Overview
Important
This is a recommended release for all op-reth operators. It contains the removal of the legacy pre-Bedrock import commands and security updates for two dependencies.
Breaking changes
import-opandimport-receipts-opcommands removed (#22942) in line with the announcement last month. Operators who import pre-Bedrock OVM history with these commands must switch to the Bedrock state bootstrap before upgrading: runop-reth init-state --without-ovm, and serve pre-Bedrock history from an l2geth instance.
Other changes
Security
- Update
rustlsto 0.23.45 for RUSTSEC-2026-0285. Earlier versions accepted TLS 1.3 handshake messages sent at the wrong encryption level instead of closing the connection. The handshake stays authenticated, so an attacker cannot alter or complete it (#22898) - Update
imblto 7.0.2 for RUSTSEC-2026-0292, fixing a double free inimbl-sized-chunks, used by the transaction pool, when an element's destructor panics (#22962)
Full Changelog: op-reth/v2.4.4...op-reth/v2.5.0
🚢 Docker Image: