Release indexer/v9.5.10

What's Changed

Backported to release/indexer/v9.x via #3435:

• perf(ender:candles): precompute strings, simpler getCandle by @UnbornAztecKing in #3317

• chore: info to debug logs by @ben-dydx-ops in #3348

• chore: decommission dev4 environment by @UnbornAztecKing in #3373

• fix(comlink): prevent deep pagination from overloading primary DB by @2dpetkov in #3362

• perf(socks): skip parsing messages without subscribers and speed up proto decode by @2dpetkov in #3397

• fix(indexer): build local Postgres image on bookworm and refresh README setup by @2dpetkov in #3396

• feat(comlink): gzip REST responses by @wallabee in #3401

• feat(socks): websocket compression behind a percentage rollout by @wallabee in #3413

• fix(indexer): bound idle transactions so they can't pin the vacuum horizon by @tqin7 in #3399

• feat(indexer): index fills(subaccountId, createdAt, eventId, createdAtHeight) by @tqin7 in #3400

• fix ghost levels by @tqin7 in #3415

• fix(kafka): stop rack-aware consumers stalling when their same-AZ broker restarts by @wallabee in #3434

• fix(postgres): create oracle_prices index concurrently by @tqin7 in #3436

Full Changelog: indexer/v9.5.9...indexer/v9.5.10

Release protocol/v9.8.1

Release v9.8.1

What's Changed

• mempool: CheckTx for txs received from peers now runs on a worker pool, so it no longer delays that peer's consensus messages (dydxprotocol/cometbft#62, #3426)
  • [mempool] recv_workers defaults to 4, including when config.toml lacks the key; recv_workers = 0 restores the old inline path
  • Queued txs are capped by recv_queue_size (default 100000); txs beyond the cap are dropped and counted
  • New metrics: mempool_recv_queue_len, mempool_recv_queue_dropped_txs, mempool_recv_queue_wait_seconds
• x/clob: orders that don't cross the book skip the cached-state matching path; cachekv caches are allocated only when a store is written to (dydxprotocol/cosmos-sdk#83). Adds clob_global_lock wait/hold telemetry to CheckTx (#3426)
• x/clob: the indexer now gets an expiry for short-term orders that expire in the block they're matched in. These orders previously left stale levels in the indexer's orderbook (#3430)
• x/clob: fix a panic on the first block after state sync; block rate limiters are now installed from state (#3420)
• cometbft: /validators and state-sync bootstrap now return the proposer priorities consensus actually holds. Before this, state-synced nodes came up with a diverged proposer rotation and never proposed (dydxprotocol/cometbft#61, #3424)
• cometbft: cache the last rebuilt validator set, so a validator-set lookup stays at about 0.05ms instead of growing with the number of blocks since the last validator-set change (dydxprotocol/cometbft#64, #3432)
• deps: cosmos-sdk fork bumped to dydx-fork-v0.50.5 (524ebaad71e5) (#3427)

Full Changelog: protocol/v9.8.0...protocol/v9.8.1

Release protocol/v9.8.0

Release v9.8.0

Mainnet release for the v9.8 upgrade (upgrade handler name v9.8), applied at height 109170000. This is the same commit (9ab4e17) as v9.8.0-rc0, which upgraded dydx-testnet-4 at height 88375358.

This release contains security fixes. Binaries were distributed to validators ahead of the upgrade, and the source is published now that the upgrade is live. The build is reproducible: the binaries in these tarballs are byte-identical to those distributed to validators.

binary	sha256
dydxprotocold-v9.8.0-linux-amd64	4aa4ee8d2849c4dddebe34e37f62299e31178d08f49888b6061e6ad7e9302f65
dydxprotocold-v9.8.0-linux-arm64	70300613e138ec89d984c679b4a4f09e65d8dd780030563c28103aa0fe39b26b

What's Changed

• x/clob: don't trigger conditional orders on a market with a zero oracle price
• x/clob, x/subaccounts: waive builder fees while the negative-TNC gate is active
• x/clob: reject non-step-multiple deleveraging fill amounts
• x/clob/ante: skip rate limiting during simulate
• app, x/subaccounts: bound query cost to prevent OOM via pagination
• app/ante: bind amino signature verification to the tx's actual sequence
• x/accountplus: recheck signature-verification invariant when loading an authenticator
• fix(full-node): silence tar/aws output in snapshot scripts (backport #3398) (#3411)
• fix(full-node): drop --debug from mainnet snapshot upload (stops credential leak) (backport #3395) (#3410)
• Downgrade missing-price log to debug for wound-down markets (backport #3408) (#3409)
• chore: bump cosmos-sdk to pick up Any-nesting depth cap tightening (#3406)
• chore: bump cometbft to pick up ASA-2024-009 fix (#3404)
• x/clob: validate clob tx msg composition in DeliverTx
• x/clob: enforce reduce-only at the DeliverTx consensus boundary
• app: reject TxRaw transactions with duplicate body/auth_info fields
• app/prepare: budget the proposal by CometBFT proto-framed tx size
• app/prepare: bound the operations tx and cap short-term clob tx size
• x/clob: harden the TWAP suborder state machine
• x/subaccounts: order isolated collateral transfers inflow-before-outflow
• x/clob/memclob: fail soft on unexpected single-match errors

CI / testing only

• testing: run the v9.8 container upgrade test from v9.7.1
• fix(ci): stop the preupgrade binary find from matching its own tarball
• fix(ci): locate the preupgrade binary inside the release tarball by name
• ci: switch staging upgrade-test setup to the team's proven pattern
• ci: add hybrid staging image + workflow for live v9.8 upgrade testing
• ci: add manual workflow to build & push staging validator image

Full Changelog: protocol/v9.7.1...protocol/v9.8.0

Release protocol/v9.7.1

Release v9.7.1

What's Changed

• fix(clob): enforce short-term order equity tier in CheckTx

Full Changelog: protocol/v9.7.0...protocol/v9.7.1

Release protocol/v9.7.0

Release v9.7.0

What's Changed

• Backport v9.7 changes to release/protocol/v9.x (#3384, #3386, #3388) by @tqin7 in #3389

Full Changelog: protocol/v9.6.4...protocol/v9.7.0

Release protocol/v9.7.0-rc0

Release v9.7.0-rc0

Release protocol/v9.6.4

What's Changed

• Port SEC-76 fixes to main (backport #3380) by @mergify[bot] in #3381

Full Changelog: protocol/v9.6.3...protocol/v9.6.4

Release indexer/v9.5.9

What's Changed

• feat(socks): drop connections that spam the subscription limit (backport #3382) by @mergify[bot] in #3383

Full Changelog: indexer/v9.5.8...indexer/v9.5.9

Release protocol/v9.6.3

Release v9.6.3

What's Changed

• upgrade cosmos-sdk and cometbft version for height poisoning fix (backport #3338) by @mergify[bot] in #3339

Full Changelog: v9.6.2...protocol/v9.6.3

Release protocol/v9.6.3-rc0

Release v9.6.3-rc0

What's Changed

• upgrade cosmos-sdk and cometbft version for height poisoning fix (backport #3338) by @mergify[bot] in #3339

Full Changelog: v9.6.2...protocol/v9.6.3-rc0