canton v3.5.11

Release of Canton 3.5.11

Canton 3.5.11 has been released on July 30, 2026.

Summary

This is a maintenance release that fixes a bug in participants for LSU and provides minor operational improvements.

What’s New

Minor Improvements

• Improved the resilience of the CachedJwtVerifierLoader JWK cache during temporary JWKS endpoint outages.
  Set the jwks-cache-config.auto-refresh-after configuration to a positive duration below jwks-cache-config.cache-expiration
  on any participant, sequencer, and mediator node admin-api, participant node ledger-api, and sequencer node public-api
  to reduce the chances of cache misses and corresponding auth outages.
• Bumped the version of AWS SDK from 2.44.3 to 2.49.3 to fix a security vulnerability with netty.
• Added index that improves performance of block sequencer pruning.

Bugfixes

Participant node restart failure after a canceled LSU followed by a successful LSU

A Participant node would not start up with a failure log "Attempting to run Startup participant node failed with Unable to finish upgrade ..."
following a restart. This can happen after a successful LSU following an earlier canceled LSU.
The bugfix allows a participant node to start up successfully in this scenario.

Compatibility

The following Canton protocol versions are supported:

Dependency	Version
Canton protocol versions	34, 35

Canton has been tested against the following versions of its dependencies:

Dependency	Version
Java Runtime	OpenJDK 64-Bit Server VM (build 21.0.12+2-nixos, mixed mode, sharing)
Postgres	Recommended: PostgreSQL 17.10 (Debian 17.10-1.pgdg13+1) – Also tested: PostgreSQL 14.23 (Debian 14.23-1.pgdg13+1), PostgreSQL 15.18 (Debian 15.18-1.pgdg13+1), PostgreSQL 16.14 (Debian 16.14-1.pgdg13+1), PostgreSQL 18.4 (Debian 18.4-1.pgdg13+1)