Mainnet 1.7.1

This release targets the mainnet network and the testnet network.
For mainnet this release is backwards compatible with the previous v1.X.X releases.
For testnet this release is backwards compatible with previous v1.6.1+ releases.

What's Changed

What's changed

• web-client: Make pico the default sync mode in the client configuration by @jsdanielh in #3823
• feat(primitives): add per-fork upgrade activation registry by @jsdanielh in #3829
• rpc-client: add CLI subcommands for missing RPC methods by @jsdanielh in #3832
• bls: speed up signature verification with one multi-Miller loop by @jsdanielh in #3825
• validator: cache hash-to-G1 points in the Handel verifiers by @jsdanielh in #3826
• ci: Remove unexistent feature from test compilation by @jsdanielh in #3834
• Remove pow-migration crate by @viquezclaudio in #3837
• Properly set up RequestProposal receive request handlers by @nibhar in #3827
• validator: fix version-upgrade trigger by @jsdanielh in #3808
• Add protocol-upgrade signaling dashboard (web client) by @paberr in #3836
• web-client: build the types target in the upgrade-dashboard compose by @viquezclaudio in #3846
• Fix panic when reverting a jail penalty by @jsdanielh in #3848
• fix(primitives): bound validator slot total in Validators deserialize by @jsdanielh in #3849
• Prevent modulo-by-zero panic from over-covering punished set by @jsdanielh in #3850
• Fix non-terminating loop in MMR proof verification by @jsdanielh in #3851
• trie: reject ROOT key in apply_diff complete-part branch by @jsdanielh in #3852
• blockchain: compute reward recipients from the in-flight txn by @jsdanielh in #3853
• genesis: refresh MainAlbatross checkpoint election block by @jsdanielh in #3854

Dependencies

• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 5 updates by @dependabot[bot] in #3822
• build(deps): bump hashlink from 0.11.1 to 0.12.0 by @dependabot[bot] in #3802
• build(deps): bump itertools from 0.14.0 to 0.15.0 by @dependabot[bot] in #3831
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 4 updates by @dependabot[bot] in #3840
• build(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #3838
• build(deps): bump prometheus-client from 0.24.1 to 0.25.0 by @dependabot[bot] in #3824

Full Changelog: v1.7.0...v1.7.1

Mainnet 1.7.0

This release targets the mainnet network and the testnet network.
For mainnet this release is backwards compatible with the previous v1.X.X releases.
For testnet this release is backwards compatible with the previous v1.6.1 release.

What's Changed

What's changed

• Web client: validate seedNodes input instead of panicking by @Eligioo in #3804
• Make the nimiq-client version available via RPC and as CLI argument by @Eligioo in #3429
• Merkle: reject empty chunk_hashes when computing the root by @Eligioo in #3805
• web-client: expose the client version via getVersion by @jsdanielh in #3806
• rpc-client: fix inverted --previous-penalized flag for penalized-slots by @jsdanielh in #3807
• Fix automatic reactivation setting in validator dispatcher by @ii-cruz in #3812
• RPC: Saturating add on validity start height + block number by @ii-cruz in #3813
• rpc-client: Remove unwanted debug log by @jsdanielh in #3809
• account: gate revert_jail_validator deactivation log on newly_deactivated by @jsdanielh in #3810
• Add Vite plugin export by @onmax in #3497
• tendermint: reject non-disjoint contributor sets in aggregate verification by @jsdanielh in #3815
• handel: reject empty partitioner levels in Evaluator::verify by @jsdanielh in #3816
• consensus: validate proven transactions against the requested hashes by @jsdanielh in #3817
• tendermint: allow late proposals to finish an aggregation by @jsdanielh in #3818
• fix: reject all-zero default public key as a signature signer by @jsdanielh in #3819
• Remove ZKP by @jsdanielh in #3820
• Add checkpoints to pico sync fallback by @jsdanielh in #3821

Dependencies

• build(deps): bump codecov/codecov-action from 6 to 7 by @dependabot[bot] in #3798

Full Changelog: v1.6.1...v1.7.0

Mainnet 1.6.1

This release targets the mainnet network and the testnet network.
For mainnet this release is backwards compatible with the previous v1.X.X releases.

What's Changed

What's changed

• Use TESTNET_POLICY constants for testnet and devnet by @jeffesquivels in #3787
• Do not always ignore update_root() failure by @viquezclaudio in #3782
• chore: Fix clippy warnings in codebase by @jsdanielh in #3786
• web-client: download wasm-opt for the host platform by @jsdanielh in #3799
• network-libp2p: rate limit inbound DHT PutRecord per peer by @viquezclaudio in #3797

Dependencies

• Upgrade rand/rand_core and rand_chacha to 0.10 by @jsdanielh in #3615
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 6 updates by @dependabot[bot] in #3796

Full Changelog: v1.6.0...v1.6.1

Mainnet 1.6.0

What's Changed

What's changed

• Remove unnecesary functions from RPC by @viquezclaudio in #3773
• chore: Mark test and binary-only crates as publish = false by @jsdanielh in #3776
• Mempool: Limit the number of txns per sender by @viquezclaudio in #3779
• Web-client: validate Coin range in StakingDataBuilder JS API by @jsdanielh in #3788
• Trie: reject equal-length keys in TrieProofNode::child_index by @jsdanielh in #3789
• Fix out-of-bounds key nibbles in concatenation by @jsdanielh in #3790
• Better empty trie proof handling by @jsdanielh in #3791
• Reject overflowing validate_keys slot total with checked_add by @jsdanielh in #3792
• Trie: reject ROOT-keyed entries in apply_diff by @jsdanielh in #3793
• Make Validators::hash panic-free and verify block-by-hash requests by @jsdanielh in #3794

Dependencies

• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 7 updates by @dependabot[bot] in #3774
• build(deps): bump openssl from 0.10.79 to 0.10.80 by @dependabot[bot] in #3775
• build(deps): bump docker/build-push-action from 7.1.0 to 7.2.0 in the minor-and-patch-actions-updates group across 1 directory by @dependabot[bot] in #3770
• build(deps-dev): bump vitest from 2.1.9 to 4.1.0 in /web-client/extras by @dependabot[bot] in #3781

Full Changelog: v1.5.1...v1.6.0

Mainnet 1.5.1

This release targets the mainnet network.
This release is backwards compatible with the previous v1.X.X releases.

What's Changed

What's changed

• Fix light-blockchain election pruning by @viquezclaudio in #3765
• Fix validity-store replay window to match transaction validity by @jsdanielh in #3772
• Removing dead code of poseidon by @ii-cruz in #3766

Dependencies

• build(deps): bump tokio-metrics from 0.4.9 to 0.5.0 by @dependabot[bot] in #3697

Full Changelog: v1.5.0...v1.5.1

Mainnet 1.5.0

This release targets the mainnet network.
This release is backwards compatible with the previous v1.X.X releases.

What's Changed

What's changed

• Remove unused code by @nibhar in #3719
• Removes unused function in light-blockchain by @viquezclaudio in #3717
• OffsetTime: use instant::SystemTime to avoid wasm32 panic by @jsdanielh in #3729
• Properly test oob signers by @nibhar in #3721
• Harden get_validator_by_slot_band by @nibhar in #3720
• Fix web-client validity check by @viquezclaudio in #3725
• Fix for inherents in WASM by @viquezclaudio in #3731
• Restart validity sync if all request fail by @viquezclaudio in #3733
• Improve web client multisig commitment check by @viquezclaudio in #3726
• Fix RPC get_previous_penalized_slots by @viquezclaudio in #3724
• ES256: return errors instead of panicking on invalid byte conversions by @jsdanielh in #3722
• Fix rate limit pending deletion TOCTOU by @nibhar in #3718
• web-client: Move test to the end of file by @jsdanielh in #3735
• Fix for ForkProof VRF seed entropy panic by @jsdanielh in #3744
• Fix panic in genesis BatchSet request by @jsdanielh in #3745
• BlockAssembler: bound header/body caches by @jsdanielh in #3746
• Fix rebranch state propagation by @jsdanielh in #3747
• Inherent: Fix DiscreteDistribution panic in reward distribution by @jsdanielh in #3748
• Remove unnecessary decompression and re-serialization in Validators::hash() by @jsdanielh in #3749
• history_sync: reject batches with overflowing transaction fee sums by @jsdanielh in #3750
• Reject zero num_steps in vesting transaction builder by @jsdanielh in #3751
• Fix VestingContract::min_cap panic on unbounded time fields by @jsdanielh in #3752
• Bound ValidatorRecord timestamp drift in DHT verifier by @jsdanielh in #3753
• Fix for absent duplicate keys in RequestTrieProof by @jsdanielh in #3754
• Transaction builder: fix StakingDataBuilder panic on malformed recipient data by @jsdanielh in #3755
• web-client: fix unwrap panic in Transaction.flags getter by @jsdanielh in #3756
• Fix peer_count drift bypassing peer_count_max in connection pool by @jsdanielh in #3757
• Replace assert_eq! panics in extend_history_sync with PushError by @jsdanielh in #3758
• Discovery: clamp peer-supplied update_interval upper bound by @jsdanielh in #3759
• MMR: Reject oversized mmr_size in proof verification by @jsdanielh in #3760
• Network: guard against already-removed DHT query in quorum handler by @jsdanielh in #3761
• Trie: reject ROOT-keyed items in put_chunk by @jsdanielh in #3762
• Consensus: evict peers returning diffs with invalid tree-proof by @jsdanielh in #3763
• web-client: Pin the wasm-bindgen version by @jsdanielh in #3764

Dependencies

• build(deps): bump openssl from 0.10.75 to 0.10.78 by @dependabot[bot] in #3723
• build(deps): bump postcss from 8.4.47 to 8.5.12 in /web-client/extras by @dependabot[bot] in #3730
• Bump tracing-loki to 0.2.7 by @jeffesquivels in #3737
• build(deps): bump openssl from 0.10.78 to 0.10.79 by @dependabot[bot] in #3743

Full Changelog: v1.4.0...v1.5.0

Mainnet 1.4.0

This release targets the mainnet network.
This release is backwards compatible with the previous v1.X.X releases.

What's Changed

What's changed

• Discard stale peers received via discovery by @wille-io in #3653
• Use saturating arithmetic in Policy block number methods by @jsdanielh in #3679
• Remove unwrap/ safer arithmetic logic by @viquezclaudio in #3678
• Validate genesis_supply in get_supply_at RPC handler by @jsdanielh in #3680
• Pass allow_ips config to RPC server ip_whitelist by @jsdanielh in #3681
• Limit DHT fallback HTTP response body size to 1 MB by @jsdanielh in #3682
• Include symbols in the release-with-debug profile by @jeffesquivels in #3690
• Improve prove chunks functionality by @viquezclaudio in #3693
• Prevent u32 underflow in get_proposer_at when block_number is 0 by @jsdanielh in #3694
• Hardening of equivocation proof verification by @ii-cruz in #3642
• rpc-client: Add rpc contact book getter command by @ii-cruz in #3639
• metrics-server: Implement HTTP Basic Auth from config credentials by @jsdanielh in #3702
• Use safe_sub for total_stake in failed DeleteValidator by @jsdanielh in #3695
• Fix for interlink in block inclusion proof by @jsdanielh in #3705
• Fixes rebranch logic in light blockchain by @jsdanielh in #3706
• Fix for DHT query poisoning by @jsdanielh in #3707
• Fix TaggedPublicKey::verify panic on invalid signature length by @jsdanielh in #3708
• Fix MerkleProof and MerklePath deserialization bounds checks by @jsdanielh in #3709
• Add block timestamp drift validation across all sync paths by @jsdanielh in #3711
• Multisig: return errors instead of panicking on invalid curve points when delinearizing by @jsdanielh in #3713
• ChainInfo: reject blocks with overflowing transaction fee sums by @jsdanielh in #3714
• Fix discovery handler infinite poll loop by @jsdanielh in #3710
• Fix empty-address panic in known_peers() by @jsdanielh in #3715
• Fix DHT GetRecord query wedge on untrusted peer responses by @jsdanielh in #3716
• Guard rebranch_to against empty target_chain by @jsdanielh in #3703

Dependencies

• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 11 updates by @dependabot[bot] in #3671
• build(deps): bump toml from 0.9.11+spec-1.1.0 to 1.1.0+spec-1.1.0 by @dependabot[bot] in #3673
• build(deps): bump gloo-timers from 0.3.0 to 0.4.0 by @dependabot[bot] in #3674
• build(deps): bump quinn-proto from 0.11.13 to 0.11.14 by @dependabot[bot] in #3635
• build(deps): bump rollup from 4.22.4 to 4.59.0 in /web-client/extras by @dependabot[bot] in #3620
• build(deps): bump picomatch from 2.3.1 to 2.3.2 in /web-client/extras by @dependabot[bot] in #3650
• build(deps): bump minimatch from 3.1.2 to 3.1.5 in /web-client/extras by @dependabot[bot] in #3624
• build(deps): bump tokio from 1.50.0 to 1.51.0 in the minor-and-patch-cargo-updates group by @dependabot[bot] in #3675
• Update wasm-bindgen dependencies by @jsdanielh in #3686
• build(deps): bump docker/build-push-action from 7.0.0 to 7.1.0 in the minor-and-patch-actions-updates group across 1 directory by @dependabot[bot] in #3683
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 8 updates by @dependabot[bot] in #3696
• build(deps): bump rustls-webpki from 0.103.10 to 0.103.12 by @dependabot[bot] in #3704
• build(deps): bump afl from 0.17.1 to 0.18.1 by @dependabot[bot] in #3699
• Update yamux from version 0.13.8 to 0.13.10 by @jsdanielh in #3712

New Contributors

• @wille-io made their first contribution in #3653

Full Changelog: v1.3.0...v1.4.0

Mainnet 1.3.0

This release targets the mainnet network.
This release is backwards compatible with the previous v1.X.X releases.

What's Changed

What's changed

• web-client: Fix function name typo in StakingDataBuilder by @sisou in #3627
• Fix missing proof-of-knowledge validation on voting key update by @jsdanielh in #3654
• Fix peer contact book poisoning via future timestamps by @jsdanielh in #3655
• Fix peer-triggerable panic during history sync by @jsdanielh in #3656
• Fix quorum bypass via out-of-range BitSet signer indices by @jsdanielh in #3657
• Fix underflow panic in vesting and HTLC insufficient funds error path by @jsdanielh in #3658
• Fix panic on HistoryTreeProof length mismatch by @jsdanielh in #3659
• Fix panic in RequestMacroChain with micro block locator by @jsdanielh in #3660
• Fix off-by-one in proposal buffer signer bounds check by @jsdanielh in #3661
• Fix crash via invalid election macro block validators voting key by @jsdanielh in #3662
• Fix request/response codec reading entire stream before size validation by @jsdanielh in #3663
• Fix discovery handler underflow when peer sends limit=0 by @jsdanielh in #3664
• Fix stale response_channels on request/response inbound failure by @jsdanielh in #3665
• Fix crash on duplicate discovery substream by @jsdanielh in #3666
• Fix panic in history index request handlers on nodes without index by @jsdanielh in #3667
• Fix election macro block interlink verification bypass by @jsdanielh in #3668
• Fix validator and prover guide links by @AirMate in #3644

Dependencies

• build(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in #3621
• build(deps): bump actions/download-artifact from 7 to 8 by @dependabot[bot] in #3622
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 8 updates by @dependabot[bot] in #3626
• build(deps): bump docker/login-action from 3 to 4 by @dependabot[bot] in #3628
• build(deps): bump docker/build-push-action from 6.19.2 to 7.0.0 by @dependabot[bot] in #3634
• build(deps): bump docker/metadata-action from 5 to 6 by @dependabot[bot] in #3633
• build(deps): bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #3631
• build(deps): bump libp2p-gossipsub from 0.49.2 to 0.49.3 by @dependabot[bot] in #3645
• build(deps): bump rustls-webpki from 0.103.8 to 0.103.10 by @dependabot[bot] in #3647
• build(deps): bump codecov/codecov-action from 5 to 6 by @dependabot[bot] in #3651

Full Changelog: v1.2.2...v1.3.0

Mainnet 1.2.2

This release targets the mainnet network.
This release is backwards compatible with the previous v1.X.X releases.

What's Changed

What's changed

• Fix some clippy warnings by @jsdanielh in #3537
• Fix KeyPair.fromHex rejecting output from toHex by @onmax in #3551
• Fix multiple OpenRPC schema issues by @onmax in #3502
• Add producer to web-client PlainMicroBlock by @onmax in #3550
• Add pkg.pr.new preview for web-client by @onmax in #3548
• Remaining multisig methods for web-client by @sisou in #3573
• web-client: Allow signing staking transactions with a different inner KeyPair by @sisou in #3585
• blockchain: Add proposal body root verification by @jsdanielh in #3623

Dependencies

• Update dependencies that were not populated by GH dependabot by @jsdanielh in #3536
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 6 updates by @dependabot[bot] in #3543
• build(deps): bump convert_case from 0.9.0 to 0.10.0 by @dependabot[bot] in #3545
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 9 updates by @dependabot[bot] in #3554
• build(deps): bump darling from 0.21.3 to 0.23.0 by @dependabot[bot] in #3556
• build(deps): bump vite from 5.4.20 to 5.4.21 in /web-client/extras by @dependabot[bot] in #3515
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 5 updates by @dependabot[bot] in #3562
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 10 updates by @dependabot[bot] in #3568
• build(deps): bump signal-hook from 0.3.18 to 0.4.1 by @dependabot[bot] in #3570
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 10 updates by @dependabot[bot] in #3578
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 6 updates by @dependabot[bot] in #3586
• build(deps): bump the minor-and-patch-cargo-updates group with 6 updates by @dependabot[bot] in #3591
• build(deps): bump convert_case from 0.10.0 to 0.11.0 by @dependabot[bot] in #3593
• build(deps): bump time from 0.3.46 to 0.3.47 by @dependabot[bot] in #3596
• build(deps): bump actions/setup-python from 5 to 6 by @dependabot[bot] in #3605
• build(deps): bump actions/setup-node from 4 to 6 by @dependabot[bot] in #3606
• build(deps): bump actions/download-artifact from 4 to 7 by @dependabot[bot] in #3604
• build(deps): bump actions/checkout from 4 to 6 by @dependabot[bot] in #3603
• build(deps): bump actions/upload-artifact from 4 to 6 by @dependabot[bot] in #3602
• build(deps): bump docker/build-push-action from 6.10.0 to 6.19.2 in the minor-and-patch-actions-updates group by @dependabot[bot] in #3601
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 6 updates by @dependabot[bot] in #3607
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 5 updates by @dependabot[bot] in #3614

Full Changelog: v1.2.1...v1.2.2

Mainnet 1.2.1

This release targets the mainnet network.
This release is backwards compatible with the previous v1.X.X releases.

What's Changed

What's changed

• OpenRPC schema: add support for unwrapping lists of tuples like Vec<(Blake2bHash, u32)>). by @Eligioo in #3519
• ci: Decrease frequency cron scheduled jobs run by @jsdanielh in #3521
• fix: Fix the network buffer size for webclient by @viquezclaudio in #3530

Dependencies

• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 6 updates by @dependabot[bot] in #3518
• build(deps): bump the minor-and-patch-cargo-updates group across 1 directory with 9 updates by @dependabot[bot] in #3529

Full Changelog: v1.2.0...v1.2.1