What's Changed
- fix: bump Go to 1.26.2 and deps to resolve govulncheck failures by @rootulp in #2943
- fix: add default case to handleHaves select to prevent reactor halt (backport #2813) by @mergify[bot] in #2941
- chore: sync CODEOWNERS with main by @rootulp in #2942
- fix(mempool): cap SeenTxSet size to prevent OOM from SeenTx flooding (backport #2887) by @mergify[bot] in #2927
- fix: release P2P channel receive buffer after large message EOF (backport #2815) by @mergify[bot] in #2939
- fix: bump github.com/cloudflare/circl to v1.6.3 (backport #2840) by @mergify[bot] in #2938
- fix: add missing QuerySequence case to socket client resMatchesReq (backport #2844) by @mergify[bot] in #2937
- fix: strip BlobTx wrappers in ExecCommitBlock during crash replay (backport #2846) by @mergify[bot] in #2935
- fix: enforce PubKey-Address binding in LCA evidence validation (backport #2848) by @mergify[bot] in #2933
- fix: enforce maxRequestsPerPeer on direct SeenTx path in CAT mempool (backport #2880) by @mergify[bot] in #2932
- fix: cross-validate ExtendedCommit against LastCommit in blocksync (backport #2884) by @mergify[bot] in #2930
- fix(types): validate nil SignedHeader in LightClientAttackEvidence (backport #2923) by @mergify[bot] in #2925
- fix: disconnect peers that send invalid chunks during state sync (backport #2814) by @mergify[bot] in #2940
- fix: increase ensureVote timeout to fix flaky TestStateOversizedBlock (backport #2842) by @mergify[bot] in #2947
- fix: reduce flakiness in three consensus tests (backport #2810) by @mergify[bot] in #2946
- fix: validate PartSetHeader.Total upper bound in ValidateBasic (backport #2885) by @mergify[bot] in #2929
- fix: increase TestByzantinePrevoteEquivocation timeout to reduce flakes (backport #2850) by @mergify[bot] in #2949
- fix: guard nil syncer dereference in statesync Reactor.Receive (backport #2883) by @mergify[bot] in #2931
- fix: prevent uint32 overflow in RowProof.Validate() (backport #2886) by @mergify[bot] in #2928
- fix: increase base ensureTimeout from 200ms to 400ms (backport #2849) by @mergify[bot] in #2948
- build(deps): bump github.com/celestiaorg/nmt from 0.24.2 to 0.24.3 (backport #2944) by @mergify[bot] in #2951
- fix: prevent CompactBlock.Proofs() cache poisoning on validation failure (backport #2847) by @mergify[bot] in #2934
- fix: correct .PHONY target for test_deadlock (backport #2882) by @mergify[bot] in #2952
- fix: use dynamic ports in node tests to prevent port conflicts (backport #2851) by @mergify[bot] in #2953
- fix: use assert.Eventually in TestReactorRecordsVotesAndBlockParts (backport #2841) by @mergify[bot] in #2954
Full Changelog: v0.39.27...v0.39.28