Go modules · #1827 by repository stars

github.com/celestiaorg/celestia-node

v0.34.3celestiaorg/celestia-node ↗New releases in your daily digest, changelog included.

Last release today
07 Oct 2026
Ships on a steady schedule
a new release about every 9 days
Rarely documented
notes for 6 of the last 60 stable releases
Nothing withdrawn
no release was ever pulled
5 years old
1225 releases · first in 2021

Release timeline

1225 releases since 2021

202120222023202420252026

20212026

One column per quarter.

Releases

v0.34.37 Oct 2026Breaking
Breaking changes & upgrade notes
This release adds initial support for Fibre.

Highlights

Fibre client support: celestia-node now ships a built-in Fibre client, exposed under the new fibre JSON-RPC namespace on Light and Bridge nodes. Blobs are uploaded to Fibre Storage Providers and settled on-chain via an escrow-funded payment model — all driven locally by the node rather than routed through a bridge.

The fibre namespace exposes:

Submit — upload a blob and settle its MsgPayForFibre payment on-chain in one call.

Upload — upload off-chain and settle the payment in the background.

Download — retrieve a blob by its BlobID.

Deposit / Withdraw — fund and unwind the escrow account that pays for storage.

QueryEscrowAccount / PendingWithdrawals — inspect escrow balance and pending exits.

Verified-header state client: DA nodes resolve validator sets and Fibre host addresses from the locally verified header chain (ABCI queries with Merkle-proof verification), so host discovery and payment validation don't rely on a trusted gRPC endpoint. [https://github.com//pull/5220]

Requirements & notes

Requires a configured core endpoint running celestia-app v10 (with the x/fibre and x/valaddr modules). Fibre is unavailable when no core endpoint is set.

Breaking changes & upgrade notes

Blob CLI input: blob submit now treats unprefixed blob data as plain text. Scripts that submit hexadecimal data must add the 0x prefix to preserve the submitted bytes.

Staking CLI arguments: state delegate and state undelegate now accept exactly two arguments: validator address and amount. Remove extra arguments used to work around the previous four-argument requirement.

Go API changes: blob.NewService now requires a HeaderService with GetByHeight and WaitForHeight methods instead of a header-getter function. Custom implementations of nodebuilder/blob.Module must also implement SubscribeFromStartHeight.

Go version: Source builds now require Go 1.26.8 or later.

Highlights

Initial Fibre client support: Light and Bridge nodes expose a new fibre JSON-RPC namespace for blob uploads, downloads and escrow management. Submit uploads a blob and settles its payment on-chain. Upload returns before settlement completes; background settlement failures are logged. Withdrawals are subject to an unbonding period.

Verified Fibre discovery: DA nodes obtain validator sets from their locally verified header chain. Fibre host records are verified through ABCI queries with Merkle proofs against the local header’s application hash.

SHREX reliability and memory improvements: Fixes a peer cooldown deadlock, synchronises peer-pool cleanup and prevents unused pools from accumulating. EDS serving also avoids retaining the whole original data square in the proof cache.

IPv6 endpoint support: Endpoint configuration now handles IPv6 literals, including bracketed addresses with ports.

What's Changed

feat: add fibre support to celestia-node by @vgonkivs in #5220

chore(deps): bump the go-deps group across 1 directory with 2 updates by @dependabot[bot] in #5226

config: Support IPv6 literal endpoints by @neyy91 in #5168

fix(test): remove Corto network from TestBootstrapperHealth by @vgonkivs in #5227

fix(share/shwap): bound rows read in NamespaceData.ReadFrom by @vgonkivs in #5229

chore(deps): bump github.com/celestiaorg/nmt from v0.24.4 to v0.24.5 by @rootulp in #5230

ci: sync GitHub releases to the Linear release pipeline by @rootulp in #5232

chore(deps): bump the go-deps group across 2 directories with 7 updates by @dependabot[bot] in #5234

shrex/peers: Avoid cooldown lock-order deadlock by @neyy91 in #5179

chore: remove Slava from PRs assignment by @rootulp in #5236

chore(deps): bump app to v10.1.0-corto and core to v0.42.0 by @rach-id in #5238

ci: disable Mergify merge queue comments by @rootulp in #5240

chore(deps): bump celestia-app to v10.1.0-mocha by @ninabarbakadze in #5239

state: Fix flaky TestSubmitFromCustomAccount balance assertions by @rootulp in #5243

ci: authenticate Codecov uploads with OIDC by @rootulp in #5242

chore(deps): bump linear/linear-release-action from 0.17.2 to 0.18.0 by @dependabot[bot] in #5245

chore(deps): bump go-libp2p to v0.50.0 by @rach-id in #5247

chore(deps): bump codecov/codecov-action from 7.0.0 to 7.1.1 by @dependabot[bot] in #5244

chore(deps): enforce 7-day dependency cooldown by @rootulp in #5249

fix(shrex): reserve what the server holds by @vgonkivs in #5251

chore: remove celestia-app v9 dependency by @vgonkivs in #5252

fix(ci): tolerate small project coverage fluctuations by @rootulp in #5290

fix(shrex): synchronize peer pool cleanup by @rootulp in #5293

fix(fibre/stateclient): bound the host query in GetHost by @kriss39 in #5297

fix(ci): pin reusable Docker workflows to commit SHA by @rootulp in #5289

fix(shrex/peers): don't keep pools in managers without shrexsub by @kriss39 in #5256

fix(nodebuilder/blob): stop prefixing blob data with 0x in submit by @0xShadowX in #5262

feat(das): add das_sampling_head_lag metric by @operagxsasha in #5307

chore(deps): bump the go-deps group across 2 directories with 3 updates by @dependabot[bot] in #5308

fix(share/shwap): return an error for an unknown row side in JSON by @0xShadowX in #5286

fix(nodebuilder/state): accept two arguments in delegate and undelegate by @shiaho777 in #5313

chore(deps): bump celestia-app to v10.4.0-corto and celestia-core to v0.42.3 by @renaynay in #5317

chore(deps): bump celestia-app to v10.4.0-mocha and celestia-core to v0.42.3 by @rach-id in #5316

fix(share/shwap): reset RangeNamespaceData on ReadFrom by @kriss39 in #5255

fix(share/shwap): bound proof node count in wire decoders by @FlashWayne in #5270

test(api): [low] wait for consensus height before fetching blocks by @rootulp in #5318

chore(deps): bump celestia-app to v10.4.0 mainnet by @rach-id in #5321

New Contributors

@kriss39 made their first contribution in #5297

@0xShadowX made their first contribution in #5262

@operagxsasha made their first contribution in #5307

@shiaho777 made their first contribution in #5313

@FlashWayne made their first contribution in #5270

Full Changelog: v0.33.2...v0.34.3

v0.34.3-corto6 Oct 2026pre-release

Small reliability fixes and dependency updates.

What's Changed

ci: disable Mergify merge queue comments by @rootulp in #5240
chore(deps): bump celestia-app to v10.1.0-mocha by @ninabarbakadze in #5239
state: Fix flaky TestSubmitFromCustomAccount balance assertions by @rootulp in #5243
ci: authenticate Codecov uploads with OIDC by @rootulp in #5242
chore(deps): bump linear/linear-release-action from 0.17.2 to 0.18.0 by @dependabot[bot] in #5245
chore(deps): bump go-libp2p to v0.50.0 by @rach-id in #5247
chore(deps): bump codecov/codecov-action from 7.0.0 to 7.1.1 by @dependabot[bot] in #5244
chore(deps): enforce 7-day dependency cooldown by @rootulp in #5249
fix(shrex): reserve what the server holds by @vgonkivs in #5251
chore: remove celestia-app v9 dependency by @vgonkivs in #5252
fix(ci): tolerate small project coverage fluctuations by @rootulp in #5290
fix(shrex): synchronize peer pool cleanup by @rootulp in #5293
fix(fibre/stateclient): bound the host query in GetHost by @kriss39 in #5297
fix(ci): pin reusable Docker workflows to commit SHA by @rootulp in #5289
fix(shrex/peers): don't keep pools in managers without shrexsub by @kriss39 in #5256
fix(nodebuilder/blob): stop prefixing blob data with 0x in submit by @0xShadowX in #5262
feat(das): add das_sampling_head_lag metric by @operagxsasha in #5307
chore(deps): bump the go-deps group across 2 directories with 3 updates by @dependabot[bot] in #5308
fix(share/shwap): return an error for an unknown row side in JSON by @0xShadowX in #5286
fix(nodebuilder/state): accept two arguments in delegate and undelegate by @shiaho777 in #5313
chore(deps): bump celestia-app to v10.4.0-corto and celestia-core to v0.42.3 by @renaynay in #5317

New Contributors

@kriss39 made their first contribution in #5297
@0xShadowX made their first contribution in #5262
@operagxsasha made their first contribution in #5307
@shiaho777 made their first contribution in #5313

Full Changelog: v0.34.2-corto...v0.34.3-corto

Open source →

v0.34.2-mocha21 Sept 2026pre-release

This release adds initial support for Fibre.

Highlights

Fibre client support: celestia-node now ships a built-in Fibre client, exposed under the new fibre JSON-RPC namespace on Light and Bridge nodes. Blobs are uploaded to Fibre Storage Providers and settled on-chain via an escrow-funded payment model — all driven locally by the node rather than routed through a bridge.

The fibre namespace exposes:

Submit — upload a blob and settle its MsgPayForFibre payment on-chain in one call.
Upload — upload off-chain and settle the payment in the background.
Download — retrieve a blob by its BlobID.
Deposit / Withdraw — fund and unwind the escrow account that pays for storage.
QueryEscrowAccount / PendingWithdrawals — inspect escrow balance and pending exits.
Verified-header state client: DA nodes resolve validator sets and Fibre host addresses from the locally verified header chain (ABCI queries with Merkle-proof verification), so host discovery and payment validation don't rely on a trusted gRPC endpoint. [https://github.com//pull/5220]

Requirements & notes

Requires a configured core endpoint running celestia-app v10 (with the x/fibre and x/valaddr modules). Fibre is unavailable when no core endpoint is set.

What's Changed

feat: add fibre support to celestia-node by @vgonkivs in #5220
chore(deps): bump the go-deps group across 1 directory with 2 updates by @dependabot[bot] in #5226
config: Support IPv6 literal endpoints by @neyy91 in #5168
fix(test): remove Corto network from TestBootstrapperHealth by @vgonkivs in #5227
fix(share/shwap): bound rows read in NamespaceData.ReadFrom by @vgonkivs in #5229
chore(deps): bump github.com/celestiaorg/nmt from v0.24.4 to v0.24.5 by @rootulp in #5230
ci: sync GitHub releases to the Linear release pipeline by @rootulp in #5232
chore(deps): bump the go-deps group across 2 directories with 7 updates by @dependabot[bot] in #5234
shrex/peers: Avoid cooldown lock-order deadlock by @neyy91 in #5179
chore: remove Slava from PRs assignment by @rootulp in #5236
chore(deps): bump app to v10.1.0-corto and core to v0.42.0 by @rach-id in #5238
ci: disable Mergify merge queue comments by @rootulp in #5240
chore(deps): bump celestia-app to v10.1.0-mocha by @ninabarbakadze in #5239
state: Fix flaky TestSubmitFromCustomAccount balance assertions by @rootulp in #5243
ci: authenticate Codecov uploads with OIDC by @rootulp in #5242

Full Changelog: v0.33.2-mocha...v0.34.2-mocha

Open source →

v0.32.11 Sept 2026Security

This release contains 2 notable changes, along with several performance improvements and security fixes. It is recommended to upgrade to this release…

This release contains 2 notable changes, along with several performance improvements and security fixes. It is recommended to upgrade to this release as soon as possible!

Two notable highlights:

DA API removal: This release removes the deprecated da Go package and JSON-RPC namespace. Update integrations that use da.* methods. #5148
More reliable bridge ingestion: Bridge nodes can ingest blocks from multiple core endpoints. #5018

What's Changed

chore(deps): bump github.com/celestiaorg/tastora from 0.19.0 to 0.20.0 in /nodebuilder/tests/tastora by @dependabot[bot] in #5016
fix(swamp): fix TestArchivalBlobSync by @vgonkivs in #5017
fix(shwap): bind sample coordinate in Sample.Verify by @rootulp in #5020
fix(shwap/bitswap): release hasher mutex on error path by @rootulp in #5021
chore(deps): bump github.com/grafana/pyroscope-go from 1.3.0 to 1.3.1 in the patch-updates group across 1 directory by @dependabot[bot] in #5024
chore(deps): bump go.opentelemetry.io/contrib/bridges/prometheus from 0.68.0 to 0.69.0 by @dependabot[bot] in #5029
chore: bump app to v9.0.0-mocha by @ninabarbakadze in #5022
chore(deps): bump the patch-updates group across 1 directory with 6 updates by @dependabot[bot] in #5023
fix(shrex/server): raise per-peer service-scope limits for shrex server by @vgonkivs in #5033
fix(tests): fix flakiness in unit tests by @vgonkivs in #5042
chore(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 by @dependabot[bot] in #5045
mics(metrics): add metrics to improve observability by @vgonkivs in #5011
ci: notify #protocol-ci Slack channel on CI failures by @rootulp in #5040
feat(core): multi-source block ingestion for the bridge listener by @vgonkivs in #5018
chore(deps): bump tspascoal/get-user-teams-membership from 3.0.0 to 4.0.2 by @dependabot[bot] in #5044
chore(deps): bump go.opentelemetry.io/contrib/instrumentation/runtime from 0.68.0 to 0.69.0 by @dependabot[bot] in #5031
headertest: unify TestSuite constructors behind functional options by @pjdurden in #5041
chore(deps): bump github.com/quic-go/quic-go from 0.59.0 to 0.59.1 by @dependabot[bot] in #5037
chore(deps): bump the patch-updates group across 2 directories with 1 update by @dependabot[bot] in #5046
fix(metrics): enable metrics in daser for bridge nodes by @vgonkivs in #5050
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.43.0 to 1.44.0 by @dependabot[bot] in #5030
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.43.0 to 1.44.0 by @dependabot[bot] in #5027
chore(deps): bump the patch-updates group across 2 directories with 2 updates by @dependabot[bot] in #5062
chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0 by @dependabot[bot] in #5065
fix(shrex/peers): bound blacklisted hashes with an LRU cache by @neyy91 in #5058
chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.67.0 to 0.69.0 by @dependabot[bot] in #5063
chore(deps): bump alpine from 3.23.4 to 3.24.0 by @dependabot[bot] in #5061
chore: bump app to v9.0.4 by @ninabarbakadze in #5067
test(libs/utils): fix data race on maxActive in TestSessions_Concurre… by @neyy91 in #5060
test(shrex_getter): give each peer manager its own header subscriber by @neyy91 in #5074
chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.53.0 by @dependabot[bot] in #5064
fix(blob): guard against nil proof in Service.Included by @neyy91 in #5079
chore(deps): bump github.com/klauspost/reedsolomon from 1.14.0 to 1.14.1 in the patch-updates group across 1 directory by @dependabot[bot] in #5082
fix(das): deep-copy worker failed map in getState to avoid stats race by @neyy91 in #5057
chore(deps): bump github.com/grafana/otel-profiling-go from 0.5.1 to 0.6.0 by @dependabot[bot] in #5083
chore(deps): bump alpine from 3.24.0 to 3.24.1 in the patch-updates group by @dependabot[bot] in #5080
test(share/eds): warm EDS roots before parallel accessor subtests by @neyy91 in #5075
chore(deps): bump github.com/moby/moby/client from 0.4.0 to 0.5.0 in /nodebuilder/tests/tastora by @dependabot[bot] in #5084
chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #5081
fix(shrex): keep GetSamples result aligned with requested coords by @neyy91 in #5085
chore(deps): bump actions/cache from 5 to 6 by @dependabot[bot] in #5088
chore: explicitly request a review from vgonkivs on every PR by @rootulp in #5096
fix(shwap/shrex): reset stream on panic in RecoveryMiddleware by @neyy91 in #5094
fix(node): surface real hook error on Start/Stop timeout by @vgonkivs in #5098
fix(shwap/bitswap): return real result from Blockstore.Has by @neyy91 in #5077
chore: ignore local claude json file by @renaynay in #5099
chore(deps): bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 in the patch-updates group by @dependabot[bot] in #5100
chore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by @dependabot[bot] in #5101
chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0 by @dependabot[bot] in #5102
chore(deps): bump github.com/grafana/pyroscope-go from 1.3.1 to 1.4.0 by @dependabot[bot] in #5103
chore(deps): bump github.com/libp2p/go-libp2p-kad-dht from 0.39.1 to 0.41.0 by @dependabot[bot] in #5104
chore(deps): bump github.com/celestiaorg/go-square/v4 from 4.0.0-rc4 to 4.0.0-rc5 by @dependabot[bot] in #5105
fix: fix network tag in celestia version command by @vgonkivs in #5108
fix(shrex): fix number of outbound streams in shrex by @vgonkivs in #5109
fix(share): correct off-by-one in 1D-index bounds checks by @neyy91 in #5086
fix(core): fetch cutoff height from P2P in RoutingExchange range split by @neyy91 in #5112
chore(deps): bump slackapi/slack-github-action from 3.0.3 to 3.0.5 in the patch-updates group by @dependabot[bot] in #5115
chore(deps): bump the patch-updates group across 1 directory with 5 updates by @dependabot[bot] in #5116
chore(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 by @dependabot[bot] in #5118
chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by @dependabot[bot] in #5117
nodebuilder/header: Validate range bounds and export ErrRangeTooLarge in GetRangeByHeight by @neyy91 in #5052
chore(deps): bump github.com/libp2p/go-libp2p-pubsub from 0.16.0 to 0.17.0 by @dependabot[bot] in #5120
fix(state/txclient): close estimator conn on failure and wait for Ready by @neyy91 in #5073
feat(api): add gauge to track active ws connections by @vgonkivs in #5113
chore(deps): bump actions/setup-go from 6 to 7 by @dependabot[bot] in #5125
feat(share/shrex): abort in-flight request on parent context cancel by @mohsenm4 in #5123
chore(deps): bump actions/setup-node from 6 to 7 by @dependabot[bot] in #5127
chore(deps): bump the patch-updates group across 2 directories with 1 update by @dependabot[bot] in #5128
chore(deps): bump slackapi/slack-github-action from 3.0.5 to 4.0.0 by @dependabot[bot] in #5126
chore(deps): bump github.com/multiformats/go-multiaddr-dns from 0.5.0 to 0.6.0 by @dependabot[bot] in #5130
chore: Add script to ensure dependabot PRs run go mod tidy on tastora go.mod by @renaynay in #5131
fix(core): Return partial response for headers if one fails by @renaynay in #4738
Revert "chore: Add script to ensure dependabot PRs run go mod tidy on tastora go.mod (#5131)" by @vgonkivs in #5144
chore(deps): bump actions/stale from 10 to 11 by @dependabot[bot] in #5145
chore(deps): bump github.com/pion/dtls/v3 from 3.1.2 to 3.1.4 by @dependabot[bot] in #5143
chore(deps): bump the patch-updates group across 2 directories with 3 updates by @dependabot[bot] in #5141
chore(deps): bump go.opentelemetry.io/proto/otlp from 1.10.0 to 1.11.0 by @dependabot[bot] in #5138
chore(deps): bump github.com/quic-go/webtransport-go from 0.10.0 to 0.11.1 by @dependabot[bot] in #5140
chore(deps): bump github.com/pion/stun/v3 from 3.1.1 to 3.1.5 by @dependabot[bot] in #5142
ci(deps): group Dependabot updates and auto-tidy go.mod on bot PRs by @vgonkivs in #5147
chore(deps): bump github.com/prometheus/client_golang from 1.23.2 to 1.24.1 by @dependabot[bot] in #5137
chore: remove stray .claude worktree gitlink breaking CI by @vgonkivs in #5151
refactor!(node): remove arabica by @vgonkivs in #5154
refactor!(api): da package removal by @vgonkivs in #5148
chore(deps): bump the go-deps group across 1 directory with 13 updates by @dependabot[bot] in #5161
chore(deps): bump github.com/libp2p/go-libp2p-kad-dht from 0.41.0 to 0.42.0 by @dependabot[bot] in #5129
ci: pass workflow_dispatch tag via env before shell by @SashaMIT in #5157
docgen: fix invalid openrpc.json release asset by @mohsenm4 in #5162
chore(deps): bump the go-deps group across 2 directories with 5 updates by @dependabot[bot] in #5176
rpc: Share limiter across concurrent first requests by @neyy91 in #5171
chore(deps): bump the libp2p group across 1 directory with 2 updates by @dependabot[bot] in #5175
test(tastora): add missing tastora tests by @vgonkivs in #5133
chore: remove dead BEFP scaffolding by @rootulp in #5178
chore(test/e2e): rework gh workflow to run on every pr instead of once per week by @vgonkivs in #5181
perf(shrex/client): reduce memory usage by removing the buffer by @vgonkivs in #5177
blob: Reuse the header across GetAll namespace retrievals by @neyy91 in #5180
chore(deps): bump actions/download-artifact from 4 to 8 by @dependabot[bot] in #5195
chore(deps): bump github.com/libp2p/go-libp2p-kad-dht from 0.42.1 to 0.42.2 in the libp2p group across 1 directory by @dependabot[bot] in #5197
test(share): cover RowsWithNamespace boundaries by @loglapa in #5194
specs: restore github-pages deploy by removing deprecated mdBook config key by @renaynay with @Copilot in #5201
feat: adding json or text format options for version command by @chatton in #5203
feat!(p2p): switch Mocha network to mocha-5 by @vgonkivs in #5204
chore(deps): bump the go-deps group across 2 directories with 4 updates by @dependabot[bot] in #5198
test(share/shrex): add unit test for oversized EDS response reads by @renaynay in #5206
api/docgen: temporarily disable OpenRPC docgen to unblock CI and releases by @rach-id in #5213
chore(p2p): add P-OPS and Qubelabs bootstrappers to mocha-5 by @rach-id in #5209
chore(p2p): add 01node bootstrapper to mocha-5 by @rach-id in #5218

New Contributors

@pjdurden made their first contribution in #5041
@neyy91 made their first contribution in #5058
@mohsenm4 made their first contribution in #5123
@SashaMIT made their first contribution in #5157
@loglapa made their first contribution in

Note truncated.

Open source →

v0.32.1-mocha1 Sept 2026pre-releaseSecurity

This release contains 2 notable changes, along with several performance improvements and security fixes. It is recommended to upgrade to this release…

This release contains 2 notable changes, along with several performance improvements and security fixes. It is recommended to upgrade to this release as soon as possible!

Two notable highlights:

DA API removal: This release removes the deprecated da Go package and JSON-RPC namespace. Update integrations that use da.* methods. #5148
More reliable bridge ingestion: Bridge nodes can ingest blocks from multiple core endpoints. #5018

What's Changed

chore(deps): bump github.com/celestiaorg/tastora from 0.19.0 to 0.20.0 in /nodebuilder/tests/tastora by @dependabot[bot] in #5016
fix(swamp): fix TestArchivalBlobSync by @vgonkivs in #5017
fix(shwap): bind sample coordinate in Sample.Verify by @rootulp in #5020
fix(shwap/bitswap): release hasher mutex on error path by @rootulp in #5021
chore(deps): bump github.com/grafana/pyroscope-go from 1.3.0 to 1.3.1 in the patch-updates group across 1 directory by @dependabot[bot] in #5024
chore(deps): bump go.opentelemetry.io/contrib/bridges/prometheus from 0.68.0 to 0.69.0 by @dependabot[bot] in #5029
chore: bump app to v9.0.0-mocha by @ninabarbakadze in #5022
chore(deps): bump the patch-updates group across 1 directory with 6 updates by @dependabot[bot] in #5023
fix(shrex/server): raise per-peer service-scope limits for shrex server by @vgonkivs in #5033
fix(tests): fix flakiness in unit tests by @vgonkivs in #5042
chore(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 by @dependabot[bot] in #5045
mics(metrics): add metrics to improve observability by @vgonkivs in #5011
ci: notify #protocol-ci Slack channel on CI failures by @rootulp in #5040
feat(core): multi-source block ingestion for the bridge listener by @vgonkivs in #5018
chore(deps): bump tspascoal/get-user-teams-membership from 3.0.0 to 4.0.2 by @dependabot[bot] in #5044
chore(deps): bump go.opentelemetry.io/contrib/instrumentation/runtime from 0.68.0 to 0.69.0 by @dependabot[bot] in #5031
headertest: unify TestSuite constructors behind functional options by @pjdurden in #5041
chore(deps): bump github.com/quic-go/quic-go from 0.59.0 to 0.59.1 by @dependabot[bot] in #5037
chore(deps): bump the patch-updates group across 2 directories with 1 update by @dependabot[bot] in #5046
fix(metrics): enable metrics in daser for bridge nodes by @vgonkivs in #5050
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.43.0 to 1.44.0 by @dependabot[bot] in #5030
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.43.0 to 1.44.0 by @dependabot[bot] in #5027
chore(deps): bump the patch-updates group across 2 directories with 2 updates by @dependabot[bot] in #5062
chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0 by @dependabot[bot] in #5065
fix(shrex/peers): bound blacklisted hashes with an LRU cache by @neyy91 in #5058
chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.67.0 to 0.69.0 by @dependabot[bot] in #5063
chore(deps): bump alpine from 3.23.4 to 3.24.0 by @dependabot[bot] in #5061
chore: bump app to v9.0.4 by @ninabarbakadze in #5067
test(libs/utils): fix data race on maxActive in TestSessions_Concurre… by @neyy91 in #5060
test(shrex_getter): give each peer manager its own header subscriber by @neyy91 in #5074
chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.53.0 by @dependabot[bot] in #5064
fix(blob): guard against nil proof in Service.Included by @neyy91 in #5079
chore(deps): bump github.com/klauspost/reedsolomon from 1.14.0 to 1.14.1 in the patch-updates group across 1 directory by @dependabot[bot] in #5082
fix(das): deep-copy worker failed map in getState to avoid stats race by @neyy91 in #5057
chore(deps): bump github.com/grafana/otel-profiling-go from 0.5.1 to 0.6.0 by @dependabot[bot] in #5083
chore(deps): bump alpine from 3.24.0 to 3.24.1 in the patch-updates group by @dependabot[bot] in #5080
test(share/eds): warm EDS roots before parallel accessor subtests by @neyy91 in #5075
chore(deps): bump github.com/moby/moby/client from 0.4.0 to 0.5.0 in /nodebuilder/tests/tastora by @dependabot[bot] in #5084
chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #5081
fix(shrex): keep GetSamples result aligned with requested coords by @neyy91 in #5085
chore(deps): bump actions/cache from 5 to 6 by @dependabot[bot] in #5088
chore: explicitly request a review from vgonkivs on every PR by @rootulp in #5096
fix(shwap/shrex): reset stream on panic in RecoveryMiddleware by @neyy91 in #5094
fix(node): surface real hook error on Start/Stop timeout by @vgonkivs in #5098
fix(shwap/bitswap): return real result from Blockstore.Has by @neyy91 in #5077
chore: ignore local claude json file by @renaynay in #5099
chore(deps): bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 in the patch-updates group by @dependabot[bot] in #5100
chore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by @dependabot[bot] in #5101
chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0 by @dependabot[bot] in #5102
chore(deps): bump github.com/grafana/pyroscope-go from 1.3.1 to 1.4.0 by @dependabot[bot] in #5103
chore(deps): bump github.com/libp2p/go-libp2p-kad-dht from 0.39.1 to 0.41.0 by @dependabot[bot] in #5104
chore(deps): bump github.com/celestiaorg/go-square/v4 from 4.0.0-rc4 to 4.0.0-rc5 by @dependabot[bot] in #5105
fix: fix network tag in celestia version command by @vgonkivs in #5108
fix(shrex): fix number of outbound streams in shrex by @vgonkivs in #5109
fix(share): correct off-by-one in 1D-index bounds checks by @neyy91 in #5086
fix(core): fetch cutoff height from P2P in RoutingExchange range split by @neyy91 in #5112
chore(deps): bump slackapi/slack-github-action from 3.0.3 to 3.0.5 in the patch-updates group by @dependabot[bot] in #5115
chore(deps): bump the patch-updates group across 1 directory with 5 updates by @dependabot[bot] in #5116
chore(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 by @dependabot[bot] in #5118
chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by @dependabot[bot] in #5117
nodebuilder/header: Validate range bounds and export ErrRangeTooLarge in GetRangeByHeight by @neyy91 in #5052
chore(deps): bump github.com/libp2p/go-libp2p-pubsub from 0.16.0 to 0.17.0 by @dependabot[bot] in #5120
fix(state/txclient): close estimator conn on failure and wait for Ready by @neyy91 in #5073
feat(api): add gauge to track active ws connections by @vgonkivs in #5113
chore(deps): bump actions/setup-go from 6 to 7 by @dependabot[bot] in #5125
feat(share/shrex): abort in-flight request on parent context cancel by @mohsenm4 in #5123
chore(deps): bump actions/setup-node from 6 to 7 by @dependabot[bot] in #5127
chore(deps): bump the patch-updates group across 2 directories with 1 update by @dependabot[bot] in #5128
chore(deps): bump slackapi/slack-github-action from 3.0.5 to 4.0.0 by @dependabot[bot] in #5126
chore(deps): bump github.com/multiformats/go-multiaddr-dns from 0.5.0 to 0.6.0 by @dependabot[bot] in #5130
chore: Add script to ensure dependabot PRs run go mod tidy on tastora go.mod by @renaynay in #5131
fix(core): Return partial response for headers if one fails by @renaynay in #4738
Revert "chore: Add script to ensure dependabot PRs run go mod tidy on tastora go.mod (#5131)" by @vgonkivs in #5144
chore(deps): bump actions/stale from 10 to 11 by @dependabot[bot] in #5145
chore(deps): bump github.com/pion/dtls/v3 from 3.1.2 to 3.1.4 by @dependabot[bot] in #5143
chore(deps): bump the patch-updates group across 2 directories with 3 updates by @dependabot[bot] in #5141
chore(deps): bump go.opentelemetry.io/proto/otlp from 1.10.0 to 1.11.0 by @dependabot[bot] in #5138
chore(deps): bump github.com/quic-go/webtransport-go from 0.10.0 to 0.11.1 by @dependabot[bot] in #5140
chore(deps): bump github.com/pion/stun/v3 from 3.1.1 to 3.1.5 by @dependabot[bot] in #5142
ci(deps): group Dependabot updates and auto-tidy go.mod on bot PRs by @vgonkivs in #5147
chore(deps): bump github.com/prometheus/client_golang from 1.23.2 to 1.24.1 by @dependabot[bot] in #5137
chore: remove stray .claude worktree gitlink breaking CI by @vgonkivs in #5151
refactor!(node): remove arabica by @vgonkivs in #5154
refactor!(api): da package removal by @vgonkivs in #5148
chore(deps): bump the go-deps group across 1 directory with 13 updates by @dependabot[bot] in #5161
chore(deps): bump github.com/libp2p/go-libp2p-kad-dht from 0.41.0 to 0.42.0 by @dependabot[bot] in #5129
ci: pass workflow_dispatch tag via env before shell by @SashaMIT in #5157
docgen: fix invalid openrpc.json release asset by @mohsenm4 in #5162
chore(deps): bump the go-deps group across 2 directories with 5 updates by @dependabot[bot] in #5176
rpc: Share limiter across concurrent first requests by @neyy91 in #5171
chore(deps): bump the libp2p group across 1 directory with 2 updates by @dependabot[bot] in #5175
test(tastora): add missing tastora tests by @vgonkivs in #5133
chore: remove dead BEFP scaffolding by @rootulp in #5178
chore(test/e2e): rework gh workflow to run on every pr instead of once per week by @vgonkivs in #5181
perf(shrex/client): reduce memory usage by removing the buffer by @vgonkivs in #5177
blob: Reuse the header across GetAll namespace retrievals by @neyy91 in #5180
chore(deps): bump actions/download-artifact from 4 to 8 by @dependabot[bot] in #5195
chore(deps): bump github.com/libp2p/go-libp2p-kad-dht from 0.42.1 to 0.42.2 in the libp2p group across 1 directory by @dependabot[bot] in #5197
test(share): cover RowsWithNamespace boundaries by @loglapa in #5194
specs: restore github-pages deploy by removing deprecated mdBook config key by @renaynay with @Copilot in #5201
feat: adding json or text format options for version command by @chatton in #5203
feat!(p2p): switch Mocha network to mocha-5 by @vgonkivs in #5204
chore(deps): bump the go-deps group across 2 directories with 4 updates by @dependabot[bot] in #5198
test(share/shrex): add unit test for oversized EDS response reads by @renaynay in #5206
api/docgen: temporarily disable OpenRPC docgen to unblock CI and releases by @rach-id in #5213
chore(p2p): add P-OPS and Qubelabs bootstrappers to mocha-5 by @rach-id in #5209
chore(p2p): add 01node bootstrapper to mocha-5 by @rach-id in #5218

New Contributors

@pjdurden made their first contribution in #5041
@neyy91 made their first contribution in #5058
@mohsenm4 made their first contribution in #5123
@SashaMIT made their first contribution in #5157
@loglapa made their first contribution in

Note truncated.

Open source →

v0.32.0-corto26 Aug 2026pre-releaseSecurity

This release contains 2 notable changes, along with several performance improvements and security fixes. It is recommended to upgrade to this release…

This release contains 2 notable changes, along with several performance improvements and security fixes. It is recommended to upgrade to this release as soon as possible!

Two notable highlights:

DA API removal: This release removes the deprecated da Go package and JSON-RPC namespace. Update integrations that use da.* methods. #5148
More reliable bridge ingestion: Bridge nodes can ingest blocks from multiple core endpoints. #5018

What's Changed

chore(deps): bump github.com/celestiaorg/tastora from 0.19.0 to 0.20.0 in /nodebuilder/tests/tastora by @dependabot[bot] in #5016
fix(swamp): fix TestArchivalBlobSync by @vgonkivs in #5017
fix(shwap): bind sample coordinate in Sample.Verify by @rootulp in #5020
fix(shwap/bitswap): release hasher mutex on error path by @rootulp in #5021
chore(deps): bump github.com/grafana/pyroscope-go from 1.3.0 to 1.3.1 in the patch-updates group across 1 directory by @dependabot[bot] in #5024
chore(deps): bump go.opentelemetry.io/contrib/bridges/prometheus from 0.68.0 to 0.69.0 by @dependabot[bot] in #5029
chore: bump app to v9.0.0-mocha by @ninabarbakadze in #5022
chore(deps): bump the patch-updates group across 1 directory with 6 updates by @dependabot[bot] in #5023
fix(shrex/server): raise per-peer service-scope limits for shrex server by @vgonkivs in #5033
fix(tests): fix flakiness in unit tests by @vgonkivs in #5042
chore(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 by @dependabot[bot] in #5045
mics(metrics): add metrics to improve observability by @vgonkivs in #5011
ci: notify #protocol-ci Slack channel on CI failures by @rootulp in #5040
feat(core): multi-source block ingestion for the bridge listener by @vgonkivs in #5018
chore(deps): bump tspascoal/get-user-teams-membership from 3.0.0 to 4.0.2 by @dependabot[bot] in #5044
chore(deps): bump go.opentelemetry.io/contrib/instrumentation/runtime from 0.68.0 to 0.69.0 by @dependabot[bot] in #5031
headertest: unify TestSuite constructors behind functional options by @pjdurden in #5041
chore(deps): bump github.com/quic-go/quic-go from 0.59.0 to 0.59.1 by @dependabot[bot] in #5037
chore(deps): bump the patch-updates group across 2 directories with 1 update by @dependabot[bot] in #5046
fix(metrics): enable metrics in daser for bridge nodes by @vgonkivs in #5050
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.43.0 to 1.44.0 by @dependabot[bot] in #5030
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.43.0 to 1.44.0 by @dependabot[bot] in #5027
chore(deps): bump the patch-updates group across 2 directories with 2 updates by @dependabot[bot] in #5062
chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0 by @dependabot[bot] in #5065
fix(shrex/peers): bound blacklisted hashes with an LRU cache by @neyy91 in #5058
chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.67.0 to 0.69.0 by @dependabot[bot] in #5063
chore(deps): bump alpine from 3.23.4 to 3.24.0 by @dependabot[bot] in #5061
chore: bump app to v9.0.4 by @ninabarbakadze in #5067
test(libs/utils): fix data race on maxActive in TestSessions_Concurre… by @neyy91 in #5060
test(shrex_getter): give each peer manager its own header subscriber by @neyy91 in #5074
chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.53.0 by @dependabot[bot] in #5064
fix(blob): guard against nil proof in Service.Included by @neyy91 in #5079
chore(deps): bump github.com/klauspost/reedsolomon from 1.14.0 to 1.14.1 in the patch-updates group across 1 directory by @dependabot[bot] in #5082
fix(das): deep-copy worker failed map in getState to avoid stats race by @neyy91 in #5057
chore(deps): bump github.com/grafana/otel-profiling-go from 0.5.1 to 0.6.0 by @dependabot[bot] in #5083
chore(deps): bump alpine from 3.24.0 to 3.24.1 in the patch-updates group by @dependabot[bot] in #5080
test(share/eds): warm EDS roots before parallel accessor subtests by @neyy91 in #5075
chore(deps): bump github.com/moby/moby/client from 0.4.0 to 0.5.0 in /nodebuilder/tests/tastora by @dependabot[bot] in #5084
chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #5081
fix(shrex): keep GetSamples result aligned with requested coords by @neyy91 in #5085
chore(deps): bump actions/cache from 5 to 6 by @dependabot[bot] in #5088
chore: explicitly request a review from vgonkivs on every PR by @rootulp in #5096
fix(shwap/shrex): reset stream on panic in RecoveryMiddleware by @neyy91 in #5094
fix(node): surface real hook error on Start/Stop timeout by @vgonkivs in #5098
fix(shwap/bitswap): return real result from Blockstore.Has by @neyy91 in #5077
chore: ignore local claude json file by @renaynay in #5099
chore(deps): bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 in the patch-updates group by @dependabot[bot] in #5100
chore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by @dependabot[bot] in #5101
chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0 by @dependabot[bot] in #5102
chore(deps): bump github.com/grafana/pyroscope-go from 1.3.1 to 1.4.0 by @dependabot[bot] in #5103
chore(deps): bump github.com/libp2p/go-libp2p-kad-dht from 0.39.1 to 0.41.0 by @dependabot[bot] in #5104
chore(deps): bump github.com/celestiaorg/go-square/v4 from 4.0.0-rc4 to 4.0.0-rc5 by @dependabot[bot] in #5105
fix: fix network tag in celestia version command by @vgonkivs in #5108
fix(shrex): fix number of outbound streams in shrex by @vgonkivs in #5109
fix(share): correct off-by-one in 1D-index bounds checks by @neyy91 in #5086
fix(core): fetch cutoff height from P2P in RoutingExchange range split by @neyy91 in #5112
chore(deps): bump slackapi/slack-github-action from 3.0.3 to 3.0.5 in the patch-updates group by @dependabot[bot] in #5115
chore(deps): bump the patch-updates group across 1 directory with 5 updates by @dependabot[bot] in #5116
chore(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 by @dependabot[bot] in #5118
chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by @dependabot[bot] in #5117
nodebuilder/header: Validate range bounds and export ErrRangeTooLarge in GetRangeByHeight by @neyy91 in #5052
chore(deps): bump github.com/libp2p/go-libp2p-pubsub from 0.16.0 to 0.17.0 by @dependabot[bot] in #5120
fix(state/txclient): close estimator conn on failure and wait for Ready by @neyy91 in #5073
feat(api): add gauge to track active ws connections by @vgonkivs in #5113
chore(deps): bump actions/setup-go from 6 to 7 by @dependabot[bot] in #5125
feat(share/shrex): abort in-flight request on parent context cancel by @mohsenm4 in #5123
chore(deps): bump actions/setup-node from 6 to 7 by @dependabot[bot] in #5127
chore(deps): bump the patch-updates group across 2 directories with 1 update by @dependabot[bot] in #5128
chore(deps): bump slackapi/slack-github-action from 3.0.5 to 4.0.0 by @dependabot[bot] in #5126
chore(deps): bump github.com/multiformats/go-multiaddr-dns from 0.5.0 to 0.6.0 by @dependabot[bot] in #5130
chore: Add script to ensure dependabot PRs run go mod tidy on tastora go.mod by @renaynay in #5131
fix(core): Return partial response for headers if one fails by @renaynay in #4738
Revert "chore: Add script to ensure dependabot PRs run go mod tidy on tastora go.mod (#5131)" by @vgonkivs in #5144
chore(deps): bump actions/stale from 10 to 11 by @dependabot[bot] in #5145
chore(deps): bump github.com/pion/dtls/v3 from 3.1.2 to 3.1.4 by @dependabot[bot] in #5143
chore(deps): bump the patch-updates group across 2 directories with 3 updates by @dependabot[bot] in #5141
chore(deps): bump go.opentelemetry.io/proto/otlp from 1.10.0 to 1.11.0 by @dependabot[bot] in #5138
chore(deps): bump github.com/quic-go/webtransport-go from 0.10.0 to 0.11.1 by @dependabot[bot] in #5140
chore(deps): bump github.com/pion/stun/v3 from 3.1.1 to 3.1.5 by @dependabot[bot] in #5142
ci(deps): group Dependabot updates and auto-tidy go.mod on bot PRs by @vgonkivs in #5147
chore(deps): bump github.com/prometheus/client_golang from 1.23.2 to 1.24.1 by @dependabot[bot] in #5137
chore: remove stray .claude worktree gitlink breaking CI by @vgonkivs in #5151
refactor!(node): remove arabica by @vgonkivs in #5154
refactor!(api): da package removal by @vgonkivs in #5148
chore(deps): bump the go-deps group across 1 directory with 13 updates by @dependabot[bot] in #5161
chore(deps): bump github.com/libp2p/go-libp2p-kad-dht from 0.41.0 to 0.42.0 by @dependabot[bot] in #5129
ci: pass workflow_dispatch tag via env before shell by @SashaMIT in #5157
docgen: fix invalid openrpc.json release asset by @mohsenm4 in #5162
chore(deps): bump the go-deps group across 2 directories with 5 updates by @dependabot[bot] in #5176
rpc: Share limiter across concurrent first requests by @neyy91 in #5171
chore(deps): bump the libp2p group across 1 directory with 2 updates by @dependabot[bot] in #5175
test(tastora): add missing tastora tests by @vgonkivs in #5133
chore: remove dead BEFP scaffolding by @rootulp in #5178
chore(test/e2e): rework gh workflow to run on every pr instead of once per week by @vgonkivs in #5181
perf(shrex/client): reduce memory usage by removing the buffer by @vgonkivs in #5177
blob: Reuse the header across GetAll namespace retrievals by @neyy91 in #5180
chore(deps): bump actions/download-artifact from 4 to 8 by @dependabot[bot] in #5195
chore(deps): bump github.com/libp2p/go-libp2p-kad-dht from 0.42.1 to 0.42.2 in the libp2p group across 1 directory by @dependabot[bot] in #5197
test(share): cover RowsWithNamespace boundaries by @loglapa in #5194
specs: restore github-pages deploy by removing deprecated mdBook config key by @renaynay with @Copilot in #5201
feat: adding json or text format options for version command by @chatton in #5203
feat!(p2p): switch Mocha network to mocha-5 by @vgonkivs in #5204

New Contributors

@pjdurden made their first contribution in #5041
@neyy91 made their first contribution in #5058
@mohsenm4 made their first contribution in #5123
@SashaMIT made their first contribution in #5157
@loglapa made their first contribution in #5194
@renaynay with @Copilot made their first contribution in #5201

Full Changelog: v0.31.4...v0.32.0-corto

Open source →

v0.31.317 Jun 2026

This release adds support for celestia-app v9 and reduces network block time to 3s. Once the v9 activation height takes place, upgrading to this versi

This release adds support for celestia-app v9 and reduces network block time to 3s. Once the v9 activation height takes place, upgrading to this version is required.

⚠️ Action Required: run `config-update`

This release adds new config fields. After upgrading the binary and before starting your node, run:

celestia bridge config-update --p2p.network mainnet

celestia light config-update --p2p.network mainnet

This merges newly-added fields (e.g. the RPC RateLimit section) into your existing config.toml while preserving your custom values. Skipping this step means new options silently fall back to defaults and may log config warnings. Review your config.toml afterwards to confirm custom values were kept.

To enable multi-source ingestion, add the extra endpoints to your bridge node config file:

[Core]
  IP = "<primary_ip>"
  Port = "<primary_port>"
  TLSEnabled = false
  XTokenPath = ""
  AdditionalCoreEndpoints = [
  { IP = "<secondary_ip>", Port = "<secondary_port>", TLSEnabled = false, XTokenPath = "" },
]

Key Highlights:

celestia-app v9 / 3s block time (#4872, #4950, #4970) — Bumps to app v9 (via v8 → v8.0.3-mocha → v9) and go-square v4. Block time drops from 6s to 3s; syncer, DASer and pruner timing constants are scaled accordingly.
RPC server hardening (#4909) — Request size capped at 16 MiB (down from 100 MiB), HTTP Read/Write/Idle timeouts, a 500 concurrent-connection limit, and optional per-IP rate limiting (disabled by default).
Shrex server resource & rate limiting (#4898, #4900) — Adds resource limiting and per-peer-IP rate limiting to the shrex server.
go-fraud removed (#4934) — Fraud proofs have been non-functional since the shwap migration; the dependency, the fraud RPC namespace and BEFP code are removed.
More useful node info (#4341) — node.Info.type is now a string (e.g. "Bridge") and reports network_id; adds a new NetworkID endpoint.
Nightly bootstrapper health check (#4922) — CI now monitors bootstrapper reachability.
Observability metrics (#5011) — metrics added across key hot paths for diagnostics.

⚠️ Breaking Changes

fraud RPC namespace removed (#4934) — Calls to fraud.Subscribe/fraud.Get now error; the Fraud field is removed from the Go RPC client.
node.Info shape change (#4341) — type is now a string instead of an int; clients parsing it as a number must update.
RPC limits enforced (#4909) — Requests over 16 MiB and connections over the limit are now rejected.
header.GetRangeByHeight enforces MaxRangeRequestSize (#4945) — Oversized range requests now return an error over RPC (matching the P2P server).
Commitment.String() is now hex-encoded (#4413) — Anything relying on the previous raw byte output must update.

What's Changed

bump: bump celestia-node to app@v8 and go-square@v4 by @vgonkivs in #4872
chore(deps): bump actions/checkout from 4 to 6 by @dependabot[bot] in #4876
chore(deps): bump actions/cache from 4 to 5 by @dependabot[bot] in #4881
chore(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in #4878
chore(deps): bump actions/github-script from 7 to 8 by @dependabot[bot] in #4879
chore(deps): bump goreleaser/goreleaser-action from 6 to 7 by @dependabot[bot] in #4880
chore(deps): bump go.opentelemetry.io/proto/otlp from 1.9.0 to 1.10.0 by @dependabot[bot] in #4883
chore(deps): bump github.com/celestiaorg/tastora from 0.8.0 to 0.16.0 in /nodebuilder/tests/tastora by @dependabot[bot] in #4890
chore(deps): bump codecov/codecov-action from 5.5.2 to 5.5.3 in the patch-updates group by @dependabot[bot] in #4875
docs: fix project name in supported architectures section by @Ocheretovich in #4848
ci: selective unit testing based on changed packages by @walldiss in #4815
fix(state): prevent panic on overflow in amount validation by @rootulp in #4873
refactor(state): extract txClient by @vgonkivs in #4866
fix(metrics): fix critical metric naming bugs and global state by @walldiss in #4870
fix(cel-shed): prevent panic on missing root hash by @Ocheretovich in #4809
chore(deps): bump github.com/gammazero/workerpool from 1.1.3 to 1.2.1 by @dependabot[bot] in #4885
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.39.0 to 1.42.0 by @dependabot[bot] in #4886
fix(metrics): add missing units and standardize error context handling by @walldiss in #4871
chore(deps): bump github.com/libp2p/go-libp2p-kad-dht from 0.38.0 to 0.39.0 by @dependabot[bot] in #4884
chore(deps): bump crazy-max/ghaction-import-gpg from 6 to 7 by @dependabot[bot] in #4877
fix(blob): add subtree roots completeness check in CommitmentProof.Verify() by @rootulp in #4874
chore: remove go-libp2p-pubsub fork, use upstream by @walldiss in #4893
fix: align go.mod parity between root and tastora by @walldiss in #4891
chore(deps): bump go.opentelemetry.io/otel/metric from 1.42.0 to 1.43.0 by @dependabot[bot] in #4903
chore(deps): bump codecov/codecov-action from 5.5.3 to 6.0.0 by @dependabot[bot] in #4894
chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @dependabot[bot] in #4899
chore(deps): bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0 by @dependabot[bot] in #4904
chore(deps): bump go.opentelemetry.io/otel/sdk/metric from 1.42.0 to 1.43.0 by @dependabot[bot] in #4905
chore(deps): bump github.com/celestiaorg/go-header from 0.8.5-rc to 0.8.5 by @dependabot[bot] in #4906
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace from 1.42.0 to 1.43.0 by @dependabot[bot] in #4907
chore(deps): bump github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream from 1.7.7 to 1.7.8 by @dependabot[bot] in #4917
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.42.0 to 1.43.0 by @dependabot[bot] in #4924
fix(p2p): remove broken mocha bootstrappers by @rootulp in #4913
chore(shrex/client): change log level in shrex-client by @vgonkivs in #4927
chore(make): add mod target to tidy all Go modules by @rach-id in #4925
chore: add CLAUDE.md with Hacken bug bounty PR guidelines by @rootulp in #4911
feat: add nightly bootstrapper health check by @rootulp in #4922
chore(deps): bump actions/checkout from 4 to 6 by @dependabot[bot] in #4938
feat(shrex): add resource limitting to shrex server by @Wondertan in #4898
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.42.0 to 1.43.0 by @dependabot[bot] in #4908
chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.97.1 to 1.97.3 by @dependabot[bot] in #4916
chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.97.1 to 1.97.3 in /nodebuilder/tests/tastora by @dependabot[bot] in #4918
chore(deps): bump actions/github-script from 8 to 9 by @dependabot[bot] in #4937
refactor!: remove go-fraud dependency and related dead code by @rootulp in #4934
docs(adr-013): clarify Upload behavior and rationale for Upload/Submit split by @walldiss in #4947
fix!(header): enforce MaxRangeRequestSize in GetRangeByHeight by @vgonkivs in #4945
feat(shrex): add per-peer-IP rate limiting to shrex server by @Wondertan in #4900
fix(share/shwap/getters): set span err only if all getters truly failed, otherwise just record err in span for single getter failure by @renaynay in #4130
refactor(blob)!: use hex encoding for Commitment String() output by @Galoretka in #4413
chore(deps): bump github.com/hashicorp/go-getter from 1.7.9 to 1.8.6 by @dependabot[bot] in #4940
fix: resubscribe to consensus node in case of dead connection by @vgonkivs in #4948
chore(deps): bump node to app v8.0.3-mocha by @vgonkivs in #4950
fix(daser): remove duplicated EDS Notification by @vgonkivs in #4959
ci: set least-privilege GITHUB_TOKEN permissions by @rootulp in #4956
ci: pin third-party actions to commit SHAs by @rootulp in #4957
fix(core): use block height value in Exchange.Get error strings by @cuiweixie in #4935
fix: correct cleanup usage in pidstore tests by @enlightened88 in #4942
chore(deps): bump tastora to v0.19.0 to resolve docker/moby CVEs by @rootulp in #4955
fix(share/cmd): bounds-check index parsing in share CLI by @rootulp in #4954
fix(header/sync): bump recencyThreshold to 3x blockTime by @vgonkivs in #4966
chore: bump node to app v9 commit by @ninabarbakadze in #4970
chore(deps): bump go.opentelemetry.io/contrib/bridges/prometheus from 0.67.0 to 0.68.0 by @dependabot[bot] in #4975
chore(deps): bump slackapi/slack-github-action from 3.0.1 to 3.0.2 in the patch-updates group by @dependabot[bot] in #4968
chore(deps): bump github.com/libp2p/go-libp2p-pubsub from 0.15.1-0.20260318184623-12372d99a0bc to 0.16.0 by @dependabot[bot] in #4973
chore(deps): bump goreleaser/goreleaser-action from 7.1.0 to 7.2.1 by @dependabot[bot] in #4969
chore(deps): bump the patch-updates group across 1 directory with 2 updates by @dependabot[bot] in #4977
chore(deps): bump alpine from 3.23.3 to 3.23.4 in the patch-updates group across 1 directory by @dependabot[bot] in #4952
chore(deps): bump slackapi/slack-github-action from 3.0.2 to 3.0.3 in the patch-updates group by @dependabot[bot] in #4979
fix(state): include ABCI result code in balance query error by @cuiweixie in #4936
chore(headertest): use ErrorIs on original error and NoError for success by @VolodymyrBg in #4535
fix: interface compliance check for API struct by @brawncode in #4488
chore(deps): bump github.com/ipld/go-ipld-prime from 0.22.0 to 0.23.0 in /nodebuilder/tests/tastora by @dependabot[bot] in #4989
docgen: include Authorization header requirement in OpenRPC method de… by @Sushil-19 in #4818
chore(deps): bump go.uber.org/zap from 1.27.1 to 1.28.0 in /nodebuilder/tests/tastora by @dependabot[bot] in #4985
chore(deps): bump github.com/ipld/go-ipld-prime from 0.22.0 to 0.23.0 by @dependabot[bot] in #4988
fix(p2p): re-add DevOps-managed Mocha bootstrappers by @rootulp in #4995
chore(deps): bump go.uber.org/zap to v1.28.0 for parity with tastora by @rootulp in #4996
fix: close stats file on write error by @Radovenchyk in #4967
fix: add teardown logic to clean up Docker networks in tastora tests by @hawkadrian in #4645
feat(nodebuilder/node)!: More useful node info (type is string and report network ID) by @renaynay in #4341
misc(share/shwap/p2p/shrex): add traces to shrex client/server hotpaths by @renaynay in #4537
chore(deps): bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 by @dependabot[bot] in #5001
fix(test): fix data race during app and node startups by @vgonkivs in #5007
feat!(rpc): harden RPC server by @Wondertan in #4909
fix(shwap): reject nil inputs in proto decoders by @vgonkivs in #5008
chore(deps): bump celestia-app to v9 arabica release by @rach-id in #4999
chore(deps): bump the patch-updates group across 2 directories with 2 updates by @dependabot[bot] in #5012
chore: bump app to v9.0.1-mocha (#5022) by @ninabarbakadze in #5032
fix(shrex/server): raise per-peer service-scope limits for shrex server by @vgonkivs in #5038
mics(metrics): add metrics to improve observability (#5011) by @vgonkivs in #5048
feat(core): multi-source block ingestion for the bridge listener (#5018) by @vgonkivs in #5049
fix(metrics): enable metrics in daser for bridge nodes (#5050) by @vgonkivs in #5051
chore: bump app to v9.0.4 by @ninabarbakadze in #5068

New Contributors

@Ocheretovich made their first contribution in #4848
@cuiweixie made their first contribution in #4935
@enlightened88 made their first contribution in #4942
@brawncode made their first contribution in #4488
@Sushil-19 made their first contribution in #4818

Note truncated.

Open source →

v0.31.2-mocha10 Jun 2026pre-release

feat(core): multi-source block ingestion for the bridge listener by @vgonkivs ( https://github.com/vgonkivs ) in #5018

What's Changed:

feat(core): multi-source block ingestion for the bridge listener by @vgonkivs (https://github.com/vgonkivs) in #5018
(#5018)
feat(metrics): add metrics to improve observability by @vgonkivs (https://github.com/vgonkivs) in #5011
(#5011)

Highlights:

Multi-source block ingestion (#5018) — the bridge listener can now ingest blocks from multiple Celestia-Core endpoints concurrently and tolerate any
single one failing:

new blocks are sourced from all configured endpoints but downloaded once (from the source that announces a height first), with no duplicate fetches;
per-source sync state and stricter source handling (duplicate endpoints rejected; the node fails fast if the fastest source for a height is on the
wrong chain);
Core.AdditionalCoreEndpoints is now used not only for load-balancing transaction submission but also as additional block sources (config-file only,
no CLI flag).

Observability metrics (#5011) — metrics added across key hot paths for diagnostics:

RPC server (api/rpc), core listener (block events), store, and pruner;
improved node-info metric reporting.

Action Required (optional):

To enable multi-source ingestion, add the extra endpoints to your bridge node config file:

[Core]
  IP = "<primary_ip>"
  Port = "<primary_port>"
  TLSEnabled = false
  XTokenPath = ""
  AdditionalCoreEndpoints = [
  { IP = "<secondary_ip>", Port = "<secondary_port>", TLSEnabled = false, XTokenPath = "" },
]

Full Changelog: v0.31.1-mocha...v0.31.2-mocha

Open source →

v0.31.2-arabica10 Jun 2026pre-release

feat(core): multi-source block ingestion for the bridge listener by @vgonkivs ( https://github.com/vgonkivs ) in #5018

What's Changed:

feat(core): multi-source block ingestion for the bridge listener by @vgonkivs (https://github.com/vgonkivs) in #5018
(#5018)
feat(metrics): add metrics to improve observability by @vgonkivs (https://github.com/vgonkivs) in #5011
(#5011)

Highlights:

Multi-source block ingestion (#5018) — the bridge listener can now ingest blocks from multiple Celestia-Core endpoints concurrently and tolerate any
single one failing:

new blocks are sourced from all configured endpoints but downloaded once (from the source that announces a height first), with no duplicate fetches;
per-source sync state and stricter source handling (duplicate endpoints rejected; the node fails fast if the fastest source for a height is on the
wrong chain);
Core.AdditionalCoreEndpoints is now used not only for load-balancing transaction submission but also as additional block sources (config-file only,
no CLI flag).

Observability metrics (#5011) — metrics added across key hot paths for diagnostics:

RPC server (api/rpc), core listener (block events), store, and pruner;
improved node-info metric reporting.

Action Required (optional):

To enable multi-source ingestion, add the extra endpoints to your config file:

[Core]
  IP = "<primary_ip>"
  Port = "<primary_port>"
  TLSEnabled = false
  XTokenPath = ""
  AdditionalCoreEndpoints = [
  { IP = "<secondary_ip>", Port = "<secondary_port>", TLSEnabled = false, XTokenPath = "" },
]

Full Changelog: v0.31.1-arabica...v0.31.2-arabica

Open source →

github.com/celestiaorg/celestia-node

Release timeline

Releases

Highlights

Requirements & notes

Breaking changes & upgrade notes

Highlights

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

Highlights

Requirements & notes

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

⚠️ Action Required: run config-update

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

⚠️ Action Required: run `config-update`