v0.31.4

What's Changed

• fix: fix network tag in celestia version command (#5108) by @vgonkivs in #5110
• fix(shrex): fix number of outbound streams in shrex (#5109) by @vgonkivs in #5111

Full Changelog: v0.31.3...v0.31.4

v0.31.4-mocha

What's Changed

• chore: bump app to v9.0.4 by @ninabarbakadze in #5068
• fix: fix network tag in celestia version command (#5108) by @vgonkivs in #5110
• fix(shrex): fix number of outbound streams in shrex (#5109) by @vgonkivs in #5111

Full Changelog: v0.31.3-mocha...v0.31.4-mocha

v0.31.4-corto

This release introduces Corto

Full Changelog: v0.31.3...v0.31.4-corto

v0.31.4-arabica

What's Changed

• chore: bump app to v9.0.4 by @ninabarbakadze in #5068
• fix: fix network tag in celestia version command (#5108) by @vgonkivs in #5110
• fix(shrex): fix number of outbound streams in shrex (#5109) by @vgonkivs in #5111

Full Changelog: v0.31.3-arabica...v0.31.4-arabica

v0.31.3

This release adds support for celestia-app v9 and reduces network block time to 3s. Once the v9 activation height takes place, upgrading to this version is required.

⚠️ Action Required: run config-update

This release adds new config fields. After upgrading the binary and before starting your node, run:

celestia bridge config-update --p2p.network mainnet

celestia light config-update --p2p.network mainnet

This merges newly-added fields (e.g. the RPC RateLimit section) into your existing config.toml while preserving your custom values. Skipping this step means new options silently fall back to defaults and may log config warnings. Review your config.toml afterwards to confirm custom values were kept.

To enable multi-source ingestion, add the extra endpoints to your bridge node config file:

[Core]
  IP = "<primary_ip>"
  Port = "<primary_port>"
  TLSEnabled = false
  XTokenPath = ""
  AdditionalCoreEndpoints = [
  { IP = "<secondary_ip>", Port = "<secondary_port>", TLSEnabled = false, XTokenPath = "" },
]

Key Highlights:

• celestia-app v9 / 3s block time (#4872, #4950, #4970) — Bumps to app v9 (via v8 → v8.0.3-mocha → v9) and go-square v4. Block time drops from 6s to 3s; syncer, DASer and pruner timing constants are scaled accordingly.
• RPC server hardening (#4909) — Request size capped at 16 MiB (down from 100 MiB), HTTP Read/Write/Idle timeouts, a 500 concurrent-connection limit, and optional per-IP rate limiting (disabled by default).
• Shrex server resource & rate limiting (#4898, #4900) — Adds resource limiting and per-peer-IP rate limiting to the shrex server.
• go-fraud removed (#4934) — Fraud proofs have been non-functional since the shwap migration; the dependency, the fraud RPC namespace and BEFP code are removed.
• More useful node info (#4341) — node.Info.type is now a string (e.g. "Bridge") and reports network_id; adds a new NetworkID endpoint.
• Nightly bootstrapper health check (#4922) — CI now monitors bootstrapper reachability.
• Observability metrics (#5011) — metrics added across key hot paths for diagnostics.

⚠️ Breaking Changes

• fraud RPC namespace removed (#4934) — Calls to fraud.Subscribe/fraud.Get now error; the Fraud field is removed from the Go RPC client.
• node.Info shape change (#4341) — type is now a string instead of an int; clients parsing it as a number must update.
• RPC limits enforced (#4909) — Requests over 16 MiB and connections over the limit are now rejected.
• header.GetRangeByHeight enforces MaxRangeRequestSize (#4945) — Oversized range requests now return an error over RPC (matching the P2P server).
• Commitment.String() is now hex-encoded (#4413) — Anything relying on the previous raw byte output must update.

What's Changed

• bump: bump celestia-node to app@v8 and go-square@v4 by @vgonkivs in #4872
• chore(deps): bump actions/checkout from 4 to 6 by @dependabot[bot] in #4876
• chore(deps): bump actions/cache from 4 to 5 by @dependabot[bot] in #4881
• chore(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in #4878
• chore(deps): bump actions/github-script from 7 to 8 by @dependabot[bot] in #4879
• chore(deps): bump goreleaser/goreleaser-action from 6 to 7 by @dependabot[bot] in #4880
• chore(deps): bump go.opentelemetry.io/proto/otlp from 1.9.0 to 1.10.0 by @dependabot[bot] in #4883
• chore(deps): bump github.com/celestiaorg/tastora from 0.8.0 to 0.16.0 in /nodebuilder/tests/tastora by @dependabot[bot] in #4890
• chore(deps): bump codecov/codecov-action from 5.5.2 to 5.5.3 in the patch-updates group by @dependabot[bot] in #4875
• docs: fix project name in supported architectures section by @Ocheretovich in #4848
• ci: selective unit testing based on changed packages by @walldiss in #4815
• fix(state): prevent panic on overflow in amount validation by @rootulp in #4873
• refactor(state): extract txClient by @vgonkivs in #4866
• fix(metrics): fix critical metric naming bugs and global state by @walldiss in #4870
• fix(cel-shed): prevent panic on missing root hash by @Ocheretovich in #4809
• chore(deps): bump github.com/gammazero/workerpool from 1.1.3 to 1.2.1 by @dependabot[bot] in #4885
• chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.39.0 to 1.42.0 by @dependabot[bot] in #4886
• fix(metrics): add missing units and standardize error context handling by @walldiss in #4871
• chore(deps): bump github.com/libp2p/go-libp2p-kad-dht from 0.38.0 to 0.39.0 by @dependabot[bot] in #4884
• chore(deps): bump crazy-max/ghaction-import-gpg from 6 to 7 by @dependabot[bot] in #4877
• fix(blob): add subtree roots completeness check in CommitmentProof.Verify() by @rootulp in #4874
• chore: remove go-libp2p-pubsub fork, use upstream by @walldiss in #4893
• fix: align go.mod parity between root and tastora by @walldiss in #4891
• chore(deps): bump go.opentelemetry.io/otel/metric from 1.42.0 to 1.43.0 by @dependabot[bot] in #4903
• chore(deps): bump codecov/codecov-action from 5.5.3 to 6.0.0 by @dependabot[bot] in #4894
• chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @dependabot[bot] in #4899
• chore(deps): bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0 by @dependabot[bot] in #4904
• chore(deps): bump go.opentelemetry.io/otel/sdk/metric from 1.42.0 to 1.43.0 by @dependabot[bot] in #4905
• chore(deps): bump github.com/celestiaorg/go-header from 0.8.5-rc to 0.8.5 by @dependabot[bot] in #4906
• chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace from 1.42.0 to 1.43.0 by @dependabot[bot] in #4907
• chore(deps): bump github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream from 1.7.7 to 1.7.8 by @dependabot[bot] in #4917
• chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.42.0 to 1.43.0 by @dependabot[bot] in #4924
• fix(p2p): remove broken mocha bootstrappers by @rootulp in #4913
• chore(shrex/client): change log level in shrex-client by @vgonkivs in #4927
• chore(make): add mod target to tidy all Go modules by @rach-id in #4925
• chore: add CLAUDE.md with Hacken bug bounty PR guidelines by @rootulp in #4911
• feat: add nightly bootstrapper health check by @rootulp in #4922
• chore(deps): bump actions/checkout from 4 to 6 by @dependabot[bot] in #4938
• feat(shrex): add resource limitting to shrex server by @Wondertan in #4898
• chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.42.0 to 1.43.0 by @dependabot[bot] in #4908
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.97.1 to 1.97.3 by @dependabot[bot] in #4916
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.97.1 to 1.97.3 in /nodebuilder/tests/tastora by @dependabot[bot] in #4918
• chore(deps): bump actions/github-script from 8 to 9 by @dependabot[bot] in #4937
• refactor!: remove go-fraud dependency and related dead code by @rootulp in #4934
• docs(adr-013): clarify Upload behavior and rationale for Upload/Submit split by @walldiss in #4947
• fix!(header): enforce MaxRangeRequestSize in GetRangeByHeight by @vgonkivs in #4945
• feat(shrex): add per-peer-IP rate limiting to shrex server by @Wondertan in #4900
• fix(share/shwap/getters): set span err only if all getters truly failed, otherwise just record err in span for single getter failure by @renaynay in #4130
• refactor(blob)!: use hex encoding for Commitment String() output by @Galoretka in https://github.com/celestiaorg/celestia-node/pul...

v0.31.3-mocha

What's Changed

• fix(metrics): enable metrics in daser for bridge nodes (#5050) by @vgonkivs in #5051

Full Changelog: v0.31.2-mocha...v0.31.3-mocha

v0.31.3-arabica

What's Changed

• fix(metrics): enable metrics in daser for bridge nodes (#5050) by @vgonkivs in #5051

Full Changelog: v0.31.2-arabica...v0.31.3-arabica

v0.31.2-mocha

What's Changed:

• feat(core): multi-source block ingestion for the bridge listener by @vgonkivs (https://github.com/vgonkivs) in #5018
  (#5018)
• feat(metrics): add metrics to improve observability by @vgonkivs (https://github.com/vgonkivs) in #5011
  (#5011)

Highlights:

Multi-source block ingestion (#5018) — the bridge listener can now ingest blocks from multiple Celestia-Core endpoints concurrently and tolerate any
single one failing:

• new blocks are sourced from all configured endpoints but downloaded once (from the source that announces a height first), with no duplicate fetches;
• per-source sync state and stricter source handling (duplicate endpoints rejected; the node fails fast if the fastest source for a height is on the
  wrong chain);
• Core.AdditionalCoreEndpoints is now used not only for load-balancing transaction submission but also as additional block sources (config-file only,
  no CLI flag).

Observability metrics (#5011) — metrics added across key hot paths for diagnostics:

• RPC server (api/rpc), core listener (block events), store, and pruner;
• improved node-info metric reporting.

Action Required (optional):

To enable multi-source ingestion, add the extra endpoints to your bridge node config file:

[Core]
  IP = "<primary_ip>"
  Port = "<primary_port>"
  TLSEnabled = false
  XTokenPath = ""
  AdditionalCoreEndpoints = [
  { IP = "<secondary_ip>", Port = "<secondary_port>", TLSEnabled = false, XTokenPath = "" },
]

Full Changelog: v0.31.1-mocha...v0.31.2-mocha

v0.31.2-arabica

What's Changed:

• feat(core): multi-source block ingestion for the bridge listener by @vgonkivs (https://github.com/vgonkivs) in #5018
  (#5018)
• feat(metrics): add metrics to improve observability by @vgonkivs (https://github.com/vgonkivs) in #5011
  (#5011)

Highlights:

Multi-source block ingestion (#5018) — the bridge listener can now ingest blocks from multiple Celestia-Core endpoints concurrently and tolerate any
single one failing:

• new blocks are sourced from all configured endpoints but downloaded once (from the source that announces a height first), with no duplicate fetches;
• per-source sync state and stricter source handling (duplicate endpoints rejected; the node fails fast if the fastest source for a height is on the
  wrong chain);
• Core.AdditionalCoreEndpoints is now used not only for load-balancing transaction submission but also as additional block sources (config-file only,
  no CLI flag).

Observability metrics (#5011) — metrics added across key hot paths for diagnostics:

• RPC server (api/rpc), core listener (block events), store, and pruner;
• improved node-info metric reporting.

Action Required (optional):

To enable multi-source ingestion, add the extra endpoints to your config file:

[Core]
  IP = "<primary_ip>"
  Port = "<primary_port>"
  TLSEnabled = false
  XTokenPath = ""
  AdditionalCoreEndpoints = [
  { IP = "<secondary_ip>", Port = "<secondary_port>", TLSEnabled = false, XTokenPath = "" },
]

Full Changelog: v0.31.1-arabica...v0.31.2-arabica

v0.31.1-mocha

What's Changed

• fix(shrex/server): raise per-peer service-scope limits for shrex server by @vgonkivs in #5038

Full Changelog: v0.31.0-mocha...v0.31.1-mocha