Zebra 1.0.0-rc.9

Zebra 1.0.0-rc.9 - 2023-06-07

This release continues to address audit findings. It fixes multiple network protocol and RPC bugs,
and reduces sensitive information logging.

This is the last release candidate before the 1.0.0 stable release. Please report bugs to the Zebra GitHub repository

Breaking Changes

• The version subcommand has been replaced with a --version/-V flag (#6801)

Security

• Stop logging peer IP addresses, to protect user privacy (#6662)
• Stop logging potentially sensitive user information from unmined transactions (#6616)
• Rate-limit MetaAddrChange::Responded from peers (#6738)
• Ignore out of order Address Book changes, unless they are concurrent (#6717)
• Limit blocks and transactions sent in response to a single request (#6679)
• Rate-limit and size-limit peer transaction ID messages (#6625)
• Stop panicking on state RPC or block requests with very large heights (#6699)
• Try harder to drop connections when they shut down, Credit: Ziggurat Team (#6832)
• Randomly drop connections when inbound service is overloaded (#6790)

Added

• Report compiler version and Zebra features when starting Zebra (#6606)
• Update Zebra book summary to include supported platforms, platform tier policy, and versioning (#6683)
• Improve zebrad's help output, credit to @Rqnsom (#6801)
• Cache a list of useful peers on disk (#6739)
• Make the first stable release forward-compatible with planned state changes (#6813)

Fixed

• Limit RPC failure log length, add details to RPC failure logs (#6754)
• Allow inbound connections to Zebra running in Docker (#6755)
• Zebra now accepts filters for the start command when no subcommand is provided (#6801)
• Avoid panicking on state errors during shutdown (#6828)

Contributors

Thank you to everyone who contributed to this release, we couldn't make Zebra without you:
@arya2, @mpguerra, @oxarbitrage, @teor2345 and @upbqdn