Merge remote-tracking branch 'origin' into gav-xcm-v3

.dockerignore

@@ -3,7 +3,7 @@
 **/*.txt
 **/*.md
 /docker/
-!/target/release/polkadot-collator
+!/target/release/polkadot-parachain
 
 # dotfiles in the repo root
 /.*

.github/ISSUE_TEMPLATE/release-client.md

@@ -0,0 +1,20 @@
+---
+name: Release Checklist for Client
+about: Release Checklist for Client
+title: Release Checklist for Client {{ env.VERSION }}
+---
+
+# Release Checklist - Client
+
+### Client Release
+
+- [ ] build a new `polkadot-parachain` binary and publish it to S3
+- [ ] new `polkadot-parachain` version has [run on the network](../../docs/release.md#burnin)
+    without issue for at least 12h
+- [ ] a draft release has been created in the [Github Releases page](https://github.com/paritytech/cumulus/releases) with the relevant release-notes
+- [ ] the [build artifacts](../../docs/release.md#build-artifacts) have been added to the
+    draft-release.
+
+---
+
+Read more about the [release documentation](../../docs/release.md).

.github/ISSUE_TEMPLATE/release-runtime.md

@@ -0,0 +1,46 @@
+---
+name: Release Checklist for Runtime
+about: Release Checklist for Runtime
+title: Release Checklist for Runtime {{ env.VERSION }}
+---
+
+# Release Checklist - Runtimes
+
+## Runtimes Release
+
+### Codebase
+These checks should be performed on the codebase.
+
+- [ ] the [`spec_version`](https://github.com/paritytech/cumulus/blob/master/docs/release.md#spec-version) has been incremented since the
+    last release for any native runtimes from any existing use on public (non-private/test) networks
+- [ ] previously [completed migrations](https://github.com/paritytech/cumulus/blob/master/docs/release.md#old-migrations-removed) are
+    removed for any public (non-private/test) networks
+- [ ] No migrations added in the last release that would need to be removed
+- [ ] pallet and [extrinsic ordering](https://github.com/paritytech/cumulus/blob/master/docs/release.md#extrinsic-ordering--storage) as well as `SignedExtension`s have stayed
+    the same. Bump `transaction_version` otherwise
+- [ ] the [benchmarks](https://github.com/paritytech/ci_cd/wiki/Benchmarks:-cumulus) ran
+- [ ] the weights have been updated for any modified runtime logic
+- [ ] the various pieces of XCM config are sane
+
+### On the release branch
+
+The following checks can be performed after we have forked off to the release-
+candidate branch or started an additional release candidate branch (rc-2, rc-3, etc)
+
+- [ ] Verify [new migrations](https://github.com/paritytech/cumulus/blob/master/docs/release.md#new-migrations) complete successfully, and the
+    runtime state is correctly updated for any public (non-private/test)
+    networks
+- [ ] Run [integration tests](https://github.com/paritytech/cumulus/blob/master/docs/release.md#integration-tests), and make sure they pass.
+- [ ] Push runtime upgrade to Westmint and verify network stability
+
+
+### Github
+
+- [ ] Check that a draft release has been created at the [Github Releases page](https://github.com/paritytech/cumulus/releases) with relevant [release
+    notes](https://github.com/paritytech/cumulus/blob/master/docs/release.md#release-notes)
+- [ ] Check that [build artifacts](https://github.com/paritytech/cumulus/blob/master/docs/release.md#build-artifacts) have been added to the
+    draft-release.
+
+---
+
+Read more about the [release documentation](https://github.com/paritytech/cumulus/blob/master/docs/release.md).

.github/dependabot.yml

@@ -23,3 +23,8 @@ updates:
       - dependency-name: "westend-*"
     schedule:
       interval: "daily"
+  - package-ecosystem: github-actions
+    directory: '/'
+    labels: ["A2-insubstantial", "B0-silent", "C1-low 📌", "E3-dependencies"]
+    schedule:
+      interval: daily

.github/pr-custom-review.yml

@@ -6,7 +6,7 @@ action-review-team: ci
 rules:
   - name: Runtime files
     check_type: changed_files
-    condition: ^polkadot-parachains/(statemine|statemint)/src/[^/]+\.rs$
+    condition: ^parachains/runtimes/assets/(statemine|statemint)/src/[^/]+\.rs$
     all_distinct:
       - min_approvals: 1
         teams:
@@ -19,11 +19,21 @@ rules:
     check_type: changed_files
     condition:
       include: .*
-      exclude: ^polkadot-parachains/(statemine|statemint)/src/[^/]+\.rs$
+      # excluding files from 'Runtime files' and 'CI files' rules
+      exclude: ^parachains/runtimes/assets/(statemine|statemint)/src/[^/]+\.rs$|^\.gitlab-ci\.yml|^scripts/ci/.*|^\.github/.*
     min_approvals: 2
     teams:
       - core-devs
 
+  - name: CI files
+    check_type: changed_files
+    condition:
+      include: ^\.gitlab-ci\.yml|^scripts/ci/.*|^\.github/.*
+    min_approvals: 2
+    teams:
+      - ci
+      - release-engineering
+
 prevent-review-request:
   teams:
     - core-devs

.github/workflows/check-labels.yml

@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         with:
           fetch-depth: 0
           ref: ${{ github.event.pull_request.head.ref }}

.github/workflows/docs.yml

@@ -12,7 +12,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v2.3.4
+        uses: actions/checkout@v3
 
       - name: Rust versions
         run:  rustup show

.github/workflows/pr-custom-review.yml

@@ -11,13 +11,32 @@ on:
       - synchronize
       - review_requested
       - review_request_removed
+      - ready_for_review
+      - converted_to_draft
   pull_request_review:
 
 jobs:
   pr-custom-review:
     runs-on: ubuntu-latest
     steps:
+      - name: Skip if pull request is in Draft
+        # `if: github.event.pull_request.draft == true` should be kept here, at
+        # the step level, rather than at the job level. The latter is not
+        # recommended because when the PR is moved from "Draft" to "Ready to
+        # review" the workflow will immediately be passing (since it was skipped),
+        # even though it hasn't actually ran, since it takes a few seconds for
+        # the workflow to start. This is also disclosed in:
+        # https://gh.neting.ccmunity/t/dont-run-actions-on-draft-pull-requests/16817/17
+        # That scenario would open an opportunity for the check to be bypassed:
+        # 1. Get your PR approved
+        # 2. Move it to Draft
+        # 3. Push whatever commits you want
+        # 4. Move it to "Ready for review"; now the workflow is passing (it was
+        #    skipped) and "Check reviews" is also passing (it won't be updated
+        #    until the workflow is finished)
+        if: github.event.pull_request.draft == true
+        run: exit 1
       - name: pr-custom-review
-        uses: paritytech/pr-custom-review@v2
+        uses: paritytech/pr-custom-review@action-v3
         with:
-          token: ${{ secrets.PRCR_TOKEN }}
+          checks-reviews-api: http://pcr.parity-prod.parity.io/api/v1/check_reviews

.github/workflows/quick-check.yml

@@ -23,15 +23,15 @@ jobs:
           components: clippy, rustfmt
 
       - name: Cache Dependencies & Build Outputs
-        uses: actions/cache@v2
+        uses: actions/cache@v3
         with:
           path: |
             ~/.cargo/registry
             ~/.cargo/git
             target
           key: ${{ runner.os }}-${{ matrix.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
 
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
 
       - name: Cargo fmt
         uses: actions-rs/cargo@v1

.github/workflows/release-01_branch-check.yml

@@ -0,0 +1,22 @@
+name: Release branch check
+on:
+  push:
+    branches:
+      - release-**v[0-9]+.[0-9]+.[0-9]+ # client
+      - release-**v[0-9]+               # runtimes
+      - polkadot-v[0-9]+.[0-9]+.[0-9]+  # cumulus code
+
+  workflow_dispatch:
+
+jobs:
+  check_branch:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout sources
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+
+      - name: Run check
+        shell: bash
+        run: ./scripts/ci/github/check-rel-br