v3.7.0

What's Changed

Features

• KEEP-1354 require verified evidence for contract addresses (#2500) @suisuss
• retry transient webhook failures with configurable attempts (#2490) @zdumitru
• convert numbers between decimal and hex in the Data node (#2481) @zdumitru
• #2430 decode a revert raised in a callee from extra error ABIs (#2457) @subheeksh5599
• #2427 simulate a sequence of calls against the state the earlier calls produce (#2452) @Prashant-thakur77
• #2426 accept raw calldata on POST /api/execute/contract-call (#2449) @Prashant-thakur77
• #2402 add Euler v2 vaults (ERC-4626 reads and deposit/withdraw) (#2420) @walkonwayvs
• #2375 add approval exploit lookup (#2417) @Dozie2001
• #2057 collect declared Manual input before an editor run (#2404) @subheeksh5599
• #2375 check approvals against the Revoke.cash exploit list (#2387) @subheeksh5599

Bug Fixes

• KEEP-1311 pin better-auth to 1.7.2 (#2516) @suisuss
• KEEP-1354 take the contract gate scanner from the default branch (#2511) @suisuss
• KEEP-1354 check out the base branch tip, not the payload base.sha (#2501) @suisuss
• KEEP-1042 drain the plan-window pass through each organization's workflows (#2480) @OleksandrUA
• claim a step before running it so replays cannot duplicate it (#2465) @joelorzet
• #1973 coerce gasLimitMultiplier on all execute write routes (#2439) @kaushalya4s5s7
• #2308 declare CCIP approve with no outputs and narrow the LayerZero rationale (#2390) @suisuss

Other Changes

• KEEP-1042 turn execution retention off in prod until the plan-window fix ships (#2478) @OleksandrUA
• point an undecoded revert at errorAbis (#2472) @subheeksh5599
• bump the minor-and-patch group with 27 updates (#2458) @app/dependabot

Full Changelog: v3.6.1...v3.7.0