This patch release rebuilds the Lotus node, miner and worker binaries and Docker images with Go 1.26.10, which makes crypto/x509 reject known compromised intermediate certificates (GO-2026-6809). It has no other functional changes since Node v1.38.2, and aligns the Miner release with Node at v1.38.3 (the previous Miner release was miner/v1.38.0).
- Operators running earlier published binaries or Docker images should upgrade.
- Building from source now requires Go 1.26.10 or later.
- Operators upgrading directly from v1.37.0 should review the v1.38.0 upgrade warnings, including API permissions, gas limits and gateway limits.
☢️ Upgrade Warnings ☢️
- build: raise the minimum Go version to
1.26.10. (filecoin-project/lotus#13951)
📝 Changelog
- Node: Changes since v1.38.2
- Miner: Changes since miner/v1.38.0
👨👩👧👦 Contributors
| Contributor | Commits | Lines ± | Files Changed |
|---|---|---|---|
| Phi-rjan | 3 | +37/-10 | 8 |
Release Log
- github.com/filecoin-project/lotus:
- build: release Lotus Node and Miner v1.38.3 (#13955) (filecoin-project/lotus#13955)
- build(deps): bump Go to 1.26.10 (#13951) (filecoin-project/lotus#13951)
- docs(release): v1.38.2 release template improvements (#13944) (filecoin-project/lotus#13944)
- chore(release): copy v1.38.2 changelog back to master (#13946) (filecoin-project/lotus#13946)
- fix(splitstore): don't note shadows for unitary objects (#13943) (filecoin-project/lotus#13943)
- ci(changelog): require master PRs to link their own CHANGELOG entry (#13940) (filecoin-project/lotus#13940)
- docs(changelog): point the gateway lookback clamp entry at #13934 (#13939) (filecoin-project/lotus#13939)
- fix(gateway): clamp negative message lookback limits (#13934) (filecoin-project/lotus#13934)
- docs(oldpath): correct path parsing and key detection comments (#13937) (filecoin-project/lotus#13937)
- fix(lotus-bench): correct inaccurate usage message and result comment (#13935) (filecoin-project/lotus#13935)
- ci(release): move the macOS ARM64 release build from macos-14 to macos-latest (#13892) (filecoin-project/lotus#13892)
- ci: decide skippable changes in one place and test cmd/release only in Release Tool Test (#13902) (filecoin-project/lotus#13902)
- docs(gateway): clarify rate limiting options (#13933) (filecoin-project/lotus#13933)
- docs(chain): correct tipset selector comments (#13932) (filecoin-project/lotus#13932)
- chore(release): copy v1.38.1 changelog back to master (#13929) (filecoin-project/lotus#13929)
- fix(eth): propagate message read errors during log conversion (#13926) (filecoin-project/lotus#13926)
- fix(cli): escape control characters in msig inspect decoded params (#13915) (filecoin-project/lotus#13915)
- chore(release): copy v1.38.0 changelog back to master (#13923) (filecoin-project/lotus#13923)
- docs(release): v1.38.0 release template improvements (#13905) (filecoin-project/lotus#13905)
- build: update Lotus Node and Miner version to v1.38.1-dev in master (#13920) (filecoin-project/lotus#13920)
Contributors
| Contributor | Commits | Lines ± | Files Changed |
|---|---|---|---|
| Steve Loeppky | 7 | +451/-245 | 44 |
| Phi-rjan | 5 | +126/-13 | 10 |
| LexLuthr | 1 | +105/-8 | 3 |
| Rod Vagg | 2 | +99/-3 | 6 |
| Kaif | 1 | +14/-4 | 3 |
| zoupingcenter | 1 | +4/-4 | 1 |
| luangucun | 1 | +4/-4 | 1 |
| elonfliter | 1 | +3/-4 | 1 |
| kleonyuan | 1 | +3/-2 | 2 |