agave-feature-set

Changes since v4.3.0-beta.0

• v4.3: fix(core): silence dead_code for alpenglow_slot_clock on non-unix (backport of #14542) (#14565)
• v4.3: gossip: wrap epoch slots index after 254 (backport of #14566) (#14571)
• v4.3: [ed25519] bump solana-signature version (backport of #14578) (#14602)
• v4.3: replay: allow execution of leader banks after SwitchBank (backport of #14580) (#14604)

All of the above are included in v4.3.0-beta.2.

What's Changed

• votor: adjust FirstShred modulo gate to account for unaligned migration by @AshwinSekar in #14228
• deps: update wincode to 0.6 and bump interface crates to match by @kskalski in #14214
• bls_sigverify: tightly bound admitted votes to current window + 40 by @AshwinSekar in #14337
• use a custom pool for async verification by @alessandrod in #14128
• votor: fix bug where we can vote skip on the genesis block by @AshwinSekar in #14358
• accounts-db: batch account lt-hashes during index generation by @kskalski in #13773
• bls-sigverify: removes reallocations for datagrams by @akhi3030 in #14373
• rpc: Make Bigtable open failure a fatal error by @steviez in #14363
• bls-sigverifier: adds some stats by @akhi3030 in #14374
• votor: account for group identity in base 4 certificates by @AshwinSekar in #14390
• Sets default incremental snapshot interval to 200 slots by @brooksprumo in #14350
• block id repair: enforce strict proof size check for FecSetRoot by @AshwinSekar in #14359
• Default Minimal index mode to threshold by @roryharr in #14354
• bls sigverify: reduce ban timeout to 10 secs by @AshwinSekar in #13524
• Adding tombstones during flush by @roryharr in #14322
• accounts-db: Removes SortedStorages by @brooksprumo in #14398
• block id repair: only compare the first 20 bytes of fec set roots by @AshwinSekar in #14360
• core: parallelize banking stage ingress checks by @apfitzge in #14129
• votor-transport: make set_identity block until success by @alexpyattaev in #14391
• votor: robust exit by @alexpyattaev in #14389
• votor-transport: close conn when data is sent wrong direction by @gregcusack in #14407
• validator: remove deprecated --tpu-connection-pool-size cli argument by @alexpyattaev in #14366
• Refactor EntryBytesBudget::reserve by @plafer in #14172
• ag: fix startup replay rooting by @AshwinSekar in #14418
• Fake future parent by @bw-solana in #14408
• bls-sigverify: verify batches of votes in parallel by @akhi3030 in #14380
• votor: reject staked to staked set-identity by @gregcusack in #14396
• feat(accountsdb): use wincode (through StateMutWincode) for account serialization by @kskalski in #14429
• UpdateParent boundary dead by @bw-solana in #14443
• alpenglow: do not advance credits_observed for inactive stakes by @2501babe in #14441
• votor: clear stale state on set-identity by @AshwinSekar in #14450
• Do not accept AG reward certs for tower slots by @akhi3030 in #14430
• bcl: reset entry bytes budget on sad FLH by @AshwinSekar in #14449
• bcl: fix sad handover when switching between duplicate blocks by @AshwinSekar in #14447
• migration: fix hashes per tick bug by @AshwinSekar in #14451
• votor: only write bank hash details if block was finalized by @AshwinSekar in #14456
• votor: bump prealloc limit for vote history by @AshwinSekar in #14459
• feat: use wincode (through StateMutWincode) for account serialization by @kskalski in #14415
• Revert - #13894 (Global program cache entry pruning) by @Lichtso in #14442
• feat(svm): use wincode (through StateMutWincode) for account serialization by @kskalski in #14411
• Adds a manager thread for the async accounts lt hash updates by @brooksprumo in #14073
• Sets Clock::epoch_start_timestamp correctly on epoch boundaries by @akhi3030 in #14469
• replay: defer switch bank during leader window by @AshwinSekar in #14481
• transaction types: prep for ALT relaxation by @2501babe in #14446
• program-runtime: increase program cache depth to 1024 by @buffalojoec in #14482
• Remove minimal index option by @roryharr in #14437
• Defer tombstoning zero lamport entries to clean by @roryharr in #14431
• repair: reuse pinnable slices by @alessandrod in #14470
• votor-transport: allow more inflight handshakes by @alexpyattaev in #14464
• Solana SBPF v0.23.0 by @Lichtso in #14487
• blockstore: only mark slot dead for Original column by @AshwinSekar in #14488
• gossip purge duration by @bw-solana in #14455
• votor-transport: scale MAX_INCOMING with number of endpoints by @alexpyattaev in #14439
• svm: slot-based criteria for program cache extract by @buffalojoec in #14484
• blockstore: avoid allocations/page faults by reusing pinnable slices by @alessandrod in #14489
• Revert "replace reserve/refund with track-with-actual-cost in banking-stage (#12986)" by @apfitzge in #14504
• votor-transport: allow unstaked participation by @alexpyattaev in #14440
• xdp: support per-module transmit queue subsets by @efagerho in #14364
• rpc: update health check for alpenglow by @AshwinSekar in #14483
• progress-tracker: alpenglow compatibility by @apfitzge in #14323
• streamer: evict QUIC connections from peers that lost their stake by @stablebits in #14466
• Remove zero lamport single ref by @roryharr in #14495
• rm TCP server in BanksServer by @alexpyattaev in #12056

New Contributors

• @SashaMIT made their first contribution in #14336
• @plafer made their first contribution in #14172

Full Changelog: v4.3.0-alpha.3...v4.3.0-beta.0

This is a pre-release for testing only. Do not deploy to mainnet, testnet, or any production host.

https://github.com/anza-xyz/agave/blob/master/CHANGELOG.md#edge-channel

This is a pre-release for testing only. Do not deploy to mainnet, testnet, or any production host.

https://github.com/anza-xyz/agave/blob/master/CHANGELOG.md#edge-channel

What's Changed

• v4.2: gossip: wrap epoch slots index after 254 (backport of #14566) by @mergify[bot] in #14570

Full Changelog: v4.2.0...v4.2.1

This a stable release suitable for Testnet, Devnet and Mainnet Beta.

https://github.com/anza-xyz/agave/blob/v4.2/CHANGELOG.md

What's Changed

• v4.2: runtime: do not rewrite inactive stakes (backport of #14213) by @mergify[bot] in #14263
• v4.2: Sets stack size for accounts hasher rayon thread pool (backport of #14295) by @mergify[bot] in #14297
• v4.2: feat: Migrate to spl-token-2022-interface 3.x and parse PermissionedBurn (backport of #13504) by @mergify[bot] in #14009
• v4.2: feat(transaction-status): Parse the token Batch instruction (backport of #13512) by @mergify[bot] in #14259
• v4.2: feat(transaction-status): Parse the permissioned burn ConfidentialBurn instruction (backport of #13511) by @mergify[bot] in #14258
• v4.2: poh: wake replay after controller message completion (backport of #14038) by @mergify[bot] in #14276
• v4.2: Sets default incremental snapshot interval to 200 slots (backport of #14350) by @mergify[bot] in #14393

Full Changelog: v4.2.0-rc.1...v4.2.0

RPC

Breaking

• The jsonParsed output for confidential transfer Deposit (depositConfidentialTransfer) and Withdraw (withdrawConfidentialTransfer) instructions has been corrected. These instructions operate on a single token account, so the mislabeled source and destination fields have been replaced by a single account field (the mint field is unchanged).
• Blockstore reward column legacy format support removed.
  • The Rewards column was updated in v1.5 (Solana Labs client) to switch from storing bincode serialized values to protobuf encoded values. The old bincode format will no longer be supported for fallback reads as of v4.2

Changes

• Added RpcClient::get_latest_blockhash_with_commitment_and_context, which returns the getLatestBlockhash response together with its context (notably context.slot).

Validator

Breaking

• XDP transmit in SKB (copy) mode is now enabled by default on Linux. The validator requires CAP_NET_ADMIN and CAP_NET_RAW capabilities (plus CAP_BPF and CAP_PERFMON for --xdp-zero-copy). Pass --no-xdp to fall back to UDP sockets. The XDP CPU core is auto-selected to avoid overlapping the PoH core; passing --xdp-cpu-cores with a core that conflicts with the PoH core is an error.

Deprecations

• --accounts-db-access-storages-method is now deprecated and a no-op (the mmap value was deprecated in v4.0.0; mmap mode has now been removed entirely). The flag is still accepted for backward compatibility, but account storages are always accessed via file I/O.
• --accounts-db-cache-limit-mb is now deprecated. Use --accounts-db-write-cache-limit instead.
• --experimental-poh-pinned-cpu-core is now deprecated. Use --poh-pinned-cpu-core instead.

Changes

• Turbine shred ingestion now rejects shreds more than half an epoch in the future (previously up to 2 full epochs ahead was accepted).
• When XDP is enabled, gossip egress does not support private and loopback addresses. Operators running with --allow-private-addr must also pass --no-xdp.
• The default incremental snapshot interval is now 200 slots.

CLI

Breaking

Changes

• vote-account supports Alpenglow and as such vote-account --output json breaks compatibility with older versions.
• Support Keystone hardware wallets using usb://keystone

This is Mainnet-beta Upgrade Candidate release recommended for 10% adoption.
It is also recommended for Testnet and Devnet.

https://github.com/anza-xyz/agave/blob/v4.2/CHANGELOG.md

What's Changed

• v4.2: ClusterSlots: tighten slot support calculations (backport of #14223) by @mergify[bot] in #14226
• v4.2: replay: increase rayon pool stack size (backport of #14162) by @mergify[bot] in #14164
• v4.2: fix: bound wincode-related sdk deps to <= wincode 0.5.5 by @cpubot in #14178
• v4.2: civl: match shred ingest bound (backport of #14231) by @mergify[bot] in #14235

Full Changelog: v4.2.0-rc.0...v4.2.0-rc.1

This is Mainnet-beta Upgrade Candidate release recommended for 10% adoption.
It is also recommended for Testnet and Devnet.

https://github.com/anza-xyz/agave/blob/v4.2/CHANGELOG.md

What's Changed

• v4.2: chore(dep): backport RUSTSEC-2026-0204 crossbeam-epoch fix by @cfkelly18 in #13933
• v4.2: Use vendored rust-rocksdb fork (backport of #14008) by @mergify[bot] in #14017

Full Changelog: v4.2.0-beta.2...v4.2.0-rc.0

This is a testnet release.

What's Changed

• v4.2: Loads accounts in parallel for lt hash updates of stake accounts (backport of #13696) by @mergify[bot] in #13752
• v4.2: receive_and_buffer: remove expensive status-cache check (backport of #13437) by @mergify[bot] in #13703
• v4.2: xdp: improve packet drop perf (backport of #13658) by @mergify[bot] in #13723
• v4.2: status_cache: use SmallVec instead of Vec for tx fork status (backport of #13876) by @mergify[bot] in #13893
• v4.2: Handle dead keys secondary (backport of #13717) by @mergify[bot] in #13818

Full Changelog: v4.2.0-beta.1...v4.2.0-beta.2

RPC

Breaking

Changes

Validator

Breaking

• --block-production-method central-scheduler is no longer supported. If passed, a warning is emitted and behavior will default to the greedy-scheduler implementation.
• scheduler-bindings version has been increased to 4. Connecting external schedulers must be updated.
• Validator now requires 26 ports, --dynamic-port-range must be at least 26 wide.

Deprecations

• Using minimal for --accounts-index-limit is now deprecated.
• --account-shrink-path is now deprecated.
• sbf-sdk.tar.bz2 is not included anymore in the Agave release tarball. The file will be made available in the new cargo-build-sbf repository.
• XDP support is no longer experimental. The --experimental-retransmit-xdp-interface, --experimental-retransmit-xdp-cpu-cores, and --experimental-retransmit-xdp-zero-copy flags have been deprecated. Use --xdp-interface, --xdp-cpu-cores, and --xdp-zero-copy instead. Behavior is unchanged: pass --xdp-cpu-cores to enable XDP on the specified cores.

Changes

RPC

Breaking

• --public-tpu-address and --public-tpu-forwards-address CLI arguments and setPublicTpuForwardsAddress, setPublicTpuAddress RPC methods now specify QUIC ports, not UDP.
• Blockstore PerfSamples column legacy format removed.
  • The PerfSamples column format was updated in agave v1.15 to write PerfSampleV2. The old format, PerfSampleV1, will no longer be supported for fallback reads as of v4.0.
• Blockstore transaction metadata column legacy format support removed.
  • The TransactionStatus, TransactionMemos, and AddressSignatures columns were updated in v1.18 to write a new key format. The old key format will no no longer be supported for fallback reads as of v4.0
• getSignaturesForAddress returns an error with code -32020 if the before or until signatures are not found, rather than a successful response with an empty array

Changes

• Added --enable-scheduler-bindings which binds an IPC server at <ledger-path>/scheduler_bindings.ipc for external schedulers to connect to.
• Added clientId field to each node in getClusterNodes response

Validator

Breaking

• Removed deprecated arguments
  • --accounts-db-clean-threads
  • --accounts-db-hash-threads
  • --accounts-db-read-cache-limit-mb
  • --accounts-hash-cache-path
  • --cuda
  • --disable-accounts-disk-index
  • --dev-halt-at-slot
  • --monitor (exit subcommand)
  • --transaction-struct
  • --wait-for-exit (exit subcommand)
  • --tpu-coalesce-ms
  • --tpu-disable-quic
  • --tpu-enable-udp
• --block-verification-method blockstore-processor is no longer supported. Remove the argument or switch to --block-verification-method unified-scheduler instead.
• Removed support for ingestion of transactions via UDP. QUIC is now the only option.
• All monorepo crates falling outside the backward compatibility policy are now part of the Agave Unstable API and their symbols have been made private. Enable the agave-unstable-api crate feature to acknowledge use of an interface that may break without warning.
• Linux Capability handling has been hardened wrt requirements for configuring XDP (#9133)
  • It is now an explicit error + exit(1) if the process has not been permitted a capability required by the current configuration
  • A warning is logged if the process has been permitted capabilities not required by any configuration supported by the binary
  • All permitted capabilities not required by the current configuration are now dropped at startup. This includes all validator subcommands which never require capabilities
  • Operations which require capabilities are now performed on the main thread and capabilities dropped before any other threads are spawned, with two exceptions
    1. One thread retains cap_net_admin in order to reinitialize its netlink socket upon error
    2. If any niceness flags are passed, all threads retain cap_sys_nice, which has been the case since those feature were originally added
  • Updated instructions for permitting Linux Capabilities for the validator process are as follow. Either of these two options is supported. Choose whichever best fits your operational procedures

    • Add the following to the [Service] section of you Systemd service file

      # Permit Linux Capabilities required to configure XDP
      AmbientCapabilities=CAP_NET_RAW CAP_NET_ADMIN CAP_BPF CAP_PERFMON
      
      # Disallow inheritance of any Linux Capabilities not required by any configuration
      CapabilityBoundingSet=CAP_NET_RAW CAP_NET_ADMIN CAP_BPF CAP_PERFMON
      

    -- OR --

    • set xattr capabilities directly on the binary file. note that this step must be repeated every time that the binary file is replaced

      sudo setcap cap_net_raw,cap_net_admin,cap_bpf,cap_perfmon=p /path/to/agave-validator
      

• Interpretation of the Version struct fields in gossip ContactInfo has been changed to support communicating semver prerelease notation. Implementations lacking this support will observe a larger than expected min version field from node publishing from a prerelease version. The new interpretation is as follows:
  • The top two bits (14 and 15) of the minor field are now reserved for prerelease status
  • Prerelease status bit values are; 3 - alpha, 2 - beta, 1 - release candidate (rc), 0 - stable
  • When prerelease status bits are non-zero, the Version::patch field is interpreted as the prerelease number and the actual patch value is implicitly zero
  • Examples:
    • { min: 0x0001, patch: 0x0003 } -> X.1.3
    • { min: 0x4002, patch: 0x0002 } -> X.2.0-rc.2
    • { min: 0x8003, patch: 0x0001 } -> X.3.0-beta.1
    • { min: 0xC004, patch: 0x0000 } -> X.4.0-alpha.0
• Blockstore SlotMeta and Index columns legacy format removed.
  • The Index column was updated in v2.2 to write IndexV2.
  • The SlotMeta column format was updated in v3.1 to write SlotMetaV2.
  • The old formats, SlotMetaV1 and IndexV1, will no longer be supported for fallback reads as of v4.0

Deprecations

• Using mmap for --accounts-db-access-storages-method is now deprecated.
• The --enable-accounts-disk-index flag is now deprecated. Use --accounts-index-limit instead. To retain the same behavior, use --accounts-index-limit minimal.

Changes

• agave-validator exit now saves bank state before exiting. This enables restarts from local state when snapshot generation is disabled.
• Added --accounts-index-limit to specify the memory limit of the accounts index.
• Snapshot archive unpacking now uses direct I/O by default to improve performance by bypassing the OS page cache. Use --no-accounts-db-snapshots-direct-io to opt out if your file system does not support O_DIRECT. Direct I/O will be extended to snapshot creation in a future release.
• --block-production-method central-scheduler is now deprecated and will be removed in a future release. Use central-scheduler-greedy instead.

CLI

Breaking

• Removed deprecated arguments
  • --use-quic
  • --use-udp

Deprecations

• The ping command is deprecated and will be removed in v4.1.

Changes

• Support Trezor hardware wallets using usb://trezor

Platform tools

Breaking

• cargo-build-sbf --debug now generates a file program.so.debug instead of program.debug.
• cargo-build-sbf --debug places all debug related objects inside target/deploy/debug.

Geyser

Changes

• Account update notifications have their fields populated from the account values post transaction execution. This means notifications for closed accounts (accounts with a balance of zero lamports) will no longer have their owner/data/etc manually zeroed out. Note that if the on-chain program does zero out any fields itself, those will remain zeroed out in the notification.

Test Validator

Changes

• Now shows TPU QUIC address instead of TPU UDP in the dashboard.