This is the final mandatory upgrades required to transition to the SESH token and TGE.

This mandatory update, compared to the earlier 11.2.x releases, includes some improvements to a few bug fixes, but most importantly adds the upgrade to the final "Landing" hardfork, internally called hardfork 21, along with the conversion info (pubkeys, registered OXEN addresses, and earned SN bonus amounts) needed to complete the transition.

Hardfork 21 begins at block 1852079, which is expected to arrive at Wed, 21 May 2025 00:00, UTC.

Important notes for upgrading

• The 11.x upgrade (beginning with the previous release) added a new key file, key_bls, in your oxen data directory. Restoring or moving a node requires this key, and so you should ensure that you back it up along with your existing key_ed25519 if you haven't already done so.

• Nodes that currently have different primary and auxiliary pubkeys (i.e. that have separate key and key_ed25519 key files -- this will apply to nodes that were set up prior to Oxen 8) will change their SN pubkey at the HF21 to unify these to only use the key_ed25519 going forward. This means that any tools you have tracking a node by pubkey may need to be updated at the hardfork to recognize the new pubkey. (If your node does not show a separate Auxiliary Pubkey when you look it up on https://oxen.observer then this does not apply to you).

• For operators running nodes on Ubuntu 20.04, please note that this Ubuntu version is nearing the end of its support lifetime at the end of May, and while we still support 20.04 packages for this release, this will be the last major releases where we continue to support Ubuntu 20.04. Upgrading to 22.04, or better yet, 24.04, is recommended.

L2 oxen proxy upgrading

If you are running multiple service nodes and using an L2 proxy, note that you will need to ensure that you update the proxy and any proxy-using nodes at the same time: 11.2.x nodes will produce errors when talking to 11.3.x proxies, and vice versa, because of the contract address added in the release. One solution, if you have set up multiple redundant oxend proxies, is to update one proxy at the beginning of your upgrade plan, and the other at the end, so that all your nodes have at least one same-version oxend proxy through the upgrade process. (This is not expected to be needed for future service node upgrades, but rather is a unique situation for the 11.2->11.3 upgrade).

Updating service nodes

For service node operators using Debian 11+ and Ubuntu 20.04+, the upgraded packages are available from our APT repository. Static binaries for other users are available below. Note that Ubuntu 20.04 support will be dropped in the near future, and operators on 20.04 should start planning to upgrade to 22.04 or 24.04.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Signed SHA256 hashes of release files. These are signed using Jason's GPG
key available at:
 - the oxen-io/oxen-core repository, at /utils/gpg_keys/Jason.asc
 - OpenPGP key servers (Jason Rhinelander <jason@session.foundation>, A88D4262)
 - https://imaginary.ca/public.gpg
 - https://github.com/jagerman.gpg

05f416e4a478144c5b65775ff5f23b659b3ccbf2f1a3939151bb512e231cefb0  oxen-linux-x86_64-11.3.0.tar.xz
41854372f8b231211954e1ac98b422291e15ae9b8967384e43c84675bfe5b72e  oxen-macos-arm64-11.3.0.tar.xz
e37408cb71c3211e4b990569f68237b774b5282cd9446581fc57db3f47e66806  oxen-macos-x86_64-11.3.0.tar.xz
17c97c13ea8c569d3a0da5b795cae7634a6d07a2b430ab47663819c4009e3452  oxen-win-x64-11.3.0.zip
-----BEGIN PGP SIGNATURE-----
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=RsoP
-----END PGP SIGNATURE-----