This release is functionally identical to v1.3.8 but links to the public cometbft@v0.38.21 release, which includes the fix for CometBFT Security Advisory CSA-2026-001. No action is needed if you are already running v1.3.8.
Full Changelog: v1.3.8...v1.3.9