Electrum

make sure load_ast_data returns a dict with str keys

config: add option to disable memory hardening

This is needed for running with a memory profiler

testnet3/testnet4: update default servers

Please enter the commit message for your changes. Lines starting

scripts: simplify testnet usage

network: fix get_servers should not modify ports of DEFAULT_SERVERS

DEFAULT_SERVERS should be immutable

ci: builds: android: fix cache key

Fix the cache key of the scheduled Android CI build which failed
at the `Cache buildozer (p4a)` step with the following error:
```
Error: The template is not valid. .github/workflows/builds.yml (Line: 113, Col: 16): hashFiles('contrib/android/**') failed. Fail to hash files under directory '/home/runner/work/electrum/electrum'
```

Probably it failed because the `contrib/android/.cache` directory
got included in the cache key, which worked on Cirrus.
This specifies the cache key hash inputs explicitly.

plugin: nwc: change default relay used for new NWC connections

The default relay is the one that is positioned first in a NWC
connection string. This matters because most clients only use the
first relay and ignore the following ones.

We set the Alby relay as default because they operate it specifically
for NWC.
However it doesn't seem to work anymore, client requests time out.
I suspect they drop NIP-04 encrypted events to push wallets
to implement the newer NIP-44 encryption.
We should eventually implement this.
The primal relay happily accepts NIP-04 encrypted NWC events so
lets use this as default.

ci: security review: bump claude model 4.7 -> 4.8

Anthropic released a new model again. The pricing/token consumption
is the same as 4.7. This improves the quality of the code review CI.
https://platform.claude.com/docs/en/about-claude/models/whats-new-claude-4-8

mpp_split: stop returning splits without amounts

`mpp_split.suggest_splits()` would return payment split
configurations with no split amounts like:
`{(channel_id, node_id): []}`.

This is unintuitive and introduced two bugs:

1. `LNWallet.create_routes_for_payment()` evaluates
`is_multichan_mpp = len(sc.config.items()) > 1`.
So even if the actual payment amount gets split onto
a single channel this would falsely evaluate `True`
if there is a empty split.

2. `is_direct_path = all(node_id == paysession.invoice_pubkey for (chan_id, node_id) in sc.config.keys())`
similarly might incorrectly evaluates `False` if the split
contains an empty split for another `node_id`.

ci: document where to get API keys from

lnpeer: on_ping: drain out-socket buffer

might help against some memory exhaustion attacks

f321x said:
> maybe a peer could just fill up our sockets outgoing buffer by ~234mb/h
> if they stop reading from their socket and keep sending pings every second.

Co-authored-by: f321x <f@f321x.com>

lnpeer: add some rate-limiting against ping flood

A remote peer could send us lots of small ping messages, requesting large pong responses. This is cheap for them but potentially expensive for us.
Does not seem too serious, but I think we could add some rate-limiting.

note: There are many ways for a remote peer to inflate our incoming traffic usage,
but the cost of that is usually shared between them and us (they need to send the data, we receive it).

regtest.test_breach_with_spent_htlc: wait until settled

In some cases the test failed because alice didnt have
enough time to settle. Also remove useless sleep

lnonion/trampoline: stop double counting HMAC size

`OnionHopsDataSingle.to_bytes()` already accounts for the
onions hmac internally, it seems incorrect that we were
additionally adding `PER_HOP_HMAC_SIZE` to the payload size
of the payload returned by `.to_bytes()`.

ci: remove Cirrus CI configuration

Migration to GitHub Actions is complete. All CI tasks are now defined
under .github/workflows/.

ci: add GitHub Actions binary builds workflow

Migrates the four Cirrus CI binary build tasks (Windows, Android,
AppImage, and source/source-only tarball) to GitHub Actions. The new
workflow runs only on the nightly cron (02:30 UTC) and workflow_dispatch.

ci: add GitHub Actions security review workflow

ci: add GitHub Actions locale workflow

Migrate the "locale: upload to crowdin" task from .cirrus.yml to a
GitHub Actions workflow. Triggers on pushes to master (mirroring the
Cirrus only_if condition) plus workflow_dispatch for manual runs.

ci: add GitHub Actions submodule check workflow

ci: add GitHub Actions regtest workflow

Migrates the 'Regtest functional tests' Cirrus CI task to GitHub Actions,
running on ubuntu-24.04. Caches the bitcoind binary and libsecp256k1
build, starts bitcoind and electrumx in the background, and uploads
wallet artifacts plus dumps service logs on failure.

ci: add GitHub Actions tests workflow

Replaces the Cirrus CI tasks (flake8 mandatory, flake8 non-mandatory,
ban-unicode, unittests across Python 3.10-3.14 + 3.14 debug, and
unittests with frozen deps) with a single .github/workflows/tests.yml.

setup.py: "qml_gui" extra: restrict pyqt to "6.10.x"

I had misunderstood how "~=" works.
Previous meant >=6.10, but any 6.x.
While I actually wanted 6.10.0<=v<6.11.

follow-up 96a3345ab5a3c41c89b4b5bac2d8bde12d753392

ref https://peps.python.org/pep-0440/#compatible-release

ci: security review: increase timeout: 20 -> 60 min

Large diffs or complex contexts can take a long time to review.
If the timeout kicks in too early the ressources Claude used are wasted.

unit tests: do not mock save_db

Create in-memory wallets instead.

The logic of calling save_db() at specific places is specific to
the current JsonDB backend, and it does not generalize well.

lnworker: LNGossip to signal OPTION_ANCHORS_OPT

Our LNWallet now sets OPTION_ANCHORS_REQ -- maybe other impls will do this too?
LNGossip does not care about anchors but should still be able to utilise peers that require it.