canton v3.7.2

Release of Canton 3.7.2

Canton 3.7.2 has been released on November 04, 2026.

Summary

This is a maintenance release that fixes a resource leak on sequencer nodes and updates the base Docker image to address security vulnerabilities.
Sequencer node operators should upgrade.

What’s New

Minor Improvements

• The canton-participant, canton-mediator, and canton-sequencer Docker images now enable the HTTP readiness endpoint (/health/ready on port 5071) by default.
• The HEALTHCHECK of the canton-participant Docker image now uses the HTTP readiness endpoint (/health/ready on port 5071) instead of the gRPC health service.
  Readiness is now only reported once database migrations and storage initialization have completed, so after an upgrade with long-running migrations the container stays unhealthy for longer.
  Tooling that waits for the container to become healthy (e.g., docker compose up --wait or condition: service_healthy) may need longer timeouts.
• Bump base docker image to 1.0.19 to address security vulnerabilities.

Security and Bug Fixes

• Sequencer node: fixed a resource leak that caused a spike in threads, CPU and memory consumption.
  The spike affected the node's ability to keep up with the rest of the synchronizer and required a restart of the node every few days.

Compatibility

The following Canton protocol versions are supported:

Dependency	Version
Canton protocol versions	36, 37

Canton has been tested against the following versions of its dependencies:

Dependency	Version
Java Runtime	OpenJDK 64-Bit Server VM (build 21.0.12+2-nixos, mixed mode, sharing)
Postgres	Recommended: PostgreSQL 17.11 (Debian 17.11-1.pgdg13+2) – Also tested: PostgreSQL 14.24 (Debian 14.24-1.pgdg13+2), PostgreSQL 15.19 (Debian 15.19-1.pgdg13+2), PostgreSQL 16.15 (Debian 16.15-1.pgdg13+2), PostgreSQL 17.11 (Debian 17.11-1.pgdg13+2), PostgreSQL 18.6 (Debian 18.6-1.pgdg13+2)