v0.10.0

Breaking changes

• The CLI, PBS, and Signer binaries are unified into a single commit-boost binary (#425), and a unified Docker image is published alongside the per-module ones: ghcr.io/commit-boost/commit-boost (#464). Release artifacts are now one commit-boost-<tag>-<platform>.tar.gz per platform, each with a Sigstore signature.
• SSV: ssv_api_url is replaced by ssv_node_api_url (your SSV node's API) with ssv_public_api_url as a public-API fallback (#415).
• The Helder test network is no longer supported.

Security

• Remediations from the Sigma Prime signer audit (#438), including configurable signer TLS ([signer.tls_mode]: certificate mode by default, insecure to opt out), reverse-proxy client-IP validation ([signer.reverse_proxy]), and per-module signing_ids.

Features

• PBS reloads its config file when it changes, without a restart (#409).
• Custom chain ids for custom network configs (#429).
• get_header logs the auction winner (#443).
• Stader validator registry support: a stader mux registry loader for node-operator validator sets.
• SSV node API support for mux loading, with the operator id sent as a numeric uint64 (#415, #474).

Fixes

• Fixed a TLS provider panic when using the Dirk signer.
• Fixed a CLI double-parse bug (#428).

Infrastructure

• Releases are now cut through an auditable release-request model: a .releases/vX.Y.Z.yml pins the exact commit, and CI builds signed tarballs (linux x86-64/arm64, darwin arm64) and multi-arch images (#462).

Thanks to everyone who contributed to this release: @JasonVranek, @jclapis, @PedroCM96, @iurii-ssv, @dnstaked, @ninaiiad, @selfuryon, @dom-nie, @ltitanb , and @ManuelBilbao

Full Changelog: v0.9.6...v0.10.0