Protocol 27

This release bumps the protocol to version 27, which includes CAP-0071: Authentication delegation and address-bound Soroban credentials.

• Adapt to CAP-0071 xdr by @sisuresh in #5233
• Add Core support for CAP-71. by @dmkozh in #5272
• Bump to p27 by @sisuresh in #5305

New features

• Allow secrets to be provided from a file or environment variable by @sisuresh in #5177
• Allow DATABASE config in file by @sisuresh in #5219
• Enable downloading of transaction sets in parallel with early SCP stages by @bboston7 in #5209
• Module cache rebuild logic by @graydon in #5175
• Skip building invariant delta when no invariants are enabled. by @dmkozh in #5289
• Relax invariants in recordStorageChanges for optimization. by @dmkozh in #5290
• Sort entry pointers in convertToBucketEntry. by @dmkozh in #5291
• Add option to generate LCM from tests by @sisuresh in #5178
• Make LCM capture deterministic and add shorten file names by @sisuresh in #5203
• Enable diagnostics when using --capture-lcm by @sisuresh in #5251
• Add DISABLE_TX_META_FOR_TESTING config flag. by @dmkozh in #5285
• Allow overriding block time bounds for testing by @marta-lokhova in #5239
• Add ledger age histrogram to support "min block time" test by @marta-lokhova in #5237
• Add a script for converting frozen ledger key settings to hex. by @dmkozh in #5246
• Misc apply load improvements by @dmkozh in #5196
• Add a custom token transfer benchmark mode for apply load. by @dmkozh in #5200
• Generate classic transactions in every apply load mode. by @dmkozh in #5201
• Add Soroswap benchmark mode for apply load. by @dmkozh in #5204
• Simplify apply load limits mode. by @dmkozh in #5249
• Misc updates for apply load matrix script. by @dmkozh in #5232
• Add a script for running apply-load on a fixed AWS instance. by @dmkozh in #5256
• Add instance parameter to apply_load_aws script. by @dmkozh in #5281
• Simulate apply configs now support parallel apply by @marta-lokhova in #5255
• Simulate sleep in apply before posting back to main by @marta-lokhova in #5297
• overlay-only loadgen mode updates: checkValid cleanup and new tx profiles by @marta-lokhova in #5243
• Fix TPS/TPL conversion for max-sac-tps. by @dmkozh in #5259

Stability improvements

• Fix race on bucket random evicion cache by @SirTyson in #5189
• Fix race in persist publish queue by @SirTyson in #5240
• Harden binary fuse filter by @SirTyson in #5202
• Bff fix by @SirTyson in #5294
• Fix flakey binary fuse test by @SirTyson in #5302
• Herder cleanup and hardening by @marta-lokhova in #5229
• Updates to upgrade flow by @marta-lokhova in #5199
• Overlay-only mode fixes to prevent occasional banned transaction drops by @marta-lokhova in #5257
• Complete const ledger state refactor by @SirTyson in #5141
• Bucket snapshot state refactor by @SirTyson in #5212
• Cleanup publish path by @SirTyson in #5213
• Add randomized testing for snapshot concurrency by @SirTyson in #5218
• Add a randomized test for 'frozen' DEX offers. by @dmkozh in #5174
• Bug 5027 fuzz unification by @graydon in #5121
• mop up some mess from the unified fuzzing change by @graydon in #5254
• Fix an over-eager determinizer hack breaking overlay fuzzer by @graydon in #5282
• Fix incorrect-reset bug in tx fuzz target (broken with bucketlistDB) by @graydon in #5292
• Fix build issue with SharedMutex by @SirTyson in #5211
• Fix issue with release build by @SirTyson in #5228
• Bump ethnum to placate nightly, for unified build, for oss-fuzz by @graydon in #5287
• Bump rust version to latest stable 1.95 by @anupsdf in #5248
• Revert "Run soroban on large stacks" by @dmkozh in #5253
• Remove C-style casts by @drebelsky in #5186
• Small fixes by @drebelsky in #5122
• Cleanups by @marta-lokhova in #5234
• Add logging for future debugging by @sisuresh in #5206
• Minor test fix by @marta-lokhova in #5197
• Regenerate test lcm for cap 71 by @sisuresh in #5293
• Support out-of-tree checks for make check by @drebelsky in #5225
• Change make-mks regexes to handle NOGIT=1 as in package-builder by @graydon in #5250
• Clean up version warning by @SirTyson in #5183
• Revert "Clean up version warning" by @sisuresh in #5310
• remove unused ChangeLog by @wpalmeri in #5210
• Add Claude review workflow by @leighmcculloch in #5258
• Add CodeQL config file to only run the scan for production code by @anupsdf in #5231
• Update security-protocol release notes with information on recent security releases by @anupsdf in #5245
• Update security and protocol release notes for v26.1.0 by @bboston7 in #5304
• v26.0.1 internal changes by @sisuresh in #5223
• v26.1.0-internal changes by @bboston7 in #5277

New Contributors

• @wpalmeri made their first contribution in #5210

Full Changelog: v26.0.0...v27.0.0

Contributors

• @graydon
• @wpalmeri
• @bboston7
• @leighmcculloch
• @drebelsky
• @sisuresh
• @marta-lokhova
• @SirTyson
• @dmkozh
• @anupsdf

What's Changed

• Replace block on transactions using ed25519SignedPayload signatures with an overall cap on signature verifications stellar-core will perform per transaction + Fix a crash during validation of malformed legacy transaction sets. by @bboston7 and @dmkozh in 427aa39

Full Changelog: v26.0.1...v26.1.0

Contributors

• @bboston7
• @dmkozh

Stability Fixes

• Block transactions using ed25519SignedPayload signatures 9e5838e
• Full hash-of-hash for Overlay adverts to prevent hash prefix collision b261e19
• Fix an edge case bug by which validators containing any LOW quality validators in their quorum set could get stuck in an infinite loop 437988f

Full Changelog: v26.0.0...v26.0.1

What's Changed

• Fix build.yml by @sisuresh in #5139
• Fix backtrace test on some linux versions by @SirTyson in #5142
• Cleanup DB dead code by @marta-lokhova in #5143
• Bump p26 env to fced8a1241038f7b944f5e75bffda7023d55ddbf by @sisuresh in #5145
• Add subsystem-summary skills by @graydon in #5132
• survey: use Radar instead of Stellarbeat by @Copilot in #5118
• Remove deprecated in-memory flags by @SirTyson in #5150
• Fix core for CAP-0073 by @sisuresh in #5153
• Harden multi-threaded http server by @SirTyson in #5149
• Make parallel apply compatible with RUN_STANDALONE by @SirTyson in #5146
• Cleanup how restoredKeys are tracked in LedgerTxn by @sisuresh in #5134
• Improve binary search for apply-load. by @dmkozh in #5123
• Refactored ParallelTxReturnVal by @SirTyson in #5108
• Bump p26 env by @sisuresh in #5158
• Add RFC 5531 Record Marking Standard references to XDRStream by @leighmcculloch in #5136
• Fix MSVC for C++20 by @graydon in #5159
• Remove maintenance by @drebelsky in #5157
• use secrets.SUBMODULE_TOKEN in build-private.yml by @graydon in #5140
• Optimize parallel TxSet building logic by @dmkozh in #5144
• Add INFO log messages tracking validator timeouts by @bboston7 in #5155
• Copilot improvements by @graydon in #5111
• Implement CAP-77 - ability to freeze ledger keys via network configuration by @dmkozh in #5162
• Update testnet settings with SLP-5 by @dmkozh in #5152
• History test fixes by @marta-lokhova in #5168
• Minor updates to fee tracking logic in tx sets. by @dmkozh in #5170
• Log state rebuild timings on startup by @marta-lokhova in #5179
• Bump to P26 by @sisuresh in #5173
• Run "git submodule sync" during autogen.sh by @graydon in #5172
• Address annotation gaps found by concurrency analysis by @marta-lokhova in #5151
• Add sccache and nsc-backed sccache support to build system. by @graydon in #5182
• Update devcontainer Dockerfile for additional use on namespace devboxes by @graydon in #5165
• Merge v25.2.0 and v25.2.1 into master by @marta-lokhova in #5190
• Merge v25.2.2 into master by @sisuresh in #5191
• Fix stale Soroban host rebuild invalidation. by @dmkozh in #5187
• Bump overlay version for p26 by @marta-lokhova in #5193
• Bump p26 env to 26.0.0 by @sisuresh in #5194

New Contributors

• @Copilot made their first contribution in #5118

Full Changelog: v25.2.2-external...v26.0.0

Contributors

• @graydon
• @bboston7
• @leighmcculloch
• @drebelsky
• @sisuresh
• @marta-lokhova
• @SirTyson
• @dmkozh

What's Changed

Stability fixes
Update soroban-env submodule

Full Changelog: v25.2.1-external...v25.2.2-external

What's Changed

• Stability fixes
• Update soroban-env submodule

Full Changelog: v25.2.0...v25.2.1-external

What's Changed

• Various stability fixes.

Full Changelog: v25.1.3...v25.2.0

What's Changed

• Improvements to overlay.

Full Changelog: v25.1.1...v25.1.3

What's Changed

• validation tweaks by @sisuresh #5131

Full Changelog: v25.1.0...v25.1.1

Contributors

• @sisuresh

Stability improvements

• Decrease the max entry TTL to ~4 weeks for testnet. by @dmkozh in #5049
• Remove rewriteOptionalFieldKeys by @drebelsky in #5038
• Ensure expired entries are never modified by LedgerTxn by @marta-lokhova in #5045
• Minor follow-up to Jitter injection by @marta-lokhova in #5057
• Harden eviction scan interface by @marta-lokhova in #5029
• Re-enable namespace by @graydon in #4991
• Delete old DB migration code by @marta-lokhova in #5062
• Fix SCP logging by @marta-lokhova in #5064
• Query Server graceful exit by @SirTyson in #4978
• Update references from old go repo by @mollykarcher in #5063
• Miscellaneous Cleanup by @drebelsky in #5023
• Bucket race fixes by @SirTyson in #5050
• Copy the snapshot before passing it to background eviction scan by @marta-lokhova in #5068
• Enable background tx signature verification by default by @bboston7 in #5065
• Fix tracy build by @drebelsky in #5070
• Fix lower bound for testnet maxEntryTTL and add logging by @sisuresh in #5075
• Revert testnet maxEntryTTL to pubnet value by @sisuresh in #5077
• cache, check and short-circuit on reused last-tested-commit in namespace cache volumes by @graydon in #5074
• Increase granularity of SAC max TPS test. by @dmkozh in #5039
• Add quickstart CI workflows for pull requests by @leighmcculloch in #5058
• Manually measure "spike" metrics by @drebelsky in #4964
• Fix build without tests. by @dmkozh in #5082
• Fix some missing durable writes in CheckpointBuilder by @graydon in #5080
• Disable lumen invariant in test that pushes new accounts directly into the bucket list by @sisuresh in #5087
• Add and use LedgerEntryScope and ScopedLedgerEntry by @graydon in #5051
• Update testnet instruction limits to 600M by @sisuresh in #5086
• Minor improvements to publishing by @marta-lokhova in #5089
• Enable parallel apply by default, remove experimental flag by @marta-lokhova in #5055
• Fix snapshot invariant race by @sisuresh in #5092
• Clear prepared statements cache at the end of catchup by @marta-lokhova in #5093
• Drop prepared statement cache by @marta-lokhova in #5094
• Consistently use toStellarValue by @bboston7 in #5095
• Remove master from build workflow by @graydon in #5096
• Fix misc pool exception and relevant test by @marta-lokhova in #5098

New features

• Add command line util to calculate total supply of assets and validate total coins for XLM. by @sisuresh in #4983
• Add options for stripping upgrades from Values by @bboston7 in #5042
• Add metric for eviction scan duration by @drebelsky in #5037
• Add apply-load mode for searching ledger limits. by @dmkozh in #5031
• Lumen snapshot invariant by @sisuresh in #5059

Future deprecation warning

• The configuration option EXPERIMENTAL_BACKGROUND_TX_SIG_VERIFICATION has been renamed to BACKGROUND_TX_SIG_VERIFICATION. If you are using EXPERIMENTAL_BACKGROUND_TX_SIG_VERIFICATION in your configuration file, please update it to the new name as the old option will be removed in a future release.
• The configuration option EXPERIMENTAL_PARALLEL_LEDGER_APPLY has been renamed to PARALLEL_LEDGER_APPLY . If you are using EXPERIMENTAL_PARALLEL_LEDGER_APPLY in your configuration file, please update it to the new name as the old option will be removed in a future release.

Full Changelog: v25.0.1...v25.1.0

Contributors

• @graydon
• @bboston7
• @leighmcculloch
• @mollykarcher
• @drebelsky
• @sisuresh
• @marta-lokhova
• @SirTyson
• @dmkozh