Overview
Important
This is an optional release for operators running v1.16.7, and a strongly recommended one for operators on v1.16.6 or earlier, because it also contains the eMudhra certificate authority fixes from v1.16.7. It removes op-proposer's RPC server metrics and contains no other operator-visible changes.
Breaking changes
- RPC server metrics removed (#23114). op-proposer no longer exports
op_proposer_rpc_server_requests_total,op_proposer_rpc_server_request_duration_seconds,op_proposer_rpc_server_responses_total,op_proposer_rpc_server_notifications_sent_total,op_proposer_rpc_server_params_size_total,op_proposer_rpc_server_results_size_totalorop_proposer_rpc_client_notifications_received_total. Remove any dashboards and alerts that query them before upgrading. The otherop_proposer_rpc_client_*metrics are unchanged.
Other changes
Security
- Includes the eMudhra certificate authority fixes (CVE-2026-111943) first released in v1.16.7: op-proposer is built with Go 1.26.10, whose
crypto/x509rejects the compromised eMudhra intermediates and which carries Go 1.26.9's fixes tocrypto/tls,html/template,net/http,net/textprotoandos; and the image's CA trust store (ca-certificates-bundle20261020-r0) no longer includes the emSign Root CA G3, C1 and C3 roots (#23546, #23566)
Full Changelog: op-proposer/v1.16.7...op-proposer/v1.17.0
🚢 Docker Image: