diff --git a/.changelog/5693.bugfix.md b/.changelog/5693.bugfix.md deleted file mode 100644 index 1d3e175074f..00000000000 --- a/.changelog/5693.bugfix.md +++ /dev/null @@ -1,4 +0,0 @@ -go/worker/common: Always take the latest epoch for deployments - -Fix for an issue which could have prevented runtimes from being initialized -in case the runtime was suspended before the first node was started. diff --git a/.changelog/5694.bugfix.md b/.changelog/5694.bugfix.md deleted file mode 100644 index 513bce0e63e..00000000000 --- a/.changelog/5694.bugfix.md +++ /dev/null @@ -1 +0,0 @@ -go/worker/common: Retry provisioning on epoch transitions when suspended diff --git a/.changelog/5698.feature.md b/.changelog/5698.feature.md deleted file mode 100644 index 8bfb920fdbb..00000000000 --- a/.changelog/5698.feature.md +++ /dev/null @@ -1 +0,0 @@ -secret-sharing/src/churp: Implement key derivation center diff --git a/.changelog/5699.feature.md b/.changelog/5699.feature.md deleted file mode 100644 index 418fe35905e..00000000000 --- a/.changelog/5699.feature.md +++ /dev/null @@ -1 +0,0 @@ -keymanager/src/churp: Implement key derivation function diff --git a/.changelog/5702.bugfix.md b/.changelog/5702.bugfix.md deleted file mode 100644 index e3b35c57ae4..00000000000 --- a/.changelog/5702.bugfix.md +++ /dev/null @@ -1 +0,0 @@ -go/runtime/host: Ignore stale abort requests diff --git a/.changelog/5703.bugfix.md b/.changelog/5703.bugfix.md deleted file mode 100644 index a58980268dd..00000000000 --- a/.changelog/5703.bugfix.md +++ /dev/null @@ -1,5 +0,0 @@ -keymanager: Increase MAX_FRESH_HEIGHT_AGE - -This avoids issues where key managers get out of sync during operation -and start rejecting otherwise valid requests. It should still be safe -especially since all new runtimes now perform freshness checks. diff --git a/.changelog/5704.internal.md b/.changelog/5704.internal.md deleted file mode 100644 index 673ce22b71c..00000000000 --- a/.changelog/5704.internal.md +++ /dev/null @@ -1,5 +0,0 @@ -go: Reverse order of TCB update fetching - -Early TCB updates are now tried first when updating TCB info. If -validation for an early update fails, the mechanism falls back to the -standard update. diff --git a/.changelog/5706.bugfix.md b/.changelog/5706.bugfix.md deleted file mode 100644 index b023875cb06..00000000000 --- a/.changelog/5706.bugfix.md +++ /dev/null @@ -1 +0,0 @@ -go/runtime/host/sgx: Fix SGX bundle validation diff --git a/.changelog/5707.feature.md b/.changelog/5707.feature.md deleted file mode 100644 index 2fecefc79a3..00000000000 --- a/.changelog/5707.feature.md +++ /dev/null @@ -1,11 +0,0 @@ -Support detached ROFL components - -Previously each bundle that contained one or more ROFL components also -needed to contain the exact version of the RONL component it was -attaching to. - -This is somewhat awkward to use when we assume a more decentralized -development and deployment of ROFL applications. This commit adds support -for detached ROFL components where the bundle only contains the ROFL and -oasis-node then automatically gets the appropriate RONL component from -another bundle. diff --git a/.changelog/5708.bugfix.md b/.changelog/5708.bugfix.md deleted file mode 100644 index c82e1063f7f..00000000000 --- a/.changelog/5708.bugfix.md +++ /dev/null @@ -1 +0,0 @@ -go/registry/api: update ProveFreshness tx body type diff --git a/.changelog/5711.trivial.md b/.changelog/5711.trivial.md deleted file mode 100644 index e69de29bb2d..00000000000 diff --git a/.changelog/5725.bugfix.md b/.changelog/5725.bugfix.md deleted file mode 100644 index 4f211878b7b..00000000000 --- a/.changelog/5725.bugfix.md +++ /dev/null @@ -1,5 +0,0 @@ -go/worker/storage: Do not add any particular roles - -Since the storage node is always coupled with another role, make sure -to not add any particular role as otherwise this could cause observer -nodes to also register as compute nodes and then misbehave. diff --git a/.changelog/5728.internal.md b/.changelog/5728.internal.md deleted file mode 100644 index 2095071b277..00000000000 --- a/.changelog/5728.internal.md +++ /dev/null @@ -1,5 +0,0 @@ -runtime: Add VerifiedAttestation with more metadata - -Since verified attestations generated from TEE capabilities can include -additional metadata like the enclave's view of consensus layer height at -time of attestation, this allows such data to be used by callers. diff --git a/.changelog/5730.internal.md b/.changelog/5730.internal.md deleted file mode 100644 index f83d5681a34..00000000000 --- a/.changelog/5730.internal.md +++ /dev/null @@ -1 +0,0 @@ -go: Bump CometBFT to 0.37.7-oasis1 diff --git a/.punch_version.py b/.punch_version.py index 522e8076ddf..4b1c151991d 100644 --- a/.punch_version.py +++ b/.punch_version.py @@ -1,3 +1,3 @@ year = '24' -minor = 0 +minor = 1 micro = 0 diff --git a/CHANGELOG.md b/CHANGELOG.md index 5e8e250dda8..c4808acf7ea 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -12,6 +12,88 @@ The format is inspired by [Keep a Changelog]. +## 24.1 (2024-06-28) + +| Protocol | Version | +|:------------------|:---------:| +| Consensus | 7.0.0 | +| Runtime Host | 5.1.0 | +| Runtime Committee | 5.0.0 | + +### Features + +- secret-sharing/src/churp: Implement key derivation center + ([#5698](https://github.com/oasisprotocol/oasis-core/issues/5698)) + +- keymanager/src/churp: Implement key derivation function + ([#5699](https://github.com/oasisprotocol/oasis-core/issues/5699)) + +- Support detached ROFL components + ([#5707](https://github.com/oasisprotocol/oasis-core/issues/5707)) + + Previously each bundle that contained one or more ROFL components also + needed to contain the exact version of the RONL component it was + attaching to. + + This is somewhat awkward to use when we assume a more decentralized + development and deployment of ROFL applications. This commit adds support + for detached ROFL components where the bundle only contains the ROFL and + oasis-node then automatically gets the appropriate RONL component from + another bundle. + +### Bug Fixes + +- go/worker/common: Always take the latest epoch for deployments + ([#5693](https://github.com/oasisprotocol/oasis-core/issues/5693)) + + Fix for an issue which could have prevented runtimes from being initialized + in case the runtime was suspended before the first node was started. + +- go/worker/common: Retry provisioning on epoch transitions when suspended + ([#5694](https://github.com/oasisprotocol/oasis-core/issues/5694)) + +- go/runtime/host: Ignore stale abort requests + ([#5702](https://github.com/oasisprotocol/oasis-core/issues/5702)) + +- keymanager: Increase MAX_FRESH_HEIGHT_AGE + ([#5703](https://github.com/oasisprotocol/oasis-core/issues/5703)) + + This avoids issues where key managers get out of sync during operation + and start rejecting otherwise valid requests. It should still be safe + especially since all new runtimes now perform freshness checks. + +- go/runtime/host/sgx: Fix SGX bundle validation + ([#5706](https://github.com/oasisprotocol/oasis-core/issues/5706)) + +- go/registry/api: update ProveFreshness tx body type + ([#5708](https://github.com/oasisprotocol/oasis-core/issues/5708)) + +- go/worker/storage: Do not add any particular roles + ([#5725](https://github.com/oasisprotocol/oasis-core/issues/5725)) + + Since the storage node is always coupled with another role, make sure + to not add any particular role as otherwise this could cause observer + nodes to also register as compute nodes and then misbehave. + +### Internal Changes + +- go: Reverse order of TCB update fetching + ([#5704](https://github.com/oasisprotocol/oasis-core/issues/5704)) + + Early TCB updates are now tried first when updating TCB info. If + validation for an early update fails, the mechanism falls back to the + standard update. + +- runtime: Add VerifiedAttestation with more metadata + ([#5728](https://github.com/oasisprotocol/oasis-core/issues/5728)) + + Since verified attestations generated from TEE capabilities can include + additional metadata like the enclave's view of consensus layer height at + time of attestation, this allows such data to be used by callers. + +- go: Bump CometBFT to 0.37.7-oasis1 + ([#5730](https://github.com/oasisprotocol/oasis-core/issues/5730)) + ## 24.0 (2024-05-13) | Protocol | Version |