From e54fdb62046abe5606026e1fd79c293c4f5888d0 Mon Sep 17 00:00:00 2001 From: Tess Rinearson Date: Thu, 8 Apr 2021 10:05:23 -0700 Subject: [PATCH] changelog: prepare changelog for 0.34.9 release (#6333) --- CHANGELOG.md | 29 +++++++++++++++++++++++++++++ CHANGELOG_PENDING.md | 8 +------- 2 files changed, 30 insertions(+), 7 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 5b22e0c16..c10a17f43 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,34 @@ # Changelog +## v0.34.9 + +*April 8, 2021* + +This release fixes a moderate severity security issue, Security Advisory Alderfly, +which impacts all networks that rely on Tendermint light clients. +Further details will be released once networks have upgraded. + +This release also includes a small Go API-breaking change, to reduce panics in the RPC layer. + +Special thanks to our external contributors on this release: @gchaincl + +Friendly reminder: We have a [bug bounty program](https://hackerone.com/tendermint). + +### BREAKING CHANGES + +- Go API + - [rpc/jsonrpc/server] [\#6204](https://github.com/tendermint/tendermint/issues/6204) Modify `WriteRPCResponseHTTP(Error)` to return an error (@melekes) + +### FEATURES + +- [rpc] [\#6226](https://github.com/tendermint/tendermint/issues/6226) Index block events and expose a new RPC method, `/block_search`, to allow querying for blocks by `BeginBlock` and `EndBlock` events (@alexanderbez) + +### BUG FIXES + +- [rpc/jsonrpc/server] [\#6191](https://github.com/tendermint/tendermint/issues/6191) Correctly unmarshal `RPCRequest` when data is `null` (@melekes) +- [p2p] [\#6289](https://github.com/tendermint/tendermint/issues/6289) Fix "unknown channels" bug on CustomReactors (@gchaincl) +- [light/evidence] Adds logic to handle forward lunatic attacks (@cmwaters) + ## v0.34.8 *February 25, 2021* diff --git a/CHANGELOG_PENDING.md b/CHANGELOG_PENDING.md index 1b4c41870..5cff3e98f 100644 --- a/CHANGELOG_PENDING.md +++ b/CHANGELOG_PENDING.md @@ -1,6 +1,6 @@ # Unreleased Changes -## v0.34.9 +## v0.34.10 Special thanks to external contributors on this release: @@ -15,18 +15,12 @@ Friendly reminder, we have a [bug bounty program](https://hackerone.com/tendermi - P2P Protocol - Go API - - [rpc/jsonrpc/server] \#6204 Modify `WriteRPCResponseHTTP(Error)` to return an error (@melekes) - Blockchain Protocol ### FEATURES -- [rpc] \#6226 Index block events and expose a new RPC method, `/block_search`, to allow querying for blocks by `BeginBlock` and `EndBlock` events. (@alexanderbez) - ### IMPROVEMENTS ### BUG FIXES -- [rpc/jsonrpc/server] \#6191 Correctly unmarshal `RPCRequest` when data is `null` (@melekes) -- [p2p] \#6289 Fix "unknown channels" bug on CustomReactors (@gchaincl) -- [light/evidence] Adds logic to handle forward lunatic attacks (@cmwaters)