Overview
Important
This is a strongly recommended release for all op-batcher operators. It contains security fixes for the compromised eMudhra certificate authority (CVE-2026-111943) and other Go standard-library security fixes, and a startup check that rejects calldata transaction sizes too large for L1's transaction gas cap under Glamsterdam.
This release includes the changes tagged as op-batcher/v1.17.3, which was not published separately.
Breaking changes
- Oversized calldata
--max-l1-tx-size-bytesrejected at startup (#23327). With--data-availability-type=calldataand Alt-DA disabled, op-batcher now refuses to start if--max-l1-tx-size-bytes(OP_BATCHER_MAX_L1_TX_SIZE_BYTES) is above 261,909. Larger calldata transactions exceed L1's per-transaction gas cap (EIP-7825) under Glamsterdam's calldata pricing. The check applies whether or not L1 has activated Glamsterdam. Operators with a larger setting must lower it to at most 261,909 before upgrading. The default of 120,000 is unaffected, and blob, auto and Alt-DA configurations are exempt.
Other changes
Security
- The image is built with Go 1.26.10, up from 1.26.8. Go 1.26.10 makes
crypto/x509reject the compromised eMudhra intermediate certificates (CVE-2026-111943), and Go 1.26.9 includes security fixes to thecrypto/tls,html/template,net/http,net/textprotoandospackages (#23290, #23546) - The image's CA trust store (
ca-certificates-bundle20260909-r3) no longer includes the eMudhra emSign Root CA G3, C1 and C3 roots (#23566)
Full Changelog: op-batcher/v1.17.2...op-batcher/v1.17.4
🚢 Docker Image: