Go modules · #1844

github.com/cometbft/cometbft

v1.0.1cometbft/cometbft ↗

Last release 2 days ago
25 Aug 2026
Ships on a steady schedule
a new release about every 9 days
Some releases are documented
notes for 29 of 49 stable releases
7 versions withdrawn
withdrawn after publishing
8 years old
999 releases · first in 2018

Release timeline

999 releases since 2018

20182020202220242026

Releases

v0.38.24-0.20260702094558-e0b40f18fe542 Jul 2026pre-release
Nothing published for this version
v0.38.24-0.20260611152332-fe7b504d396411 Jun 2026pre-release
Nothing published for this version
v0.38.24-0.20260520123424-00c35fdba44920 May 2026pre-release
Nothing published for this version
v0.38.238 May 2026
Release notes
What's Changed
- fix(types): properly handle nil votes (backport #5777) by @mergify[bot] in #5782
- fix(blocksync): prevent maxPeerHeight poisoning (backport #5803) by @mergify[bot] in #5806
- fix(light): stop witness comparison after divergence checks (backport #5820) by @mergify[bot] in #5826
- fix(abci): prevent panic on unlock in socket server panic recovery (backport #5593) by @mergify[bot] in #5830
- test(consensus): fix flaky TestByzantinePrevoteEquivocation (backport #5814) by @mergify[bot] in #5841
Full Changelog: v0.38.22...v0.38.23
Open source →
v0.38.23-0.20260422215035-4928b26fd5ba22 Apr 2026pre-release
Nothing published for this version
v0.38.2210 Apr 2026
Nothing published for this version
v0.38.22-0.20260324204459-0d463b2664db24 Mar 2026pre-release
Nothing published for this version
v0.38.22-0.20260324192945-933127bfe1bf24 Mar 2026pre-release
Nothing published for this version
v0.38.2123 Jan 2026
Release notes
January 23, 2026

IMPROVEMENTS
- [statesync] Add configurable max-snapshot-chunks parameter to validate max amount of chunks in a SnapshotResponse. (#5549)
Open source →
v0.38.21-0.20260112162433-35c3a75446c912 Jan 2026pre-release
Nothing published for this version
v0.38.21-0.20260103191522-1d28c195bbe93 Jan 2026pre-release
Nothing published for this version
v0.38.2012 Dec 2025
Release notes
December 12, 2025

Open source →
v0.38.20-0.20251113175410-d678f20eebb913 Nov 2025pre-release
Nothing published for this version
v0.38.1914 Oct 2025
Release notes
October 14, 2025

This release fixes two security issues, including (ASA-2025-003). Users are encouraged to upgrade as soon as possible.

Additionally included is a bug fix to properly prune extended commits (with vote extensions).

BUG-FIXES
- [consensus] Reject oversized proposals (#5324)
- [store] Prune extended commits properly (5275)
- [bits] Validate BitArray mismatched Bits and Elems length (ASA-2025-003)
Open source →
v0.38.19-0.20251212010926-c96f26503c0412 Dec 2025pre-release
Nothing published for this version
v0.38.19-0.20251002063840-1e5a47f315aa2 Oct 2025pre-release
Nothing published for this version
v0.38.19-0.20251001230332-8293b1d204651 Oct 2025pre-release
Nothing published for this version
v0.38.19-0.20251001222208-9697086f30071 Oct 2025pre-release
Nothing published for this version
v0.38.19-0.20251001193048-81ad76e4557c1 Oct 2025pre-release
Nothing published for this version
v0.38.183 Jul 2025
Release notes
July 3, 2025

Adds precommit metrics and reindex CLI command.

IMPROVEMENTS
- Adds metrics that emit precommit data; precommit quorum delay from proposal, and precommit vote count and stake weight within timeout commit period. (#5251)
Open source →
v0.38.18-0.20250702210456-031fa2ac7baf2 Jul 2025pre-release
Nothing published for this version
v0.38.18-0.20250702205851-2ce6a89f479b2 Jul 2025pre-release
Nothing published for this version
v0.38.18-0.20250702183523-0bce074f40692 Jul 2025pre-release
Nothing published for this version
v0.38.18-0.20250305092314-d00a09c744b75 Mar 2025pre-release
Nothing published for this version
v0.38.18-0.20250224200018-411d81053aa124 Feb 2025pre-release
Nothing published for this version
v0.38.173 Feb 2025
Release notes
February 3, 2025

This release fixes two security issues (ASA-2025-001, ASA-2025-002). Users are encouraged to upgrade as soon as possible.

BUG FIXES
- [blocksync] Ban peer if it reports height lower than what was previously reported (ASA-2025-001)
- [types] Check that Part.Index equals Part.Proof.Index (ASA-2025-001)
DEPENDENCIES
- [go/runtime] Bump minimum Go version to 1.22.11 (#4891)
Open source →
v0.38.17-0.20250203045938-415c0da223bb3 Feb 2025pre-release
Nothing published for this version
v0.38.17-0.20250203042120-2cebfde06ae53 Feb 2025pre-release
Nothing published for this version
v0.38.1620 Dec 2024
Release notes
December 20 2024

This release:
- fixes a bug that caused a node produce errors caused by the sending of next PEX requests too soon. As a consequence of this incorrect behavior a node would be marked as BAD.
- Adds a proper description of ExtendedVoteInfo and VoteInfo in the spec.
BUG FIXES
- [mocks] Mockery v2.49.0 broke the mocks. We had to add a .mockery.yaml to properly handle this change. (#4521)
Open source →
v0.38.156 Nov 2024
Release notes
November 6, 2024

This release supersedes v0.38.14, which mistakenly updated the Go version to 1.23, introducing an unintended breaking change. It sets the Go version back to 1.22.7 by reverting #4297.

The release includes the bug fixes, performance improvements, and importantly, the fix for the security vulnerability in the vote extensions (VE) validation logic that were part of v0.38.14. For more details, please refer to ASA-2024-011.

Open source →
v0.38.15-0.20241106110701-17d3bb66664c6 Nov 2024pre-release
Nothing published for this version
v0.38.15-0.20241106083328-d8980f9276696 Nov 2024pre-release
Nothing published for this version
v0.38.146 Nov 2024
Release notes
November 6, 2024

This release fixes a security vulnerability in the vote extensions (VE) validation logic. For more details, please refer to ASA-2024-011.

We recommend upgrading ASAP if you’re using vote extensions (VE).

BUG FIXES
- [consensus] Do not panic if the validator index of a Vote message is out of bounds, when vote extensions are enabled (#ABC-0021)
DEPENDENCIES
- Bump cometbft-db version to v0.15.0 (#4297)
- [go/runtime] Bump Go version to 1.23 (#4297)
IMPROVEMENTS
- [p2p] fix exponential backoff logic to increase reconnect retries close to 24 hours (#3519)
Open source →
v0.38.1325 Oct 2024
Release notes
October 24, 2024

This patch release addresses the issue where tx_search was not returning all results, which only arises when upgrading to CometBFT-DB version 0.13 or later. It includes a fix in the state indexer to resolve this problem. We recommend upgrading to this patch release if you are affected by this issue.

BUG FIXES
- [metrics] Call unused rejected_txs metric in mempool (#4019)
- [state/indexer] Fix the tx_search results not returning all results by changing the logic in the indexer to copy the key and values instead of reusing an iterator. This issue only arises when upgrading to cometbft-db v0.13 or later. (#4295). Special thanks to @faddat for reporting the issue.
DEPENDENCIES
- [go/runtime] Bump Go version to 1.22 (#4073)
- Bump cometbft-db version to v0.14.1 (#4321)
FEATURES
- [crypto] use decred secp256k1 directly (#4294)
IMPROVEMENTS
- [metrics] Add evicted_txs metric to mempool (#4019)
- [log] Change "mempool is full" log to debug level (#4123) Special thanks to @yihuang.
Open source →
v0.38.13-0.20241024194533-d42ebc49f29024 Oct 2024pre-release
Nothing published for this version
v0.38.13-0.20241024073306-2fee473e99bc24 Oct 2024pre-release
Nothing published for this version
v0.38.13-0.20241023054248-b628cf982d9623 Oct 2024pre-release
Nothing published for this version
v0.38.13-0.20240930095538-e339afc0bced30 Sept 2024pre-release
Nothing published for this version
v0.38.13-0.20240923090732-cf7836ad7b6323 Sept 2024pre-release
Nothing published for this version
v0.38.13-0.20240920204745-fdf90d16f60820 Sept 2024pre-release
Nothing published for this version
v0.38.13-0.20240910071238-642ac9345b7410 Sept 2024pre-release
Nothing published for this version
v0.38.123 Sept 2024
Release notes
September 3, 2024

This release includes a security fix for the light client and is recommended for all users.

BUG FIXES
- [light] Cross-check proposer priorities in retrieved validator sets (#ASA-2024-009)
- [privval] Ignore duplicate privval listen when already connected (#3828
DEPENDENCIES
- [crypto/secp256k1] Adjust to breaking interface changes in btcec/v2 latest release, while avoiding breaking changes to local CometBFT functions (#3728)
- pinned mockery's version to v2.49.2 to prevent potential changes in mocks after each new release of mockery (#4605)
IMPROVEMENTS
- [types] Check that proposer is one of the validators in ValidateBasic (#ASA-2024-009)
- [e2e] Add log_level option to manifest file (#3819).
- [e2e] Add log_format option to manifest file (#3836).
Open source →
v0.38.12-0.20241003202738-b68b3f4b3a083 Oct 2024pre-release
Nothing published for this version
v0.38.12-0.20240903101501-52c00a537f8f3 Sept 2024pre-release
Nothing published for this version
v0.38.12-0.20240822191256-12fa0fa13bad22 Aug 2024pre-release
Nothing published for this version
v0.38.12-0.20240820171207-01ee8c406e9f20 Aug 2024pre-release
Nothing published for this version
v0.38.1112 Aug 2024
Release notes
August 12, 2024

This release fixes a panic in consensus where CometBFT would previously panic if there's no extension signature in non-nil Precommit EVEN IF vote extensions themselves are disabled.

It also includes a few other bug fixes and performance improvements.

BUG FIXES
- [types] Only check IFF vote is a non-nil Precommit if extensionsEnabled types (#3565)
IMPROVEMENTS
- [indexer] Fixed ineffective select break statements; they now point to their enclosing for loop label to exit (#3544)
Open source →
v0.38.11-0.20240826055352-c3fc39a6e3ea26 Aug 2024pre-release
Nothing published for this version
v0.38.1015 Jul 2024
Release notes
July 16, 2024

This release fixes a bug in v0.38.x that prevented ABCI responses from being correctly read when upgrading from v0.37.x or below. It also includes a few other bug fixes and performance improvements.

BUG FIXES
- [p2p] Node respects configured max_num_outbound_peers limit when dialing peers provided by a seed node (#486)
- [rpc] Fix an issue where a legacy ABCI response, created on v0.37 or before, is not returned properly in v0.38 and up on the /block_results RPC endpoint. (#3002)
- [blocksync] Do not stay in blocksync if the node's validator voting power is high enough to block the chain while it is not online (#3406)
IMPROVEMENTS
- [p2p/conn] Update send monitor, used for sending rate limiting, once per batch of packets sent (#3382)
- [libs/pubsub] Allow dash (-) in event tags (#3401)
- [p2p/conn] Remove the usage of a synchronous pool of buffers in secret connection, storing instead the buffer in the connection struct. This reduces the synchronization primitive usage, speeding up the code. (#3403)
Open source →
v0.38.10-0.20240709120009-0792c8bdda449 Jul 2024pre-release
Nothing published for this version
v0.38.10-0.20240708131157-fcac7131b7a28 Jul 2024pre-release
Nothing published for this version
v0.38.91 Jul 2024
Release notes
July 1, 2024

This release reverts the API-breaking change to the Mempool interface introduced in the last patch release (v0.38.8) while still keeping the performance improvement added to the mempool. It also includes a minor fix to the RPC endpoints /tx and /tx_search.

BREAKING CHANGES
- [mempool] Revert adding the method PreUpdate() to the Mempool interface, recently introduced in the previous patch release (v0.38.8). Its logic is now moved into the Lock method. With this change, the Mempool interface is the same as in v0.38.7. (#3361)
BUG FIXES
- [rpc] Fix nil pointer error in /tx and /tx_search when block is absent (#3352)
Open source →
v0.38.827 Jun 2024
Release notes
June 27, 2024

This release contains a few bug fixes and performance improvements.

BREAKING CHANGES
- [mempool] Add to the Mempool interface a new method PreUpdate(). This method should be called before acquiring the mempool lock, to signal that a new update is coming. Also add to ErrMempoolIsFull a new field RecheckFull. (#3314)
BUG FIXES
- [blockstore] Added peer banning in blockstore (#ABC-0013)
- [blockstore] Send correct error message when vote extensions do not align with received packet (#ABC-0014)
- [mempool] Fix data race when rechecking with async ABCI client (#1827)
- [consensus] Fix a race condition in the consensus timeout ticker. Race is caused by two timeouts being scheduled at the same time. (#3092)
- [types] Do not batch verify a commit if the validator set keys have different types. (#3195
IMPROVEMENTS
- [config] Added recheck_timeout mempool parameter to set how much time to wait for recheck responses from the app (only applies to non-local ABCI clients). (#1827)
- [rpc] Add a configurable maximum batch size for RPC requests. (#2867).
- [event-bus] Remove the debug logs in PublishEventTx, which were noticed production slowdowns. (#2911)
- [state/execution] Cache the block hash computation inside of the Block Type, so we only compute it once. (#2924)
- [consensus/state] Remove a redundant VerifyBlock call in FinalizeCommit (#2928)
- [p2p/channel] Speedup ProtoIO writer creation time, and thereby speedup channel writing by 5%. (#2949)
- [p2p/conn] Minor speedup (3%) to connection.WritePacketMsgTo, by removing MinInt calls. (#2952)
- [internal/bits] 10x speedup creating initialized bitArrays, which speedsup extendedCommit.BitArray(). This is used in consensus vote gossip. (#2959).
- [blockstore] Remove a redundant Header.ValidateBasic call in LoadBlockMeta, 75% reducing this time. (#2964)
- [p2p/conn] Speedup connection.WritePacketMsgTo, by reusing internal buffers rather than re-allocating. (#2986)
- [blockstore] Use LRU caches in blockstore, significiantly improving consensus gossip routine performance (#3003
- [consensus] Improve performance of consensus metrics by lowering string operations (#3017
- [protoio] Remove one allocation and new object call from ReadMsg, leading to a 4% p2p message reading performance gain. (#3018
- [mempool] Before updating the mempool, consider it as full if rechecking is still in progress. This will stop accepting transactions in the mempool if the node can't keep up with re-CheckTx. (#3314)
Open source →
v0.38.8-0.20240611155953-ee556e37589111 Jun 2024pre-release
Nothing published for this version
v0.38.8-0.20240527104925-a38dbb2eef7227 May 2024pre-release
Nothing published for this version
v0.38.8-0.20240520074150-51884f9baf5a20 May 2024pre-release
Nothing published for this version
v0.38.727 Apr 2024
Release notes
April 26, 2024

This release contains a few bug fixes and performance improvements.

BUG FIXES
- [mempool] Panic when a CheckTx request to the app returns an error (#2225)
- [bits] prevent BitArray.UnmarshalJSON from crashing on 0 bits (#2774)
FEATURES
- [node] Add BootstrapStateWithGenProvider to boostrap state using a custom genesis doc provider (#2793)
IMPROVEMENTS
- [state/indexer] Lower the heap allocation of transaction searches (#2839)
- [internal/bits] 10x speedup and remove heap overhead of bitArray.PickRandom (used extensively in consensus gossip) (#2841).
- [libs/json] Lower the memory overhead of JSON encoding by using JSON encoders internally (#2846).
Open source →
v0.38.7-0.20240412124004-1f67e396cf4512 Apr 2024pre-release
Nothing published for this version
v0.38.7-0.20240313092115-51ee8c04824a13 Mar 2024pre-release
Nothing published for this version
v0.38.613 Mar 2024
Release notes
March 12, 2024

This release fixes a security bug in the light client. It also introduces many improvements to the block sync in collaboration with the Osmosis team.

BUG FIXES
- [privval] Retry accepting a connection (#2047)
- [state] Fix rollback to a specific height (#2136)
FEATURES
- [e2e] Add block_max_bytes option to the manifest file. (#2362)
IMPROVEMENTS
- [blocksync] Avoid double-calling types.BlockFromProto for performance reasons (#2016)
- [e2e] Add manifest option load_max_txs to limit the number of transactions generated by the load command. (#2094)
- [jsonrpc] enable HTTP basic auth in websocket client (#2434)
- [blocksync] make the max number of downloaded blocks dynamic. Previously it was a const 600. Now it's peersCount * maxPendingRequestsPerPeer (20) #2467
- [blocksync] Request a block from peer B if we are approaching pool's height (less than 50 blocks) and the current peer A is slow in sending us the block #2475
- [blocksync] Request the block N from peer B immediately after getting NoBlockResponse from peer A #2475
- [blocksync] Sort peers by download rate (the fastest peer is picked first) #2475
Open source →

github.com/cometbft/cometbft

Release timeline

Releases

What's Changed

IMPROVEMENTS

BUG-FIXES

IMPROVEMENTS

BUG FIXES

DEPENDENCIES

BUG FIXES

BUG FIXES

DEPENDENCIES

IMPROVEMENTS

BUG FIXES

DEPENDENCIES

FEATURES

IMPROVEMENTS

BUG FIXES

DEPENDENCIES

IMPROVEMENTS

BUG FIXES

IMPROVEMENTS

BUG FIXES

IMPROVEMENTS

BREAKING CHANGES

BUG FIXES

BREAKING CHANGES

BUG FIXES

IMPROVEMENTS

BUG FIXES

FEATURES

IMPROVEMENTS

BUG FIXES

FEATURES

IMPROVEMENTS