Skip to content

v1.6.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 16 Oct 13:16
· 59 commits to master since this release
v1.6.0
c868cca
This commit was signed with the committer’s verified signature.
aeddi Antoine Eddi
SSH Key Fingerprint: IiEuCuB5rGISyQHKvYQepEUUKU7JHySgTPXxBbexJTs
Verified
Learn about vigilant mode.

v1.6.0

Warning

Not scheduled on mainnet yet. Do not run this release on mainnet. Mainnet keeps running v1.5.1 until a coordinated halt, whose height and date will be announced here and in #6372. A node on v1.6.0 running next to v1.5.1 nodes can fork off the network.

The halt height in this tag's message (848000) was an estimate for a date that moved: the height that applies is the one the GovDAO proposal sets.

A coordinated upgrade. At the halt, every validator restarts on v1.6.0: after the halt a node refuses an older binary, and before it this one (halt_min_version = v1.6.0). Cut on the same commit as v1.6.0-rc.1, which onyx runs.

Released from chain/mainnet at c868ccab1. Previous release: v1.5.1.

Who should run it: every mainnet validator, at the halt, once it is announced. Onyx stays on v1.6.0-rc.1, the same code.

What changes

  • Node (#6359): commit field checks, mempool and RPC bookkeeping, VM fixes. Code relying on the behaviors listed in the PR's breaking changes behaves differently.
  • Sanitizer (#6298): sanitize.Block* escapes <gno-button anywhere on a line, and gnoweb draws <gno-button /> as a call-to-action link.
  • Sync (#6308): BeginBlock takes the last validators from the state instead of reloading them.
  • gnoweb: page title, summary, share image and robots policy (#6229, #6256), a notice on packages outside a trusted list (#6191), an Ask AI menu (#6257), omnisearch with an optional indexer (#6231), listings as a map and a dependency graph (#6283), icons, frames and math (#6297, #6299, #4879), a new homepage (#6293), realm pages as markdown (#5794), and security fixes on file paths and links (#6261, #6296, #6295, #6294).
  • gnodev (#6259): -validator-key-file.

Operators, watch for

  • gnoland: nothing to change. Leave halt_height at 0 in config.toml, let the node halt, then restart on this release.
  • gnoweb: new flags -canonical-origin (set it to https://gno.land), -index-community (default none), -trusted-paths, -no-realm-notice (the notice is on by default), -trusted-proxies (empty: X-Forwarded-Host is ignored), -no-index (never on mainnet), -indexer-url (empty: off). Aliases no longer chain. Move gnoweb after the halt, with the new static homepage (misc/deployments/home-alias/home.mainnet.md).
  • gpao: nothing to change; move it last, once every node runs this release.

Docker images

Multi-arch (linux/amd64, linux/arm64), signed keylessly by the release / docker workflow, the index and each platform image.

Image Index digest
ghcr.io/gnolang/gno/gnoland:v1.6.0 sha256:c884ef4357dab61bb9d836a447d53149fd5d67530e83c302e687705c5077306d
ghcr.io/gnolang/gno/gnoweb:v1.6.0 sha256:6663a1244b0da74cbb829d4ece7ae60a8c2166dc92cb84ef1610c8cfd8e56449
ghcr.io/gnolang/gno/gnofaucet:v1.6.0 sha256:1168c43fca716ed33a0283785f31456dfc3b6ecc1e69590d4ec868623a330cfe
ghcr.io/gnolang/gno/gnokey:v1.6.0 sha256:157174797649eb12e2db9754672a55ada5949c0d1d2af7d43aea46cd661b7c6c
ghcr.io/gnolang/gno/gno:v1.6.0 sha256:bd018c38478b263a03e4ebdcb563c139d0a47db9b5bcefb52e2fe811ff70d178
ghcr.io/gnolang/gno/gnodev:v1.6.0 sha256:b47708831a92802066b6ac83ffe4aade08edcac99332d43d8e1025a05e564aa0
ghcr.io/gnolang/gno/gnocontribs:v1.6.0 sha256:0176a991accf1509912b3481bc3815b2b9af6277a5035017d2326664327de3ae
ghcr.io/gnolang/gno/gpao:v1.6.0 sha256:3ab27f3045107f58859451d6104f947fe11bc784346ae47fa496c70f8dfbb211

Binaries

Attached below: gno, gnokey, gnoland, gnoweb and gnodev for linux and darwin, amd64 and arm64, built by the release / chain-tag workflow from this tag. CHECKSUMS.txt covers all of them, and gnoland, gnokey and gno print v1.6.0 on version. The binaries and CHECKSUMS.txt carry a build-provenance attestation.

Verify before you run it

gh attestation verify gnoland_linux_amd64 --repo gnolang/gno \
  --signer-workflow gnolang/gno/.github/workflows/release-chain-tag.yml \
  --source-ref refs/tags/v1.6.0

# cosign v3 or later: the signatures are in the Sigstore bundle format
cosign verify ghcr.io/gnolang/gno/gnoland:v1.6.0 \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity https://github.com/gnolang/gno/.github/workflows/release-docker.yml@refs/tags/v1.6.0

Changes since v1.5.1

Compare. Every commit is a cherry-pick from master; the full list, with what was left out and why, is in #6372.

Release tooling on chain/mainnet since v1.5.1: #6335 (full CI on chain PRs, one docker run per tag) and the deployment docs corrections reviewed in #6323.

Assets 23
Loading