This release targets the mainnet network.
This release is backwards compatible with the previous v1.X.X releases.
What's Changed
What's changed
- Discard stale peers received via discovery by @wille-io in #3653
- Use saturating arithmetic in Policy block number methods by @jsdanielh in #3679
- Remove unwrap/ safer arithmetic logic by @viquezclaudio in #3678
- Validate genesis_supply in get_supply_at RPC handler by @jsdanielh in #3680
- Pass allow_ips config to RPC server ip_whitelist by @jsdanielh in #3681
- Limit DHT fallback HTTP response body size to 1 MB by @jsdanielh in #3682
- Include symbols in the release-with-debug profile by @jeffesquivels in #3690
- Improve prove chunks functionality by @viquezclaudio in #3693
- Prevent u32 underflow in
get_proposer_atwhen block_number is 0 by @jsdanielh in #3694 - Hardening of equivocation proof verification by @ii-cruz in #3642
- rpc-client: Add rpc contact book getter command by @ii-cruz in #3639
- metrics-server: Implement HTTP Basic Auth from config credentials by @jsdanielh in #3702
- Use
safe_subfortotal_stakein failedDeleteValidatorby @jsdanielh in #3695 - Fix for interlink in block inclusion proof by @jsdanielh in #3705
- Fixes rebranch logic in light blockchain by @jsdanielh in #3706
- Fix for DHT query poisoning by @jsdanielh in #3707
- Fix TaggedPublicKey::verify panic on invalid signature length by @jsdanielh in #3708
- Fix MerkleProof and MerklePath deserialization bounds checks by @jsdanielh in #3709
- Add block timestamp drift validation across all sync paths by @jsdanielh in #3711
- Multisig: return errors instead of panicking on invalid curve points when delinearizing by @jsdanielh in #3713
- ChainInfo: reject blocks with overflowing transaction fee sums by @jsdanielh in #3714
- Fix discovery handler infinite poll loop by @jsdanielh in #3710
- Fix empty-address panic in known_peers() by @jsdanielh in #3715
- Fix DHT GetRecord query wedge on untrusted peer responses by @jsdanielh in #3716
- Guard
rebranch_toagainst emptytarget_chainby @jsdanielh in #3703
Dependencies
- build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 11 updates by @dependabot[bot] in #3671
- build(deps): bump toml from 0.9.11+spec-1.1.0 to 1.1.0+spec-1.1.0 by @dependabot[bot] in #3673
- build(deps): bump gloo-timers from 0.3.0 to 0.4.0 by @dependabot[bot] in #3674
- build(deps): bump quinn-proto from 0.11.13 to 0.11.14 by @dependabot[bot] in #3635
- build(deps): bump rollup from 4.22.4 to 4.59.0 in /web-client/extras by @dependabot[bot] in #3620
- build(deps): bump picomatch from 2.3.1 to 2.3.2 in /web-client/extras by @dependabot[bot] in #3650
- build(deps): bump minimatch from 3.1.2 to 3.1.5 in /web-client/extras by @dependabot[bot] in #3624
- build(deps): bump tokio from 1.50.0 to 1.51.0 in the minor-and-patch-cargo-updates group by @dependabot[bot] in #3675
- Update wasm-bindgen dependencies by @jsdanielh in #3686
- build(deps): bump docker/build-push-action from 7.0.0 to 7.1.0 in the minor-and-patch-actions-updates group across 1 directory by @dependabot[bot] in #3683
- build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 8 updates by @dependabot[bot] in #3696
- build(deps): bump rustls-webpki from 0.103.10 to 0.103.12 by @dependabot[bot] in #3704
- build(deps): bump afl from 0.17.1 to 0.18.1 by @dependabot[bot] in #3699
- Update yamux from version 0.13.8 to 0.13.10 by @jsdanielh in #3712
New Contributors
Full Changelog: v1.3.0...v1.4.0