ssvlabs/ssv-dkg v3.1.1

DKG v3.1.1

on GitHub

Security release — upgrade promptly.
All operators in a ceremony must run the same version.
v3.1.0 ↔ v3.1.1 mixed ceremonies will fail — exact version match is enforced.
Coordinate upgrades across your operator set.

Security

• Resign ceremony proofs are validated against the operator's own public key, not an entry selected by ID from the caller-supplied operator list (#245)
• Batch resign/reshare authorisation checks every message in the batch against the authorised owner, not only the first (#245)
• Each message in a batch runs against its own operator set, not the first message's (#245)
• Ceremony failures return a generic error, with a carve-out for version mismatch (#245)
• Built with Go 1.25.13 and refreshed golang.org/x/net and golang.org/x/text, clearing all advisories govulncheck reports as reachable (#244)

Upgrade

• docker pull ssvlabs/ssv-dkg:v3.1.1
• Coordinate with your operator set before running ceremonies on v3.1.1

Full Changelog: v3.1.0...v3.1.1