Minimum Go is now 1.26 (was 1.25), required by the golang.org/x/crypto v0.57.0 upgrade in #516. Go 1.25 is out of support and did not receive the CVE-2026-111943 fix, so Go 1.26.10 / 1.27.3 or later is recommended.
1.26.0 (2026-10-28)
Features
Bug Fixes
- reject oversized element counts in ExtendLookupTable and VoteStateUpdate instruction decoding (#513) (b44dbce)
- restrict workflow token permissions and bump x/net, x/crypto (#516) (6a5fcd3)
- rpc: preserve numeric precision in jsonParsed instruction info (#488) (36f0813)
Note on #488
Re-marshalling a parsed instruction's Parsed field now reproduces the node's numbers exactly: values above 2^53 keep their digits, and decoding them into a uint64 field no longer fails. Numbers also keep the node's original spelling (1.0 stays 1.0 rather than becoming 1), so JSON snapshot tests may show a diff even though the values are unchanged. Nothing else is observable outside the rpc package.