The release is not consensus breaking and can be applied on nodes at any time. What's changed Bump cometbft from v0.38.20 to v0.38.21 to address critical security vulnerability in CometBFT detailed here
neutron-org/
neutron-org/