Lataa Aptos 9.4.0

Bug Fixes
- add short-circuit for sqrt(0) (#19631) #19631 (Marco Ilardi)

Documentation
- consensus: fix 'QuorurmCertificate' -> 'QuorumCertificate' in block/block_data doc comments (#19511) #19511 (Mukunda Rao Katta)

Commits
- 48c6902: fix reference safety checker v3 for non-reference Call destinations (#19409) (Teng Zhang) #19409
- 32bb839: [mono-move] Add gas design doc (#19209) (Calin Tataru) #19209
- 7479153: Confidential assets v1.1.3: add emergency pause (#19433) (Alin Tomescu) #19433
- c1dfd4f: Adjust quorum store queue handling (#19446) (Balaji Arun) #19446
- 0723fa7: Update Docker images (aptos-bot)
- db26bbc: fix benchmark option for Move prover (#19472) (Teng Zhang) #19472
- 217874c: [types] Bind encrypted payloads to auth keys (#19460) (Balaji Arun) #19460
- c805f71: [forge] bump deployer version (aptos-bot) #19349
- db98b19: Harden encrypted transaction decryption handling (#19461) (Balaji Arun) #19461
- 8c36781: [storage] Extract helpers from create_buffered_state_from_latest_snapshot (wqfish) #19399
- b50e6c9: [storage] Move total_value_bytes tracking into HotStateLRU and simplify total_key_bytes (wqfish) #19399
- 1f25be6: [storage] Truncate hot and cold state merkle DBs to the same version on restart (wqfish) #19399
- e65a8d1: [storage] Load hot state from DB on restart when persistence is enabled (wqfish) #19399
- 5d8877c: [config] Rename decryption_setup_blob_path to digest_key_blob_path (#19487) (Balaji Arun) #19487
- 0223daa: [Config] Update default testnet seeds. (Josh Lind) #19482
- 1a10b78: [consensus] Harden SecretShareManager: state preservation, skipped rounds, requester ordering (#19476) (Balaji Arun) #19476
- b4ca925: [consensus] Harden SecretShare ingress validation against DoS (#19475) (Balaji Arun) #19475
- 3621758: [vm] Add closure design doc for mono-move runtime (#19363) (Victor Gao) #19363
- 4156aff: [vm] Staking-based transaction limits (#19109) (George Mitenkov) #19109
- 5f8f520: [forge] bump deployer version (aptos-bot) #19478
- 17687cd: [ci] Calibrate single-node execution performance values (aptos-bot) #19452
- 01cde5c: [ci] Notify #feed-move-alerts on calibration PR (George Mitenkov) #19452
- dd42df2: [consensus] Fix proposer_delay_proposal histogram buckets (#19474) (Daniel Xiang) #19474
- 83f1f55: [lint] Fix false positive in needless visibility checker (#19481) (Vineeth Kashyap) #19481
- 86056c2: [lint] Create a new lint check for unreachable code warning (#19485) (Vineeth Kashyap) #19485
- 81b3d57: [consensus] Fix BATCH_NUM_PER_BLOCK histogram buckets (#19473) (Daniel Xiang) #19473
- 9434ca2: Improve replay-verify scheduler observability and resilience (#19435) (Victor Gao) #19435
- e8188b6: [smoke-test] Fix aptos-debugger jemalloc HPA hang (wqfish) #19517
- 2be8ebf: [storage] Filter pointer-only hot-state slots from JMT update paths (wqfish) #19498
- eded91a: [vm] Remove MoveVmExt pass-through wrapper (#19503) (George Mitenkov) #19503
- 2f7730a: [compiler-v2] Do not inline callees that emit cross-module events (#19507) (George Mitenkov) #19507
- d601270: [compiler-v2] Implement a new abstraction for derived call graph query caching: fixes many subtle bugs. (#19486) (Vineeth Kashyap) #19486
- dc09d24: [cli] Release Aptos CLI 9.2.0 (#19521) (Greg Nazario) #19521
- 5f98cb9: [cli] Fix release job if expression (#19523) (Greg Nazario) #19523
- 52e7298: susetting jwk_consensus_config from genesis (#19494) (zhoujunma) #19494
- e48def4: [mono-move] Add gas benchmarks (#19470) (Calin Tataru) #19470
- 5267c48: [gas] Charge extra gas for encrypted transactions (#19453) (Balaji Arun) #19453
- 0ec54dd: [codeowners] Add dedicated owners for third_party/move/mono-move (#19529) (George Mitenkov) #19529
- 1a365d3: [docker] release tags always with the git sha (#19463) (Rustie Lin) #19463
- 62412e7: [mono-vm][specializer] Move a fusing operation from lowering to destacking phase (#19431) (Vineeth Kashyap) #19431
- fc1d67b: [mono-vm] Factor specializer pipeline out of the executable and into the specialize crate. (#19454) (Vineeth Kashyap) #19454
- 891bddb: [mono-vm][specializer] Remove explicit types from simulated operand stack (#19466) (Vineeth Kashyap) #19466
- 0db93e5: Switch replay-verify to the main PFN deployments in us-central1 (Stelian Ionescu) #19533
- 8a8d269: [storage] Verify hot-state proofs in ProvableStateSummary (wqfish) #19520
- 3660486: [inspection-service] opens immediately (#19488) (Rustie Lin) #19488
- 41edbe5: [mono-move] Initial cross-module call support (#19510) (Calin Tataru) #19510
- 4e205c0: [mono-move] Migrate from using the old type representation to the new one (#19530) (Vineeth Kashyap) #19530
- 5507bee: [gas profiler] Fix native_gas leak; add consistency-check opt-out (#19532) (Victor Gao) #19532
- ce53608: [mono-move] Add module loader with versioned cache slots (#19506) (George Mitenkov) #19506
- fb1baae: [storage] Stable hot state order across restarts (wqfish) #19539
- 2cb040e: [Move][Spec] Fix specs and other miscs (#19310) (Teng Zhang) #19310
- 53fb6c0: [ci] Calibrate single-node execution performance values (#19513) (aptos-bot) #19513
- 0c3c894: [mono-vm] Unify tests under testsuite (#19556) (Vineeth Kashyap) #19556
- 512ad35: [mono-move] Remove global context dependency for specializer (#19551) (George Mitenkov) #19551
- ec2ffd7: [framework] Expose is_encrypted_txn() to Move smart contracts (#19543) (Balaji Arun) #19543
- 697e854: [Rust Setup] Fix linker build issue. (Josh Lind) #19564
- 622eefe: chunky DKG stall recovery fixes (#19538) (Balaji Arun) #19538
- 56ff86c: [natives] Isolate rayon work on a dedicated pool (Balaji Arun) #19541
- a2abcbf: [natives] Per-caller-thread native rayon pools (Balaji Arun) #19541
- 83daaf1: Fix encrypted transaction validation for multi-signer and unsupported auth types (#19546) (Balaji Arun) #19546
- cc0d3a9: [dkg] Fix security and DoS issues in ChunkyDKG manager (#19544) (Balaji Arun) #19544
- a599dab: [prover] Universal state quantification and other bug fixes in dynamic dispatch handling (#19502) (Wolfgang Grieskamp) #19502
- 5d2fb92: [mono-move] LoadedModule with ModuleIR to be used in code cache (#19553) (George Mitenkov) #19553
- 720c8fa: [mono-move] Lazy layout population (#19555) (George Mitenkov) #19555
- bd74b0b: [consensus] Reject encrypted batches when feature is disabled (#19548) (Balaji Arun) #19548
- 75ed054: [storage] Re-write hot state KV in restart replay (wqfish) #19549
- 5f9e0e0: [forge] bump deployer version (aptos-bot) #19515
- 632e488: [mono-move] Combine enum and struct types (#19572) (George Mitenkov) #19572
- 3732789: [paper] Higher-order functions and dynamic dispatch in MVP (#19558) (Wolfgang Grieskamp) #19558
- 52ec857: [cli] Show rich abort info in local simulation vm_status (#19490) (Victor Gao) #19490
- 0c5bc4a: [vm] Initial closure runtime for mono-move (#19519) (Victor Gao) #19519
- f29dc41: [consensus] Enable sending Batch V2 and OptQS V2 proposals (#19573) (Balaji Arun) #19573
- 9f544b6: [consensus] Add UseCaseAndEncryptedTxnsAwareShuffler for encrypted txn ordering (#19562) (Balaji Arun) #19562
- 1890a03: [vm] Versioned enum-based transaction prologue and epilogue (#19468) (George Mitenkov) #19468
- 918bb6d: [gha] do not publish docker on hotfix suffix (#19577) (Rustie Lin) #19577
- 5d77808: fix enum bug (#19578) (Teng Zhang) #19578
- b93d811: [encrypted mempool] Fix PVSS sigma proof shape check (#19587) (Rex Fernando) #19587
- 5846f08: combining differential and snapshot testing (#19585) (Vineeth Kashyap) #19585
- 6a2e420: [paper] Resolving supposed unsoundness issue around aborts behavioral predicate (#19584) (Wolfgang Grieskamp) #19584
- cf97766: [storage] Persist hot-state promotions in epilogue (wqfish) #19547
- 05a4c3d: Add onchain signer utilities (#19179) (igor-aptos) #19179
- c831e51: [mono-move] Eager interning of signatures (#19557) (George Mitenkov) #19557
- d0d1069: [vm] Iterative Drop for nested Move values (security fix) (#415) (Victor Gao) #19596
- 83d8c2e: [Cached Packages] Rebuild packages. (Josh Lind) #19596
- b6c06b6: [mono-move] Integrate loader into cross-module calls (#19581) (Calin Tataru) #19581
- 09dc092: [gas] Move V1_46-gated params back to V1_45 (wqfish) #19614
- 38059a7: [mono-move] Encapsulate ObjectDescriptor and ObjectDescriptorTable (#19589) (Victor Gao) #19589
- aff3b97: [mono-move] flesh out u64 arithmetic / bitwise / shift micro-ops (#19591) (Victor Gao) #19591
- 98f795a: [Forge] Clean up forge stable. (Josh Lind)
- 2e56da6: [vm] Use errors for invariant violations (#19627) (George Mitenkov) #19627
- 9f5fb37: First-class StorageSlot type and derived StorageSlotOrInline (#18723) (igor-aptos) #18723
- 30a20d1: [storage] sequence kv before tree in snapshot restore (wqfish) #19625
- f0fd94f: [consensus] Skip decryption when block has DKG-result vtxn (Balaji Arun) #19634
- a8c70db: [consensus] Add regression tests for decryption pipeline (Balaji Arun) #19634
- 19ee0af: [ts-deps] Upgrade ts deps (#19637) (Greg Nazario) #19637
- 69c07c9: [ci] Calibrate single-node execution performance values (#19604) (aptos-bot) #19604
- b67c776: [prover] Improve spec inference: normalize exits, rewrite BPs over vector intrinsics (#19640) (Wolfgang Grieskamp) #19640
- 6a430a4: [paper] Draft inference paper for FMCAD 2026 (#19641) (Wolfgang Grieskamp) #19641
- 4051a73: [vm] Optimize Drop for values (#19628) (George Mitenkov) #19628
- cbebe66: [Prover] fix modifies-clause bugs and Boogie codegen for exists S in * + |&mut T| closures (#19611) (Teng Zhang) #19611
- f253676: [consensus] Cap encrypted decryption by block-execute limit and trusted-setup capacity (#19647) (Balaji Arun) #19647
- 55fd2ea: update draft (#19648) (Teng Zhang) #19648
- ad7011f: [block-executor] replace rayon BlockSTM pool with plain std-thread pool (wqfish) #19643
- a020d7b: avoid recomputing next validator set (#19380) (zhoujunma) #19380
- c6e9a3f: [admin-service] Allow overriding heap profile output path via query param (wqfish) #19659