v1.0.0-rc.6 release (#6314)

* Package and version bumps * Updated mainnet checkpoints * Update test-checkpoints.txt * Bump zebrad rust-version to 1.68 * update the changelog * add suggestions Co-authored-by: teor <[email protected]> * fix typo Co-authored-by: Deirdre Connolly <[email protected]> * add suggestions from review Co-authored-by: teor <[email protected]> * add suggestion Co-authored-by: teor <[email protected]> --------- Co-authored-by: Alfredo Garcia <[email protected]> Co-authored-by: teor <[email protected]> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
ZcashFoundation · Mar 24, 2023 · c3273e4 · c3273e4
1 parent fc32e68
commit c3273e4
Show file tree

Hide file tree

Showing 19 changed files with 449 additions and 37 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,17 +5,42 @@ All notable changes to Zebra are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org).
 
-## [Zebra 1.0.0-rc.6](https://github.com/ZcashFoundation/zebra/releases/tag/v1.0.0-rc.6) - 2023-03-TODO INSERT DATE HERE
+## [Zebra 1.0.0-rc.6](https://github.com/ZcashFoundation/zebra/releases/tag/v1.0.0-rc.6) - 2023-03-23
 
-This release:
-- TODO: insert summary here
+In this release, we fixed several minor security issues, most notably [hardening Zebra in response to the vulnerabilities recently disclosed by Halborn](https://zfnd.org/statement-on-recent-security-disclosures-by-halborn/).
 
 ### Known Issues
 
-- `orchard` 0.3.0 can't verify `halo2` proofs when compiled with Rust 1.69 or later (currently nightly Rust TODO: update this based on https://releases.rs/ ). Compile Zebra with stable Rust to avoid this bug. ([halo2/#737](https://github.com/zcash/halo2/issues/737))
-    - TODO: turn this into a breaking change if the bug is fixed in `orchard` 0.3.1 or 0.4.0, and [Zebra has updated #6232](https://github.com/ZcashFoundation/zebra/issues/6232)
+- `orchard` 0.3.0 can't verify `halo2` proofs when compiled with Rust 1.69 or later (currently beta and nightly Rust). Compile Zebra with stable Rust to avoid this bug. ([halo2/#737](https://github.com/zcash/halo2/issues/737)).
+Zebra tracking issue for this problem is [#6232](https://github.com/ZcashFoundation/zebra/issues/6232).
+
+### Security
+
+- Harden Zebra's network protocol implementation in response to the Halborn disclosures ([#6297](https://github.com/ZcashFoundation/zebra/pull/6297))
+- Bump incrementalmerkletree from 0.3.0 to 0.3.1, resolving a consensus bug on 32-bit platforms ([#6258](https://github.com/ZcashFoundation/zebra/pull/6258))
+- Remove unused dependencies, and check for them in CI ([#6216](https://github.com/ZcashFoundation/zebra/pull/6216))
+- Validate address length before reading ([#6320](https://github.com/ZcashFoundation/zebra/pull/6320), [#6368](https://github.com/ZcashFoundation/zebra/pull/6368))
+
+### Added
+
+- Add instructions for mining with s-nomp to Zebra book ([#6220](https://github.com/ZcashFoundation/zebra/pull/6220))
+- Export block data to elasticsearch database ([#6274](https://github.com/ZcashFoundation/zebra/pull/6274))
+- Add elasticsearch section to Zebra book ([#6295](https://github.com/ZcashFoundation/zebra/pull/6295))
+
+### Changed
+
+- Update Zebra's build instructions ([#6273](https://github.com/ZcashFoundation/zebra/pull/6273))
+- Improve CommitBlockError message ([#6251](https://github.com/ZcashFoundation/zebra/pull/6251))
+
+### Fixed
+
+- Stop ignoring some transaction broadcasts ([#6230](https://github.com/ZcashFoundation/zebra/pull/6230))
+
+### Contributors
+
+Thank you to everyone who contributed to this release, we couldn't make Zebra without you:
+@arya2, @dconnolly, @mpguerra, @oxarbitrage, @teor2345 and @upbqdn
 
-TODO: insert the rest of the changelog here
 
 ## [Zebra 1.0.0-rc.5](https://github.com/ZcashFoundation/zebra/releases/tag/v1.0.0-rc.5) - 2023-02-23
 

diff --git a/Cargo.lock b/Cargo.lock
@@ -4740,7 +4740,7 @@ dependencies = [
 
 [[package]]
 name = "tower-batch"
-version = "0.2.36"
+version = "0.2.37"
 dependencies = [
  "color-eyre",
  "ed25519-zebra",
@@ -4764,7 +4764,7 @@ dependencies = [
 
 [[package]]
 name = "tower-fallback"
-version = "0.2.36"
+version = "0.2.37"
 dependencies = [
  "futures-core",
  "pin-project",
@@ -5708,7 +5708,7 @@ dependencies = [
 
 [[package]]
 name = "zebra-chain"
-version = "1.0.0-beta.21"
+version = "1.0.0-beta.22"
 dependencies = [
  "bitflags 2.0.2",
  "bitflags-serde-legacy",
@@ -5770,7 +5770,7 @@ version = "1.0.0-beta.0"
 
 [[package]]
 name = "zebra-consensus"
-version = "1.0.0-beta.21"
+version = "1.0.0-beta.22"
 dependencies = [
  "bellman",
  "blake2b_simd",
@@ -5813,7 +5813,7 @@ dependencies = [
 
 [[package]]
 name = "zebra-network"
-version = "1.0.0-beta.21"
+version = "1.0.0-beta.22"
 dependencies = [
  "bitflags 2.0.2",
  "byteorder",
@@ -5849,14 +5849,14 @@ dependencies = [
 
 [[package]]
 name = "zebra-node-services"
-version = "1.0.0-beta.21"
+version = "1.0.0-beta.22"
 dependencies = [
  "zebra-chain",
 ]
 
 [[package]]
 name = "zebra-rpc"
-version = "1.0.0-beta.21"
+version = "1.0.0-beta.22"
 dependencies = [
  "chrono",
  "futures",
@@ -5888,7 +5888,7 @@ dependencies = [
 
 [[package]]
 name = "zebra-script"
-version = "1.0.0-beta.21"
+version = "1.0.0-beta.22"
 dependencies = [
  "displaydoc",
  "hex",
@@ -5901,7 +5901,7 @@ dependencies = [
 
 [[package]]
 name = "zebra-state"
-version = "1.0.0-beta.21"
+version = "1.0.0-beta.22"
 dependencies = [
  "bincode",
  "chrono",
@@ -5940,7 +5940,7 @@ dependencies = [
 
 [[package]]
 name = "zebra-test"
-version = "1.0.0-beta.21"
+version = "1.0.0-beta.22"
 dependencies = [
  "color-eyre",
  "futures",
@@ -5967,7 +5967,7 @@ dependencies = [
 
 [[package]]
 name = "zebra-utils"
-version = "1.0.0-beta.21"
+version = "1.0.0-beta.22"
 dependencies = [
  "color-eyre",
  "hex",
@@ -5984,7 +5984,7 @@ dependencies = [
 
 [[package]]
 name = "zebrad"
-version = "1.0.0-rc.5"
+version = "1.0.0-rc.6"
 dependencies = [
  "abscissa_core",
  "atty",

diff --git a/README.md b/README.md
@@ -77,7 +77,7 @@ You can run Zebra using our Docker image.
 This command will run our latest release, and sync it to the tip:
 
 ```sh
-docker run zfnd/zebra:1.0.0-rc.5
+docker run zfnd/zebra:1.0.0-rc.6
 ```
 
 For more information, read our [Docker documentation](book/src/user/docker.md).
@@ -121,7 +121,7 @@ Note that the package `clang` includes `libclang` as well as the C++ compiler.
 Once the dependencies are in place, you can build Zebra
 
 ```sh
-cargo install --locked --git https://github.com/ZcashFoundation/zebra --tag v1.0.0-rc.5 zebrad
+cargo install --locked --git https://github.com/ZcashFoundation/zebra --tag v1.0.0-rc.6 zebrad
 ```
 
 You can start Zebra by

diff --git a/book/src/user/docker.md b/book/src/user/docker.md
@@ -11,13 +11,13 @@ You can deploy Zebra for a daily use with the images available in [Docker Hub](h
 ### Ready to use image
 
 ```shell
-docker run --detach zfnd/zebra:1.0.0-rc.5
+docker run --detach zfnd/zebra:1.0.0-rc.6
 ```
 
 ### Build it locally
 
 ```shell
-git clone --depth 1 --branch v1.0.0-rc.5 https://github.com/ZcashFoundation/zebra.git
+git clone --depth 1 --branch v1.0.0-rc.6 https://github.com/ZcashFoundation/zebra.git
 docker build --file docker/Dockerfile --target runtime --tag zebra:local
 docker run --detach zebra:local
 ```

diff --git a/tower-batch/Cargo.toml b/tower-batch/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "tower-batch"
-version = "0.2.36"
+version = "0.2.37"
 authors = ["Zcash Foundation <[email protected]>"]
 license = "MIT"
 edition = "2021"

diff --git a/tower-fallback/Cargo.toml b/tower-fallback/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "tower-fallback"
-version = "0.2.36"
+version = "0.2.37"
 authors = ["Zcash Foundation <[email protected]>"]
 license = "MIT"
 edition = "2021"

diff --git a/zebra-chain/Cargo.toml b/zebra-chain/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "zebra-chain"
-version = "1.0.0-beta.21"
+version = "1.0.0-beta.22"
 authors = ["Zcash Foundation <[email protected]>"]
 license = "MIT OR Apache-2.0"
 edition = "2021"

diff --git a/zebra-consensus/Cargo.toml b/zebra-consensus/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "zebra-consensus"
-version = "1.0.0-beta.21"
+version = "1.0.0-beta.22"
 authors = ["Zcash Foundation <[email protected]>"]
 license = "MIT OR Apache-2.0"
 edition = "2021"