Mainnet 1.6.0

What's Changed

What's changed

• Remove unnecesary functions from RPC by @viquezclaudio in #3773
• chore: Mark test and binary-only crates as publish = false by @jsdanielh in #3776
• Mempool: Limit the number of txns per sender by @viquezclaudio in #3779
• Web-client: validate Coin range in StakingDataBuilder JS API by @jsdanielh in #3788
• Trie: reject equal-length keys in TrieProofNode::child_index by @jsdanielh in #3789
• Fix out-of-bounds key nibbles in concatenation by @jsdanielh in #3790
• Better empty trie proof handling by @jsdanielh in #3791
• Reject overflowing validate_keys slot total with checked_add by @jsdanielh in #3792
• Trie: reject ROOT-keyed entries in apply_diff by @jsdanielh in #3793
• Make Validators::hash panic-free and verify block-by-hash requests by @jsdanielh in #3794

Dependencies

• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 7 updates by @dependabot[bot] in #3774
• build(deps): bump openssl from 0.10.79 to 0.10.80 by @dependabot[bot] in #3775
• build(deps): bump docker/build-push-action from 7.1.0 to 7.2.0 in the minor-and-patch-actions-updates group across 1 directory by @dependabot[bot] in #3770
• build(deps-dev): bump vitest from 2.1.9 to 4.1.0 in /web-client/extras by @dependabot[bot] in #3781

Full Changelog: v1.5.1...v1.6.0

Mainnet 1.5.1

This release targets the mainnet network.
This release is backwards compatible with the previous v1.X.X releases.

What's Changed

What's changed

• Fix light-blockchain election pruning by @viquezclaudio in #3765
• Fix validity-store replay window to match transaction validity by @jsdanielh in #3772
• Removing dead code of poseidon by @ii-cruz in #3766

Dependencies

• build(deps): bump tokio-metrics from 0.4.9 to 0.5.0 by @dependabot[bot] in #3697

Full Changelog: v1.5.0...v1.5.1

Mainnet 1.5.0

This release targets the mainnet network.
This release is backwards compatible with the previous v1.X.X releases.

What's Changed

What's changed

• Remove unused code by @nibhar in #3719
• Removes unused function in light-blockchain by @viquezclaudio in #3717
• OffsetTime: use instant::SystemTime to avoid wasm32 panic by @jsdanielh in #3729
• Properly test oob signers by @nibhar in #3721
• Harden get_validator_by_slot_band by @nibhar in #3720
• Fix web-client validity check by @viquezclaudio in #3725
• Fix for inherents in WASM by @viquezclaudio in #3731
• Restart validity sync if all request fail by @viquezclaudio in #3733
• Improve web client multisig commitment check by @viquezclaudio in #3726
• Fix RPC get_previous_penalized_slots by @viquezclaudio in #3724
• ES256: return errors instead of panicking on invalid byte conversions by @jsdanielh in #3722
• Fix rate limit pending deletion TOCTOU by @nibhar in #3718
• web-client: Move test to the end of file by @jsdanielh in #3735
• Fix for ForkProof VRF seed entropy panic by @jsdanielh in #3744
• Fix panic in genesis BatchSet request by @jsdanielh in #3745
• BlockAssembler: bound header/body caches by @jsdanielh in #3746
• Fix rebranch state propagation by @jsdanielh in #3747
• Inherent: Fix DiscreteDistribution panic in reward distribution by @jsdanielh in #3748
• Remove unnecessary decompression and re-serialization in Validators::hash() by @jsdanielh in #3749
• history_sync: reject batches with overflowing transaction fee sums by @jsdanielh in #3750
• Reject zero num_steps in vesting transaction builder by @jsdanielh in #3751
• Fix VestingContract::min_cap panic on unbounded time fields by @jsdanielh in #3752
• Bound ValidatorRecord timestamp drift in DHT verifier by @jsdanielh in #3753
• Fix for absent duplicate keys in RequestTrieProof by @jsdanielh in #3754
• Transaction builder: fix StakingDataBuilder panic on malformed recipient data by @jsdanielh in #3755
• web-client: fix unwrap panic in Transaction.flags getter by @jsdanielh in #3756
• Fix peer_count drift bypassing peer_count_max in connection pool by @jsdanielh in #3757
• Replace assert_eq! panics in extend_history_sync with PushError by @jsdanielh in #3758
• Discovery: clamp peer-supplied update_interval upper bound by @jsdanielh in #3759
• MMR: Reject oversized mmr_size in proof verification by @jsdanielh in #3760
• Network: guard against already-removed DHT query in quorum handler by @jsdanielh in #3761
• Trie: reject ROOT-keyed items in put_chunk by @jsdanielh in #3762
• Consensus: evict peers returning diffs with invalid tree-proof by @jsdanielh in #3763
• web-client: Pin the wasm-bindgen version by @jsdanielh in #3764

Dependencies

• build(deps): bump openssl from 0.10.75 to 0.10.78 by @dependabot[bot] in #3723
• build(deps): bump postcss from 8.4.47 to 8.5.12 in /web-client/extras by @dependabot[bot] in #3730
• Bump tracing-loki to 0.2.7 by @jeffesquivels in #3737
• build(deps): bump openssl from 0.10.78 to 0.10.79 by @dependabot[bot] in #3743

Full Changelog: v1.4.0...v1.5.0

Mainnet 1.4.0

This release targets the mainnet network.
This release is backwards compatible with the previous v1.X.X releases.

What's Changed

What's changed

• Discard stale peers received via discovery by @wille-io in #3653
• Use saturating arithmetic in Policy block number methods by @jsdanielh in #3679
• Remove unwrap/ safer arithmetic logic by @viquezclaudio in #3678
• Validate genesis_supply in get_supply_at RPC handler by @jsdanielh in #3680
• Pass allow_ips config to RPC server ip_whitelist by @jsdanielh in #3681
• Limit DHT fallback HTTP response body size to 1 MB by @jsdanielh in #3682
• Include symbols in the release-with-debug profile by @jeffesquivels in #3690
• Improve prove chunks functionality by @viquezclaudio in #3693
• Prevent u32 underflow in get_proposer_at when block_number is 0 by @jsdanielh in #3694
• Hardening of equivocation proof verification by @ii-cruz in #3642
• rpc-client: Add rpc contact book getter command by @ii-cruz in #3639
• metrics-server: Implement HTTP Basic Auth from config credentials by @jsdanielh in #3702
• Use safe_sub for total_stake in failed DeleteValidator by @jsdanielh in #3695
• Fix for interlink in block inclusion proof by @jsdanielh in #3705
• Fixes rebranch logic in light blockchain by @jsdanielh in #3706
• Fix for DHT query poisoning by @jsdanielh in #3707
• Fix TaggedPublicKey::verify panic on invalid signature length by @jsdanielh in #3708
• Fix MerkleProof and MerklePath deserialization bounds checks by @jsdanielh in #3709
• Add block timestamp drift validation across all sync paths by @jsdanielh in #3711
• Multisig: return errors instead of panicking on invalid curve points when delinearizing by @jsdanielh in #3713
• ChainInfo: reject blocks with overflowing transaction fee sums by @jsdanielh in #3714
• Fix discovery handler infinite poll loop by @jsdanielh in #3710
• Fix empty-address panic in known_peers() by @jsdanielh in #3715
• Fix DHT GetRecord query wedge on untrusted peer responses by @jsdanielh in #3716
• Guard rebranch_to against empty target_chain by @jsdanielh in #3703

Dependencies

• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 11 updates by @dependabot[bot] in #3671
• build(deps): bump toml from 0.9.11+spec-1.1.0 to 1.1.0+spec-1.1.0 by @dependabot[bot] in #3673
• build(deps): bump gloo-timers from 0.3.0 to 0.4.0 by @dependabot[bot] in #3674
• build(deps): bump quinn-proto from 0.11.13 to 0.11.14 by @dependabot[bot] in #3635
• build(deps): bump rollup from 4.22.4 to 4.59.0 in /web-client/extras by @dependabot[bot] in #3620
• build(deps): bump picomatch from 2.3.1 to 2.3.2 in /web-client/extras by @dependabot[bot] in #3650
• build(deps): bump minimatch from 3.1.2 to 3.1.5 in /web-client/extras by @dependabot[bot] in #3624
• build(deps): bump tokio from 1.50.0 to 1.51.0 in the minor-and-patch-cargo-updates group by @dependabot[bot] in #3675
• Update wasm-bindgen dependencies by @jsdanielh in #3686
• build(deps): bump docker/build-push-action from 7.0.0 to 7.1.0 in the minor-and-patch-actions-updates group across 1 directory by @dependabot[bot] in #3683
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 8 updates by @dependabot[bot] in #3696
• build(deps): bump rustls-webpki from 0.103.10 to 0.103.12 by @dependabot[bot] in #3704
• build(deps): bump afl from 0.17.1 to 0.18.1 by @dependabot[bot] in #3699
• Update yamux from version 0.13.8 to 0.13.10 by @jsdanielh in #3712

New Contributors

• @wille-io made their first contribution in #3653

Full Changelog: v1.3.0...v1.4.0

Mainnet 1.3.0

This release targets the mainnet network.
This release is backwards compatible with the previous v1.X.X releases.

What's Changed

What's changed

• web-client: Fix function name typo in StakingDataBuilder by @sisou in #3627
• Fix missing proof-of-knowledge validation on voting key update by @jsdanielh in #3654
• Fix peer contact book poisoning via future timestamps by @jsdanielh in #3655
• Fix peer-triggerable panic during history sync by @jsdanielh in #3656
• Fix quorum bypass via out-of-range BitSet signer indices by @jsdanielh in #3657
• Fix underflow panic in vesting and HTLC insufficient funds error path by @jsdanielh in #3658
• Fix panic on HistoryTreeProof length mismatch by @jsdanielh in #3659
• Fix panic in RequestMacroChain with micro block locator by @jsdanielh in #3660
• Fix off-by-one in proposal buffer signer bounds check by @jsdanielh in #3661
• Fix crash via invalid election macro block validators voting key by @jsdanielh in #3662
• Fix request/response codec reading entire stream before size validation by @jsdanielh in #3663
• Fix discovery handler underflow when peer sends limit=0 by @jsdanielh in #3664
• Fix stale response_channels on request/response inbound failure by @jsdanielh in #3665
• Fix crash on duplicate discovery substream by @jsdanielh in #3666
• Fix panic in history index request handlers on nodes without index by @jsdanielh in #3667
• Fix election macro block interlink verification bypass by @jsdanielh in #3668
• Fix validator and prover guide links by @AirMate in #3644

Dependencies

• build(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in #3621
• build(deps): bump actions/download-artifact from 7 to 8 by @dependabot[bot] in #3622
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 8 updates by @dependabot[bot] in #3626
• build(deps): bump docker/login-action from 3 to 4 by @dependabot[bot] in #3628
• build(deps): bump docker/build-push-action from 6.19.2 to 7.0.0 by @dependabot[bot] in #3634
• build(deps): bump docker/metadata-action from 5 to 6 by @dependabot[bot] in #3633
• build(deps): bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #3631
• build(deps): bump libp2p-gossipsub from 0.49.2 to 0.49.3 by @dependabot[bot] in #3645
• build(deps): bump rustls-webpki from 0.103.8 to 0.103.10 by @dependabot[bot] in #3647
• build(deps): bump codecov/codecov-action from 5 to 6 by @dependabot[bot] in #3651

Full Changelog: v1.2.2...v1.3.0

Mainnet 1.2.2

This release targets the mainnet network.
This release is backwards compatible with the previous v1.X.X releases.

What's Changed

What's changed

• Fix some clippy warnings by @jsdanielh in #3537
• Fix KeyPair.fromHex rejecting output from toHex by @onmax in #3551
• Fix multiple OpenRPC schema issues by @onmax in #3502
• Add producer to web-client PlainMicroBlock by @onmax in #3550
• Add pkg.pr.new preview for web-client by @onmax in #3548
• Remaining multisig methods for web-client by @sisou in #3573
• web-client: Allow signing staking transactions with a different inner KeyPair by @sisou in #3585
• blockchain: Add proposal body root verification by @jsdanielh in #3623

Dependencies

• Update dependencies that were not populated by GH dependabot by @jsdanielh in #3536
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 6 updates by @dependabot[bot] in #3543
• build(deps): bump convert_case from 0.9.0 to 0.10.0 by @dependabot[bot] in #3545
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 9 updates by @dependabot[bot] in #3554
• build(deps): bump darling from 0.21.3 to 0.23.0 by @dependabot[bot] in #3556
• build(deps): bump vite from 5.4.20 to 5.4.21 in /web-client/extras by @dependabot[bot] in #3515
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 5 updates by @dependabot[bot] in #3562
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 10 updates by @dependabot[bot] in #3568
• build(deps): bump signal-hook from 0.3.18 to 0.4.1 by @dependabot[bot] in #3570
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 10 updates by @dependabot[bot] in #3578
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 6 updates by @dependabot[bot] in #3586
• build(deps): bump the minor-and-patch-cargo-updates group with 6 updates by @dependabot[bot] in #3591
• build(deps): bump convert_case from 0.10.0 to 0.11.0 by @dependabot[bot] in #3593
• build(deps): bump time from 0.3.46 to 0.3.47 by @dependabot[bot] in #3596
• build(deps): bump actions/setup-python from 5 to 6 by @dependabot[bot] in #3605
• build(deps): bump actions/setup-node from 4 to 6 by @dependabot[bot] in #3606
• build(deps): bump actions/download-artifact from 4 to 7 by @dependabot[bot] in #3604
• build(deps): bump actions/checkout from 4 to 6 by @dependabot[bot] in #3603
• build(deps): bump actions/upload-artifact from 4 to 6 by @dependabot[bot] in #3602
• build(deps): bump docker/build-push-action from 6.10.0 to 6.19.2 in the minor-and-patch-actions-updates group by @dependabot[bot] in #3601
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 6 updates by @dependabot[bot] in #3607
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 5 updates by @dependabot[bot] in #3614

Full Changelog: v1.2.1...v1.2.2

Mainnet 1.2.1

This release targets the mainnet network.
This release is backwards compatible with the previous v1.X.X releases.

What's Changed

What's changed

• OpenRPC schema: add support for unwrapping lists of tuples like Vec<(Blake2bHash, u32)>). by @Eligioo in #3519
• ci: Decrease frequency cron scheduled jobs run by @jsdanielh in #3521
• fix: Fix the network buffer size for webclient by @viquezclaudio in #3530

Dependencies

• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 6 updates by @dependabot[bot] in #3518
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 9 updates by @dependabot[bot] in #3529

Full Changelog: v1.2.0...v1.2.1

Mainnet 1.2.0

This release targets the mainnet network.
This release is backwards compatible with the previous v1.X.X releases.

What's Changed

What's changed

• Implement Version Upgrade Mechanism by @paberr in #3096
• tools/rpc-schema: Fix clippy warning by @jsdanielh in #3440
• lib: Destructure the config options by @jsdanielh in #3439
• Fixes #3415 by @viquezclaudio in #3436
• Upgrade our vendored postcard by @hrxi in #3444
• Use (self-)published postcard-bytes instead of git repository by @hrxi in #3450
• docs(consensus): add Rustdoc and inline comments by @ines-toupeira in #3371
• web-client: Allow unpacking empty arrays by @sisou in #3454
• Update WASM tooling to support latest Rust version by @sisou in #3476
• web-client: check if txn is already included by @viquezclaudio in #3466
• ETH - RPC interface by @viquezclaudio in #3434
• RPC: getTransactionReceiptsByAddress by @viquezclaudio in #3461
• Create a new consensus sync tracker by @viquezclaudio in #3457
• Fix compilation and clippy warnings by @ii-cruz in #3445
• Make network buffer size configurable by @viquezclaudio in #3464
• ci: Use npm trusted publishers instead of tokens by @jsdanielh in #3514

Dependencies

• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 5 updates by @dependabot[bot] in #3430
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 6 updates by @dependabot[bot] in #3435
• build(deps): bump schemars from 0.8.22 to 1.0.3 by @dependabot[bot] in #3426
• build(deps): bump rust-argon2 from 2.1.0 to 3.0.0 by @dependabot[bot] in #3438
• build(deps): bump the minor-and-patch-cargo-updates group with 2 updates by @dependabot[bot] in #3437
• build(deps): bump the minor-and-patch-cargo-updates group with 2 updates by @dependabot[bot] in #3441
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 3 updates by @dependabot[bot] in #3446
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 4 updates by @dependabot[bot] in #3448
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 2 updates by @dependabot[bot] in #3451
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 5 updates by @dependabot[bot] in #3456
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 5 updates by @dependabot[bot] in #3459
• build(deps): bump the minor-and-patch-cargo-updates group with 6 updates by @dependabot[bot] in #3462
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 4 updates by @dependabot[bot] in #3465
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 4 updates by @dependabot[bot] in #3468
• build(deps): bump tracing-subscriber from 0.3.19 to 0.3.20 by @dependabot[bot] in #3469
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 3 updates by @dependabot[bot] in #3475
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 4 updates by @dependabot[bot] in #3482
• build(deps): bump the minor-and-patch-cargo-updates group with 7 updates by @dependabot[bot] in #3483
• build(deps): bump vite from 5.4.19 to 5.4.20 in /web-client/extras by @dependabot[bot] in #3481
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 10 updates by @dependabot[bot] in #3488
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 3 updates by @dependabot[bot] in #3490
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 6 updates by @dependabot[bot] in #3493
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 5 updates by @dependabot[bot] in #3507

Full Changelog: v1.1.1...v1.2.0

Mainnet 1.1.1

This release targets the mainnet network.
This release is backwards compatible with the previous v1.X.X releases.

What's Changed

What's changed

• Update dependency labels for release notes by @jsdanielh in #3386
• Fix clippy warnings by @hrxi in #3377
• policy: Initialize the default policy to the mainnet values by @jsdanielh in #3392
• Update to Rust Edition 2024 by @sisou in #3313
• Add a fuzzer for user friendly addresses by @hrxi in #3395
• Validate and fix web-client type declarations by @sisou in #3387
• Move listening for SIGINT to dedicated thread, don't block tokio worker thread by @fiaxh in #3407
• Fix panic in Address::from_user_friendly_address by @hrxi in #3399
• Update libmdbx Rust wrapper by @hrxi in #3408
• Fix clippy warnings by @jsdanielh in #3423

Dependencies

• build(deps): bump vite from 5.4.18 to 5.4.19 in /web-client/extras by @dependabot in #3385
• Update some dependencies by @jsdanielh in #3388
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 18 updates by @dependabot in #3401
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 14 updates by @dependabot in #3422
• build(deps): bump the minor-and-patch-cargo-updates group with 2 updates by @dependabot in #3424

Full Changelog: v1.1.0...v1.1.1

Mainnet 1.1.0

This release targets the mainnet network.
This release is backwards compatible with the previous v1.0.X releases.

What's Changed

What's changed

• Use binary search from std, remove dead code by @hrxi in #3343
• Update security policy by @jsdanielh in #3354
• Fix failed to publish asset for OpenRPC workflow by @Eligioo in #3350
• Remove explicit PubsubId bounds by @hrxi in #3355
• Create lib for nimiq-rpc-client by @viquezclaudio in #3351
• ci: Update all GH Actions workflows to use the latest OS image by @jsdanielh in #3357
• pow-migration: Fix some typos by @jsdanielh in #3359
• rpc-client: Re-export the RPC interface and types by @jsdanielh in #3358
• Replace outdated web-client installation instructions with link to Developer Center by @sisou in #3369
• rpc: Make transactions public in rpc block by @viquezclaudio in #3375
• rpc: Make the RPC interface methods to not require &mut self by @jsdanielh in #3374
• Network: limit discovery message size to 1 MB by @styppo in #3384
• Simplify pico consensus by @viquezclaudio in #3381

Dependencies

• Upgrade to rand 0.9 by @hrxi in #3335
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 12 updates by @dependabot in #3348
• build(deps): bump vite from 5.4.14 to 5.4.16 in /web-client/extras by @dependabot in #3346
• build(deps): bump openssl from 0.10.70 to 0.10.72 by @dependabot in #3352
• build(deps): bump vite from 5.4.16 to 5.4.17 in /web-client/extras by @dependabot in #3353
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 2 updates by @dependabot in #3356
• build(deps): bump crossbeam-channel from 0.5.13 to 0.5.15 by @dependabot in #3361
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 4 updates by @dependabot in #3363
• build(deps): bump vite from 5.4.17 to 5.4.18 in /web-client/extras by @dependabot in #3364
• Switch back to upstream tsify by @jsdanielh in #3366

Full Changelog: v1.0.9...v1.1.0