Upgrade Validators by: end of day 9/13/2023
Docker: https://hub.docker.com/layers/aptoslabs/validator/aptos-node-v1.7.1/images/sha256-9afda34e40165257778111c3aa1929cfffd2a081cb9735c78f782ec8cde8a701?context=explore

What's Changed

Fix an issue where a node can fail starting after being killed in the middle of DB committing changes. https://github.com/aptos-labs/aptos-core/pull/10019

Full Changelog: https://github.com/aptos-labs/aptos-core/compare/aptos-node-v1.7.0...aptos-node-v1.7.1

Release Notes

Recommended CLI Version: v2.1.0+
Upgrade Validators by: end of day 9/12/2023
Upgrade Fullnodes by: end of day 9/13/2023
Docker: https://hub.docker.com/layers/aptoslabs/validator/aptos-node-v1.7.0/images/sha256-50863700cc3d87fc9dd3f35134e16daa4d44894f0e49aa1b564fad2c3518e8d7?context=explore

New features and enhancements

Aptos Blockchain

General

• Rust was upgraded to use the 1.71.1 toolchain version.

Storage

• To support [AIP-32] Storage Deletion Refund, the DB is now able to track the time stamp of a storage slot being created, and the amount paid for the slot allocation.

Networking

• Dedicated seed peers have been added to the default network configurations to allow new testnet and mainnet nodes to state sync more efficiently from genesis.

State sync

• State sync was updated to default to “intelligent syncing mode”, allowing nodes to synchronize more efficiently in the presence of network bandwidth constraints.
  Mempool

Aptos Frameworks

• [AIP-44] Module Event: Aptos Move now supports a new module-level event framework called Module Event targeting to replace the current instance event framework. Module event framework associates every event stream with a static struct type instead of an EventHandle.
  feature flag MODULE_EVENT will be enabled when appropriate.
• [AIP-32] Storage Deletion Refund: Now that AIP-17 has been implemented and deployed, storage allocation is charged on a per-slot basis and according to native currency based pricing without being affected by the gas price. On top of that, we keep a record of the amount paid for the allocation and refund it on deallocation.
• A Fee Statement is now emitted as a Module Event for each user transaction to reveal break down of the gas charge and the possible amount of storage deletion refund.
• [AIP-45] Safe burning for user-owned objects: Add a mechanism that allows users to unilaterally transfer any owned-object to a global burn address.
• [AIP-46] New Modules for ElGamal, Pedersen and Bulletproofs over Ristretto255: Adds new modules in the Move standard library for ElGamal ecryption, Pedersen commitments, and Bulletproof range proof verification, in addition to a few new natives for Ristretto255 elliptic curve operations.
  • Requires enabling feature flag BULLETPROOFS_ENABLED
• [AIP-48] Allow direct commission change vesting contract: allows the vesting contract owner to change the commission directly while keeping the same operator.

Move Language and VM

• [AIP-33]: Block Gas Limit: A new blockchain feature that can terminate block execution when the gas consumed by the committed prefix of transactions exceeds the block gas limit. This ensures that each block is executed within a predetermined limit of computational resources / time, thereby providing predictable latencies for latency-critical applications that involve even highly sequential and computationally heavy transactions.

Validator: Required
Fullnode: Optional (minimum v1.6.0 is required)

What's Changed

Fix an issue where quorum store digests in batch message were not checked to match the requested digest.

• [cherry-pick] [Quorum Store] check digest match, and log sender if mismatch by @bchocho in https://github.com/aptos-labs/aptos-core/pull/9867

Fix an issue where unexpected network messages could cause large memory usage while logging.

• [aptos-release-v1.6] [consensus][dag] Truncate bytes when debug logging network message (#9872) by @ibalajiarun in https://github.com/aptos-labs/aptos-core/pull/9876

Full Changelog: https://github.com/aptos-labs/aptos-core/compare/aptos-node-v1.6.2...aptos-node-v1.6.3

Update 20230829

Release Notes v1.6.0

Recommended CLI Version: v2.0.2+
Validator: Required by Aug 1st, 2023
Fullnode: Required by Aug 1st, 2023
Docker: aptos-node-v1.6.0

New features and enhancements

Aptos Blockchain

General

• The aptos-core repository dependency was upgraded to use rust version 1.70.0 from 1.66.1.

Storage

• AIP-38: The storage gas curves were deprecated, and IO gas prices were stabilized by decoupling the storage fee from gas pricing. This will remove fluctuations in gas pricing caused by an increase in global state storage.

Networking

• Performance: The networking stack has been updated to perform message deserialization in parallel. This helps to improve networking performance and latencies under high load.

State sync

• Configuration: The default configuration for mainnet nodes has been updated to use fast sync to account for the onset of data pruning on mainnet. New nodes can now be synchronized to the most recent state of mainnet without any manual configuration.

Mempool

• AIP-34 (Unit Gas Price Estimation): The unit gas price estimation API has been redesigned to provide clients with an estimate of the unit gas price they should use when the blockchain is overloaded. This ensures a transaction's execution within a reasonable amount of time.

Aptos Frameworks

• AIP-39 (Gas fee payer): The blockchain now supports adding an optional gas fee payer account to a transaction that will pay the transaction cost on behalf of the sender.
• AIP-28 (Partial voting for on-chain governance): Delegation stake pools can vote on a proposal with a portion of its voting power. Delegators in a delegation pool can use their voting power either to create proposals or to vote on them.
• AIP-36 (Aptos Unique Identifiers): Decouple unique identifier creation from account and object states. The new APIs allow for implicitly parallel creation of unique identifiers, and consequently, objects and tokens: generate_unique_address, object::create_object, and token::create_token.

Resolved Issues

• Fixed the gas cost for several cryptographic hash functions where the cost multiplier was missing.

What's Changed

• Fix indexer fullnode stuck issue: parse tables in resource groups https://github.com/aptos-labs/aptos-core/pull/9574

Full Changelog: https://github.com/aptos-labs/aptos-core/compare/aptos-node-v1.6.1...aptos-node-v1.6.2

What's Changed

• Fix indexer fullnode stuck issue: parse tables in resource groups

Full Changelog: https://github.com/aptos-labs/aptos-core/compare/aptos-node-v1.5.0...aptos-node-v1.5.3

• This is a proposal to add two new public functions added in https://github.com/aptos-labs/aptos-core/commit/78fb3739692a45235bd1b59ea7ed1a71fab00959 that make it easier for developers to grab the address of the collection and/or token created. This is an important addition to make developer experience better and in preparation for AIP-36 when the addresses of the tokens/collections created via aptos_token would no longer be predictable.

Validator: Required
Fullnode: Optional (minimum v1.6.0 is required)
Recommended CLI Version: v2.0.2+
Docker: aptos-node-v1.6.1

What's Changed

• Re-enable transaction dedup to improve performance

Full Changelog: https://github.com/aptos-labs/aptos-core/compare/aptos-node-v1.6.0...aptos-node-v1.5.1

Validator: Required
Fullnode: Optional
Minimum CLI Version: v2.0.1+

Docker image: aptoslabs/validator:aptos-node-v1.5.2_ddaa113362490dce7e7f0077519b36c11c6ced7e
Digest:sha256:4e200c64a762a21ab50ae83179a981566c32e2c87e754b6e66fcba46afbc6568

What's Changed

• Fixed an issue in which a specially-crafted Move module could exhaust a validator's memory.

Please note, because the source is not yet released do not build from the source archives attached, they are not correct

Validator: Required
Fullnode: Required
Minimum CLI Version: v2.0.1+

What's Changed

• VM logging fixes to remove all false positive speculative errors

Full Changelog: https://github.com/aptos-labs/aptos-core/compare/aptos-node-v1.5.0...aptos-node-v1.5.1

Release Notes v1.5.0

Validator: Required
Fullnode: Required
Minimum CLI Version: v2.0.1+
Docker:
Docker image tag aptos-node-v1.5.0
DIGEST: sha256:3d9af9aadd4c1f2f866b3a6f79a3acaa2de372ef1fc3827757a6f4dc1803e557

New features and enhancements

Aptos Blockchain

Storage

• The Aptos CLI now supports restoring a database with a user-specified span of the ledger history from a public database backup stored in the cloud. Read more about it here!

Networking

• AIP-29 Peer Monitoring Service: The peer monitoring service is now enabled by default on all Aptos nodes. This service tracks basic metadata across peers in the network, e.g., ping latencies between peers, network topology information and synced versions.

Dev Infra

• The performance docker build now uses ThinLTO, reducing the build time by 50% while maintaining the same performance number during testing.

Execution

• AIP-37 Filter duplicate transactions within a block: Implements a filtering mechanism that removes duplicate transactions before blocks are executed in the VM to prevent Block-STM performance degradation.

Aptos Frameworks

• AIP-20 Generic Operations of Algebraic Structures: Adds a cryptography algebra module and BLS12381 implementation that enable Move developers to build BLS signature verifiers, ZK-SNARK proofs and many cryptographic applications on top of them!
• AIP-21 Fungible Assets: Introduces a new Aptos standard that utilizes Move objects to allow any on-chain asset to be expressed as a fungible asset that consists of fungible units. This upgrade serves as a powerful superset and enhanced version of the existing Aptos coin standard, enabling the development of more feature-rich web3 applications with advanced tokenization capabilities.
• AIP-30 Implement decrease in staking rewards: Implements a 1.5% yearly decrease to the maximum staking reward rate based on the Aptos tokenomics requirement. The period and percentage are configurable via on-chain governance.

Move Language and VM

• AIP-35 Charging Invariant Violation Errors: Transactions that trigger invariant violation errors will now be charged instead of discarded to prevent a potential DDoS vector.

Resolved Issues

• Fixed the latency regression from v1.4 by reducing the aggressively configured execution pipeline backpressure. Mainnet latency should return to the same level as v1.3.
• Fixed a security issue in the docker-build-test.yaml workflow that could have allowed a malicious GitHub user to run arbitrary commands in GitHub Actions. Thanks to Nikita Stupin for reporting this issue via our Aptos Bounty program.
• Fixed a minor issue related to log handling for speculative execution attempted to be used in different (e.g. simulation) contexts.

What's Changed

• [VM] Fix the order of signer and non-signer tx arg validation to maintain backward compatibility by @movekevin in https://github.com/aptos-labs/aptos-core/pull/8658
• [Storage] Return the correct version for state snapshot when the root is not committed. by @grao1991 in https://github.com/aptos-labs/aptos-core/pull/8671

Full Changelog: https://github.com/aptos-labs/aptos-core/compare/aptos-node-v1.4.4...aptos-node-v1.4.5

Who should upgrade

• Validator: required
• Fullnode: optional

• Validator: required upgrade
• Fullnode: optional

What's changed

This change updated the VM verifier to fail properly if an unallowed struct is passed as an argument.

What's Changed

This hotfix implements a stricter depth check on VM values so that they do not cause issues for recursive algorithms.

Docker image https://hub.docker.com/layers/aptoslabs/validator/aptos-node-v1.4.3/images/sha256-8eefbd2fbf9819cc6984ce2f091670271dabd4ae482f3ae09fd300a279985399?context=explore

What's Changed

• Limit number of Ristretto255 points in ristretto255.move by @zjma in https://github.com/aptos-labs/aptos-core/pull/8153
  • Prevents an user from consuming too much memory on validators by creating many RistrettoPoint structs.
  • The current limit is set to 10,000 points. When the limit is exceeded, the current transaction will abort.

Check out the full release note for v1.4.0 here!

Commit hash: 6568c5ee6a58b4f96c0780d4f66d7e573e61c418

What's Changed

Check out the full release note for v1.4.0 here!

• [docker] release images without crane by @rustielin in https://github.com/aptos-labs/aptos-core/pull/7974
• Turn off crypto algebra and quorum store for v1.4 for now by @perryjrandall in https://github.com/aptos-labs/aptos-core/pull/7996
• [release-tooling] Support input key as string (#7882) by @runtian-zhou in https://github.com/aptos-labs/aptos-core/pull/7999
• [hotfix] token v2 burn event by @lightmark in https://github.com/aptos-labs/aptos-core/pull/8011
• [release] Fix tooling by @runtian-zhou in https://github.com/aptos-labs/aptos-core/pull/8004
• [aptos-vm] Add additional logging by @runtian-zhou in https://github.com/aptos-labs/aptos-core/pull/8030
• [mempool] cherry-pick reduce default failover: 3 -> 1 and related PRs by @bchocho in https://github.com/aptos-labs/aptos-core/pull/8027
• [Cherry pick] View function Object support by @gregnazario in https://github.com/aptos-labs/aptos-core/pull/8051

Docker Image: aptos-node-v1.4.1

Full Changelog: https://github.com/aptos-labs/aptos-core/compare/aptos-node-v1.4.0...aptos-node-v1.4.1

Release Notes

Minimum CLI Version: v1.0.11+

New features and enhancements

• The API endpoints for getting information about modules (ABIs) /accounts/<address>/modules and /accounts/<address>/module/<name> now return data with a new field called is_view in the information for each function exposed by the module. The value for this field will be true if the function is a view function, meaning it is annotated with #[view] in the module.

Aptos Blockchain

Consensus

• Quorum Store: A production-optimized implementation of Narwhal that improves consensus throughput. See AIP-26 for more details.
  • Quorum Store was tested in previewnet, a mainnet-like 100+ node network, where it increased TPS by 3x.
  • It will remove consensus as the primary bottleneck for throughput in the mainnet.
  • It has a wide surface area that changes details of how validators disseminate, order, and execute transactions.
• Predictable commit latencies during overloaded state: If the system is highly loaded, but not overloaded, all transactions should have bounded latencies. If the system is overloaded, high-fee transactions should have bounded latency (some of the low fee transactions will obviously have to expire or have high latencies). Current configuration bounds such latencies to ~5-7s in the worst case. This is achieved by revamped consensus backpressure, which now triggers based on the depth of the pipeline – the current delay between block creation and block commit (which happens after the quorum of node block commit certificate is gathered). Backpressure slows down block creation when the pipeline is full, and if that is not enough – it reduces the block size.

Execution

• AIP-27 Sender-aware transaction shuffling: Enables the shuffling of transactions within a single block so that transactions from the same sender are apart from each other as much as possible. This is done to reduce the number of conflicts and re-execution during parallel execution. Our end-to-end performance benchmark shows that sender-aware shuffling can improve the TPS by 25%. See https://github.com/aptos-labs/aptos-core/pull/6518 for more details.

Infra

• Kubernetes cluster upgrade
  • Upgraded Kubernetes to v1.24
    • Updated EBS CSI (persistent volume) driver to v1.14.1
  • Terraform:
    • Updated the Terraform libraries to the most recent versions
    • Applied the PSP-to-PSS security policy migration
• The performance build is ready for beta testing. With the activation of LTO and several other flags, the updated performance build profile has demonstrated a 15-20% performance improvement on validator nodes within the testing environment. To test it, use cargo build -p aptos-node --profile performance or apply the _performance suffix to the Docker tag.

Aptos Frameworks

• AIP-11 (Tokens as Objects): Introduces a new Aptos token standard that utilizes Move objects, allowing a token to represent a unique asset within a larger collection of assets. This standard supports the creation of rich applications such as NFTs, game assets, and no-code solutions while remaining fully interface-compatible, enabling applications to either specialize in the higher-level purpose of the token or generalize across all tokens.
• AIP-22 (No-Code Token Objects): The framework now supports a method to create token objects without writing any Move code, replicating much of the behavior of the original TokenV1 standard.
• AIP-23: Modifies ed25519 public key validation in native_public_key_validate to return false instead of aborting if the public key provided is of the wrong length, for the purpose of allowing more flexible error handling.

Move Language and VM

• AIP-24: Add FixedPoint64, various math functions (exp, log, mul_div, etc.), string formatting, and extra inline functions to the Aptos Move standard library.
• AIP-25 (Transaction Argument Support for Structs):
  • Transactions can call entry functions with the following non-primitive types as input parameters: Object<T>, FixedPoint32, FixedPoint64, or Option<T>.
  • View functions can use the above non-primitive types as input arguments.
• New signature checker implementation for the bytecode verifier to enhance its speed and strictness
• Improved the efficiency of the bounds checker

Resolved Issues

• Fixed two bugs that would allow one to partially bypass the bytecode verifier
  • Note: These fixes have been back-ported and deployed. They were not exploitable either, thanks to the paranoid mode in the Move VM.

Docker Image tag aptos-node-v1.4.0

Security hotfix

Docker aptoslabs/validator:aptos-node-v1.3.5@sha256:2c575d25db0ef1003d313cddc0d15b213bc694c490b5911f35b72c7a135692d5

https://hub.docker.com/layers/aptoslabs/validator/aptos-node-v1.3.5/images/sha256-2c575d25db0ef1003d313cddc0d15b213bc694c490b5911f35b72c7a135692d5?context=explore