Skip to content

Releases: Consensys/web3signer

24.2.0

19 Feb 07:51
@siladu siladu
24.2.0
6edeae3
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
24.2.0 Latest
Latest

This is a required update for Mainnet users containing the configuration for the Deneb upgrade on March 13th. This update is required for Gnosis Deneb network upgrade on March 11th. For all other networks, this update is optional.

Ethereum Mainnet configuration with Deneb fork scheduled for epoch 269568 (March 13, 2024, 13:55:35 UTC)
Gnosis configuration with Deneb fork scheduled for epoch 889856 (March 11, 2024, 18:30:20 UTC)

Highlights

Upcoming Breaking Changes

  • --Xworker-pool-size cli option will be removed in a future release. This option has been replaced with --vertx-worker-pool-size

Features Added

  • Add Deneb configuration for Mainnet #971
  • Improve Key Manager API import operation to use parallel processing instead of serial processing. Note, if you import a large number of keys while running as a signer, then this may degrade the signing performance for the duration of the import process. It is recommended to import large numbers of keys in batches. #968

Bugs fixed

  • Ensure that Web3Signer stops the http server when a sigterm is received

Downloads

File Checksum (sha256)
web3signer.tar.gz a1637bac774a38699a42f0c48706b9c08bed83cf8c8470e11ad6a6dd7280364d
web3signer.zip cd0c2d05dddc663b568c6715096f557e7e9ee07a5cf9f3600e315e986b8fe69e

Docker

  • docker pull consensys/web3signer:24.2.0

What's Changed

New Contributors

Full Changelog: 24.1.1...24.2.0

Contributors

usmansaleem, jframe, and 2 other contributors
Assets 2

24.1.1

25 Jan 07:24
@jframe jframe
24.1.1
4380ac2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
24.1.1

24.1.1

This is an optional release for mainnet Ethereum and it includes the updated network configuration for the Sepolia, Holesky and Chiado Deneb forks.

  • Sepolia is scheduled for 2024-01-30 22:51:12 UTC
  • Chiado is scheduled for 2024-01-31 18:15:40 UTC
  • Holesky is scheduled for 2024-02-07 11:34:24 UTC

Features Added

  • Add Deneb configuration for Sepolia, Holesky and Chiado forks

Downloads

File Checksum (sha256)
web3signer.tar.gz a4041cfdb40e6b7cc3f3da101fedd4aa50b935ec92f1bd842fa81054ce65c17a
web3signer.zip 2efeb0330583011e89374613a90b5d67181c556625ab0639b8adcedeae86fab0

Docker

  • docker pull consensys/web3signer:24.1.1
Assets 2

24.1.0

11 Jan 01:53
@jframe jframe
24.1.0
671de39
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
24.1.0

24.1.0

This is an optional release for mainnet Ethereum, required for the upcoming Goerli Deneb fork.

The Goerli upgrade is scheduled on 2024-01-17 06:32:00 UTC (timestamp 1705473120).

Bugs fixed

Features Added

  • Add Deneb configuration for Goerli #960

Downloads

File Checksum (sha256)
web3signer.tar.gz 6fb520db5f0ad54d0be897fb139a0cb808dbcf7960f14d822fa647f781163d07
web3signer.zip e599f67bf32b7a4ab269fce62e4179436caefbe6f707d64f8765ef79a063c86a

Docker

  • docker pull consensys/web3signer:24.1.0
Assets 2

23.11.0

14 Nov 19:18
@gfukushima gfukushima
23.11.0
4db92ab
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
23.11.0

23.11.0

This release patches a vulnerable dependency and is recommended for all users.

Upcoming Breaking Changes

  • --Xworker-pool-size cli option will be removed in a future release. This option has been replaced with --vertx-worker-pool-size.

Bugs fixed

Features Added

  • Google Cloud Secret Manager bulk loading support for BLS keys in eth2 mode via PR #928 contributed by Sergey Kisel.
  • Removed hidden option --Xtrusted-setup as Web3Signer does not need KZG trusted setup file anymore.
  • Make Vert.x worker pool size configurable using cli option --vertx-worker-pool-size (replaces the now deprecated: --Xworker-pool-size). #920

Downloads

File Checksum (sha256)
web3signer.tar.gz e7643a6aa32efd859e96a82cb3ea03a294fd92c22fffeab987e5ec97500867a8
web3signer.zip 9ba56683228ca356326c087b5f1e576e7d2081fc90450f049d9b869020ee929a

Docker

  • docker pull consensys/web3signer:23.11.0
Assets 2

23.9.1

26 Sep 04:50
@jframe jframe
23.9.1
254ec59
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
23.9.1

23.9.1

This is an optional release for mainnet Ethereum and it includes the updated configuration for the upcoming Holesky testnet launch.

Breaking Changes

  • Remove --validator-ids option from watermark-repair subcommand #909

Features Added

  • Aws bulk loading for secp256k1 keys in eth1 mode #889
  • Add High Watermark functionality #696
    • Update watermark-repair subcommand with new options --set-high-watermark, --remove-high-watermark #912
    • Add GET /highWatermark to eth2 endpoints #908
  • Add network configuration for revised Holesky testnet

Downloads

File Checksum (sha256)
web3signer.tar.gz aec9dc745cb25fd8d7b38b06e435e3138972c2cf842dd6f851d50be7bf081629
web3signer.zip 96b219817dd178235bebd9638b44263a457562e0ed8925c6c5315f7e23098a2f

Docker

  • docker pull consensys/web3signer:23.9.1
Assets 2

23.9.0

08 Sep 01:35
@jframe jframe
23.9.0
01b08f4
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
23.9.0

23.9.0

This an optional release for mainnet Ethereum and includes further improvements on the Web3Signer <> EthSigner feature consolidation. It also includes the upcoming Holesky testnet configuration.

Features Added

  • Signing support for BlobSidecar and BlindedBlobSidecar in Deneb fork.
  • Add --azure-response-timeout to allow request response timeout to be configurable, the field timeout is also accepted in the Azure metadata file. #888
  • Bulk load Ethereum v3 wallet files in eth1 mode.
  • Eth2 Signing request body now supports both signingRoot and the signing_root property
  • Add network configuration for Holesky testnet
  • Add eth_signTypedData RPC method under the eth1 subcommand. #893

Bugs fixed

  • Upcheck was using application/json accept headers instead text/plain accept headers

Downloads

File Checksum (sha256)
web3signer.tar.gz 7af5cd0589f6105f2267b6c9e6eedda077d597e6410975e1687a6a20e7f1518c
web3signer.zip c2b63dbbce20353e501a1453beeb33d6fc23de8ac4b0dce2675132232569f691

Docker

  • docker pull consensys/web3signer:23.9.0
Assets 2

23.8.1

25 Aug 01:41
@gfukushima gfukushima
23.8.1
389fc5f
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
23.8.1

23.8.1

This release patches a vulnerable dependency and is recommended for all users. This update has no other changes. Please see the release notes for version 23.8.0 for more information on the latest features, enhancements, and fixes in Web3Signer: https://github.com/Consensys/web3signer/releases/tag/23.8.0

Bugs fixed

Downloads

File Checksum (sha256)
web3signer.tar.gz dc51228c4462ac15cb5dc221e1e864063aa3f48038989063599f92c74e850760
web3signer.zip b16b6165369b1ef45df56196e56edf63d8c228d537796d9cdc2114328e1ca2cf

Docker

  • docker pull consensys/web3signer:23.8.1
Assets 2

23.8.0

25 Aug 00:14
@gfukushima gfukushima
23.8.0
c1c7538
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
23.8.0

23.8.0

EthSigner Feature Consolidation & Deprecation Notice

The Web3Signer <> EthSigner Feature consolidation is nearing completion! With the release of this latest version, Web3Signer now mirrors the existing functionality of EthSigner. It can now be used for remotely signing Ethereum transactions alongside the existing Ethereum validator signing features for Proof of Stake. Check out the Web3Signer documentation for more information.

This is also a notice that EthSigner is officially deprecated in favor of Web3Signer. In an effort to streamline our remote signing offerings and efforts, Web3Signer will continue to be supported with existing EthSigner features. You can expect future patches for bug fixes and continued public and private chain support. If you have questions, reach us on our Discord.

File Coin Deprecation Notice

As of version 23.8.0, File Coin is considered deprecated in Web3Signer. This is part of a broader move to simplify the codebase and increase development velocity. We encourage the community to maintain the code via a fork or PRs if it is needed for your use-case, or to use an older version of Web3Signer.

Breaking Changes

  • Use Java 17 for build and runtime. Remove Java 11 variant of docker image. zip/tar.gz distributions will require Java 17 or above to run Web3Signer.
  • Eth2 Azure command line option --azure-secrets-tags is now deprecated and is replaced with --azure-tags. The --azure-secrets-tags option will be removed in a future release.

Features Added

  • Add support for SECP256K1 remote signing using AWS Key Management Service. #501
  • Azure bulk mode support for loading multiline (\n delimited, up to 200) keys per secret.
  • Hashicorp connection properties can now override http protocol to HTTP/1.1 from the default of HTTP/2. #817
  • Add --key-config-path as preferred alias to --key-store-path #826
  • Add eth_signTransaction RPC method under the eth1 subcommand #822
  • Add eth_sendTransaction RPC method under the eth1 subcommand #835
  • Add EIP-1559 support for eth1 public transactions for eth_sendTransaction and eth_signTransaction #836
  • Add Azure bulk loading for secp256k1 keys in eth1 mode #850
  • Added Gnosis configuration for the 🦉 CAPELLA 🦉 network fork due at epoch 648704, UTC Tue 01/08/2023, 11:34:20 #865
  • Java 17 for build and runtime. #870
  • Update internal teku library to 23.8.0 #876
  • Add support for Lukso network --network=lukso

Bugs fixed

  • Support long name aliases in environment variables and YAML configuration #825

Downloads

File Checksum (sha256)
web3signer.tar.gz fb3556fc301b4ff6bec3b732b42e3ffe3928f220e6f0ffb8dca3fd879d276867
web3signer.zip cf3573d642fa8125b7306a083bcc073a71d501bbd3251bdcfadb73e90050f42f

Docker

  • docker pull consensys/web3signer:23.8.0
Assets 2

23.6.0

19 Jun 06:47
@jframe jframe
23.6.0
0f2d653
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
23.6.0

As part of our ongoing commitment to deliver the best remote signing solutions, we are announcing a change in our product offerings.

We have decided to deprecate our EthSigner product to focus our efforts on enhancing Web3Signer, our newly comprehensive remote signing solution. This is rooted in our strategy to streamline our offerings and focus on a single, robust product that will provide functionality for both transaction and Ethereum validator signing. We hope this makes it applicable to all your use-cases like public Ethereum signing, staking infrastructure offerings, and in private network contexts.

Rest assured, we are not dropping existing EthSigner functionality. We are updating Web3Signer to incorporate the functionalities of EthSigner alongside everything else in Web3Signer. We will ensure a smooth transition by maintaining EthSigner with necessary patches for an additional six months. We hope this provides ample time for any necessary migration to Web3Signer.

We have begun adding EthSigner functionality to Web3Signer. This is a work in progress and not complete.

Features Added

  • Optional Azure bulk loading tags support using cli option --azure-secrets-tags.
  • Support Prometheus Push Gateway Metrics #796
  • Cache Genesis Validators Root (GVR) in-memory on first database lookup. This would eliminate further database lookups
    for GVR during sign operations and improve their performance. #600
  • Add RPC proxy support to execution client under the eth1 subcommand #775
  • Add eth_accounts RPC method under the eth1 subcommand #784

Bugs Fixed

  • Upgrade jackson and vertx to upgrade snakeyaml to 2.0 to fix CVE-2022-1471
  • Fixed handling of very large number (30,000+) of signing metadata files with Hashicorp connection by introducing
    experimental flag to disable parallel processing --Xmetadata-files-parallel-processing-enabled.
    #794
  • Fixed startup error with web3signer where openAPI spec cannot be loaded #772
  • Removed unmaintained and out-of-date helm chart #802

Downloads

File Checksum (sha256)
web3signer.tar.gz 250c91e7fa18ae9d4962b083a95a7018775a6b99991f1423ce99ffef0366d4a5
web3signer.zip cb92a7bd50f2efe9d9c63d5db8fc10483b58912d08f96e13e0e50c2f8a33563d

Docker

  • docker pull consensys/web3signer:23.6.0
  • docker pull consensys/web3signer:23.6.0-jdk11
Assets 2

23.3.1

28 Mar 01:58
@jframe jframe
23.3.1
530273a
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
23.3.1

23.3.1

Web3Signer 23.3.1 is a required update for Mainnet users. Mainnet Capella hard fork is scheduled for April 12, 2023, 10:27:35pm UTC.

There are no database schema changes in this release.

Features Added

  • Add support for Capella milestone in Mainnet
  • Enhanced Healthcheck endpoint reporting status of loading of signers keys #738
  • Optional AWS endpoint overriding for bulk loading --aws-endpoint-override. Useful for local testing against localstack. #730

Bugs Fixed

  • Update of Azure libraries (transitive via signers library) and manual override to fix CVE-2023-1370
  • Fix issue with some third-party libraries not including logs in the web3signer logs due to missing slf4j2 library

Downloads

File Checksum (sha256)
web3signer.tar.gz 32dfbfd8d5900f19aa426d3519724dd696e6529b7ec2f99e0cb1690dae52b3d6
web3signer.zip 117bcd1115ff458b700562189c78d020390bd7b6f963a614f3800940a83a83fc

Docker

  • docker pull consensys/web3signer:23.3.1
  • docker pull consensys/web3signer:23.3.1-jdk11
Assets 2