What's Changed

• test(p2p): comet-p2p vs lib-p2p benchmarks (backport #5746) by @mergify[bot] in #5768
• fix(autopool): modify recovery of autopool workers (backport #5775) by @mergify[bot] in #5779
• chore(node): dont log experimental warning for libp2p if running at height 0 (backport #5776) by @mergify[bot] in #5780
• fix(types): properly handle nil votes (backport #5777) by @mergify[bot] in #5781

Full Changelog: v0.39.0...v0.39.1

What's Changed

This release includes a number of performance improvements back ported from the v1.0.0 release, as well as the introduction of libp2p based networking as an alternative to cometp2p, and Adaptive Sync, which allows for consensus and blocksync to run along side each other.

See the full documentation on libp2p and Adaptive Sync for more details. For benchmark results of libp2p vs cometp2p, see the assets below.

See the CHANGELOG for this release.

What's Changed

• chore: add additional evidence validation (backport #5638) by @mergify[bot] in #5639
• fix(blocksync): ExtendedCommit verification via verified next blocks last commit (backport #5629) by @mergify[bot] in #5640
• fix(blocksync): use full commit verification in blocksync (backport #5711) by @mergify[bot] in #5727
• fix(blocksync): ensure full verification of second.LastCommit during sync (backport #5753) by @mergify[bot] in #5756

Full Changelog: v0.38.21...v0.38.22

What's Changed

• chore(statesync): add max snapshot chunks configuration (v0.38.x) by @mattac21 in #5548
• test: add unit tests for TotalVotingPowerSafe (backport #5570) by @mergify[bot] in #5581

Full Changelog: v0.38.20...v0.38.21

What's Changed

• build(deps): Bump actions/upload-artifact from 5 to 6 by @dependabot[bot] in #5528
• build(deps): Bump docker/setup-buildx-action from 3.8.0 to 3.12.0 by @dependabot[bot] in #5543
• chore(statesync): add max snapshot chunks configuration (v0.37.x) by @mattac21 in #5549
• chore(statesync): remove test file by @mattac21 in #5563
• build(deps): Bump styfle/cancel-workflow-action from 0.12.1 to 0.13.0 by @dependabot[bot] in #5571

Full Changelog: v0.37.17...v0.37.18

What's Changed

• Create NOTICE (backport #5495) by @mergify[bot] in #5496
• chore: add voting power validation (v0.38.x) by @technicallyty in #5520

Full Changelog: v0.38.19...v0.38.20

What's Changed

• build(deps): Bump actions/upload-artifact from 4 to 5 by @dependabot[bot] in #5471
• build(deps): Bump golangci/golangci-lint-action from 6 to 9 by @dependabot[bot] in #5489
• build(deps): Bump actions/checkout from 4 to 6 by @dependabot[bot] in #5504
• chore: remove panic by @technicallyty in #5525

Full Changelog: v0.37.16...v0.37.17

This is a security patch release to the CometBFT v0.38.x family that fixes GHSA-hrhf-2vcr-ghch

What's Changed

• chore: fix test docker image by @aljo242 in #5299
• chore: refactor changelogs by @aljo242 in #5303
• chore: update and fix mockery tooling on v0.38 by @aljo242 in #5301
• chore: fix the linter by @aljo242 in #5304
• fix(store): Properly prune extended commits (backport #5276) by @mergify[bot] in #5313
• chore: clean up the repo by @aljo242 in #5315
• fix: remove exposed dockertest port to unblock postgres test by @almk-dev in #5325
• fix(consensus/reactor): reject oversized proposals (backport #5324) by @mergify[bot] in #5407
• GHSA-hrhf-2vcr-ghch

Full Changelog: v0.38.18...v0.38.19

This is a security patch release to the CometBFT v0.37.x family that fixes GHSA-hrhf-2vcr-ghch.

What's Changed

• build(deps): Bump docker/login-action from 3.3.0 to 3.6.0 by @dependabot[bot] in #5439
• GHSA-hrhf-2vcr-ghch

Full Changelog: v0.37.15...v0.37.16

What's Changed

• fix: remove redundant error check for PubKeyToProto by @islishude in #4917
• ci: remove govulncheck (backport #4946) by @mergify[bot] in #4961
• build(deps): Bump docker/setup-buildx-action from 3.8.0 to 3.9.0 by @dependabot[bot] in #4936
• fix(ci): Fix docker builds (backport #4949) by @mergify[bot] in #4963
• build(deps): Bump docker/build-push-action from 6.13.0 to 6.14.0 by @dependabot[bot] in #4972
• build(deps): Bump docker/setup-buildx-action from 3.9.0 to 3.10.0 by @dependabot[bot] in #5008
• build(deps): Bump docker/build-push-action from 6.14.0 to 6.15.0 by @dependabot[bot] in #5009
• build(deps): Bump golang.org/x/sync from 0.10.0 to 0.11.0 by @dependabot[bot] in #4990
• build(deps): Bump github.com/spf13/cobra from 1.8.1 to 1.9.1 by @dependabot[bot] in #4992
• build(deps): Bump golang.org/x/net from 0.34.0 to 0.35.0 by @dependabot[bot] in #4998
• build(deps): Bump github.com/decred/dcrd/dcrec/secp256k1/v4 from 4.3.0 to 4.4.0 by @dependabot[bot] in #4997
• build(deps): Bump google.golang.org/protobuf from 1.36.4 to 1.36.5 by @dependabot[bot] in #4994
• build(deps): Bump github.com/prometheus/client_golang from 1.20.5 to 1.21.0 by @dependabot[bot] in #4995
• chore: fix typo in workflow_dispatch (backport #5164) by @mergify[bot] in #5166
• ci(testapp-docker): release two images, not one (backport #5014) by @mergify[bot] in #5168
• chore: add supported version to e2e image tag (backport #5169) by @mergify[bot] in #5171
• chore: remove tag from individual builds (backport #5173) by @mergify[bot] in #5174
• refactor: e2e-node docker build (backport #5176) by @mergify[bot] in #5178
• refactor: cometbft image build (backport #5179) by @mergify[bot] in #5181
• fix: add git to docker ignore (backport #5214) by @mergify[bot] in #5216
• fix: do multistage builds for e2e-node (backport #5220) by @mergify[bot] in #5222
• fix: add libs to e2e tests v0.38.x by @zrbecker in #5234
• chore: reindex to event sink from cli (backport #5209) by @mergify[bot] in #5240
• feat: precommit metrics by @technicallyty in #5251
• chore: prep release for v0.38.18 by @technicallyty in #5253

Full Changelog: v0.38.17...v0.38.18