o1-labs/o1js v3.1.0

Release 3.1.0

on GitHub

What's Changed

• ci: pin native build container apt sources to a bullseye snapshot by @martyall in #2913
• o1js 3.1.0 by @Trivo25 in #2915
• Fix lock file by @Trivo25 in #2916

Security

• Hardened the transaction-building layer against several account-update
  manipulation vulnerabilities that could let a crafted transaction bypass a
  zkApp's intended authorization (affecting contracts that use tokens or nested
  @method calls). Verification keys change - recompile and redeploy affected
  contracts.

Full Changelog: v3.0.0...v3.1.0