This patch release rebuilds the Lotus node, miner and worker binaries and Docker images with Go 1.26.10, which makes crypto/x509 reject known compromised intermediate certificates (GO-2026-6809). It has no other functional changes since Node v1.38.2, and aligns the Miner release with Node at v1.38.3 (the previous Miner release was miner/v1.38.0).
- Operators running earlier published binaries or Docker images should upgrade.
- Building from source now requires Go 1.26.10 or later.
- Operators upgrading directly from v1.37.0 should review the v1.38.0 upgrade warnings, including API permissions, gas limits and gateway limits.
☢️ Upgrade Warnings ☢️
- build: raise the minimum Go version to
1.26.10. (filecoin-project/lotus#13951)
📝 Changelog
- Node: Changes since v1.38.2
- Miner: Changes since miner/v1.38.0
👨👩👧👦 Contributors
| Contributor | Commits | Lines ± | Files Changed |
|---|---|---|---|
| Phi-rjan | 3 | +37/-10 | 8 |
Release Log
- github.com/filecoin-project/lotus:
- build: release Lotus Node and Miner v1.38.3 (#13955) (filecoin-project/lotus#13955)
- build(deps): bump Go to 1.26.10 (#13951) (filecoin-project/lotus#13951)
- docs(release): v1.38.2 release template improvements (#13944) (filecoin-project/lotus#13944)
- chore(release): copy v1.38.2 changelog back to master (#13946) (filecoin-project/lotus#13946)
Contributors
| Contributor | Commits | Lines ± | Files Changed |
|---|---|---|---|
| Steve Loeppky | 1 | +35/-14 | 12 |
| Phi-rjan | 3 | +37/-10 | 8 |