Releases: Commit-Boost/commit-boost-client
Release list
v0.11.0-rc1
What's Changed
- Introduces SSZ encodings for get_header and submit_block
- Introduces optional streaming endpoint to receive bids over WebSocket connection
- Fix Prysm issue #17136
Full Changelog: v0.10.0...v0.11.0-rc1
v0.10.0
Breaking changes
- The CLI, PBS, and Signer binaries are unified into a single commit-boost binary (#425), and a unified Docker image is published alongside the per-module ones:
ghcr.io/commit-boost/commit-boost(#464). Release artifacts are now onecommit-boost-<tag>-<platform>.tar.gzper platform, each with a Sigstore signature. - SSV:
ssv_api_urlis replaced byssv_node_api_url(your SSV node's API) withssv_public_api_urlas a public-API fallback (#415). - The Helder test network is no longer supported.
Security
- Remediations from the Sigma Prime signer audit (#438), including configurable signer TLS (
[signer.tls_mode]:certificatemode by default,insecureto opt out), reverse-proxy client-IP validation ([signer.reverse_proxy]), and per-modulesigning_ids.
Features
- PBS reloads its config file when it changes, without a restart (#409).
- Custom chain ids for custom network configs (#429).
get_headerlogs the auction winner (#443).- Stader validator registry support: a stader mux registry loader for node-operator validator sets.
- SSV node API support for mux loading, with the operator id sent as a numeric uint64 (#415, #474).
Fixes
- Fixed a TLS provider panic when using the Dirk signer.
- Fixed a CLI double-parse bug (#428).
Infrastructure
- Releases are now cut through an auditable release-request model: a
.releases/vX.Y.Z.ymlpins the exact commit, and CI builds signed tarballs (linux x86-64/arm64, darwin arm64) and multi-arch images (#462).
Thanks to everyone who contributed to this release: @JasonVranek, @jclapis, @PedroCM96, @iurii-ssv, @dnstaked, @ninaiiad, @selfuryon, @dom-nie, @ltitanb , and @ManuelBilbao
Full Changelog: v0.9.6...v0.10.0
v0.10.0-rc4
v0.10.0-rc3
v0.10.0-rc2
What Changed: Fixed string marshaling bug when fetching keys from local SSV nodes
Full Changelog: v0.10.0-rc1...v0.10.0-rc2
v0.10.0-rc1
Breaking changes
- Unified binary: CLI, PBS, and Signer combined into a single commit-boost binary with subcommands (#425). This change changes the CLI, notably the init command is now invoked as commit-boost init --config <config_name>.
- New unified Docker image commit-boost (#464). Dedicated commit-boost-pbs and commit-boost-signer images continue to ship for backward compatibility.
- Signer service API updated, see signer-api.yml
Security
- Sigma Prime audit fixes for the signer service (#438)
###Features
- SSV-node API support (#415)
- Custom chain ID support (#429)
- PBS reloads config on file changes without restart (#409)
- New log line for get_header auction winner (#443)
Fixes
Infrastructure
v0.9.7-rc1
Test release using the new release process. Code is functionally identical to v0.9.6.
Verify a binary
# Set the release version and your target architecture
# Architecture options: darwin_arm64, linux_arm64, linux_x86-64
export REPO=Commit-Boost/commit-boost-client
export VERSION=vX.Y.Z
export ARCH=linux_x86-64
export BIN=commit-boost-pbs
# Download the binary tarball and its signature bundle
curl -L \
-o "$BIN-$VERSION-$ARCH.tar.gz" \
"https://github.com/$REPO/releases/download/$VERSION/$BIN-$VERSION-$ARCH.tar.gz"
curl -L \
-o "$BIN-$VERSION-$ARCH.tar.gz.sigstore.json" \
"https://github.com/$REPO/releases/download/$VERSION/$BIN-$VERSION-$ARCH.tar.gz.sigstore.json"
# Verify the binary was signed by the official CI pipeline
cosign verify-blob \
"$BIN-$VERSION-$ARCH.tar.gz" \
--bundle "$BIN-$VERSION-$ARCH.tar.gz.sigstore.json" \
--certificate-oidc-issuer="https://token.actions.githubusercontent.com" \
--certificate-identity="https://github.com/$REPO/.github/workflows/release.yml@refs/heads/main"A successful verification prints Verified OK. If the binary was modified after being built by CI, verification will fail.
The .sigstore.json bundle for each binary is attached to the release alongside the tarball itself.
Acknowledgements
v0.9.6
What's Changed
- Fix pagination issue with SSV keys
- Bump rust toolchain to 1.91
- Bump lighthouse dependencies to v8.1.3
Note that v0.9.4 and v0.9.5 were botched releases due to changes in the rust toolchain and should be ignored.
v0.9.3
This is a point release with some fixes around edge-cases and small improvements. It also adds support for --version to the PBS and Signer modules, so users can quickly check which version they're running.
What's Changed
- Added the Fulu fork slot for Mainnet by @jclapis in #402
- Support lido modules by @PedroCM96 in #392
- clarify timing games config by @ltitanb in #411
- Allow builds from other branches by @jclapis in #414
- Add --version support by @jclapis in #408
- feat(signer): add a config param to set the max size of
ListAccountDirk's response by @ManuelBilbao in #406 - Fix an unbound loop when using a misbehaving relay by @jclapis in #423
- Update to v0.9.3 by @jclapis in #424
New Contributors
- @PedroCM96 made their first contribution in #392
Full Changelog: v0.9.2...v0.9.3
v0.9.2
This is a re-release of v0.9.1, which had a botched CI build for some users. Nothing has changed other than the version, but we recommend everyone use this instead of v0.9.1 to ensure you have the latest release.
This is a bugfix release that addresses a few issues discovered in v0.9.0. This release is recommended for the upcoming Fusaka hardfork on Mainnet.
What's Changed
- Support SSV API URLs without trailing slashes by @jclapis in #396
- feat(docs): add submodule initialization by @nilsfs7 in #391
- fix: spawn get payload in the background by @ltitanb in #397
- Update to v0.9.2 by @jclapis in #400
New Contributors
Full Changelog: v0.9.0...v0.9.2