Skip to content

CHANGELOG.md

Latest commit

 

History

History
56 lines (34 loc) · 3.24 KB

CHANGELOG.md

File metadata and controls

56 lines (34 loc) · 3.24 KB
Raw

Changelog

github.com/tempoxyz/tempo-go@0.5.0

Minor Changes

  • Add T5 AccountKeychain TIP-1053 witness bindings: AuthorizeKeyWithWitness(), BurnKeyAuthorizationWitness(), IsKeyAuthorizationWitnessBurned(), and matching selector constants.
  • Add T5 integration coverage for key-authorization witness burn, read, and authorize flows gated by TEMPO_HARDFORK=T5. (by @figtracer, #56)

Patch Changes

  • Accept legacy Ethereum recovery ID values {27, 28} in 65-byte secp256k1 signature envelopes during transaction deserialization, normalizing them to internal yParity {0, 1}. Structured RLP signature tuples remain strict and serialization continues to emit canonical yParity only. (by @BrendanRyan, #57)
  • Correlate JSON-RPC batch responses by request ID so reordered success and error responses remain associated with their requests. (by @BrendanRyan, #75)
  • Detect and remove only genuine fee-payer trailers, preserving transaction data that ends with the trailer marker. (by @BrendanRyan, #76)
  • Preserve the fee-payer sponsorship marker when cloning transactions so sender signing payloads remain valid. (by @BrendanRyan, #77)
  • Reject malformed fee-payer signature lists in transaction field 11 instead of accepting unsupported tuple shapes. (by @BrendanRyan, #74)

github.com/tempoxyz/tempo-go@0.4.1

Patch Changes

  • Reject non-canonical secp256k1 signatures during transaction deserialization and address recovery, preventing transaction hash malleability via legacy V values and high-S signatures. (by @BrendanRyan, #49)

All notable changes to this project will be documented in this file.

[Unreleased]

[0.4.0] - 2026-04-10

Added

  • CallScope, SelectorRule, and CallScopeBuilder for scoping access keys to specific contracts, function selectors, and recipients
  • KeyRestrictions builder with token spending limits, call scope allowlists, and IsCallAllowed validation
  • AuthorizeKey(), RevokeKey(), SetAllowedCalls(), RemoveAllowedCalls(), and UpdateSpendingLimit() precompile call encoders
  • AuthorizeKeyT3Selector constant for the T3+ authorizeKey ABI
  • TIP-20 selector constants: SelectorTransfer, SelectorApprove, SelectorTransferWithMemo, SelectorWildcard
  • Signature type constants: SignatureTypeSecp256k1, SignatureTypeP256, SignatureTypeWebAuthn

Changed

  • client.GetNonce() now accepts *big.Int instead of uint64 for the nonce key parameter, enabling full 192-bit nonce key support as per the Tempo Transaction spec
  • Integration tests use T3 authorizeKey ABI by default (set TEMPO_HARDFORK=T2 for legacy)

[0.2.0] - 2026-01-27

Security

  • Bumped go-ethereum from v1.13.5 to v1.16.8 to fix CVE-2026-22868 (GHSA-mq3p-rrmp-79jg), a high-severity DoS vulnerability via malicious p2p message

Breaking Changes

  • Minimum Go version is now 1.24 (previously 1.21). This is required by go-ethereum v1.16.8.

[0.1.0] - 2025-06-15

  • Initial release