Summary
v1.3.1 is a pre-release. It adds the Platåberget testnet, which will be removed again with the v1.4.0 release.
Please test this pre-release on Platåberget and Hoodi. We are particularly interested in feedback on the new builder command, and any grievous errors introduced in the translations.
Deprecations
- The
--regular-withdrawalparameter became--regular_withdrawal. The old form exists as an alias and will be removed in future, but no earlier thanv1.5.0. Adjust your tooling if you use it
Changes
- Add
platabergettestnet. This testnet is short-lived, and will be removed with the next release of ethstaker-deposit-cli - Add
./deposit buildercommand to generate builder prefix0xb0builder deposits. Do not use this as a validator. You would potentially be losing your ETH - Publish
ethstaker-depositlibrary to PyPi - Remove ability to create Type 0
0x00deposit data files. Use ethstaker-deposit-cliv1.3.0if you need this functionality - Default to Type 2
0x02compounding validator deposit data files --regular-withdrawalbecomes--regular_withdrawal- Dependencies relaxed when using ethstaker-deposit-cli as a library
- Add a warning when the output directory is a symbolic link; addresses TOB-2 finding
- Add documentation for scripted key generation and mnemonic verification
- Add German
detranslations - Add missing translations for all messages
- A number of internal refactors, better test coverage, better dependency handling / CVE checking
- Build with Python 3.14
make build_linuxandmake build_macoswill now make sure Python 3.14 is being used. This can be overridden by theBUILD_PYTHONenvironment variable- Update dependencies to latest versions supported by Python 3.10 through Python 3.14
Security
- Known vulnerability in
clickdependency, resolved in this release.
This vulnerability was not reachable in ethstaker-deposit-cli, as it does not useclick.edit()
Found 1 known vulnerability in 1 package
Name Version ID Fix Versions
----- ------- --------------- ------------
click 8.3.2 PYSEC-2026-2132 8.3.3
All changes
What's Changed
- Bump actions/setup-node from 6.3.0 to 6.4.0 in the actions-deps group by @dependabot[bot] in #533
- Bump the pydantic-deps group across 1 directory with 2 updates by @dependabot[bot] in #521
- Bump the pip-deps group with 3 updates by @dependabot[bot] in #534
- Bump pre-commit from 4.5.1 to 4.6.0 in the uv-deps group across 1 directory by @dependabot[bot] in #538
- Updating version to 1.3.1-dev by @valefar-on-discord in #537
- Bump the pip-deps group with 3 updates by @dependabot[bot] in #539
- Bump the uv-deps group with 2 updates by @dependabot[bot] in #543
- Bump the pydantic-deps group across 1 directory with 2 updates by @dependabot[bot] in #541
- Bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 in the actions-deps group by @dependabot[bot] in #544
- Bump the uv-deps group across 1 directory with 6 updates by @dependabot[bot] in #549
- Bump the actions-deps group across 1 directory with 4 updates by @dependabot[bot] in #550
- Bump ruff from 0.15.13 to 0.15.14 in the pip-deps group across 1 directory by @dependabot[bot] in #551
- Bump the uv-deps group across 1 directory with 3 updates by @dependabot[bot] in #558
- Bump docker/setup-qemu-action from 4.0.0 to 4.1.0 in the actions-deps group across 1 directory by @dependabot[bot] in #556
- Bump ruff from 0.15.15 to 0.15.16 in the pip-deps group across 1 directory by @dependabot[bot] in #559
- Bump the uv-deps group across 1 directory with 4 updates by @dependabot[bot] in #566
- Bump the actions-deps group across 1 directory with 2 updates by @dependabot[bot] in #564
- Bump the uv-deps group with 4 updates by @dependabot[bot] in #569
- Bump the actions-deps group with 5 updates by @dependabot[bot] in #567
- Bump coverage from 7.14.3 to 7.15.0 in the pip-deps group across 1 directory by @dependabot[bot] in #570
- Bump docker/login-action from 4.3.0 to 4.4.0 in the actions-deps group by @dependabot[bot] in #571
- Bump the pip-deps group with 2 updates by @dependabot[bot] in #572
- Bump the uv-deps group with 2 updates by @dependabot[bot] in #573
- Bump the actions-deps group with 3 updates by @dependabot[bot] in #576
- Bump the uv-deps group with 3 updates by @dependabot[bot] in #578
- Remove pip from dependabot by @yorickdowne in #574
- Bump actions/setup-python from 6.3.0 to 7.0.0 in the actions-deps group by @dependabot[bot] in #581
- Bump ruff from 0.15.21 to 0.15.22 in the uv-deps group by @dependabot[bot] in #582
- Bump pre-commit from 4.6.0 to 4.6.1 in the uv-deps group by @dependabot[bot] in #585
- Bump docker/login-action from 4.4.0 to 4.5.0 in the actions-deps group by @dependabot[bot] in #584
- Apply Python 3.9/3.10 style improvements by @yorickdowne in #583
- Fix: coverage comment by @yorickdowne in #590
- Fix coverage comment permissions by @yorickdowne in #594
- test: expand BLS-to-execution-change coverage by @yorickdowne in #586
- fix: make deposit.sh use the project Python environment by @yorickdowne in #587
- test: cover credential and signed output generation by @yorickdowne in #588
- CI uses macos-26-intel by @yorickdowne in #591
- Enable Ruff security rules by @yorickdowne in #593
- test: cover keystore credential list workflows by @yorickdowne in #597
- Bump the uv-deps group with 2 updates by @dependabot[bot] in #603
- Bump the actions-deps group with 2 updates by @dependabot[bot] in #602
- test: cover credential and exit edge cases by @yorickdowne in #596
- test: cover validation boundaries by @yorickdowne in #598
- chore: validate cached keystore key lengths early by @yorickdowne in #600
- fix: make local binary builds use Python 3.12 by @yorickdowne in #604
- chore(deps): bump actions/attest from 4.2.1 to 4.2.2 in the actions-deps group by @dependabot[bot] in #605
- chore(deps): bump the uv-deps group with 3 updates by @dependabot[bot] in #606
- Chore/complete i18n translations by @yorickdowne in #599
- Lint and build with Python 3.14 by @yorickdowne in #592
- Add Plataberget testnet by @yorickdowne in #608
- chore(deps): bump the uv-deps group with 6 updates by @dependabot[bot] in #610
- Add output directory symlink warning by @yorickdowne in #595
- Chore: Validate GENESIS_VALIDATORS_ROOT early by @yorickdowne in #601
- Find and remove orphaned intl keys by @yorickdowne in #611
- Fix: Translation check CI by @yorickdowne in #612
- Refactor chain arguments into decorator by @yorickdowne in #589
- Dependabot tracks transitive dependencies by @yorickdowne in #616
- chore(deps): bump docker/setup-buildx-action from 4.2.0 to 4.3.0 in the actions-deps group by @dependabot[bot] in #617
- chore(deps): bump the uv-deps group with 2 updates by @dependabot[bot] in #618
- Add some end to end usage docs by @yorickdowne in #613
- Fix a regression in load_text by @yorickdowne in #614
- Refactor interactive tests by @yorickdowne in #615
- Improve dependencies for library use by @yorickdowne in #619
- Add a CVE scan to CI and tox by @yorickdowne in #620
- Remove type 0 deposit creation by @yorickdowne in #624
- Type 2 compounding is the default by @yorickdowne in #625
- Adding support for EIP-8282 to generate builder keys by @valefar-on-discord in #607
- Improve integration tests by @yorickdowne in #626
- Fix builder CI by @yorickdowne in #628
- Add builder integration tests by @yorickdowne in #629
- Dependabot only updates patch version for Docker by @yorickdowne in #630
- Fix dependabot syntax by @yorickdowne in #631
- Restore pydantic-deps group for dependabot by @yorickdowne in #633
- chore(deps): bump the uv-deps group across 1 directory with 2 updates by @dependabot[bot] in #634
- pytest only collects tests/ by @yorickdowne in #638
- Test release assets before publishing by @yorickdowne in #636
- Publish library to test PyPi by @yorickdowne in #637
- Fix the connectivity binary test by @yorickdowne in #640
- Handle sigint exception to work around a click bug by @yorickdowne in #639
- Fix commit SHA for pypi publish by @yorickdowne in #641
- Publish to production PyPi by @yorickdowne in #642
- Version 1.3.1 by @yorickdowne in #635
Full Changelog: v1.3.0...v1.3.1
Building process
Release assets were built using Github Actions and this workflow run. You can establish the provenance of this build using our artifact attestations.
With the GitHub CLI installed, a simple way to verify these assets is to run this command while replacing [filename] with the path to the downloaded asset:
gh attestation verify [filename] --repo ethstaker/ethstaker-deposit-cliThis step requires you to be online. If you want to perform this offline, follow these instructions from GitHub.
Binaries
| System | Architecture | Binary | Checksum |
|---|---|---|---|
| Windows | x86_64 | ethstaker_deposit-cli-9fdce5a-windows-amd64.zip | sha256 |
| Windows | aarch64 | ethstaker_deposit-cli-9fdce5a-windows-arm64.zip | sha256 |
| macOS | x86_64 | ethstaker_deposit-cli-9fdce5a-darwin-amd64.tar.gz | sha256 |
| macOS | aarch64 | ethstaker_deposit-cli-9fdce5a-darwin-arm64.tar.gz | sha256 |
| Linux | x86_64 | ethstaker_deposit-cli-9fdce5a-linux-amd64.tar.gz | sha256 |
| Linux | aarch64 | ethstaker_deposit-cli-9fdce5a-linux-arm64.tar.gz | sha256 |
Docker image
| Version | Name | Package |
|---|---|---|
| v1.3.1 | ghcr.io/ethstaker/ethstaker-deposit-cli:v1.3.1
| Github Package |
License
By downloading and using this software, you agree to the license.