Skip to content

chore: release v3.14.1 #4172

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
kevindeforth wants to merge 8 commits into from
Closed

chore: release v3.14.1 #4172

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
30029a5
chore: update contract migrations after 3.14 release (#4081)
gilcu3 Aug 6, 2026
db29bbe
chore(deny): ignore the unmaintained advisories for `im` and its depe…
pbeza Aug 11, 2026
1f9c693
chore: bump the rust-minor-and-patch group with 4 updates (#4113)
dependabot[bot] Aug 11, 2026
d2a5a46
ci: install catatonit for repro-env podman builds (#4125)
barakeinav1 Aug 12, 2026
cc6db05
ci: install catatonit in the image-publishing workflows (#4128)
barakeinav1 Aug 13, 2026
eb4bda0
ci: move runner images to ubuntu 26.04 (#4134)
gilcu3 Aug 13, 2026
ca9444c
chore(contract): extend attestation expiry time during migration
kevindeforth Aug 18, 2026
012e8c8
release: v3.14.1
kevindeforth Aug 18, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/build_contract.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ permissions:
jobs:
build-contract:
name: "Build contract reproducibly"
runs-on: warp-ubuntu-2404-x64-16x
runs-on: warp-ubuntu-2604-x64-16x

steps:
- name: Checkout repository
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/bump-nearcore.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ permissions:

jobs:
bump:
runs-on: ubuntu-latest
runs-on: warp-ubuntu-2604-x64-2x
steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
with:
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/changes.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ on:

jobs:
detect:
runs-on: warp-ubuntu-2404-x64-2x
runs-on: warp-ubuntu-2604-x64-2x
permissions:
contents: read
pull-requests: read
Expand Down
41 changes: 17 additions & 24 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,7 +37,7 @@ jobs:
name: "Build MPC Node TEE Docker image"
needs: changes
if: ${{ !cancelled() && needs.changes.outputs.code_changed != 'false' }}
runs-on: warp-ubuntu-2404-x64-16x
runs-on: warp-ubuntu-2604-x64-16x
timeout-minutes: 60
permissions:
contents: read
Expand All @@ -48,14 +48,13 @@ jobs:
with:
persist-credentials: false

- name: Allow unprivileged user namespaces (needed by repro-env/podman on Ubuntu 24.04)
- name: Allow unprivileged user namespaces (needed by repro-env)
run: sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0

- name: Install repro-env
run: |
wget 'https://github.com/kpcyrd/repro-env/releases/download/v0.4.3/repro-env'
echo '2a00b21ac5e990e0c6a0ccbf3b91e34a073660d1f4553b5f3cda2b09cc4d4d8a repro-env' | sha256sum -c -
sudo install -m755 repro-env -t /usr/bin
sudo apt-get update
sudo apt-get install -y repro-env

- name: Build MPC Node binary and image
run: |
Expand All @@ -71,7 +70,7 @@ jobs:
name: "Build Rust Launcher Docker image and verify"
needs: changes
if: ${{ !cancelled() && needs.changes.outputs.code_changed != 'false' }}
runs-on: warp-ubuntu-2404-x64-8x
runs-on: warp-ubuntu-2604-x64-8x
timeout-minutes: 60
permissions:
contents: read
Expand All @@ -82,24 +81,18 @@ jobs:
with:
persist-credentials: false

- name: Allow unprivileged user namespaces (needed by repro-env/podman on Ubuntu 24.04)
- name: Allow unprivileged user namespaces (needed by repro-env)
run: sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0

- name: Install build dependencies
run: |
sudo apt-get update
sudo apt-get install -y skopeo liblzma-dev podman

- name: Install repro-env
run: |
wget 'https://github.com/kpcyrd/repro-env/releases/download/v0.4.3/repro-env'
echo '2a00b21ac5e990e0c6a0ccbf3b91e34a073660d1f4553b5f3cda2b09cc4d4d8a repro-env' | sha256sum -c -
sudo install -m755 repro-env -t /usr/bin
sudo apt-get install -y liblzma-dev repro-env

- name: Build Rust launcher docker image and verify its hash
- name: Build Rust launcher docker image
shell: bash
run: |
./scripts/build-and-verify-rust-launcher-docker-image.sh
./deployment/build-images.sh --rust-launcher

- name: Run Rust launcher non-TEE runtime check
shell: bash
Expand All @@ -114,7 +107,7 @@ jobs:
# Skipping at the job level only registers unexpanded template name and
# required checks will be stuck.
if: ${{ !cancelled() }}
runs-on: ${{ matrix.runner || 'warp-ubuntu-2404-x64-16x' }}
runs-on: ${{ matrix.runner || 'warp-ubuntu-2604-x64-16x' }}
timeout-minutes: 60
permissions:
contents: read
Expand All @@ -127,7 +120,7 @@ jobs:
- group: "contract"
nextest-args: "--profile=ci-contract -p mpc-contract"
extra-tools: true
runner: warp-ubuntu-2404-x64-32x
runner: warp-ubuntu-2604-x64-32x
- group: "other"
nextest-args: "--profile=ci-other"
extra-tools: true
Expand Down Expand Up @@ -166,7 +159,7 @@ jobs:
name: "MPC contract reproducible build"
needs: changes
if: ${{ !cancelled() && needs.changes.outputs.code_changed != 'false' }}
runs-on: warp-ubuntu-2404-x64-16x
runs-on: warp-ubuntu-2604-x64-16x
timeout-minutes: 60
permissions:
contents: read
Expand Down Expand Up @@ -201,7 +194,7 @@ jobs:
name: "Nix build mpc-contract"
needs: changes
if: ${{ !cancelled() && needs.changes.outputs.code_changed != 'false' }}
runs-on: warp-ubuntu-2404-x64-16x
runs-on: warp-ubuntu-2604-x64-16x
timeout-minutes: 60
permissions:
contents: read
Expand Down Expand Up @@ -231,7 +224,7 @@ jobs:

fast-ci-checks:
name: "Fast CI checks"
runs-on: warp-ubuntu-2404-x64-8x
runs-on: warp-ubuntu-2604-x64-8x
permissions:
contents: read
steps:
Expand Down Expand Up @@ -262,7 +255,7 @@ jobs:
name: "MPC E2E tests"
needs: changes
if: ${{ !cancelled() && needs.changes.outputs.code_changed != 'false' }}
runs-on: warp-ubuntu-2404-x64-32x
runs-on: warp-ubuntu-2604-x64-32x
timeout-minutes: 60
permissions:
contents: read
Expand Down Expand Up @@ -317,7 +310,7 @@ jobs:
name: "Extra CI checks"
needs: changes
if: ${{ !cancelled() && needs.changes.outputs.code_changed != 'false' }}
runs-on: warp-ubuntu-2404-x64-2x
runs-on: warp-ubuntu-2604-x64-2x
permissions:
contents: read
steps:
Expand All @@ -338,7 +331,7 @@ jobs:
check-todo-closed-issues:
name: "Check TODOs for issues closed by this PR"
if: github.event_name == 'pull_request'
runs-on: warp-ubuntu-2404-x64-2x
runs-on: warp-ubuntu-2604-x64-2x
permissions:
contents: read
pull-requests: read
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/claude-pr-review.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ jobs:
(contains(github.event.comment.body, '@claude review') ||
contains(github.event.comment.body, '@claude code review')))
runs-on: ubuntu-latest
runs-on: warp-ubuntu-2604-x64-2x
permissions:
contents: read
pull-requests: read
Expand Down
12 changes: 3 additions & 9 deletions .github/workflows/docker_build_node.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ on:
jobs:
build-and-push-images:
name: "Build and push Docker node image with commit hash"
runs-on: warp-ubuntu-2404-x64-16x
runs-on: warp-ubuntu-2604-x64-16x
environment: production
permissions:
contents: read
Expand All @@ -32,19 +32,13 @@ jobs:
username: ${{ secrets.DOCKERHUB_USER }}
password: ${{ secrets.DOCKERHUB_PAT }}

- name: Allow unprivileged user namespaces (needed by repro-env/podman on Ubuntu 24.04)
- name: Allow unprivileged user namespaces (needed by repro-env)
run: sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0

- name: Install repro-env
run: |
wget 'https://github.com/kpcyrd/repro-env/releases/download/v0.4.3/repro-env'
echo '2a00b21ac5e990e0c6a0ccbf3b91e34a073660d1f4553b5f3cda2b09cc4d4d8a repro-env' | sha256sum -c -
sudo install -m755 repro-env -t /usr/bin

- name: Install skopeo
run: |
sudo apt-get update
sudo apt-get install -y skopeo
sudo apt-get install -y repro-env

- name: Build and push node image
run: |
Expand Down
12 changes: 3 additions & 9 deletions .github/workflows/docker_build_node_gcp.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ on:
jobs:
build-and-push-images:
name: "Build and push Docker node gcp image with commit hash"
runs-on: warp-ubuntu-2404-x64-16x
runs-on: warp-ubuntu-2604-x64-16x
environment: production
permissions:
contents: read
Expand All @@ -32,19 +32,13 @@ jobs:
username: ${{ secrets.DOCKERHUB_USER }}
password: ${{ secrets.DOCKERHUB_PAT }}

- name: Allow unprivileged user namespaces (needed by repro-env/podman on Ubuntu 24.04)
- name: Allow unprivileged user namespaces (needed by repro-env)
run: sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0

- name: Install repro-env
run: |
wget 'https://github.com/kpcyrd/repro-env/releases/download/v0.4.3/repro-env'
echo '2a00b21ac5e990e0c6a0ccbf3b91e34a073660d1f4553b5f3cda2b09cc4d4d8a repro-env' | sha256sum -c -
sudo install -m755 repro-env -t /usr/bin

- name: Install skopeo
run: |
sudo apt-get update
sudo apt-get install -y skopeo
sudo apt-get install -y repro-env

- name: Build and push node gcp image
run: |
Expand Down
12 changes: 3 additions & 9 deletions .github/workflows/docker_build_rust_launcher.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ on:
jobs:
build-and-push-images:
name: "Build and push Rust launcher Docker image with commit hash"
runs-on: warp-ubuntu-2404-x64-8x
runs-on: warp-ubuntu-2604-x64-8x
environment: production
permissions:
contents: read
Expand All @@ -26,19 +26,13 @@ jobs:
with:
persist-credentials: false

- name: Allow unprivileged user namespaces (needed by repro-env/podman on Ubuntu 24.04)
- name: Allow unprivileged user namespaces (needed by repro-env)
run: sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0

- name: Install build dependencies
run: |
sudo apt-get update
sudo apt-get install -y skopeo liblzma-dev podman

- name: Install repro-env
run: |
wget 'https://github.com/kpcyrd/repro-env/releases/download/v0.4.3/repro-env'
echo '2a00b21ac5e990e0c6a0ccbf3b91e34a073660d1f4553b5f3cda2b09cc4d4d8a repro-env' | sha256sum -c -
sudo install -m755 repro-env -t /usr/bin
sudo apt-get install -y liblzma-dev repro-env

- name: Login to Docker Hub
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
Expand Down
7 changes: 1 addition & 6 deletions .github/workflows/docker_launcher_release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ on:
jobs:
retag-launcher-image:
name: "Retag launcher image for release"
runs-on: warp-ubuntu-2404-x64-2x
runs-on: warp-ubuntu-2604-x64-2x
environment: production
permissions:
contents: read
Expand All @@ -40,11 +40,6 @@ jobs:
username: ${{ secrets.DOCKERHUB_USER }}
password: ${{ secrets.DOCKERHUB_PAT }}

- name: Install skopeo
run: |
sudo apt-get update
sudo apt-get install -y skopeo

- name: Verify source image exists
env:
SOURCE_TAG: ${{ inputs.source-tag }}
Expand Down
7 changes: 1 addition & 6 deletions .github/workflows/docker_node_release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,7 @@ on:
jobs:
retag-node-image:
name: "Retag node image for release"
runs-on: warp-ubuntu-2404-x64-2x
runs-on: warp-ubuntu-2604-x64-2x
environment: production
permissions:
contents: read
Expand All @@ -48,11 +48,6 @@ jobs:
username: ${{ secrets.DOCKERHUB_USER }}
password: ${{ secrets.DOCKERHUB_PAT }}

- name: Install skopeo
run: |
sudo apt-get update
sudo apt-get install -y skopeo

- name: Verify source image exists
env:
SOURCE_TAG: ${{ inputs.source-tag }}
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/external-services-tests.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ on:
jobs:
external-services-tests:
name: "Run tests that depend on external services"
runs-on: warp-ubuntu-2404-x64-2x
runs-on: warp-ubuntu-2604-x64-2x
timeout-minutes: 15
permissions:
contents: read
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/nightly_build.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ on:

jobs:
build-mpc:
runs-on: warp-ubuntu-2404-x64-8x
runs-on: warp-ubuntu-2604-x64-8x
environment: production
permissions:
contents: read
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/nix-build-mpc-node.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ on:
jobs:
nix-build-mpc-node:
name: "Nix build mpc-node"
runs-on: warp-ubuntu-2404-x64-32x
runs-on: warp-ubuntu-2604-x64-32x
timeout-minutes: 60
permissions:
contents: read
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/pr-title-lint.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ on:
jobs:
lint-pr-title:
name: "Check PR title format"
runs-on: warp-ubuntu-2404-x64-2x
runs-on: warp-ubuntu-2604-x64-2x
permissions:
contents: read
if: github.event_name == 'pull_request' || github.event_name == 'merge_group'
Expand All @@ -31,7 +31,7 @@ jobs:

check-pr-title-type:
name: "Validate title type matches changes"
runs-on: warp-ubuntu-2404-x64-2x
runs-on: warp-ubuntu-2604-x64-2x
permissions:
contents: read
pull-requests: write
Expand Down
7 changes: 1 addition & 6 deletions .github/workflows/release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ permissions:
jobs:
release:
name: "Promote built artifacts to a release"
runs-on: warp-ubuntu-2404-x64-2x
runs-on: warp-ubuntu-2604-x64-2x
environment: production
permissions:
contents: write
Expand Down Expand Up @@ -86,11 +86,6 @@ jobs:
exit 1
fi

- name: Install skopeo
run: |
sudo apt-get update
sudo apt-get install -y skopeo

- name: Login to Docker Hub
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
with:
Expand Down
19 changes: 19 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,25 @@ All notable changes to this project will be documented in this file.

This changelog is maintained using [git-cliff](https://git-cliff.org/) and [conventional commits](https://www.conventionalcommits.org/en/v1.0.0/).

## [3.14.1] - 2026-08-18

### ⚙️ Miscellaneous Tasks

- (@gilcu3): Update contract migrations after 3.14 release (#4081)

- (@pbeza): *(deny)* Ignore the unmaintained advisories for `im` and its dependencies (#4116)

- (@dependabot[bot]): Bump the rust-minor-and-patch group with 4 updates (#4113)

- (@barakeinav1): Install catatonit for repro-env podman builds (#4125)

- (@barakeinav1): Install catatonit in the image-publishing workflows (#4128)

- (@gilcu3): Move runner images to ubuntu 26.04 (#4134)

- (@kevindeforth): *(contract)* Extend attestation expiry time during migration
Comment on lines +12 to +24

@gilcu3 gilcu3 Aug 18, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this is where some links are missing, for example below in the file:

@kevindeforth kevindeforth Aug 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Oh boy, I need to check why those links don't show when I generate the changelog...

@gilcu3 gilcu3 Aug 19, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Probably easier to generate them manually as in any case the commits would be squashed being this a single PR adding all of them



## [3.14.0] - 2026-08-05

### 🚀 Features
Expand Down
Loading
Loading