Merge pull request #6277 from tronprotocol/release_v4.8.0

Merge release_v4.8.0 to master

Author: CodeNinjaEvan

.github/workflows/codeql.yml

@@ -33,7 +33,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v2
+      uses: github/codeql-action/init@v3
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -46,7 +46,7 @@ jobs:
     # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v2
+      uses: github/codeql-action/autobuild@v3
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -59,6 +59,6 @@ jobs:
     #     ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v2
+      uses: github/codeql-action/analyze@v3
       with:
         category: "/language:${{matrix.language}}"

.github/workflows/math-check.yml

@@ -0,0 +1,93 @@
+name: Check Math Usage
+
+on:
+  push:
+    branches: [ 'master', 'release_**' ]
+  pull_request:
+    branches: [ 'develop', 'release_**' ]
+  workflow_dispatch:
+
+jobs:
+  check-math:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Check for java.lang.Math usage
+        id: check-math
+        shell: bash
+        run: |
+          echo "Checking for java.lang.Math usage..."
+          
+          touch math_usage.txt
+          
+          while IFS= read -r file; do
+            filename=$(basename "$file")
+            if [[ "$filename" == "StrictMathWrapper.java" || "$filename" == "MathWrapper.java" ]]; then
+              continue
+            fi
+          
+            perl -0777 -ne '
+              s/"([^"\\]|\\.)*"//g;
+              s/'\''([^'\''\\]|\\.)*'\''//g;
+              s!/\*([^*]|\*[^/])*\*/!!g;
+              s!//[^\n]*!!g;
+              $hasMath = 0;
+              $hasMath = 1 if /^[\s]*import[\s]+java\.lang\.Math\b/m;
+              $hasMath = 1 if /\bjava\s*\.\s*lang\s*\.\s*Math\s*\./;
+              $hasMath = 1 if /(?<![\w\.])(?<!Strict)Math\s*\./;
+              print "$ARGV\n" if $hasMath;
+            ' "$file" >> math_usage.txt
+          done < <(find . -type f -name "*.java")
+          
+          sort -u math_usage.txt -o math_usage.txt
+          
+          if [ -s math_usage.txt ]; then
+            echo "❌ Error: Forbidden Math usage found in the following files:"
+            cat math_usage.txt
+            echo "math_found=true" >> $GITHUB_OUTPUT
+            echo "Please use org.tron.common.math.StrictMathWrapper instead of direct Math usage."
+          else
+            echo "✅ No forbidden Math usage found"
+            echo "math_found=false" >> $GITHUB_OUTPUT
+          fi
+
+      - name: Upload findings
+        if: steps.check-math.outputs.math_found == 'true'
+        uses: actions/upload-artifact@v4
+        with:
+          name: math-usage-report
+          path: math_usage.txt
+
+      - name: Create comment
+        if: github.event_name == 'pull_request' && steps.check-math.outputs.math_found == 'true'
+        uses: actions/github-script@v6
+        with:
+          script: |
+            const fs = require('fs');
+            const findings = fs.readFileSync('math_usage.txt', 'utf8');
+            const body = `### ❌ Math Usage Detection Results
+            
+            Found forbidden usage of \`java.lang.Math\` in the following files:
+            
+            \`\`\`
+            ${findings}
+            \`\`\`
+            
+            **Please review if this usage is intended.**
+            > [!CAUTION]
+            > Note: You should use \`org.tron.common.math.StrictMathWrapper\`.
+            > If you need to use \`java.lang.Math\`, please provide a justification.
+            `;
+            
+            await github.rest.issues.createComment({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: context.issue.number,
+              body: body
+            });
+
+      - name: Fail if Math usage found
+        if: steps.check-math.outputs.math_found == 'true'
+        run: exit 1

CONTRIBUTING.md

@@ -151,7 +151,7 @@ Please make sure your submission meets the following code style:
 
 ### Commit Messages
 
-Commit messages should follow the rule below, we provide a template corresponding instructions.
+Commit messages should follow the rule below, we provide a template with corresponding instructions.
 
 Template:
 ```
@@ -182,7 +182,7 @@ The subject contains a succinct description of the change:
 4. Do not end the subject line with a period.
 5. Avoid meaningless commits. It is recommended to use the git rebase command.
 
-Message body use the imperative, present tense: "change" not "changed" nor "changes". The body should include the motivation for the change and contrast this with previous behavior.
+Message body uses the imperative, present tense: "change" not "changed" nor "changes". The body should include the motivation for the change and contrast this with previous behavior.
 
 Here is an example:
 ```
@@ -217,7 +217,7 @@ If the purpose of this submission is to modify one issue, you need to refer to t
 
 
 ### Special Situations And How To Deal With Them
-As a reviewer, you may find yourself in one of the sitations below. Here’s how to deal with those:
+As a reviewer, you may find yourself in one of the situations below. Here’s how to deal with those:
 
 The author doesn’t follow up: ping them after a while (i.e. after a few days). If there is no further response, close the PR or complete the work yourself.
 

README.md

@@ -43,15 +43,15 @@
 ## Table of Contents
 
 - [What’s TRON?](#whats-tron)
-- [Building the Source Code](#building-the-source)
+- [Building the Source Code](#building-the-source-code)
 - [Running java-tron](#running-java-tron)
 - [Community](#community)
 - [Contribution](#contribution)
 - [Resources](#resources)
 - [Integrity Check](#integrity-check)
 - [License](#license)
 
-## What's TRON?
+# What's TRON?
 
 TRON is a project dedicated to building the infrastructure for a truly decentralized Internet.
 
@@ -61,7 +61,7 @@ TRON is a project dedicated to building the infrastructure for a truly decentral
 
 TRON enables large-scale development and engagement. With over 2000 transactions per second (TPS), high concurrency, low latency, and massive data transmission. It is ideal for building decentralized entertainment applications. Free features and incentive systems allow developers to create premium app experiences for users.
 
-# Building the source
+# Building the Source Code
 
 Building java-tron requires `git` package and 64-bit version of `Oracle JDK 1.8` to be installed, other JDK versions are not supported yet. Make sure you operate on `Linux` and `MacOS` operating systems.
 
@@ -91,18 +91,18 @@ Minimum:
 
 - CPU with 8 cores
 - 16GB RAM
-- 2TB free storage space to sync the Mainnet
+- 3TB free storage space to sync the Mainnet
 
 Recommended:
 
 - CPU with 16+ cores(32+ cores for a super representative)
 - 32GB+ RAM(64GB+ for a super representative)
-- High Performance SSD with at least 2.5TB free space
+- High Performance SSD with at least 4TB free space
 - 100+ MB/s download Internet service
 
 ## Running a full node for mainnet
 
-Full node has full historical data, it is the entry point into the TRON network , it can be used by other processes as a gateway into the TRON network via HTTP and GRPC endpoints. You can interact with the TRON network through full node：transfer assets, deploy contracts, interact with contracts and so on. `-c` parameter specifies a configuration file to run a full node:
+Full node has full historical data, it is the entry point into the TRON network, it can be used by other processes as a gateway into the TRON network via HTTP and GRPC endpoints. You can interact with the TRON network through full node：transfer assets, deploy contracts, interact with contracts and so on. `-c` parameter specifies a configuration file to run a full node:
 
 ```bash
 $ nohup java -Xms9G -Xmx9G -XX:ReservedCodeCacheSize=256m \

Tron protobuf protocol document.md

@@ -975,7 +975,7 @@ Contract and contract-related messages.
 
   - message `VoteAssetContract`
 
-    `owner_address`: assress of contract owner.
+    `owner_address`: address of contract owner.
 
     `vote_address`: voted address of asset.
 
@@ -1059,7 +1059,7 @@ Contract and contract-related messages.
 
       `total_supply`: maximum of asset.
 
-      `frozen_supply`: frozen supplt of asset.
+      `frozen_supply`: frozen supply of asset.
 
       `trx_num`: trx num defines token price.
 
@@ -1079,11 +1079,11 @@ Contract and contract-related messages.
 
       `free_asset_net_limit`: free bandwidth limit each account owns when transfers asset.
 
-      `public_free_asset_net_limit`: free bandwidth limit for all acoounts.
+      `public_free_asset_net_limit`: free bandwidth limit for all accounts.
 
       `public_free_asset_net_usage`: free bandwidth usage of all accounts.
 
-      `public_latest_free_net_time`: the latest bandwidth consumption time fo token transfer.
+      `public_latest_free_net_time`: the latest bandwidth consumption time for token transfer.
 
       ```java
       message AssetIssueContract {
@@ -1131,7 +1131,7 @@ Contract and contract-related messages.
 
       `owner_address`: owner address.
 
-      `to_address`: reveiver address.
+      `to_address`: receiver address.
 
       `asset_name`: target asset name.
 
@@ -1461,7 +1461,7 @@ Contract and contract-related messages.
     
        `owner_address`: address of owner.
     
-       `owner`: autuority to execute all contracts.
+       `owner`: authority to execute all contracts.
     
        `witness`: used by SR for generating blocks.
     
@@ -1514,7 +1514,7 @@ Contract and contract-related messages.
     
        `binding_signature`: signature to verify transaction.
     
-       `transparent_to_address`: transparent address of reveiver.
+       `transparent_to_address`: transparent address of receiver.
     
        `to_amount`: amount to transparent to_address
     
@@ -1536,7 +1536,7 @@ Contract and contract-related messages.
 
 ### <span id="smartc">Smart Contract</span>
 
-message `SmartContract` has mutiple attributes and nested message `ABI`
+message `SmartContract` has multiple attributes and nested message `ABI`
 
 - message `SmartContract`
 
@@ -1559,7 +1559,7 @@ message `SmartContract` has mutiple attributes and nested message `ABI`
 
       - message `Param`
 
-        `indexed`: `true` if the field is part of the log’s topics, `false` if it one of the log’s data segment.
+        `indexed`: `true` if the field is part of the log’s topics, `false` if it is one of the log’s data segment.
 
         `name`: name of the parameter.
 
@@ -1757,7 +1757,7 @@ message `SmartContract` has mutiple attributes and nested message `ABI`
 
     `tree`: incremental merkle tree.
 
-    `filled`: this is a array, it contains the root of the subtree which can be combined with the param tree to be a new merkle tree.
+    `filled`: this is an array, it contains the root of the subtree which can be combined with the param tree to be a new merkle tree.
 
     `cursor`: the node that can be combined to a subtree, when they are combined to a subtree, compute its root and put it into the filled.
 
@@ -1782,7 +1782,7 @@ message `SmartContract` has mutiple attributes and nested message `ABI`
 
     `vouchers`: this is an array, each items represents the merklevoucher of the outputpoint.
 
-    `paths`: his is an array each items represents the path of the outputpoint.
+    `paths`: this is an array each items represents the path of the outputpoint.
 
    ```java
   message IncrementalMerkleVoucherInfo {
@@ -2124,13 +2124,13 @@ message `SmartContract` has mutiple attributes and nested message `ABI`
 
 - #### Node Information
 
-  Node information is separaed into several parts and implemented by nested messages.
+  Node information is separated into several parts and implemented by nested messages.
 
 
 
   - message `NodeInfo`
 
-    `beginSyncNum`: beginning block height for synchornize.
+    `beginSyncNum`: beginning block height for synchronize.
 
     `block`: head block id.
 
@@ -2154,13 +2154,13 @@ message `SmartContract` has mutiple attributes and nested message `ABI`
 
     - message `PeerInfo`:
 
-      `lastSyncBlock`: last block id for synchornize.
+      `lastSyncBlock`: last block id for synchronize.
 
       `remainNum`: number of remaining blocks.
 
       `lastBlockUpdateTime`: latest block update time .
 
-      `syncFlag`: is synchroniing or not.
+      `syncFlag`: is synchronizing or not.
 
       `headBlockTimeWeBothHave`: timestamp of common head block.
 
@@ -2172,7 +2172,7 @@ message `SmartContract` has mutiple attributes and nested message `ABI`
 
       `port`: listening port.
 
-      `nodeId`: ramdomly generated node ID
+      `nodeId`: randomly generated node ID
 
       `connectTime`: connection time period from established.
 

actuator/build.gradle

@@ -1,9 +1,9 @@
 description = "actuator – a series of transactions for blockchain."
 
 dependencies {
-    compile project(":chainbase")
-    compile project(":protocol")
-    compile project(":crypto")
+    api project(":chainbase")
+    api project(":protocol")
+    api project(":crypto")
 }
 
 test {