Full Changelog: v5.0.1...v5.0.2

Midstate v5.0.2

Bug fix release. If you mine through a pool or have ever restored a wallet from its phrase, please upgrade.

Mining / pool

Fixed ~98% "Stale job" rejections on GPU rigs. The miner could throw away a half-received job notify when a share was ready at the same moment, then keep grinding an old job. The miner and pool now read lines cancel-safely, and bad lines get logged instead of silently dropped.
Fixed "audit failed: merkle root mismatch" disconnects. The pool now publishes each job together with its share tree, keeps the last 8 trees, and serves /api/proof?root= for the exact root a miner asks about.
Older miners and older pools still work with the new ones.

Restores find every coin and never re-sign a used key.
- Web wallet (audit W3): the scan window now runs 256 keys past both the counter and the highest key seen on chain.
- Desktop wallet (audit W6): restores now cover one-time keys and MSS trees. They scan from genesis until nothing new turns up, and nothing signs until that's finished. The desktop shows restore progress, and sending is paused while it runs.
- Wallets saved by older code rescan once on login.
MSS keygen checkpoints are now per tree, so an interrupted keygen can't leave a tree whose address doesn't match its keys.
The web wallet now gets a fresh service-worker cache on every deploy, so returning users actually get updates. The wallet deploy pipeline is fixed too: the hosted wallet hadn't updated since 17 Sep.
Midwimble mining bonds in the desktop wallet (new Bonds tab) and the web wallet: lock, unbond after the unlock height, and import from bond.json or the export line.

New SUPPLY tab with circulating, max, issued and burned supply, the next halving, and a top-100 rich list. Turn it on with --rich-list (or rich_list = true in config.toml).
New endpoints: /supply, /supply/circulating, /supply/total, /supply/max, /richlist, /richlist/:address. The bare-number endpoints return 503 until the index has caught up and its check passes.
Fixed the address view for 72-character checksummed addresses.

Midstate nodes now recognise Midwimble nodes when they identify and drop them by peer id, instead of banning their whole /24 subnet for an hour. That ban was locking out operators' own Midstate nodes and the bootstrap node.