kona-node v1.6.3

Warning

Security fix — upgrade recommended. This release closes three unauthenticated attack surfaces (#21753)
and hardens gossip by binding the message-id to the topic and metering invalid messages (#21804).

Important

Derivation correctness: span-batch transaction type prefixes are now preserved (#21808).

Important

APKO Docker images: Starting with this release, the Docker URL contains an additional /nexus in its path, see full Docker image path below. Our Docker builds are now APKO based and during a transition period, the APKO-based images for any component will be available at https://us-docker.pkg.dev/oplabs-tools-artifacts/images/nexus/<component>:<version>. When we migrate to APKO-only images, we may remove the /nexus again from our image paths and will give another notice in this case.

What's Changed in kona-node/v1.6.3

• kona: remove superchain level by @mds1 in #21938
• kona: preserve span-batch transaction type prefixes by @joshklop in #21808
• kona,gossip: bind gossip message-id to topic, meter invalid messages by @sebastianst in #21804
• refactor(kona): isolate custom registry builds by @wwared in #21882
• chore: bump reth to f2eecc6 (post-v2.4.0) by @claude[bot] in #21766
• fix(kona,security): close three unauthenticated kona attack surfaces by @sebastianst in #21753
• Add sepolia-devnet-2 registry artifacts by @jelias2 in #21679
• perf(kona-driver): decode only the L1-info deposit when computing L2BlockInfo (recreate #21347) by @claude[bot] in #21737
• fix(op-node): sync Karst gas compatibility configs by @teddyknox in #21674
• op-reth,kona-node: embed correct build info by @joshklop in #21645

Full Changelog: kona-node/v1.6.2-rc.1...kona-node/v1.6.3

🚢 Docker Image: https://us-docker.pkg.dev/oplabs-tools-artifacts/images/nexus/kona-node:v1.6.3