📣 Summary

v13.0.2 is the new stable mainnet release of the mezod chain client software.

This is a patch release recommended for all mezod nodes. It hardens the JSON-RPC server: the Docker image no longer enables the debug and personal namespaces by default, websocket connections now have a message size limit and a cap on subscriptions per connection, and eth_feeHistory no longer panics on very large block counts. There are no consensus changes: nodes can upgrade at any time, and v13.0.x nodes can run side by side.

Operators who need the debug namespace can enable it again with a json-rpc.api line in the file that MEZOD_CUSTOM_CONF_APP_TOML points to. Nodes that already set json-rpc.api themselves keep their own list.

📝 Changelog

Rebuild metrics-scraper with Go 1.26.10 on Alpine 3.22 by @lukasz-zimnoch in #745
Move our nodes to mezod chart 14.0.1 and limit JSON-RPC namespaces by @lukasz-zimnoch in #746
Rebuild Blockscout images with current CA data and Node 22 by @lukasz-zimnoch in #747
Remove the unused staging Safe infrastructure by @tomaszslabon in #748
Bump Grafana to 13.1.9 by @lukasz-zimnoch in #749
Run the balance exporters on our Go 1.26.10 image by @tomaszslabon in #750
Disable Blockscout NFT fetchers and move SECRET_KEY_BASE to a Secret by @lukasz-zimnoch in #751
Upgrade Blockscout to chart 4.5.3, backend 12.0.3 and frontend v2.12.1 by @lukasz-zimnoch in #753
Upgrade the staging and production GKE clusters to 1.35.9 by @lukasz-zimnoch in #754
Enforce NetworkPolicy on both GKE clusters by @lukasz-zimnoch in #755
Serve the GKE control planes on the DNS endpoint only by @lukasz-zimnoch in #758
Run Pyth pushers on upstream v13.2.0 and drop old schedulers by @dimpar in #752
Remove SolvBTC/USD from the Pyth Mezo pusher config by @dimpar in #759
Fix eth_feeHistory request panic on huge block counts by @tomaszslabon in #760
Skip wallets whose main UTXO lookup fails in the bridge worker by @pdyraga in #757
Add timeouts to the Prometheus metrics servers by @tomaszslabon in #761
Limit message size for websocket connections by @tomaszslabon in #762
Cap websocket subscriptions per connection by @tomaszslabon in #763
Disable debug and personal namespaces in the image by @tomaszslabon in #764

Full Changelog: v13.0.1...v13.0.2

⚙️ Node setup

For guidance around node setup, please refer to the Validator Kit repository.

🔐 Signatures

We're providing two pieces of information for node providers and other interested parties:

The Docker image sha256sum
The Linux binary archive sha256 sum

Both hashes are signed by the development team and verifiable on Keybase. Our Keybase usernames are all associated our GitHub usernames.

Docker image

Image: mezo/mezod:v13.0.2.
sha256 sum: sha256:f3de9841e51c000d2e9e051a94b2d6d73d947c7fb602b803f9b39d2a9f8fe5f7

Signatures from the development team (verify these in the Keybase app):

@lukasz-zimnoch
BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk90sDpX wIX07Cfy2Yz31Xq 8mliRvTpoVIDeBV VZiP1JZd9ax2ftd agTIVwDG42kFiwj XPbwWSPxWbGMSlc 4Q7IJDCo2rM4Qwu rz88L8rk36hQpoa ah7llhV2x1BP4cc tKlnOHYHkJ0D9UB Ugs5alEOOEQJQfw 1WXY0gpfFCjj6Qm r7dlateMBmo5Lup 8xha4Nl6WHKh3TK xEHPXRNgmM3vY5m iGX8OIHu2DL0eFL qAi6STDGISQTm8H DjH7lqIVguN. END KEYBASE SALTPACK SIGNED MESSAGE.
@tomaszslabon
BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk7xdHzK Gm9BtmKb2FhcVia 1x14PuUuG7fVaLE jQhGdMxCf7166mR WfUJ2fsSr6ryNF1 Hax1vdOaP5UyH0A gZffehDRT7v5nLm sVKDHoPdfWZuY4E cXpvSZK2q3vKR7B ciZMRoZolayeRNv 032Fg4uK1gTeVAS tKiGI0CSfQmY7id 4zlZ1DxKY2usJQ0 CQ3g8Nl6WHKh3TK xEHPXRNgmM3vY5m iGX8OIHu2DL0eFL qAi6STDGISQTm8H DjH7lqIVguN. END KEYBASE SALTPACK SIGNED MESSAGE.

Linux binary

Archive: linux-amd64.tar.gz (see Assets section)
sha256 sum: e43e15f6748f33e5972442b2b73acd29456dba30040f6e8b56af518513958423 linux-amd64.tar.gz