Skip to content

v5.2.0-ZSA - 2026-09-11

Latest
Latest

Choose a tag to compare

View all tags
@PaulLaux PaulLaux released this 11 Sep 10:53
· 13 commits to zsa1 since this release
v5.2.0-ZSA
8c9c93f
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Based on upstream Zebra v5.2.0 (ZcashFoundation/zebra@62e4a43).

Changes on top of upstream

  • Adjust NU7 ZSA Orchard verifier selection to upstream's new NU6.2 per-circuit verifying keys
  • Restore the canonical Orchard proof-size consensus check and extend it to OrchardZSA
  • Count ZSA issuance logical actions in the ZIP-317 fee
  • Allow V6 transactions in NU7 property tests; regenerate and re-enable the OrchardZSA workflow blocks and tests
  • Add testnet configuration (#149), plus EC2 configuration and the ops workflow for ZSATestnet (#158)
  • Move Terraform infra to official modules (#144, #150, #152, #154)
  • Adopt upstream's nextest CI settings, stabilise the basic checks, retry flaky peer tests (#148)

Inherited security fix (NU6.2)

Upstream v5.0.0 activated NU6.2, which fixes a critical bug in the Orchard pool: Orchard actions are re-enabled with the fixed Orchard Action circuit, proofs route to a per-circuit verifying key (InsecurePreNu6_2 / FixedPostNu6_2), and bundles with a non-canonical proof size are rejected (GHSA-jfw5-j458-pfv6). The minimum network protocol version is now NU6.2 (170150), so peers below it are disconnected.

Assets 2
Loading