissions:
 jobs:
   determine-affected:
     name: "Turbo Affected"
-    if: ${{github.event.pull_request.head.repo.full_name == github.repository }}
+    if: ${{!github.event.pull_request.head.repo.fork }}
     uses: LedgerHQ/ledger-live/.github/workflows/turbo-affected-reusable.yml@develop
     with:
       head_branch: ${{ github.event.pull_request.head.ref || github.event.merge_group.head_ref }}
@@ -24,65 +24,65 @@ jobs:
   build-desktop:
     name: "Build Desktop"
     needs: determine-affected
-    if: ${{contains(needs.determine-affected.outputs.paths, 'ledger-live-desktop') && github.event.pull_request.head.repo.full_name == github.repository }}
+    if: ${{contains(needs.determine-affected.outputs.paths, 'ledger-live-desktop') && !github.event.pull_request.head.repo.fork }}
     uses: LedgerHQ/ledger-live/.github/workflows/build-desktop-reusable.yml@develop
     secrets: inherit
 
   test-desktop:
     name: "Test Desktop"
     needs: determine-affected
-    if: ${{contains(needs.determine-affected.outputs.paths, 'ledger-live-desktop') && github.event.pull_request.head.repo.full_name == github.repository}}
+    if: ${{contains(needs.determine-affected.outputs.paths, 'ledger-live-desktop') && !github.event.pull_request.head.repo.fork}}
     uses: LedgerHQ/ledger-live/.github/workflows/test-desktop-reusable.yml@develop
     secrets: inherit
 
   # LLM
   build-mobile:
     name: "Build Mobile"
     needs: determine-affected
-    if: ${{contains(needs.determine-affected.outputs.paths, 'ledger-live-mobile') && github.event.pull_request.head.repo.full_name == github.repository}}
+    if: ${{contains(needs.determine-affected.outputs.paths, 'ledger-live-mobile') && !github.event.pull_request.head.repo.fork}}
     uses: LedgerHQ/ledger-live/.github/workflows/build-mobile-reusable.yml@develop
     secrets: inherit
 
   test-mobile:
     name: "Test Mobile"
     needs: determine-affected
-    if: ${{contains(needs.determine-affected.outputs.paths, 'ledger-live-mobile') && github.event.pull_request.head.repo.full_name == github.repository}}
+    if: ${{contains(needs.determine-affected.outputs.paths, 'ledger-live-mobile') && !github.event.pull_request.head.repo.fork}}
     uses: LedgerHQ/ledger-live/.github/workflows/test-mobile-reusable.yml@develop
     secrets: inherit
 
   test-mobile-e2e:
     name: "Test Mobile E2E"
     needs: determine-affected
-    if: ${{contains(needs.determine-affected.outputs.paths, 'ledger-live-mobile') && github.event.pull_request.head.repo.full_name == github.repository}}
+    if: ${{contains(needs.determine-affected.outputs.paths, 'ledger-live-mobile') && !github.event.pull_request.head.repo.fork}}
     uses: LedgerHQ/ledger-live/.github/workflows/test-mobile-e2e-reusable.yml@develop
     secrets: inherit
 
   # Tests
   test-libraries:
     name: "Test Libraries"
     needs: determine-affected
-    if: ${{contains(needs.determine-affected.outputs.paths, 'libs') && github.event.pull_request.head.repo.full_name == github.repository}}
+    if: ${{contains(needs.determine-affected.outputs.paths, 'libs') && !github.event.pull_request.head.repo.fork}}
     uses: LedgerHQ/ledger-live/.github/workflows/test-libs-reusable.yml@develop
     secrets: inherit
 
   test-design-system:
     name: "Test Design System"
     needs: determine-affected
-    if: ${{contains(needs.determine-affected.outputs.paths, 'libs/ui') && github.event.pull_request.head.repo.full_name == github.repository}}
+    if: ${{contains(needs.determine-affected.outputs.paths, 'libs/ui') && !github.event.pull_request.head.repo.fork}}
     uses: LedgerHQ/ledger-live/.github/workflows/test-design-system-reusable.yml@develop
     secrets: inherit
 
   test-web-tools:
     name: "Test Web Tools"
     needs: determine-affected
-    if: ${{contains(needs.determine-affected.outputs.paths, 'apps/web-tools') && github.event.pull_request.head.repo.full_name == github.repository}}
+    if: ${{contains(needs.determine-affected.outputs.paths, 'apps/web-tools') && !github.event.pull_request.head.repo.fork}}
     uses: LedgerHQ/ledger-live/.github/workflows/test-web-tools-reusable.yml@develop
     secrets: inherit
 
   test-cli:
     name: "Test CLI"
     needs: determine-affected
-    if: ${{contains(needs.determine-affected.outputs.paths, 'apps/cli') && github.event.pull_request.head.repo.full_name == github.repository}}
+    if: ${{contains(needs.determine-affected.outputs.paths, 'apps/cli') && !github.event.pull_request.head.repo.fork}}
     uses: LedgerHQ/ledger-live/.github/workflows/test-cli-reusable.yml@develop
     secrets: inherit
 

.github/workflows/build-desktop-reusable.yml

@@ -19,10 +19,6 @@ on:
         description: The base branch to merge the head into when checking out the code
         type: string
         required: false
-      prNumber:
-        description: PR number
-        type: string
-        required: false
 
 permissions:
   id-token: write
@@ -155,11 +151,11 @@ jobs:
             return JSON.stringify(obj);
 
       - uses: LedgerHQ/ledger-live/tools/actions/build-checks@develop
-        if: ${{ !cancelled() && inputs.prNumber != '' }}
+        if: ${{ !cancelled() && github.event.number != '' }}
         with:
           token: ${{ steps.generate-token.outputs.token }}
           baseBranch: ${{ inputs.base_ref || 'develop' }}
-          prNumber: ${{ inputs.prNumber }}
+          prNumber: ${{ github.event.number}}
           mode: desktop
 
       - uses: LedgerHQ/ledger-live/tools/actions/desktop-report-build@develop

.github/workflows/build-mobile-reusable.yml

@@ -19,10 +19,6 @@ on:
         description: The base branch to merge the head into when checking out the code
         type: string
         required: false
-      prNumber:
-        description: PR number
-        type: string
-        required: false
 
 permissions:
   id-token: write
@@ -111,8 +107,8 @@ jobs:
         with:
           max_attempts: 2
           timeout_minutes: 15
-          command: pnpm i --filter="live-mobile..." --filter="ledger-live" --no-frozen-lockfile --unsafe-perm 
-          new_command_on_retry: rm -rf ~/.cocoapods/ && pnpm clean && pnpm i --filter="live-mobile..." --filter="ledger-live" --no-frozen-lockfile --unsafe-perm 
+          command: pnpm i --filter="live-mobile..." --filter="ledger-live" --no-frozen-lockfile --unsafe-perm
+          new_command_on_retry: rm -rf ~/.cocoapods/ && pnpm clean && pnpm i --filter="live-mobile..." --filter="ledger-live" --no-frozen-lockfile --unsafe-perm
       - name: bundle ios and android js
         run: |
           pnpm build:llm:deps --api="http://127.0.0.1:${{ steps.caches.outputs.port }}" --token="${{ secrets.TURBOREPO_SERVER_TOKEN }}" --team="foo"
@@ -144,11 +140,11 @@ jobs:
         with:
           name: mobile.metafile.json
       - uses: LedgerHQ/ledger-live/tools/actions/build-checks@develop
-        if: inputs.prNumber != ''
+        if: github.event.number != ''
         with:
           token: ${{ steps.generate-token.outputs.token }}
           baseBranch: ${{ inputs.base_ref || 'develop' }}
-          prNumber: ${{ inputs.prNumber }}
+          prNumber: ${{ github.event.number}}
           mode: mobile
       - uses: actions/github-script@v7
         name: get statuses of runs

.github/workflows/generate-screenshots.yml

@@ -77,11 +77,11 @@ jobs:
       - uses: LedgerHQ/ledger-live/tools/actions/composites/update-snapshots-desktop@develop
         id: update-snapshots
         with:
-          os: ubuntu-latest
+          os: ubuntu-22.04
 
   report-start:
     name: Report start
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     if: inputs.commentId != ''
     steps:
       - name: generate token
@@ -115,7 +115,7 @@ jobs:
     needs: ["generate-screenshots-linux", "report-start"]
     if: ${{ !cancelled() }}
     name: Report end
-    runs-on: "ubuntu-latest"
+    runs-on: ubuntu-22.04
     steps:
       - name: generate token
         id: generate-token

.github/workflows/regen-doc.yml

@@ -28,7 +28,7 @@ permissions:
 
 jobs:
   regen-doc:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - name: generate token
         id: generate-token
@@ -118,7 +118,7 @@ jobs:
 
   report-start:
     name: Report start
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     if: inputs.commentId != ''
     steps:
       - name: generate token
@@ -153,7 +153,7 @@ jobs:
     name: Report end
     needs: [regen-doc, report-start]
     if: ${{ !cancelled() }}
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - name: generate token
         id: generate-token

.github/workflows/regen-pods.yml

@@ -28,7 +28,7 @@ permissions:
 
 jobs:
   regen-pods:
-    runs-on: macos-latest
+    runs-on: macos-14
     name: "Regenerate Podfile"
     env:
       SKIP_BUNDLE_CHECK: 1
@@ -123,7 +123,7 @@ jobs:
 
   report-start:
     name: Report start
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     if: inputs.commentId != ''
     steps:
       - name: generate token
@@ -158,7 +158,7 @@ jobs:
     name: Report end
     needs: [regen-pods, report-start]
     if: ${{ !cancelled() }}
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - name: generate token
         id: generate-token

.github/workflows/renovate.yml

@@ -9,7 +9,7 @@ on:
 
 jobs:
   renovate:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     env:
       LOG_LEVEL: debug
       npm_config_ignore_scripts: true

.github/workflows/sonar.yml

@@ -24,8 +24,6 @@ jobs:
     runs-on: [ledger-live-4xlarge]
     steps:
       - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
       - name: Setup git user
         uses: LedgerHQ/ledger-live/tools/actions/composites/setup-git-user@develop
       - name: Setup the caches
@@ -37,8 +35,6 @@ jobs:
           roleName: ${{ secrets.AWS_CACHE_ROLE_NAME }}
           region: ${{ secrets.AWS_CACHE_REGION }}
           turbo-server-token: ${{ secrets.TURBOREPO_SERVER_TOKEN }}
-      - name: Setup the toolchain
-        uses: LedgerHQ/ledger-live/tools/actions/composites/setup-toolchain@develop
       - name: Install dependencies
         env:
           LANG: en_US.UTF-8
@@ -52,8 +48,16 @@ jobs:
 
       - name: Generate Unit test coverage for LLD & LLM
         run: |
-          pnpm desktop test:jest:coverage --coverageDirectory=desktop-coverage
-          pnpm mobile test:jest:coverage --coverageDirectory=mobile-coverage
+          pnpm desktop test:jest:coverage
+          pnpm mobile test:jest:coverage
+
+      - name: Merge lcov files
+        run: |
+          cat apps/ledger-live-desktop/coverage/lcov.info apps/ledger-live-mobile/coverage/lcov.info > ./lcov.info
+      - name: Copy test execution files
+        run: |
+          cat apps/ledger-live-desktop/coverage/lld-sonar-executionTests-report.xml > ./lld-sonar-executionTests-report.xml
+          cat apps/ledger-live-mobile/coverage/llm-sonar-executionTests-report.xml > ./llm-sonar-executionTests-report.xml
       - uses: sonarsource/sonarqube-scan-action@master
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

.github/workflows/stale.yml

@@ -5,7 +5,7 @@ on:
 
 jobs:
   stale:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: actions/stale@v4
         with:

.github/workflows/test-bridge-pr.yml

@@ -14,7 +14,7 @@ jobs:
     outputs:
       is-affected: ${{ steps.affected.outputs.is-affected }}
       paths: ${{ steps.affected.outputs.paths }}
-    runs-on: [ubuntu-latest]
+    runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v4
         with:
@@ -48,7 +48,7 @@ jobs:
       fail-fast: false
       matrix:
         os:
-          - ubuntu-latest
+          - ubuntu-22.04
 
     runs-on: ${{ matrix.os }}
     steps:
@@ -65,7 +65,7 @@ jobs:
       - name: Install node-gyp globally
         if: runner.os == 'Windows'
         run: |
-          pnpm add -g node-gyp
+          pnpm add -g node-gyp@3.8.0
       - name: Install dependencies
         run: pnpm i --filter="live-common..." --filter="ledger-live"
       - name: Build