Skip to content

Releases: Consensys/web3signer

22.6.0

23 Jun 03:09
@jframe jframe
22.6.0
1e4c5fb
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
22.6.0

Features Added

  • Support for Sepolia network (updated Teku support libraries).
  • Added new metric eth2_slashingprotection_database_duration to track time spent performing database queries during either block or attestation signing operations
  • Private keys bulk loading from AWS Secrets Manager via cli options in eth2 mode #499

Bugs Fixed

  • Fix issue where signing_signers_loaded_count metric didn't update after refresh endpoint was used to update loaded keys

Downloads

  • Binary distribution tar.gz sha256 278964366e4037cc7de0cbc6d6255d6e6cd0bdee1bbe54ce9a2b08cedea90e31
  • Binary distribution .zip sha256 2d1f52048cb774edce1332d5627be9b8cccc8806b9130aadda70309acd061845
  • Docker: docker pull consensys/web3signer:22.6.0
  • Docker (jdk11 variant): docker pull consensys/web3signer:22.6.0-jdk11
Assets 2
Loading

22.5.1

27 May 03:51
@jframe jframe
22.5.1
60e84c5
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
22.5.1

Breaking Changes

  • Removed network definition for kintsugi testnet

Features Added

  • Eth2 keystore bulk loading allowing a directory of keystores to be loaded without config files
  • Added support for ropsten testnet

Bugs Fixed

  • Fixes issue when using key manager delete API failed when there was no slashing protection data #537

Downloads

  • Binary distribution tar.gz sha256 11124c255006797dd3334a924b88f88d626d2348fc504ba68cd16e276440a2e8
  • Binary distribution .zip sha256 2b66b399e4fcb48d23ddf6e094eac74a7b28c749c2f501def67a8b0e4085b2a7
  • Docker: docker pull consensys/web3signer:22.5.1
  • Docker (jdk11 variant): docker pull consensys/web3signer:22.5.1-jdk11
Assets 2
Loading

22.5.0

10 May 06:26
@jframe jframe
22.5.0
7456909
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
22.5.0

Breaking Changes

  • ETH2 Mode - block signing request (BLOCK_V2), starting from BELLATRIX fork, use block_header instead of block. #547

Features Added

  • Added support for optimized block signing requests starting from Bellatrix fork. #437
  • Early access: Support for Gnosis network in Eth2 mode. --network gnosis

Bugs Fixed

  • Keys loaded using the AWS secrets manager with environment config didn't work when using web identity tokens due to missing sts library.

Downloads

Assets 2
Loading

22.4.1

29 Apr 01:34
@siladu siladu
22.4.1
31a68ff
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
22.4.1

Features Added

  • Update various library dependencies #556

Downloads

Assets 2
Loading

22.4.0

27 Apr 04:23
@siladu siladu
22.4.0
dba20c8
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
22.4.0

Breaking Changes

  • Because the web3signer docker image uses the latest LTS tag (ubuntu:latest), the container host may require an update to the latest container runtime. See Ubuntu bug for more details.

Features Added

  • Migrate from the deprecated vertx-web-api-contract module to vertx-web-openapi #506
  • Migrate jackson ObjectMapper instances to JsonMapper and YamlMapper builders to resolve deprecation warnings #507
  • Add iputils-ping and net-tools to docker image to support waiting for dependent services in tools such as docker-compose and Kubernetes #525
  • Updated Teku libraries to provide support for kiln network
  • Support for BLS private keys in AWS Secrets Manager
  • Early access support for eth2 Key Manager API

Bugs Fixed

  • Upgrade Vertx to 4.x, signers to 2.0.0 and various other dependencies to latest versions #503
  • DB scripts executed in numeric order (instead of alphanumeric) when using docker instead of flyway to execute #526

New Contributors

Downloads

Contributors

mgarciate
Assets 2
Loading

21.10.6

10 Mar 03:59
@jframe jframe
21.10.6
b098379
Compare
Choose a tag to compare
21.10.6

Bugs Fixed

  • Updated PostgreSQL JDBC driver to 42.3.3. Resolves a potential vulnerability CVE-2022-21724.

Downloads

Assets 2
Loading

21.10.5

04 Jan 06:42
@usmansaleem usmansaleem
21.10.5
8d019c4
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
21.10.5

Bugs Fixed

  • Updated to log4j 2.17.1. Resolves two potential vulnerabilities which are only exploitable when using custom log4j configurations that are either writable by untrusted users or log data from the ThreadContext.

Downloads

Assets 2
Loading

21.10.4

20 Dec 04:55
@lucassaldanha lucassaldanha
21.10.4
85966fd
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
21.10.4

Bugs Fixed

  • Updated log4j to version 2.0.17

Downloads

Assets 2
Loading

21.10.3

16 Dec 00:41
@usmansaleem usmansaleem
21.10.3
55f803e
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
21.10.3

Bugs Fixed

  • Updated log4j version to mitigate LDAP execution via thread context.

Downloads

Assets 2
Loading

21.10.2

10 Dec 11:39
@usmansaleem usmansaleem
21.10.2
a768045
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
21.10.2

Features Added

  • Docker images are now published with multi-arch support including Linux/amd64 and Linux/arm64
  • The default docker image now uses Java 17 instead of Java 11. The Java 11 image is still available with the version suffix -jdk11

Breaking Changes

  • The docker image now uses web3signer as user/group instead of root which may result in compatibility/permissions issues with existing directory mounts.

Bugs Fixed

  • Updated log4j and explicitly disabled format message lookups.
  • Fixed incorrect multi-arch docker image for Java 17 (introduced in version 21.10.1).

Downloads

Assets 2
Loading