Protocol
This release introduces protocol version 25
#10737: Removed zkLogin authentication support entirely
- zkLogin signatures (including within multisig) are now rejected
- JWK consensus updates no longer occur
Nodes (Validators and Full nodes)
#11209: Remove deprecated gRPC index tables. ⚠️⚠️⚠️ The migration may incur a downtime of several minutes upon restart of the full nodes, so operators are requested to stage it according to their SLA needs.⚠️⚠️⚠️
- Removed
jwk_fetch_interval_secondsandzklogin_oauth_providersconfig options - Removed JWK periodic fetching and consensus submission
JSON-RPC
#11250: iota_{execute,dryRun}TransactionBlock endpoints now resolve move clever errors in the response.
#11292: ⚠️ Fix a type mismatch between the wire representation and the JSON-RPC spec. The patch renames former SequenceNumber2 type into SequenceNumberBigInt that is represented as a string. Any clients generated by the spec would be broken at this point, so this should not have an impact on existing downstream applications.
#10737: Breaking schema changes:
CompressedSignatureandPublicKey: zkLogin variant reshaped from{ ZkLogin: <bytes|id> }to the string literalZkLoginDeprecated.GenericSignature.ZkLoginAuthenticatorrenamed toZkLoginAuthenticatorDeprecatedwith a null payload.IotaTransactionBlockKinddrops theAuthenticatorStateUpdateV1branch;IotaEndOfEpochTransactionKinddropsAuthenticatorStateCreateandAuthenticatorStateExpire;TransactionFilter.TransactionKinddrops the"AuthenticatorStateUpdateV1"value.- Removed schema components:
ZkLoginAuthenticator,ZkLoginAuthenticatorAsBytes,ZkLoginInputs,ZkLoginProof,ZkLoginPublicIdentifier,Bn254FqElement,Bn254FrElement,Claim,IotaActiveJwk,IotaJWK,IotaJwkId,IotaAuthenticatorStateExpire.
GraphQL
#11196: Subscription queries now accept an optional startAfter transaction digest to resume receiving transactions and events from a specific point. For more detailed information consult the graphql schema.
#10737: Hard removals from the public schema:
- Query field
verifyZkloginSignature. - Types
ActiveJwk,ActiveJwkConnection,ActiveJwkEdge,AuthenticatorStateCreateTransaction,AuthenticatorStateExpireTransaction,AuthenticatorStateUpdateTransaction,ZkLoginVerifyResult. - Enum
ZkLoginIntentScope. TransactionBlockKindInput.AUTHENTICATOR_STATE_UPDATE_V1.- Union members of
EndOfEpochTransactionKindandTransactionBlockKindthat pointed at the removed types.
CLI
- Removed keytool commands:
zk-login-sign-and-execute-tx,zk-login-enter-token,zk-login-sig-verify,zk-login-insecure-sign-personal-message decode-or-verify-txnow shows "zkLogin is not supported" for zkLogin transactions
gRPC
#11299: New limit on concurrent checkpoint streaming clients (default 1024). Tune via grpc-api-config.max-concurrent-stream-subscribers. Monitor via Prometheus metric node_grpc_inflight_checkpoint_stream_subscribers.