Warning
Security fix — upgrade recommended. This release closes three unauthenticated attack surfaces (#21753)
and hardens gossip by binding the message-id to the topic and metering invalid messages (#21804).
Important
Derivation correctness: span-batch transaction type prefixes are now preserved (#21808).
Important
APKO Docker images: Starting with this release, the Docker URL contains an additional /nexus in its path, see full Docker image path below. Our Docker builds are now APKO based and during a transition period, the APKO-based images for any component will be available at https://us-docker.pkg.dev/oplabs-tools-artifacts/images/nexus/<component>:<version>. When we migrate to APKO-only images, we may remove the /nexus again from our image paths and will give another notice in this case.
What's Changed in kona-node/v1.6.3
- kona: remove superchain level by @mds1 in #21938
- kona: preserve span-batch transaction type prefixes by @joshklop in #21808
- kona,gossip: bind gossip message-id to topic, meter invalid messages by @sebastianst in #21804
- refactor(kona): isolate custom registry builds by @wwared in #21882
- chore: bump reth to f2eecc6 (post-v2.4.0) by @claude[bot] in #21766
- fix(kona,security): close three unauthenticated kona attack surfaces by @sebastianst in #21753
- Add sepolia-devnet-2 registry artifacts by @jelias2 in #21679
- perf(kona-driver): decode only the L1-info deposit when computing L2BlockInfo (recreate #21347) by @claude[bot] in #21737
- fix(op-node): sync Karst gas compatibility configs by @teddyknox in #21674
- op-reth,kona-node: embed correct build info by @joshklop in #21645
Full Changelog: kona-node/v1.6.2-rc.1...kona-node/v1.6.3
🚢 Docker Image: https://us-docker.pkg.dev/oplabs-tools-artifacts/images/nexus/kona-node:v1.6.3