Repository navigation
Caravel
Warning
Anchor v1.3.1 is a high-priority security release. All operators should upgrade
as soon as practical.
Summary
This release contains a security fix in a networking dependency. There are no Anchor
source changes, no database migration, and no CLI changes, so upgrading from v1.3.0 is
a straight binary swap with no operational steps.
Security Content
We are not disclosing the security content of this release in order to give operators
time to upgrade. Further detail will follow in the coming days.
Update Priority
| User class | Priority |
|---|---|
| Operators running mainnet validators | High |
| Testnet / non-validating | Medium |
All Changes
- chore: Release v1.3.1 (#1268)
- chore: bump deps in stable (#1265)
- ci(mergify): migrate to declarative commit_message_format (#1247)
Binaries
See pre-built binaries documentation.
The binaries are signed with Sigma Prime's PGP key: 15E66D941F697E28F49381F426416DC3F30674B0
| System | Architecture | Binary | PGP Signature |
|---|---|---|---|
| aarch64 | anchor-v1.3.1-aarch64-apple-darwin.tar.gz | PGP Signature | |
| x86_64 | anchor-v1.3.1-x86_64-unknown-linux-gnu.tar.gz | PGP Signature | |
| aarch64 | anchor-v1.3.1-aarch64-unknown-linux-gnu.tar.gz | PGP Signature | |
| System | Option | - | Resource |
| Docker | v1.3.1 | sigp/anchor |