v0.5.0

This release introduces enhanced security features, improved app session management, and critical infrastructure updates for the Clearnode API and Nitrolite SDK.

Changelog

Documentation

• Added the v0.5.0 Migration Guide.
• Added a huge and incredibly fruitful Protocol section, providing detailed specifications for the current protocol version.
• Added instructions on how to request a blockchain and an asset support.
• As always, the up-to-date Clearnode API documentation can be found in the API docs of the ClearNode.

Nitrolite SDK

• Added a support for new revoke_session_key and get_session_keys endpoints
• Modified the Authorization structure
• Added a conditional mechanism to choose channel state signer based on the channel participant.
• Fixed EIP712 signature types to properly support float amounts, ensuring accurate transaction processing.
• Upgraded viem dependency through multiple security patches (from 2.37.6 to 2.38.5) for improved security and stability.

Clearnode

• Added app session keys with allowances and expiration functionality for granular access control.
• Implemented session keys revocation mechanism, allowing users to invalidate compromised or unused session keys.
• Enhanced authentication flow to avoid creating duplicate session keys when one already exists.
• Wallet address is now used as channel and app-session participant to improve consistency
• Added non-replayable transfer mechanism to prevent transaction replay attacks.
• Enabled zero deposit channel creation for improved user onboarding.
• Introduced restrictions on off-chain operations for users with non-zero channels to improve security.
• Added escrow mechanism for channel resize operations.
• Streamlined blockchain and asset configuration for easier management.
• Fixed asset validation to properly skip empty assets in app allocations.
• Extended Cerebro CLI functionality for better administrative capabilities.