[pleasew8t]

This pull request brings some improvements to the Sui transfer verifier in preparation for enabling it.

Add optional digest check and return error in case of zero message publications

• Updates ProcessDigest to return an error when no outbound transfers were found. In the happy path, ProcessDigest should only ever receive digests for transactions that contain message publications.
• Adds an optional digest check to the GetTransaction Sui gRPC implementation. Unlikely to be the case, but the point is that the digest returned from the RPC server must match the one requested.

Ensure RPC errors result in early-exits instead of being ignored

• This is more of a consistency update, and puts the behaviour in line with EVM.
• Note that it does not change the behaviour in the event of a parsing error.

Handle the case where same-tx tokens are created and transferred

• If the InputVersion is nil, it is assumed that the asset was created in this transaction.
• If the asset is newly-created, initialize the "previous" asset info with a zero balance.

Bump sui-go-sdk version to 1.3.1

• This addresses some OOM issues we were concerned about recently

Review Notes

The changes are mostly hardening certain checks, and making sure certain failures are reported more consistently. The PR shouldn't introduce any hard functional changes.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	golang/​golang.org/​x/​crypto@​v0.47.0 ⏵ v0.55.0	+1	+75
	golang/​github.com/​block-vision/​sui-go-sdk@​v1.2.1 ⏵ v1.3.1	+2
	golang/​google.golang.org/​grpc@​v1.80.0 ⏵ v1.83.2	+1	+31
	golang/​google.golang.org/​api@​v0.233.0 ⏵ v0.264.0	+1
	golang/​google.golang.org/​genproto/​googleapis/​api@​v0.0.0-20260120221211-b8f7ae30c516 ⏵ v0.0.0-20260526163538-3dc84a4a5aaa
	golang/​golang.org/​x/​sys@​v0.40.0 ⏵ v0.47.0
	golang/​golang.org/​x/​time@​v0.12.0 ⏵ v0.14.0

View full report