Sourced from github.com/cometbft/cometbft's releases.
v0.38.12
See the CHANGELOG for this release.
v0.38.11
v0.38.10
See the CHANGELOG for this release.
v0.38.9
See the CHANGELOG for this release.
Sourced from github.com/cometbft/cometbft's changelog.
v0.38.12
September 3, 2024
This release includes a security fix for the light client and is recommended for all users.
BUG FIXES
[light]
Cross-check proposer priorities in retrieved validator sets (#ASA-2024-009)[privval]
Ignore duplicate privval listen when already connected (#3828DEPENDENCIES
[crypto/secp256k1]
Adjust to breaking interface changes inbtcec/v2
latest release, while avoiding breaking changes to local CometBFT functions (#3728)IMPROVEMENTS
[types]
Check that proposer is one of the validators inValidateBasic
(#ASA-2024-009)[e2e]
Addlog_level
option to manifest file (#3819).[e2e]
Addlog_format
option to manifest file (#3836).v0.38.11
August 12, 2024
This release fixes a panic in consensus where CometBFT would previously panic if there's no extension signature in non-nil Precommit EVEN IF vote extensions themselves are disabled.
It also includes a few other bug fixes and performance improvements.
BUG FIXES
[types]
Only check IFF vote is a non-nil Precommit if extensionsEnabled types (#3565)IMPROVEMENTS
[indexer]
Fixed ineffective select break statements; they now point to their enclosing for loop label to exit (#3544)
... (truncated)
9722b6d
v0.38.12 (#3982)52c00a5
Merge commit from forkf2ae0f4
build(deps): Bump github.com/cosmos/gogoproto from 1.4.11 to 1.7.0 (#3912)cbedf6d
build(deps): Bump github.com/BurntSushi/toml from 1.2.1 to 1.4.0 (#3908)1013c80
test(mempool): Add two Update
benchmarks (backport #3873)
(#3892)2fb0cdd
build(deps): Bump github.com/rs/cors from 1.8.3 to 1.11.1 (#3907)dcbf359
build(deps): Bump github.com/Masterminds/semver/v3 from 3.2.0 to 3.3.0
(#3906)8de81d5
build(deps): Bump golang.org/x/net from 0.26.0 to 0.28.0 (#3905)221c744
fix(privval): CV ignore duplicate privval listen when connected
(backport #38...969c8d1
mempool: Fix the benchmarks (backport #934)
(#3893)Sourced from google.golang.org/grpc's releases.
Release 1.64.1
Dependencies
- Update x/net/http2 to address CVE-2023-45288 (#7352)
- metadata: remove String method from MD to make printing consistent (#7374)