Release 1.0.0-rc.9

CHANGELOG.md

@@ -5,16 +5,49 @@ All notable changes to Zebra are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org).
 
-## [Zebra 1.0.0-rc.9](https://github.com/ZcashFoundation/zebra/releases/tag/v1.0.0-rc.9) - XXXX-XX-XX
 
-In this release ...
+## [Zebra 1.0.0-rc.9](https://github.com/ZcashFoundation/zebra/releases/tag/v1.0.0-rc.9) - 2023-06-07
+
+This release continues to address audit findings. It fixes multiple network protocol and RPC bugs,
+and reduces sensitive information logging.
+
+This is the last release candidate before the 1.0.0 stable release. Please report bugs to [the Zebra GitHub repository](https://github.com/ZcashFoundation/zebra/issues/new?assignees=&labels=C-bug%2C+S-needs-triage&projects=&template=bug_report.yml&title=)
 
 ### Breaking Changes
 
 - The version subcommand has been replaced with a --version/-V flag ([#6801](https://github.com/ZcashFoundation/zebra/pull/6801))
+
+### Security
+
+- Stop logging peer IP addresses, to protect user privacy ([#6662](https://github.com/ZcashFoundation/zebra/pull/6662))
+- Stop logging potentially sensitive user information from unmined transactions ([#6616](https://github.com/ZcashFoundation/zebra/pull/6616))
+- Rate-limit MetaAddrChange::Responded from peers ([#6738](https://github.com/ZcashFoundation/zebra/pull/6738))
+- Ignore out of order Address Book changes, unless they are concurrent ([#6717](https://github.com/ZcashFoundation/zebra/pull/6717))
+- Limit blocks and transactions sent in response to a single request  ([#6679](https://github.com/ZcashFoundation/zebra/pull/6679))
+- Rate-limit and size-limit peer transaction ID messages ([#6625](https://github.com/ZcashFoundation/zebra/pull/6625))
+- Stop panicking on state RPC or block requests with very large heights ([#6699](https://github.com/ZcashFoundation/zebra/pull/6699))
+- Try harder to drop connections when they shut down, Credit: Ziggurat Team ([#6832](https://github.com/ZcashFoundation/zebra/pull/6832))
+- Randomly drop connections when inbound service is overloaded ([#6790](https://github.com/ZcashFoundation/zebra/pull/6790))
+
+### Added
+
+- Report compiler version and Zebra features when starting Zebra ([#6606](https://github.com/ZcashFoundation/zebra/pull/6606))
+- Update Zebra book summary to include supported platforms, platform tier policy, and versioning ([#6683](https://github.com/ZcashFoundation/zebra/pull/6683))
+- Improve zebrad's help output, credit to @Rqnsom ([#6801](https://github.com/ZcashFoundation/zebra/pull/6801))
+- Cache a list of useful peers on disk ([#6739](https://github.com/ZcashFoundation/zebra/pull/6739))
+- Make the first stable release forward-compatible with planned state changes ([#6813](https://github.com/ZcashFoundation/zebra/pull/6813))
+
+### Fixed
+
+- Limit RPC failure log length, add details to RPC failure logs ([#6754](https://github.com/ZcashFoundation/zebra/pull/6754))
+- Allow inbound connections to Zebra running in Docker ([#6755](https://github.com/ZcashFoundation/zebra/pull/6755))
 - Zebra now accepts filters for the start command when no subcommand is provided ([#6801](https://github.com/ZcashFoundation/zebra/pull/6801))
+- Avoid panicking on state errors during shutdown ([#6828](https://github.com/ZcashFoundation/zebra/pull/6828))
 
-...
+### Contributors
+
+Thank you to everyone who contributed to this release, we couldn't make Zebra without you:
+@arya2, @mpguerra, @oxarbitrage, @teor2345 and @upbqdn
 
 
 ## [Zebra 1.0.0-rc.8](https://github.com/ZcashFoundation/zebra/releases/tag/v1.0.0-rc.8) - 2023-05-10

Cargo.lock

@@ -4723,7 +4723,7 @@ dependencies = [
 
 [[package]]
 name = "tower-batch"
-version = "0.2.39"
+version = "0.2.40"
 dependencies = [
  "color-eyre",
  "ed25519-zebra",
@@ -4747,7 +4747,7 @@ dependencies = [
 
 [[package]]
 name = "tower-fallback"
-version = "0.2.39"
+version = "0.2.40"
 dependencies = [
  "futures-core",
  "pin-project",
@@ -5643,7 +5643,7 @@ dependencies = [
 
 [[package]]
 name = "zebra-chain"
-version = "1.0.0-beta.24"
+version = "1.0.0-beta.25"
 dependencies = [
  "bitflags 2.3.1",
  "bitflags-serde-legacy",
@@ -5703,7 +5703,7 @@ dependencies = [
 
 [[package]]
 name = "zebra-consensus"
-version = "1.0.0-beta.24"
+version = "1.0.0-beta.25"
 dependencies = [
  "bellman",
  "blake2b_simd",
@@ -5748,7 +5748,7 @@ dependencies = [
 
 [[package]]
 name = "zebra-network"
-version = "1.0.0-beta.24"
+version = "1.0.0-beta.25"
 dependencies = [
  "bitflags 2.3.1",
  "byteorder",
@@ -5788,7 +5788,7 @@ dependencies = [
 
 [[package]]
 name = "zebra-node-services"
-version = "1.0.0-beta.24"
+version = "1.0.0-beta.25"
 dependencies = [
  "color-eyre",
  "jsonrpc-core",
@@ -5800,7 +5800,7 @@ dependencies = [
 
 [[package]]
 name = "zebra-rpc"
-version = "1.0.0-beta.24"
+version = "1.0.0-beta.25"
 dependencies = [
  "chrono",
  "futures",
@@ -5832,7 +5832,7 @@ dependencies = [
 
 [[package]]
 name = "zebra-script"
-version = "1.0.0-beta.24"
+version = "1.0.0-beta.25"
 dependencies = [
  "displaydoc",
  "hex",
@@ -5845,7 +5845,7 @@ dependencies = [
 
 [[package]]
 name = "zebra-state"
-version = "1.0.0-beta.24"
+version = "1.0.0-beta.25"
 dependencies = [
  "bincode",
  "chrono",
@@ -5886,7 +5886,7 @@ dependencies = [
 
 [[package]]
 name = "zebra-test"
-version = "1.0.0-beta.24"
+version = "1.0.0-beta.25"
 dependencies = [
  "color-eyre",
  "futures",
@@ -5913,7 +5913,7 @@ dependencies = [
 
 [[package]]
 name = "zebra-utils"
-version = "1.0.0-beta.24"
+version = "1.0.0-beta.25"
 dependencies = [
  "color-eyre",
  "hex",
@@ -5934,7 +5934,7 @@ dependencies = [
 
 [[package]]
 name = "zebrad"
-version = "1.0.0-rc.8"
+version = "1.0.0-rc.9"
 dependencies = [
  "abscissa_core",
  "atty",

README.md

@@ -54,7 +54,7 @@ section in the Zebra book for system requirements.
 This command will run our latest release, and sync it to the tip:
 
 ```sh
-docker run zfnd/zebra:1.0.0-rc.8
+docker run zfnd/zebra:1.0.0-rc.9
 ```
 
 For more information, read our [Docker documentation](book/src/user/docker.md).
@@ -101,7 +101,7 @@ Note that the package `clang` includes `libclang` as well as the C++ compiler.
 Once the dependencies are in place, you can build Zebra
 
 ```sh
-cargo install --locked --git https://github.com/ZcashFoundation/zebra --tag v1.0.0-rc.8 zebrad
+cargo install --locked --git https://github.com/ZcashFoundation/zebra --tag v1.0.0-rc.9 zebrad
 ```
 
 You can start Zebra by
@@ -161,7 +161,6 @@ There are a few bugs in Zebra that we're still working on fixing:
 
 - Experimental Tor support is disabled until [Zebra upgrades to the latest `arti-client`](https://github.com/ZcashFoundation/zebra/issues/5492). This happened due to a Rust dependency conflict, which could only be resolved by `arti` upgrading to a version of `x25519-dalek` with the dependency fix.
 
-- Output of `help`, `--help` flag, and usage of invalid commands or options are inconsistent [#5502](https://github.com/ZcashFoundation/zebra/issues/5502). See the issue for details.
 
 ## Future Work
 

book/src/user/docker.md

@@ -11,13 +11,13 @@ You can deploy Zebra for a daily use with the images available in [Docker Hub](h
 ### Ready to use image
 
 ```shell
-docker run --detach zfnd/zebra:1.0.0-rc.8
+docker run --detach zfnd/zebra:1.0.0-rc.9
 ```
 
 ### Build it locally
 
 ```shell
-git clone --depth 1 --branch v1.0.0-rc.8 https://github.com/ZcashFoundation/zebra.git
+git clone --depth 1 --branch v1.0.0-rc.9 https://github.com/ZcashFoundation/zebra.git
 docker build --file docker/Dockerfile --target runtime --tag zebra:local .
 docker run --detach zebra:local
 ```

tower-batch/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "tower-batch"
-version = "0.2.39"
+version = "0.2.40"
 authors = ["Zcash Foundation <[email protected]>"]
 license = "MIT"
 edition = "2021"

tower-fallback/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "tower-fallback"
-version = "0.2.39"
+version = "0.2.40"
 authors = ["Zcash Foundation <[email protected]>"]
 license = "MIT"
 edition = "2021"

zebra-chain/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "zebra-chain"
-version = "1.0.0-beta.24"
+version = "1.0.0-beta.25"
 authors = ["Zcash Foundation <[email protected]>"]
 license = "MIT OR Apache-2.0"
 edition = "2021"

zebra-consensus/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "zebra-consensus"
-version = "1.0.0-beta.24"
+version = "1.0.0-beta.25"
 authors = ["Zcash Foundation <[email protected]>"]
 license = "MIT OR Apache-2.0"
 edition = "2021"