Release 1.0.0-rc.9

CHANGELOG.md

@@ -5,6 +5,42 @@ All notable changes to Zebra are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org).
 
+
+## [Zebra 1.0.0-rc.9](https://github.com/ZcashFoundation/zebra/releases/tag/v1.0.0-rc.9) - 2023-06-07
+
+This release continues to address audit findings and reduces sensitive
+information logging, and is the last release candidate.
+
+### Security
+
+- Stop logging peer IP addresses, to protect user privacy ([#6662](https://github.com/ZcashFoundation/zebra/pull/6662))
+- Stop logging potentially sensitive user information from unmined transactions ([#6616](https://github.com/ZcashFoundation/zebra/pull/6616))
+- Rate-limit MetaAddrChange::Responded from peers ([#6738](https://github.com/ZcashFoundation/zebra/pull/6738))
+- Ignore out of order Address Book changes, unless they are concurrent ([#6717](https://github.com/ZcashFoundation/zebra/pull/6717))
+- Limit blocks and transactions sent in response to a single request  ([#6679](https://github.com/ZcashFoundation/zebra/pull/6679))
+- Rate-limit and size-limit peer transaction ID messages ([#6625](https://github.com/ZcashFoundation/zebra/pull/6625))
+- Stop panicking on state RPC or block requests with very large heights ([#6699](https://github.com/ZcashFoundation/zebra/pull/6699))
+
+### Added
+
+- Report compiler version and Zebra features when starting Zebra ([#6606](https://github.com/ZcashFoundation/zebra/pull/6606))
+- Update Zebra book summary to include supported platforms, platform tier policy, and versioning ([#6683](https://github.com/ZcashFoundation/zebra/pull/6683))
+- Add cargo update steps to task list ([#6657](https://github.com/ZcashFoundation/zebra/pull/6657))
+- Limit RPC failure log length, add details to RPC failure logs ([#6754](https://github.com/ZcashFoundation/zebra/pull/6754))
+- Stop logging peer IP addresses, to protect user privacy ([#6662](https://github.com/ZcashFoundation/zebra/pull/6662))
+- Accept default subcommand arguments and print consistent usage information for top-level 'help' subcommand ([#6801](https://github.com/ZcashFoundation/zebra/pull/6801))
+
+### Fixed
+
+- Limit RPC failure log length, add details to RPC failure logs ([#6754](https://github.com/ZcashFoundation/zebra/pull/6754))
+- Allow inbound connections to Zebra running in Docker ([#6755](https://github.com/ZcashFoundation/zebra/pull/6755))
+
+### Contributors
+
+Thank you to everyone who contributed to this release, we couldn't make Zebra without you:
+@arya2, @mpguerra, @oxarbitrage, @teor2345 and @upbqdn
+
+
 ## [Zebra 1.0.0-rc.8](https://github.com/ZcashFoundation/zebra/releases/tag/v1.0.0-rc.8) - 2023-05-10
 
 Starting in this release, Zebra has implemented an "end of support" halt. Just like `zcashd`, the `zebrad` binary will stop running 16 weeks after the last release date.

Cargo.lock

@@ -4799,7 +4799,7 @@ dependencies = [
 
 [[package]]
 name = "tower-batch"
-version = "0.2.39"
+version = "0.2.40"
 dependencies = [
  "color-eyre",
  "ed25519-zebra",
@@ -4823,7 +4823,7 @@ dependencies = [
 
 [[package]]
 name = "tower-fallback"
-version = "0.2.39"
+version = "0.2.40"
 dependencies = [
  "futures-core",
  "pin-project",
@@ -5736,7 +5736,7 @@ dependencies = [
 
 [[package]]
 name = "zebra-chain"
-version = "1.0.0-beta.24"
+version = "1.0.0-beta.25"
 dependencies = [
  "bitflags 2.3.1",
  "bitflags-serde-legacy",
@@ -5796,7 +5796,7 @@ dependencies = [
 
 [[package]]
 name = "zebra-consensus"
-version = "1.0.0-beta.24"
+version = "1.0.0-beta.25"
 dependencies = [
  "bellman",
  "blake2b_simd",
@@ -5841,7 +5841,7 @@ dependencies = [
 
 [[package]]
 name = "zebra-network"
-version = "1.0.0-beta.24"
+version = "1.0.0-beta.25"
 dependencies = [
  "bitflags 2.3.1",
  "byteorder",
@@ -5878,7 +5878,7 @@ dependencies = [
 
 [[package]]
 name = "zebra-node-services"
-version = "1.0.0-beta.24"
+version = "1.0.0-beta.25"
 dependencies = [
  "color-eyre",
  "jsonrpc-core",
@@ -5890,7 +5890,7 @@ dependencies = [
 
 [[package]]
 name = "zebra-rpc"
-version = "1.0.0-beta.24"
+version = "1.0.0-beta.25"
 dependencies = [
  "chrono",
  "futures",
@@ -5922,7 +5922,7 @@ dependencies = [
 
 [[package]]
 name = "zebra-script"
-version = "1.0.0-beta.24"
+version = "1.0.0-beta.25"
 dependencies = [
  "displaydoc",
  "hex",
@@ -5935,7 +5935,7 @@ dependencies = [
 
 [[package]]
 name = "zebra-state"
-version = "1.0.0-beta.24"
+version = "1.0.0-beta.25"
 dependencies = [
  "bincode",
  "chrono",
@@ -5975,7 +5975,7 @@ dependencies = [
 
 [[package]]
 name = "zebra-test"
-version = "1.0.0-beta.24"
+version = "1.0.0-beta.25"
 dependencies = [
  "color-eyre",
  "futures",
@@ -6002,7 +6002,7 @@ dependencies = [
 
 [[package]]
 name = "zebra-utils"
-version = "1.0.0-beta.24"
+version = "1.0.0-beta.25"
 dependencies = [
  "color-eyre",
  "hex",
@@ -6023,7 +6023,7 @@ dependencies = [
 
 [[package]]
 name = "zebrad"
-version = "1.0.0-rc.8"
+version = "1.0.0-rc.9"
 dependencies = [
  "abscissa_core",
  "atty",

README.md

@@ -54,7 +54,7 @@ section in the Zebra book for system requirements.
 This command will run our latest release, and sync it to the tip:
 
 ```sh
-docker run zfnd/zebra:1.0.0-rc.8
+docker run zfnd/zebra:1.0.0-rc.9
 ```
 
 For more information, read our [Docker documentation](book/src/user/docker.md).
@@ -101,7 +101,7 @@ Note that the package `clang` includes `libclang` as well as the C++ compiler.
 Once the dependencies are in place, you can build Zebra
 
 ```sh
-cargo install --locked --git https://github.com/ZcashFoundation/zebra --tag v1.0.0-rc.8 zebrad
+cargo install --locked --git https://github.com/ZcashFoundation/zebra --tag v1.0.0-rc.9 zebrad
 ```
 
 You can start Zebra by

book/src/user/docker.md

@@ -11,13 +11,13 @@ You can deploy Zebra for a daily use with the images available in [Docker Hub](h
 ### Ready to use image
 
 ```shell
-docker run --detach zfnd/zebra:1.0.0-rc.8
+docker run --detach zfnd/zebra:1.0.0-rc.9
 ```
 
 ### Build it locally
 
 ```shell
-git clone --depth 1 --branch v1.0.0-rc.8 https://github.com/ZcashFoundation/zebra.git
+git clone --depth 1 --branch v1.0.0-rc.9 https://github.com/ZcashFoundation/zebra.git
 docker build --file docker/Dockerfile --target runtime --tag zebra:local .
 docker run --detach zebra:local
 ```

tower-batch/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "tower-batch"
-version = "0.2.39"
+version = "0.2.40"
 authors = ["Zcash Foundation <[email protected]>"]
 license = "MIT"
 edition = "2021"

tower-fallback/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "tower-fallback"
-version = "0.2.39"
+version = "0.2.40"
 authors = ["Zcash Foundation <[email protected]>"]
 license = "MIT"
 edition = "2021"

zebra-chain/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "zebra-chain"
-version = "1.0.0-beta.24"
+version = "1.0.0-beta.25"
 authors = ["Zcash Foundation <[email protected]>"]
 license = "MIT OR Apache-2.0"
 edition = "2021"

zebra-consensus/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "zebra-consensus"
-version = "1.0.0-beta.24"
+version = "1.0.0-beta.25"
 authors = ["Zcash Foundation <[email protected]>"]
 license = "MIT OR Apache-2.0"
 edition = "2021"