Add reusable ownable module and refactor network fungible faucet to use it

.github/actions/cleanup-runner/action.yml

@@ -0,0 +1,12 @@
+name: 'Cleanup Runner'
+description: 'Remove unused tools in the runner image to free disk space'
+
+runs:
+  using: 'composite'
+  steps:
+    - name: Remove unused tools in the runner image
+      shell: bash
+      run: |
+        sudo rm -rf /usr/share/dotnet /usr/local/lib/android /opt/ghc /opt/hostedtoolcache/CodeQL
+        sudo docker image prune --all --force || true
+        sudo docker builder prune -a --force || true

.github/workflows/build.yml

@@ -22,6 +22,8 @@ jobs:
         runs-on: ubuntu-latest
         steps:
             - uses: actions/checkout@main
+            - name: Cleanup large tools for build space
+              uses: ./.github/actions/cleanup-runner
             - uses: Swatinem/rust-cache@v2
               with:
                   # Only update the cache on push onto the next branch. This strikes a nice balance between
@@ -34,31 +36,30 @@ jobs:
                   make build-no-std
                   make build-no-std-testing
 
-    feature-check:
-      name: Check feature combinations
+    check-features:
+      name: check all feature combinations
       runs-on: ubuntu-latest
       steps:
-        - uses: actions/checkout@main
+        - uses: actions/checkout@v4
+        - name: Cleanup large tools for build space
+          uses: ./.github/actions/cleanup-runner
         - uses: Swatinem/rust-cache@v2
           with:
-            # Only update the cache on push onto the next branch. This strikes a nice balance between
-            # cache hits and cache evictions (github has a 10GB cache limit).
             save-if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/next' }}
-          # Install cargo-hack or restore from cache if already built.
-        - uses: taiki-e/cache-cargo-install-action@v2
-          with:
-            tool: cargo-hack
-        - name: Update Rust toolchain
+        - name: Install rust
           run: rustup update --no-self-update
-          # Run cargo hack check with each feature to ensure crates compile with individual features
-        - name: Check each feature
-          run: cargo hack check --each-feature --workspace --exclude bench-prover
+        - name: Install cargo-hack
+          uses: taiki-e/install-action@cargo-hack
+        - name: Check all feature combinations
+          run: make check-features
 
     build-benches:
       name: Check benchmarks compilation
       runs-on: ubuntu-latest
       steps:
         - uses: actions/checkout@main
+        - name: Cleanup large tools for build space
+          uses: ./.github/actions/cleanup-runner
         - uses: Swatinem/rust-cache@v2
           with:
             # Only update the cache on push onto the next branch. This strikes a nice balance between

.github/workflows/lint.yml

@@ -17,6 +17,17 @@ permissions:
   contents: read
 
 jobs:
+  cargo-deny:
+    name: cargo-deny on ubuntu-latest
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: taiki-e/install-action@v2
+        with:
+          tool: cargo-deny
+      - name: Check dependencies with cargo-deny
+        run: cargo deny check
+
   typos:
     name: spellcheck
     runs-on: ubuntu-latest
@@ -44,6 +55,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@main
+      - name: Cleanup large tools for build space
+        uses: ./.github/actions/cleanup-runner
       - uses: Swatinem/rust-cache@v2
         with:
           # Only update the cache on push onto the next branch. This strikes a nice balance between
@@ -60,6 +73,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@main
+      - name: Cleanup large tools for build space
+        uses: ./.github/actions/cleanup-runner
       - uses: Swatinem/rust-cache@v2
         with:
           # Only update the cache on push onto the next branch. This strikes a nice balance between
@@ -77,6 +92,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@main
+      - name: Cleanup large tools for build space
+        uses: ./.github/actions/cleanup-runner
       - uses: Swatinem/rust-cache@v2
         with:
           # Only update the cache on push onto the next branch. This strikes a nice balance between
@@ -93,6 +110,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@main
+      - name: Cleanup large tools for build space
+        uses: ./.github/actions/cleanup-runner
       - uses: Swatinem/rust-cache@v2
         with:
           # Only update the cache on push onto the next branch. This strikes a nice balance between
@@ -108,6 +127,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@main
+      - name: Cleanup large tools for build space
+        uses: ./.github/actions/cleanup-runner
       - name: Rustup
         run: rustup update --no-self-update
       - uses: Swatinem/rust-cache@v2

.github/workflows/release-plz-dry-run.yml

@@ -7,6 +7,10 @@ on:
   push:
     branches: [main, next]
 
+concurrency:
+  group: "${{ github.workflow }} @ ${{ github.ref }}"
+  cancel-in-progress: true
+
 jobs:
   release-plz-dry-run-release:
     name: Release-plz dry-run
@@ -17,9 +21,22 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
+      - name: Cleanup large tools for build space
+        uses: ./.github/actions/cleanup-runner
+      - name: Install dependencies
+        run: sudo apt-get update && sudo apt-get install -y jq
       - name: Update Rust toolchain
+        run: rustup update --no-self-update
+      - uses: Swatinem/rust-cache@v2
+      - uses: taiki-e/install-action@v2
+        with:
+          tool: cargo-binstall
+      - name: Install cargo-msrv
+        run: cargo binstall --no-confirm --force cargo-msrv
+      - name: Check MSRV for each workspace member
         run: |
-          rustup update --no-self-update
+          export PATH="$HOME/.cargo/bin:$PATH"
+          ./scripts/check-msrv.sh
       - name: Run release-plz
         uses: release-plz/action@v0.5
         with:

.github/workflows/release-plz.yml

@@ -34,9 +34,22 @@ jobs:
             exit 1
           fi
           echo "Release tag matches main HEAD — continuing."
+      - name: Cleanup large tools for build space
+        uses: ./.github/actions/cleanup-runner
+      - name: Install dependencies
+        run: sudo apt-get update && sudo apt-get install -y jq
       - name: Update Rust toolchain
+        run: rustup update --no-self-update
+      - uses: Swatinem/rust-cache@v2
+      - uses: taiki-e/install-action@v2
+        with:
+          tool: cargo-binstall
+      - name: Install cargo-msrv
+        run: cargo binstall --no-confirm --force cargo-msrv
+      - name: Check MSRV for each workspace member
         run: |
-          rustup update --no-self-update
+          export PATH="$HOME/.cargo/bin:$PATH"
+          ./scripts/check-msrv.sh
       - name: Run release-plz
         uses: release-plz/action@v0.5
         with:

.github/workflows/test.yml

@@ -22,6 +22,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@main
+      - name: Cleanup large tools for build space
+        uses: ./.github/actions/cleanup-runner
       - uses: taiki-e/install-action@nextest 
       - uses: Swatinem/rust-cache@v2
         with:
@@ -38,6 +40,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@main
+      - name: Cleanup large tools for build space
+        uses: ./.github/actions/cleanup-runner
       - uses: Swatinem/rust-cache@v2
         with:
           save-if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/next' }}

CHANGELOG.md

@@ -4,11 +4,21 @@
 
 ### Features
 
-- [BREAKING] Refactored storage slots to be accessed by names instead of indices ([#1987](https://github.com/0xMiden/miden-base/pull/1987), [#2025](https://github.com/0xMiden/miden-base/pull/2025), [#2149](https://github.com/0xMiden/miden-base/pull/2149), [#2150](https://github.com/0xMiden/miden-base/pull/2150), [#2153](https://github.com/0xMiden/miden-base/pull/2153), [#2154](https://github.com/0xMiden/miden-base/pull/2154), [#2161](https://github.com/0xMiden/miden-base/pull/2161), [#2170](https://github.com/0xMiden/miden-base/pull/2170)).
+- [BREAKING] Refactored storage slots to be accessed by names instead of indices ([#1987](https://github.com/0xMiden/miden-base/pull/1987), [#2025](https://github.com/0xMiden/miden-base/pull/2025), [#2149](https://github.com/0xMiden/miden-base/pull/2149), [#2150](https://github.com/0xMiden/miden-base/pull/2150), [#2153](https://github.com/0xMiden/miden-base/pull/2153), [#2154](https://github.com/0xMiden/miden-base/pull/2154), [#2160](https://github.com/0xMiden/miden-base/pull/2160), [#2161](https://github.com/0xMiden/miden-base/pull/2161), [#2170](https://github.com/0xMiden/miden-base/pull/2170)).
 - [BREAKING] Allowed account components to share identical account code procedures ([#2164](https://github.com/0xMiden/miden-base/pull/2164)).
+- Add `From<&ExecutedTransaction> for TransactionHeader` implementation ([#2178](https://github.com/0xMiden/miden-base/pull/2178)).
+- Add `AccountId::parse()` helper function to parse both hex and bech32 formats ([#2223](https://github.com/0xMiden/miden-base/pull/2223)).
+- Add `read_foreign_account_inputs()`, `read_vault_asset_witnesses()`, and `read_storage_map_witness()` for `TransactionInputs` ([#2246](https://github.com/0xMiden/miden-base/pull/2246)).
+- [BREAKING] Introduce `NoteAttachment` as part of `NoteMetadata` and remove `aux` and `execution_hint` ([#2249](https://github.com/0xMiden/miden-base/pull/2249)).
+- [BREAKING] Introduce `NoteAttachment` as part of `NoteMetadata` and remove `aux` and `execution_hint` ([#2249](https://github.com/0xMiden/miden-base/pull/2249), [#2252](https://github.com/0xMiden/miden-base/pull/2252)).
+- [BREAKING] Introduce `NoteAttachment` as part of `NoteMetadata` and remove `aux` and `execution_hint` ([#2249](https://github.com/0xMiden/miden-base/pull/2249), [#2252](https://github.com/0xMiden/miden-base/pull/2252), [#2260](https://github.com/0xMiden/miden-base/pull/2260)).
+- [BREAKING] Introduce `NoteAttachment` as part of `NoteMetadata` and remove `aux` and `execution_hint` ([#2249](https://github.com/0xMiden/miden-base/pull/2249), [#2252](https://github.com/0xMiden/miden-base/pull/2252), [#2260](https://github.com/0xMiden/miden-base/pull/2260), [#2268](https://github.com/0xMiden/miden-base/pull/2268)).
+- Introduce standard `NetworkAccountTarget` attachment for use in network transactions which replaces `NoteTag::NetworkAccount` ([#2257](https://github.com/0xMiden/miden-base/pull/2257)).
+- Added `miden::standards::access::ownable` standard module for component ownership management, and integrated it into the `network_fungible` faucet (including new tests). ([#2228](https://github.com/0xMiden/miden-base/pull/2228)).
 
 ### Changes
 
+- No longer pad the note inputs on insertion into advice map ([#2232](https://github.com/0xMiden/miden-base/pull/2232)).
 - Added proc-macro `WordWrapper` to ease implementation of `Word`-wrapping types ([#2071](https://github.com/0xMiden/miden-base/pull/2108)).
 - [BREAKING] Added `BlockBody` and `BlockProof` structs in preparation for validator signatures and deferred block proving ([#2012](https://github.com/0xMiden/miden-base/pull/2012)).
 - [BREAKING] Renamed `TransactionEvent` into `TransactionEventId` and split event handling into data extraction and handling logic ([#2071](https://github.com/0xMiden/miden-base/pull/2071)).
@@ -25,6 +35,12 @@
 - [BREAKING] Renamed `AccountProcedureInfo` into `AccountProcedureRoot` and remove storage offset and size ([#2162](https://github.com/0xMiden/miden-base/pull/2162)).
 - [BREAKING] Made `AccountProcedureIndexMap` construction infallible ([#2163](https://github.com/0xMiden/miden-base/pull/2163)).
 - [BREAKING] Renamed `tracked_procedure_roots_slot` to `trigger_procedure_roots_slot` in ACL auth components for naming consistency ([#2166](https://github.com/0xMiden/miden-base/pull/2166)).
+- [BREAKING] Refactor `miden-objects` and `miden-lib` into `miden-protocol` and `miden-standards` ([#2184](https://github.com/0xMiden/miden-base/pull/2184), [#2191](https://github.com/0xMiden/miden-base/pull/2191), [#2197](https://github.com/0xMiden/miden-base/pull/2197), [#2255](https://github.com/0xMiden/miden-base/pull/2255)).
+- [BREAKING] Migrated to `miden-vm` v0.20 and `miden-crypto` v0.19 ([#2158](https://github.com/0xMiden/miden-base/pull/2158)).
+- [BREAKING] Refactored `AccountStorageDelta` to use a new `StorageSlotDelta` type ([#2182](https://github.com/0xMiden/miden-base/pull/2182)).
+- [BREAKING] Removed OLD_MAP_ROOT from being returned when calling [`native_account::set_map_item`](crates/miden-lib/asm/miden/native_account.masm) ([#2194](https://github.com/0xMiden/miden-base/pull/2194)).
+- [BREAKING] Refactored account component templates into `AccountStorageSchema` ([#2193](https://github.com/0xMiden/miden-base/pull/2193)).
+- [BREAKING] Refactor note tags to be arbitrary `u32` values and drop previous validation ([#2219](https://github.com/0xMiden/miden-base/pull/2219)).
 
 ## 0.12.4 (2025-11-26)