Consolidate pending PRs into staging

[unarbos]

Summary

Cherry-picks (squashed, one commit per PR) of the full pending PR list into staging:

• fix remaining Dependabot security alerts #2923 fix remaining Dependabot security alerts
• ci: restore public multi-arch localnet images #2919 ci: restore public multi-arch localnet images
• Cleanup SubnetUidToLeaseId in do_terminate_lease #2912 Cleanup SubnetUidToLeaseId in do_terminate_lease
• Fix build warnings #2913 Fix build warnings
• Fix hardcoded leasing weights #2915 Fix hardcoded leasing weights
• Optimize hotkey swap stake iteration #2920 Optimize hotkey swap stake iteration
• Read ss58 Balance Precompile #2916 Read ss58 balance precompile
• suppress warnings #2925 suppress warnings (superseded by Fix build warnings #2913 code-level fixes; empty marker commit)

Verified with SKIP_WASM_BUILD=1 cargo check --workspace locally.

Made with Cursor

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
subtensor	Ready	Preview, Comment	Jul 16, 2026 2:48pm

[github-actions]

🛡️ AI Review — Skeptic (security review)

VERDICT: SAFE

BASELINE scrutiny — established write-access contributor with substantial repository history; no Gittensor association found; staging-pick → staging integration branch.

Static analysis covered the runtime stake-swap and leasing changes, the new balance precompile, dependency updates, Docker/CI publishing changes, and privileged cleanup workflow. No trusted AI-review instruction files were modified, and no exploitable panic, authorization bypass, economic flaw, supply-chain backdoor, or credential-exposure path was found.

Findings

No findings.

Conclusion

The changes are consistent with the stated consolidation and contain no identified security vulnerability or malicious behavior.

---

🔍 AI Review — Auditor (domain review)

VERDICT: 👎

UNKNOWN Gittensor association; established write-access contributor with substantial repository history. Reviewed as a staging integration PR.

The PR description is substantive and matches the consolidated changes. No spec-version check applies to the staging base branch.

Static review found a blocking dispatch-weight regression; no build was needed to confirm it.

Findings

Sev	File	Finding
HIGH	pallets/subtensor/src/swap/swap_hotkey.rs:19	Hotkey swaps exceed the maximum block weight	inline

Conclusion

The stake-moving hotkey swap calls are assigned a weight far above the runtime’s maximum block weight, making them undispatchable. The PR should not merge until the operation is bounded or redesigned to fit within a block.

[github-actions]

AI review — see the sticky summary comment for the verdict and the inline comments below for specific findings.

[github-actions]

🔄 AI review updated — Skeptic: SAFE Auditor: 👎