Release cardano-cli 11.6.0.0

.changes/20261026_cardano_cli_11_6_0_0.yml

@@ -0,0 +1,5 @@
+description: Release cardano-cli 11.6.0.0
+kind:
+- release
+pr: 1486
+project: cardano-cli

cabal.project

@@ -13,8 +13,8 @@ repository cardano-haskell-packages
 -- See CONTRIBUTING for information about these, including some Nix commands
 -- you need to run if you change them
 index-state:
-  , hackage.haskell.org 2026-09-02T14:05:07Z
-  , cardano-haskell-packages 2026-10-21T13:12:35Z
+  , hackage.haskell.org 2026-09-29T11:48:37Z
+  , cardano-haskell-packages 2026-10-26T14:00:38Z
 
 packages:
   cardano-cli

cardano-cli/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog for cardano-cli
 
+## 11.6.0.0 -- 2026-10-26
+
+- Update to cardano-api 11.11 and adapt Dijkstra sub-transaction construction to validated, insertion-ordered TxGuards while preserving existing guard witness handling. Add TxCmdGuardsError to the exposed TxCmdError type to report API guard-validation failures.
+  (compatible)
+  [PR 1486](https://github.com/intersectmbo/cardano-cli/pull/1486)
+
 ## 11.5.0.0 -- 2026-10-23
 
 - `debug check-node-configuration` now reads the configuration with cardano-config. It accepts both the old flat format and the new cardano-config format.

cardano-cli/cardano-cli.cabal

@@ -1,6 +1,6 @@
 cabal-version: 3.8
 name: cardano-cli
-version: 11.5.0.0
+version: 11.6.0.0
 synopsis: The Cardano command-line interface
 description: The Cardano command-line interface.
 copyright: 2020-2023 Input Output Global Inc (IOG).
@@ -250,7 +250,7 @@ library
     binary,
     bytestring,
     canonical-json,
-    cardano-api ^>=11.10,
+    cardano-api ^>=11.11,
     cardano-binary,
     cardano-config ^>=2.2.2,
     cardano-crypto,

cardano-cli/src/Cardano/CLI/EraBased/Transaction/SubTransaction/Run.hs

@@ -260,8 +260,8 @@ validateGuardRedeemer credential script hasRedeemer
   | otherwise =
       unless hasRedeemer $ Left $ TxCmdPlutusGuardMissingRedeemer credential
 
--- | The API currently collects witnesses for the six pre-Dijkstra purposes.
--- Add guarding witnesses before canonicalisation/signing and update the script
+-- | Guard credentials are passed to the API without witnesses below.
+-- Add their witnesses before canonicalisation/signing and update the script
 -- integrity hash to cover the complete redeemer set. Guard indices include key
 -- and native-script guards, and preserve the body's OSet order.
 addGuardWitnesses
@@ -423,6 +423,10 @@ constructSubTx
             TxMetadataInEra _ mDat -> mDat
 
       validatedDirectDeposits <- convertDirectDeposits directDeposits
+      validatedGuards <-
+        first TxCmdGuardsError $
+          obtainCommonConstraints (Exp.useEra @era) $
+            Exp.mkTxGuards [(credential, Nothing) | credential <- Foldable.toList guards]
       validatedMintValue <- createTxMintValue valuesWithScriptWits
       validatedVotingProcedures <-
         first (TxCmdVotingError . TxVotingError) $
@@ -448,7 +452,7 @@ constructSubTx
             & maybe id (Exp.setTxCurrentTreasuryValue . unTxCurrentTreasuryValue) mCurrentTreasury
             & maybe id (Exp.setTxTreasuryDonation . unTxTreasuryDonation) mTreasuryDonation
             & Exp.setTxSupplementalDatums suppDatums
-            & Exp.setTxGuards guards
+            & Exp.setTxGuards validatedGuards
             & Exp.setTxRequiredTopLevelGuards requiredTopLevelGuards
         )
 

cardano-cli/src/Cardano/CLI/Type/Error/TxCmdError.hs

@@ -88,6 +88,7 @@ data TxCmdError
   | TxCmdSubTxByronWitnessUnsupported
   | TxCmdDuplicateDirectDeposits ![StakeAddress]
   | TxCmdDuplicateGuards ![L.Credential L.Guard]
+  | TxCmdGuardsError !Exp.TxGuardsError
   | TxCmdPlutusGuardMissingRedeemer !(L.Credential L.Guard)
   | TxCmdNativeGuardWithRedeemer !(L.Credential L.Guard)
   | TxCmdTopLevelGuardMissingDatum !FilePath
@@ -225,6 +226,7 @@ renderTxCmdError = \case
       <> hsep (map (pretty . serialiseAddress) addresses)
   TxCmdDuplicateGuards credentials ->
     "Duplicate guards: " <> hsep (map (pretty . L.credToText) credentials)
+  TxCmdGuardsError err -> prettyError err
   TxCmdPlutusGuardMissingRedeemer credential ->
     "Plutus guard "
       <> pretty (L.credToText credential)