Summary
BeaconKit 1.1.1 fixes ASA-2025-001 and ASA-2025-002, which could lead to a network halt. Moreover it hardens some checks around deposits and blobs processing.
Update Priority
This table provides priorities for which classes of users should update particular components.
User Class | Priority |
---|---|
Payload Builders | Recommended |
Non-Payload Builders | Recommended |
All Changes
- chore(comet): bumped cometBFT version (#2474)
- fix(blob): hardened blob checks (#2473)
- chore(deps): bumped go version to 1.23.5 (#2472)
- chore(kurtosis): Clean up Kurtosis and Support for Cloud Deployments (#2401)
- chore(logger): Drop logger generic (#2460)
- chore(types): Cleanup unused types/funcs and expose Service Registry (#2440)
- chore(api): Dropped node api context generic (#2456)
- fix(ci): Speed up CI, Add t.Parallel and Fix Test Parallelism Issue (#2459)
- chore(ci): make e2e-test run manual (#2453)
- Revert "chore(ci): add manual run/approval for e2e tests (#2447)" (#2452)
- chore(ci): add manual run/approval for e2e tests (#2447)
- chore(types): Introduce canonical sorting of common.Version (#2437)
- refactor(deposit-storage): Refactor set-deposit-storage and execution-payload to be callable in Runtime (#2446)
- refactor(deposits): Modularize Deposit Command for Easier Testing in Runtime (#2443)
- fix(engineAPI): error on ACCEPTED payload status (#2439)
- upgrade geth depdency from 1.14.7 to 1.14.13 (#2444)
- fix(flags): Fix Payload Builder Flags (#2442)
- chore(block-builder): a few minor cleanups (#2412)
- chore(types): Remove abstraction for Gwei (#2433)
- fix(deposits): Enforce deposit inclusion (#2407)
Binaries
System | Architecture | Binary | PGP Signature |
---|---|---|---|
amd64 | beacond-v1.1.1-linux-amd64 | Signature | |
arm64 | beacond-v1.1.1-linux-arm64 | Signature | |
arm64 | beacond-v1.1.1-darwin-arm64 | Signature | |
System | Option | - | Resource |
Docker | berachain/beacon-kit |
Verifying signatures
Use gpg to verify the signature on these binary archives. This is important to make sure that the content you've downloaded is legitimate. gpg can be installed with most package managers. For example:
brew install gpg
on macapt install gpg
on Ubuntu/Debian
Once gpg is installed, import our public key into its database and verify:
- Download signing public key from here.
- Run
gpg --import berachain_release.asc
- Verify with
gpg --verify {signature}.sig {binary}.tar.gz
- This message is expected:
WARNING: This key is not certified with a trusted signature!
- To resolve the warning, trust the key by signing with your own keypair.
gpg --lsign-key <keyid>