celestiaorg/celestia-app v10.6.0-corto

on GitHub

Upgrade Notice

This release is intended for Corto and is built from the v10.x release branch. It is a minor update for nodes already running app version 10 and does not require a coordinated upgrade. All node operators, especially validators, should upgrade promptly: it includes celestia-core v0.42.8 with consensus, p2p, mempool and RPC fixes, plus Fibre and dependency fixes.

Upgrade existing nodes

Download the celestia-app archive for your platform and verify it against checksums.txt. Validators should also download the matching fibre archive. Source builds now require Go 1.26.10 (up from 1.26.6); make install builds the multiplexer and make build-fibre-server builds Fibre.

Stop the node and, for validators, Fibre. Replace both binaries and restart with the existing homes and database. Confirm the node resumes syncing and signing, and that Fibre reports ready.

Configuration

No configuration changes are required. There are no new settings since v10.5.0.

Notable changes

• celestia-core v0.42.5 → v0.42.8. Fixes in consensus block propagation, the CAT mempool, p2p peer identity validation, and the JSON-RPC server. tx_search and block_search now apply max_search_results to the whole query, not only its first condition.
• Hyperlane. hyperlane-cosmos is bumped to v1.3.3, which tightens ECDSA signature verification and ISM routing checks.
• Proofs. ShareProof and RowProof verification now checks the proof's position in the data square. Clients that verify proofs (for example celestia-node) should use this release's packages.
• Fibre. MsgDepositToEscrow transactions with a non-canonical signer address or a denom other than utia are rejected from the mempool and from new proposals. Blocks that already contain them remain valid. The payment promise cache now re-checks its budget when an escrow's available balance drops, and the Fibre client no longer crashes when a state node returns an incomplete provider response.
• IBC. The capability module moves to the celestiaorg fork v1.0.2, which makes its in-memory map safe for concurrent use.

Supported operating systems

See the canonical matrix in the release README.

• Tested in CI: Ubuntu 24.04 LTS (Noble Numbat) on x86_64.
• Prebuilt binaries provided: Linux (amd64, arm64), macOS (amd64, arm64), including the separate Fibre server. arm64 binaries are cross-compiled and are not executed in CI.
• Minimum glibc: 2.38 for Linux multiplexer builds. Ubuntu 22.04 and older are unsupported for these builds. The separate Fibre binary requires glibc 2.34.
• Changes since v10.5.0: none.

What's Changed

• chore(deps): [medium] bump celestia-core to v0.42.5 by @rootulp in #8378
• chore(deps): [high] bump celestia-core to v0.42.6 (backport #8394) by @rootulp in #8395
• fix(fibre): [high] reject legacy escrow deposits in CheckTx and PrepareProposal by @rootulp in #8401
• fix(proof): [high] bind ShareProof and RowProof to positions in the data square (backport #8409) by @rootulp in #8410
• chore(deps): [medium] bump celestia-core to v0.42.7 (v10.x) by @rootulp in #8413
• fix(deps): [medium] bump ibc-go capability module to celestiaorg fork v1.0.2 (backport #8417) by @mergify[bot] in #8418
• chore(deps): [high] bump hyperlane-cosmos to v1.3.3 (v10.x) by @rootulp in #8464
• fix(fibre): [medium] re-sweep promise cache budget when available balance drops (v10.x) by @rootulp in #8494
• fix(fibre): [medium] reject a found provider response without info (v10.x) by @rootulp in #8507
• chore(deps): [medium] bump celestia-core to v0.42.8 (v10.x) by @rootulp in #8509

Full Changelog: v10.5.0...v10.6.0-corto