# Changelog

All notable changes to this project will be documented in this file.


This changelog is maintained using [git-cliff](https://git-cliff.org/) and [conventional commits](https://www.conventionalcommits.org/en/v1.0.0/).

## [3.13.0] - 2026-06-24

### 🚀 Features

- [#3554](https://github.com/near/mpc/pull/3554)(@anodar): Validate aptos transactions with hardcoded tx_id in localnet.sh script (#3554)

- [#3518](https://github.com/near/mpc/pull/3518)(@gilcu3): Add yield point in CPU bound crypto code (#3518)

- [#3511](https://github.com/near/mpc/pull/3511)(@anodar): Available foreign chains contract API (#3511)

- [#3624](https://github.com/near/mpc/pull/3624)(@gilcu3): *(devnet)* Add localnet support in devnet (#3624)

- [#3578](https://github.com/near/mpc/pull/3578)(@SimonRastikian): Correlate governancethreshold with reconstructionthreshold (#3578)

- [#3626](https://github.com/near/mpc/pull/3626)(@pbeza): *(contract)* TEE verifier contract-account voting (#3626)

- [#3616](https://github.com/near/mpc/pull/3616)(@kevindeforth): Wire recent blocks tracker into event subscriber (#3616)


### 🐛 Bug Fixes

- [#3562](https://github.com/near/mpc/pull/3562)(@anodar): Pattern in changes.yml for detecting code changes (#3562)

- [#3573](https://github.com/near/mpc/pull/3573)(@pbeza): *(release)* Pin git-cliff to semver tags; restore dropped 3.12.0 changelog entries (#3573)

- [#3580](https://github.com/near/mpc/pull/3580)(@gilcu3): Repro issues related to docker caching and skopeo versions (#3580)

- [#3502](https://github.com/near/mpc/pull/3502)(@barakeinav1): *(deployment)* Exec mpc-node in start.sh so SIGTERM reaches the process (#3502)

- [#3617](https://github.com/near/mpc/pull/3617)(@anodar): Nits from available foreign chains work (contract changes) (#3617)

- [#3635](https://github.com/near/mpc/pull/3635)(@gilcu3): *(bench)* Make sure benches do not fail by fixing determinism (#3635)

- [#3632](https://github.com/near/mpc/pull/3632)(@gilcu3): *(ci)* Make rust cache key depend on nix cache key (#3632)

- [#3647](https://github.com/near/mpc/pull/3647)(@gilcu3): Indexer getting stuck when syncing from genesis (#3647)


### 🚜 Refactor

- [#3461](https://github.com/near/mpc/pull/3461)(@SimonRastikian): Reduce code redundancy in checks between presign and sign (#3461)

- [#3567](https://github.com/near/mpc/pull/3567)(@SimonRastikian): Renaming ReconstructionLowerBound to ReconstructionThreshold (#3567)

- [#3349](https://github.com/near/mpc/pull/3349)(@SimonRastikian): Cleanup and reorganizing ECDSA files and interfaces (#3349)

- [#3590](https://github.com/near/mpc/pull/3590)(@pbeza): *(attestation)* Drop `dcap-qvl` dependency from the `attestation` crate (#3590)

- [#3634](https://github.com/near/mpc/pull/3634)(@gilcu3): *(fix)* Relocate bench_utils ckd functions (#3634)

- [#3654](https://github.com/near/mpc/pull/3654)(@pbeza): *(contract)* Factor out shared `gen_authenticated_participants` helper (#3654)


### 📚 Documentation

- [#3589](https://github.com/near/mpc/pull/3589)(@kevindeforth): Update engineering standards with section about code comments (#3589)

- [#3607](https://github.com/near/mpc/pull/3607)(@barakeinav1): *(localnet)* Note neard 0.0.0.0 bind + version/genesis alignment for docker localnet (#3607)

- [#3613](https://github.com/near/mpc/pull/3613)(@barakeinav1): Document back-migration known limitations (#3613)


### ⚡ Performance

- [#3529](https://github.com/near/mpc/pull/3529)(@gilcu3): Optimize CKD computations in contract (#3529)


### 🧪 Testing

- [#3606](https://github.com/near/mpc/pull/3606)(@barakeinav1): Disable flaky back-migration e2e test (#3606)


### ⚙️ Miscellaneous Tasks

- [#3557](https://github.com/near/mpc/pull/3557)(@gilcu3): Remove 3.11 CaitSith restriction in the contract (#3557)

- [#3572](https://github.com/near/mpc/pull/3572)(@barakeinav1): Restore external_storage_fallback_threshold for pre-3.12.0 nodes (#3572)

- [#3575](https://github.com/near/mpc/pull/3575)(@dependabot[bot]): Bump http from 1.4.1 to 1.4.2 in the rust-minor-and-patch group (#3575)

- [#3559](https://github.com/near/mpc/pull/3559)(@gilcu3): Remove compat conversions in the contract (#3559)

- [#3588](https://github.com/near/mpc/pull/3588)(@anodar): Allow new foreign chain config before node upgrade (#3588)

- [#3577](https://github.com/near/mpc/pull/3577)(@SimonRastikian): Make the two threshold DTO conversions fallible & validating (#3577)

- [#3591](https://github.com/near/mpc/pull/3591)(@anodar): Add 'every' predicate in changes workflow filter (#3591)

- [#3595](https://github.com/near/mpc/pull/3595)(@anodar): Update skip condition in matrix job (#3595)

- [#3584](https://github.com/near/mpc/pull/3584)(@anodar): Bump up state transition to be from 3_12_0 (#3584)

- [#3611](https://github.com/near/mpc/pull/3611)(@anodar): Serve aptos rpc count (#3611)

- [#3615](https://github.com/near/mpc/pull/3615)(@gilcu3): Drop post 3.12 migrations (#3615)

- [#3629](https://github.com/near/mpc/pull/3629)(@gilcu3): Reuse nix dev cache in mpc-node nix build (#3629)

- [#3645](https://github.com/near/mpc/pull/3645)(@dependabot[bot]): Bump the rust-minor-and-patch group with 5 updates (#3645)

- [#3620](https://github.com/near/mpc/pull/3620)(@gilcu3): Bump nearcore to 2.13.0 rc1 (#3620)



## [3.12.0] - 2026-06-15

### 🚀 Features

- [#3327](https://github.com/near/mpc/pull/3327)(@anodar): Add foreign-chain whitelist verifier (#3327)

- [#3389](https://github.com/near/mpc/pull/3389)(@pbeza): *(foreign-chain-inspector)* Canonical-chain check for Starknet (#3389)

- [#3225](https://github.com/near/mpc/pull/3225)(@DSharifi): Fan out requests to all configured RPC providers (#3225)

- [#3390](https://github.com/near/mpc/pull/3390)(@pbeza): *(foreign-chain-inspector)* Canonical-chain check for Bitcoin (#3390)

- [#3244](https://github.com/near/mpc/pull/3244)(@DSharifi): TON support for foreign tx validation requests in mpc contract (#3244)

- [#3235](https://github.com/near/mpc/pull/3235)(@pbeza): *(tee-verifier-interface)* Borsh DTOs for the verifier contract boundary (#3235)

- [#3507](https://github.com/near/mpc/pull/3507)(@frolvanya): Aptos support for foreign tx validation requests in mpc contract (#3507)

- [#3237](https://github.com/near/mpc/pull/3237)(@pbeza): *(tee-verifier)* Stateless `dcap_qvl::verify` wrapper contract (#3237)

- [#3525](https://github.com/near/mpc/pull/3525)(@anodar): Add debug info about the number of configured foreign chain RPC providers (#3525)

- [#3504](https://github.com/near/mpc/pull/3504)(@gilcu3): Add a separate runtime for asset generation (#3504)

- [#3508](https://github.com/near/mpc/pull/3508)(@frolvanya): Aptos foreign-chain inspector and node wiring (#3508)

- [#3326](https://github.com/near/mpc/pull/3326)(@SimonRastikian): Adding resharing per-domain (#3326)

- [#3435](https://github.com/near/mpc/pull/3435)(@pbeza): *(indexer)* Add `/debug/recent_transactions` page (#3435)


### 🐛 Bug Fixes

- [#3397](https://github.com/near/mpc/pull/3397)(@gilcu3): Bump prometheus, fix missing nearcore metrics (#3397)

- [#3414](https://github.com/near/mpc/pull/3414)(@barakeinav1): *(attestation)* Reject non-empty app-compose init_script (#3414)

- [#3439](https://github.com/near/mpc/pull/3439)(@netrome): Enforce signer=predecessor across all governance methods (#3439)

- [#3420](https://github.com/near/mpc/pull/3420)(@barakeinav1): *(attestation)* Fail closed on unknown app-compose fields; reject tproxy_enabled (#3420)

- [#3469](https://github.com/near/mpc/pull/3469)(@gilcu3): *(ci)* Avoid cancelling concurrent docker push jobs (#3469)

- [#3410](https://github.com/near/mpc/pull/3410)(@barakeinav1): *(node)* Handle SIGTERM for graceful shutdown on operator stop (#3410)

- [#3515](https://github.com/near/mpc/pull/3515)(@gilcu3): Add asset id checks for follower paths (#3515)

- [#3519](https://github.com/near/mpc/pull/3519)(@gilcu3): Outgoing connection hanging on unstable network (#3519)

- [#3486](https://github.com/near/mpc/pull/3486)(@barakeinav1): *(node)* Drain embedded near-indexer thread on graceful shutdown (#3486)

- [#3491](https://github.com/near/mpc/pull/3491)(@DSharifi): *(contract)* Add auth check to `remove_non_participant_update_votes`  (#3491)

- [#3532](https://github.com/near/mpc/pull/3532)(@gilcu3): Make sure localnet launcher script kills processes successfully (#3532)

- [#3533](https://github.com/near/mpc/pull/3533)(@barakeinav1): *(tdx)* Default state sync to Peers (DSS); require tier3_public_addr (#3533)

- [#3560](https://github.com/near/mpc/pull/3560)(@gilcu3): *(test)* Remove time bomb from e2e tests (#3560)


### 💼 Other

- [#3441](https://github.com/near/mpc/pull/3441)(@gilcu3): Make mpc-node repro binary independent of local tags (#3441)

- [#3479](https://github.com/near/mpc/pull/3479)(@gilcu3): *(ci)* Update tools using in CI (#3479)

- [#3490](https://github.com/near/mpc/pull/3490)(@gilcu3): Bring back support for NEP-330 contract repro builds (#3490)


### 🚜 Refactor

- [#3359](https://github.com/near/mpc/pull/3359)(@SimonRastikian): Presign args private share (#3359)

- [#3455](https://github.com/near/mpc/pull/3455)(@kevindeforth): Drop `Result` from `RecentBlocksTracker::add_block` (#3455)

- [#3343](https://github.com/near/mpc/pull/3343)(@SimonRastikian): Cleanup frost interface (#3343)

- [#3330](https://github.com/near/mpc/pull/3330)(@kevindeforth): Share blocks tracker instance between queues (#3330)

- [#3481](https://github.com/near/mpc/pull/3481)(@kevindeforth): Wrap `BlockStatus` in handle (#3481)

- [#3497](https://github.com/near/mpc/pull/3497)(@kevindeforth): RecentBlocksTracker uses types from chain gateway crate (#3497)

- [#3498](https://github.com/near/mpc/pull/3498)(@kevindeforth): Move recent blocks tracker to chain-gateway crate (#3498)

- [#3344](https://github.com/near/mpc/pull/3344)(@SimonRastikian): Cleaning up the test_utils.rs in threshold signatures crate (#3344)


### 📚 Documentation

- [#3339](https://github.com/near/mpc/pull/3339)(@SimonRastikian): Documenting eddsa with presign (#3339)

- [#3423](https://github.com/near/mpc/pull/3423)(@gilcu3): Add SAFETY notice in bls scalar zeroize block (#3423)

- [#3431](https://github.com/near/mpc/pull/3431)(@anodar): Update documentation to allow all methods for added keys (#3431)

- [#3376](https://github.com/near/mpc/pull/3376)(@pbeza): *(design)* Clarify verifier-rotation eviction in `attestation-verifier-contract.md` (#3376)

- [#3443](https://github.com/near/mpc/pull/3443)(@barakeinav1): Build dstack-mr from a pinned DSTACK_REV (not master) (#3443)

- [#3468](https://github.com/near/mpc/pull/3468)(@netrome): One-pager for node operators (#3468)

- [#3436](https://github.com/near/mpc/pull/3436)(@anodar): Propose different way of calculating supported foreign chain set (#3436)

- [#3408](https://github.com/near/mpc/pull/3408)(@barakeinav1): Use dstack v0.5.11 build-args for reproducible key-provider mr_enclave (#3408)

- [#3458](https://github.com/near/mpc/pull/3458)(@barakeinav1): Require every CVM port (incl. migration `:8079`) bound to a dedicated IP (#3458)

- [#3488](https://github.com/near/mpc/pull/3488)(@barakeinav1): Design doc for auto-removal of unused launcher image hashes (#3488)

- [#3558](https://github.com/near/mpc/pull/3558)(@SimonRastikian): Adding unsaid bits in the contract interface (#3558)


### 🧪 Testing

- [#3384](https://github.com/near/mpc/pull/3384)(@gilcu3): Add unit test for incoming connections task drop bug (#3384)

- [#3399](https://github.com/near/mpc/pull/3399)(@SimonRastikian): Flaky test for DamgardEtAl (#3399)

- [#3478](https://github.com/near/mpc/pull/3478)(@gilcu3): Verify participants below threshold are not kicked out when attestation fails (#3478)

- [#3374](https://github.com/near/mpc/pull/3374)(@gilcu3): Showcase contention during asset generation, analyse problem and solutions (#3374)


### ⚙️ Miscellaneous Tasks

- [#3391](https://github.com/near/mpc/pull/3391)(@gilcu3): Remove unneeded file (#3391)

- [#3394](https://github.com/near/mpc/pull/3394)(@gilcu3): Bump cargo-near/cargo-near-build to 0.20.3, remove workaround (#3394)

- [#3402](https://github.com/near/mpc/pull/3402)(@dependabot[bot]): Bump tar from 0.4.45 to 0.4.46 in the cargo group across 1 directory (#3402)

- [#3416](https://github.com/near/mpc/pull/3416)(@netrome): Upgrade Hyper to 1.10.1 (#3416)

- [#3418](https://github.com/near/mpc/pull/3418)(@gilcu3): Prevent dependabot updating nearcore pinned versions (#3418)

- [#3419](https://github.com/near/mpc/pull/3419)(@gilcu3): Eliminate the need for python in the codebase (#3419)

- [#3424](https://github.com/near/mpc/pull/3424)(@dependabot[bot]): Bump the rust-minor-and-patch group across 1 directory with 3 updates (#3424)

- [#3427](https://github.com/near/mpc/pull/3427)(@gilcu3): Use upstream version of cache-nix-action (#3427)

- [#3134](https://github.com/near/mpc/pull/3134)(@anodar): Deduplicate code with wait_for_debug_migration, elaborate comment on resitual race window (#3134)

- [#3325](https://github.com/near/mpc/pull/3325)(@kevindeforth): Remove new final blocks from add block result and use snapshots for test (#3325)

- [#3446](https://github.com/near/mpc/pull/3446)(@dependabot[bot]): Bump http from 1.4.0 to 1.4.1 in the rust-minor-and-patch group (#3446)

- [#3447](https://github.com/near/mpc/pull/3447)(@dependabot[bot]): Bump near-kit from 0.7.2 to 0.9.1 (#3447)

- [#3459](https://github.com/near/mpc/pull/3459)(@gilcu3): Delete triple migration steps from 3.11, clean legacy triples column (#3459)

- [#3465](https://github.com/near/mpc/pull/3465)(@gilcu3): Bump nearcore to 2.12.0 (#3465)

- [#3449](https://github.com/near/mpc/pull/3449)(@barakeinav1): *(deployment)* Clarify TDX HW requirements are per-CVM, bump disk to 1TB (#3449)

- [#3470](https://github.com/near/mpc/pull/3470)(@gilcu3): Remove EpochData legacy cleanup behavior (#3470)

- [#3483](https://github.com/near/mpc/pull/3483)(@SimonRastikian): Deployment of the contract to 3.11.2 (#3483)

- [#3506](https://github.com/near/mpc/pull/3506)(@barakeinav1): *(tdx)* Default to DSS-first state sync in operator setup (#3506)

- [#3530](https://github.com/near/mpc/pull/3530)(@gilcu3): Align devnet with the workspace deps (#3530)

- [#3544](https://github.com/near/mpc/pull/3544)(@dependabot[bot]): Bump thread-priority from 1.2.0 to 3.0.0 (#3544)

- [#3542](https://github.com/near/mpc/pull/3542)(@dependabot[bot]): Bump the rust-minor-and-patch group across 1 directory with 4 updates (#3542)

- [#3528](https://github.com/near/mpc/pull/3528)(@anodar): Bump protocol version in genesis for localnet deployment (#3528)

- [#3168](https://github.com/near/mpc/pull/3168)(@barakeinav1): *(tee)* Address PR #3155 follow-up nits (#3168)

- [#3565](https://github.com/near/mpc/pull/3565)(@pbeza): Release v3.12.0 (#3565)



## [3.11.0] - 2026-05-27

### 🚀 Features

- [#3249](https://github.com/near/mpc/pull/3249)(@anodar): Implement voting for RPC providers (#3249)

- [#3299](https://github.com/near/mpc/pull/3299)(@gilcu3): Split ecdsa triple pool per threshold (#3299)

- [#3317](https://github.com/near/mpc/pull/3317)(@gilcu3): Lock all CaitSith domains to the same threshold (#3317)


### 🐛 Bug Fixes

- [#3291](https://github.com/near/mpc/pull/3291)(@andrei-near): Release workflow env and secrets (#3291)

- [#3285](https://github.com/near/mpc/pull/3285)(@gilcu3): Make robust-ecdsa tasks infallible (#3285)

- [#3296](https://github.com/near/mpc/pull/3296)(@pbeza): Decouple advisory-ID enforcement from tcbStatus check (#3296)

- [#3337](https://github.com/near/mpc/pull/3337)(@netrome): Prevent overwriting other participant's attestations (#3337)


### 💼 Other

- [#3284](https://github.com/near/mpc/pull/3284)(@gilcu3): *(nix)* Remove stale neard flake (#3284)

- [#3323](https://github.com/near/mpc/pull/3323)(@gilcu3): Add reproducible nix build for mpc-contract (#3323)


### 🚜 Refactor

- [#3286](https://github.com/near/mpc/pull/3286)(@kevindeforth): Split `get_requests_to_attempt` in queue.rs (#3286)

- [#3319](https://github.com/near/mpc/pull/3319)(@kevindeforth): `RecentBlocksTracker` does no longer track block contents (#3319)


### 📚 Documentation

- [#3192](https://github.com/near/mpc/pull/3192)(@barakeinav1): Running multiple MPC nodes on one host (#3192)

- [#3256](https://github.com/near/mpc/pull/3256)(@barakeinav1): Fill gaps in MPC image-hash voting section (#3256)

- [#3254](https://github.com/near/mpc/pull/3254)(@barakeinav1): Add documentation for resharing log entries (#3254)

- [#3253](https://github.com/near/mpc/pull/3253)(@barakeinav1): Submit_participant_info verification + errors (#3253)

- [#3302](https://github.com/near/mpc/pull/3302)(@barakeinav1): *(operator-guide)* Standardize on bare `near` CLI invocation (#3302)

- [#3297](https://github.com/near/mpc/pull/3297)(@barakeinav1): *(node-migration-guide)* Revoke OLD node's signer key after migration (#3297)

- [#3308](https://github.com/near/mpc/pull/3308)(@barakeinav1): *(operator-guide)* Typography, heading, and copy sweep (#3308)

- [#3310](https://github.com/near/mpc/pull/3310)(@barakeinav1): *(operator-guide)* Refresh dstack UI screenshots for 0.5.8 (#3310)

- [#3311](https://github.com/near/mpc/pull/3311)(@pbeza): *(design)* Attestation verifier contract breakout (#3311)


### 🧪 Testing

- [#3346](https://github.com/near/mpc/pull/3346)(@barakeinav1): *(e2e)* Back-migration regression test (#3346)

- [#3365](https://github.com/near/mpc/pull/3365)(@barakeinav1): *(e2e)* Wait for indexer progress in back-migration restart (fix flaky test) (#3365)


### ⚙️ Miscellaneous Tasks

- [#3263](https://github.com/near/mpc/pull/3263)(@barakeinav1): *(cvm-deployment)* Align user-config.toml example with prod values (#3263)

- [#3276](https://github.com/near/mpc/pull/3276)(@dependabot[bot]): Bump gcloud-sdk from 0.29.0 to 0.30.0 (#3276)

- [#3275](https://github.com/near/mpc/pull/3275)(@anodar): Don't run CI tests on doc only change prs (#3275)

- [#3287](https://github.com/near/mpc/pull/3287)(@andrei-near): Production environment for workflows (#3287)

- [#3294](https://github.com/near/mpc/pull/3294)(@dependabot[bot]): Bump openssl from 0.10.79 to 0.10.80 in the cargo group across 1 directory (#3294)

- [#3280](https://github.com/near/mpc/pull/3280)(@gilcu3): Remove migrations after 3.10 release (#3280)

- [#3315](https://github.com/near/mpc/pull/3315)(@gilcu3): Remove legacy pending requests after 3.10 (#3315)

- [#3314](https://github.com/near/mpc/pull/3314)(@gilcu3): Remove legacy-JSON compat for DomainConfig after 3.10 (#3314)

- [#3328](https://github.com/near/mpc/pull/3328)(@gilcu3): Remove mpc-contract dep from backup-cli (#3328)

- [#3354](https://github.com/near/mpc/pull/3354)(@gilcu3): Unify sanbox version across workspace (#3354)

- [#3358](https://github.com/near/mpc/pull/3358)(@gilcu3): Update contract-history after 3.10.1 contract update (#3358)

- [#3288](https://github.com/near/mpc/pull/3288)(@gilcu3): Update frost crates to 3.0 (#3288)

- [#3332](https://github.com/near/mpc/pull/3332)(@gilcu3): Bump nix-installer-action to avoid node.js 20 warning (#3332)

- [#3356](https://github.com/near/mpc/pull/3356)(@gilcu3): Use nix for contract reproducible builds (#3356)

- [#3338](https://github.com/near/mpc/pull/3338)(@barakeinav1): *(tee/localnet)* Unify port_override with cvm-deployment + add migration smoke test (#3238) (#3338)

- [#3321](https://github.com/near/mpc/pull/3321)(@gilcu3): Bump nearcore to 2.12 rc 1, bumps rust to 1.93 (#3321)

- [#3367](https://github.com/near/mpc/pull/3367)(@dependabot[bot]): Bump the rust-minor-and-patch group with 2 updates (#3367)

- [#3371](https://github.com/near/mpc/pull/3371)(@gilcu3): Update edition to 2024 in most crates (#3371)

- [#3378](https://github.com/near/mpc/pull/3378)(@gilcu3): Bump to nearcore 2.12-rc2 (#3378)


## [3.10.0] - 2026-05-18

### 🚀 Features

- [#2915](https://github.com/near/mpc/pull/2915)(@DSharifi): Foreign chain inspector supports base (#2915)

- [#2918](https://github.com/near/mpc/pull/2918)(@DSharifi): *(sdk)* Support `base` for foreign tx validation (#2918)

- [#2943](https://github.com/near/mpc/pull/2943)(@DSharifi): Node performs foreign chain validation for Base (#2943)

- [#2934](https://github.com/near/mpc/pull/2934)(@kevindeforth): *(contract)* Vote generics structs (#2934)

- [#3001](https://github.com/near/mpc/pull/3001)(@DSharifi): [**breaking**] Nodes don't require unanimous conensus on RPC providers (#3001)

- [#3010](https://github.com/near/mpc/pull/3010)(@pbeza): *(tee-authority)* Support multiple PCCS endpoints with fallback (#3010)

- [#3043](https://github.com/near/mpc/pull/3043)(@barakeinav1): *(launcher)* Add restart policy for MPC node container when started by the launcher (#3043)

- [#3059](https://github.com/near/mpc/pull/3059)(@DSharifi): Add jemalloc pprof endpoint on the node (#3059)

- [#3026](https://github.com/near/mpc/pull/3026)(@barakeinav1): *(tee)* [**breaking**] Allow PCCS with self-signed TLS certs via operator config (#3026)

- [#3107](https://github.com/near/mpc/pull/3107)(@DSharifi): *(foreign-chain-inspector)* Support arbitrum validation requests (#3107)

- [#3106](https://github.com/near/mpc/pull/3106)(@DSharifi): Accept foreign tx validation requests on contract (#3106)

- [#3110](https://github.com/near/mpc/pull/3110)(@DSharifi): Node performs foreign chain signature requests for arbitrum (#3110)

- [#3085](https://github.com/near/mpc/pull/3085)(@gilcu3): Add Protocol enum in DomainConfig (#3085)

- [#3086](https://github.com/near/mpc/pull/3086)(@DSharifi): *(contract)* Add API to submit foreign support instead of configuration (#3086)

- [#3049](https://github.com/near/mpc/pull/3049)(@barakeinav1): *(tee-authority)* Reject PCCS collateral older than 7 days (#3049)

- [#3144](https://github.com/near/mpc/pull/3144)(@DSharifi): *(sdk)* Add support for aribtrum in sdk (#3144)

- [#3148](https://github.com/near/mpc/pull/3148)(@DSharifi): Contract supports polygon and hyper_evm foreign tx request (#3148)

- [#3149](https://github.com/near/mpc/pull/3149)(@DSharifi): *(inspector)* Support polygon + hyper_evm validation requests (#3149)

- [#3154](https://github.com/near/mpc/pull/3154)(@DSharifi): *(sdk)* Support hyper_evm and polygon (#3154)

- [#3158](https://github.com/near/mpc/pull/3158)(@DSharifi): Node supports sign requests for polygon + hyper (#3158)

- [#3161](https://github.com/near/mpc/pull/3161)(@gilcu3): Add ReconstructionThreshold to DomainConfig (#3161)

- [#3177](https://github.com/near/mpc/pull/3177)(@anodar): *(config)* Support query-param auth and optional header scheme (#3177)

- [#3188](https://github.com/near/mpc/pull/3188)(@barakeinav1): *(node)* Enable decentralised state sync (DSS) (#3188)

- [#3211](https://github.com/near/mpc/pull/3211)(@kevindeforth): Metric for counting failed requests (#3211)

- [#3187](https://github.com/near/mpc/pull/3187)(@netrome): Fan-out responses to all duplicate requests (#3187)

- [#3216](https://github.com/near/mpc/pull/3216)(@anodar): Implement foreign chain RPC providers in contract (#3216)

- [#3228](https://github.com/near/mpc/pull/3228)(@barakeinav1): *(node-config)* Validate NearInitConfig address fields as SocketAddr (#3228)


### 🐛 Bug Fixes

- [#3056](https://github.com/near/mpc/pull/3056)(@anodar): Retry conclude_node_migration until contract reflects completion, not until tx is applied (#3056)

- [#3108](https://github.com/near/mpc/pull/3108)(@kevindeforth): Recent blocks tracker memory leak (#3108)

- [#3091](https://github.com/near/mpc/pull/3091)(@netrome): EVM inspector checks that transaction is on the canonical chain (#3091)

- [#3185](https://github.com/near/mpc/pull/3185)(@anodar): Don't serve rpc providers information over public debug endpoint (#3185)

- [#3159](https://github.com/near/mpc/pull/3159)(@kevindeforth): `RecentBlocksTracker` removes dead blocks instead of classifying them as `OptimisticAndCanonical` (#3159)

- [#3227](https://github.com/near/mpc/pull/3227)(@netrome): Use randomly generated delimiters in heredocs in LLM workflows (#3227)

- [#3272](https://github.com/near/mpc/pull/3272)(@DSharifi): Correctly label succeeded and failed transactions (#3272)

- [#3273](https://github.com/near/mpc/pull/3273)(@pbeza): *(scripts)* Make `prepare-release.sh` work on BSD/macOS (#3273)


### 💼 Other

- [#2919](https://github.com/near/mpc/pull/2919)(@anodar): Add make targets that run tests on fresh checkout (#2919)

- [#3021](https://github.com/near/mpc/pull/3021)(@DSharifi): *(nix)* Add reproducible build flake for mpc-node (#3021)

- [#3151](https://github.com/near/mpc/pull/3151)(@DSharifi): Use x86-64-v3 instruction set (#3151)

- [#3222](https://github.com/near/mpc/pull/3222)(@barakeinav1): *(launcher)* Render TEE compose from contract template at deploy time (#3222)


### 🚜 Refactor

- [#2931](https://github.com/near/mpc/pull/2931)(@gilcu3): Remove node dependency on the contract for the crypto types (#2931)

- [#2929](https://github.com/near/mpc/pull/2929)(@DSharifi): Pre-build http clients to avoid duplication (#2929)

- [#2944](https://github.com/near/mpc/pull/2944)(@pbeza): Replace Phala collateral endpoint with direct PCCS calls (#2944)

- [#2951](https://github.com/near/mpc/pull/2951)(@barakeinav1): Remove Python launcher (#2951)

- [#2954](https://github.com/near/mpc/pull/2954)(@gilcu3): Unify NodeId from contract and dto (#2954)

- [#2964](https://github.com/near/mpc/pull/2964)(@gilcu3): Unify participant types from the contract/node and interface (#2964)

- [#2976](https://github.com/near/mpc/pull/2976)(@gilcu3): Remove node contract dependency for TEE and migration types in the node (#2976)

- [#2984](https://github.com/near/mpc/pull/2984)(@DSharifi): Create generic config type for all foreign chains (#2984)

- [#2989](https://github.com/near/mpc/pull/2989)(@gilcu3): Rename sign_pk to tls_public_key in ParticipantInfo (#2989)

- [#3048](https://github.com/near/mpc/pull/3048)(@pbeza): *(tee-authority)* Add typed PCCS endpoint errors and fallback logging (#3048)

- [#3034](https://github.com/near/mpc/pull/3034)(@kevindeforth): `mpc_client.rs` and `PendingRequests` unit tests (#3034)

- [#3017](https://github.com/near/mpc/pull/3017)(@anodar): Don't panic in test helpers (#3017)

- [#3050](https://github.com/near/mpc/pull/3050)(@gilcu3): Separate keyshare related contract-internal types/logic from node-facing interface types (#3050)

- [#3057](https://github.com/near/mpc/pull/3057)(@kevindeforth): Move block height check out of `RecentBlocksTracker`, into `PendingRequests` (#3057)

- [#3069](https://github.com/near/mpc/pull/3069)(@kevindeforth): Recent blocks tracker relies on internal block height (#3069)

- [#3115](https://github.com/near/mpc/pull/3115)(@gilcu3): Remove V2Secp256k1 variant (#3115)

- [#3132](https://github.com/near/mpc/pull/3132)(@kevindeforth): RecentBlocksTracker use weak pointers for parent (#3132)

- [#3155](https://github.com/near/mpc/pull/3155)(@barakeinav1): *(tee)* Testnet TEE scripts Python→Rust + unify with localnet (#3155)

- [#3180](https://github.com/near/mpc/pull/3180)(@kevindeforth): Remove `OlderThanRecentWindow` variant from `CheckBlockResult` (#3180)

- [#3189](https://github.com/near/mpc/pull/3189)(@barakeinav1): Extract apply_near_config_patches helper (#3189)

- [#3209](https://github.com/near/mpc/pull/3209)(@kevindeforth): Replace classify-blocks with atomic u8 in `RecentBlocksTracker` (#3209)

- [#3236](https://github.com/near/mpc/pull/3236)(@kevindeforth): Improve `RecentBlocksTracker` invariants (#3236)


### 📚 Documentation

- [#2912](https://github.com/near/mpc/pull/2912)(@DSharifi): Design solution for allowing per node foreign tx rpc provider configurations (#2912)

- [#2960](https://github.com/near/mpc/pull/2960)(@barakeinav1): Clarify launcher vote uses manifest digest (#2960)

- [#2947](https://github.com/near/mpc/pull/2947)(@mitinarseny): Use relative links in ckd-example-cli (#2947)

- [#3013](https://github.com/near/mpc/pull/3013)(@pbeza): Tell agents to verify docs stay aligned with code changes (#3013)

- [#3006](https://github.com/near/mpc/pull/3006)(@anodar): Update e2e tests documentation (#3006)

- [#3029](https://github.com/near/mpc/pull/3029)(@barakeinav1): Recommend unlimited function-call allowance for the MPC operator account (#3029)

- [#3095](https://github.com/near/mpc/pull/3095)(@barakeinav1): Add PCCS configuration guidance to operator deployment guide (#3095)

- [#3097](https://github.com/near/mpc/pull/3097)(@barakeinav1): Add PCCS Collateral Handling section to TEE design doc (#3097)

- [#3163](https://github.com/near/mpc/pull/3163)(@barakeinav1): Tighten PCCS TLS-mode wording across operator guide + template (#3163)

- [#3152](https://github.com/near/mpc/pull/3152)(@barakeinav1): *(tdx-guide)* Pin apt sources for reproducible key-provider build (#3152)

- [#3259](https://github.com/near/mpc/pull/3259)(@gilcu3): Clarify the DKG in README, add link to internal crypto docs (#3259)

- [#3271](https://github.com/near/mpc/pull/3271)(@netrome): Fix doc drift in `pending_signature_queue_len` (#3271)

- [#3234](https://github.com/near/mpc/pull/3234)(@barakeinav1): Fix operator deployment guide (#3234)


### ⚡ Performance

- [#3007](https://github.com/near/mpc/pull/3007)(@pbeza): *(contract)* Enable dcap-qvl `json-core` feature to slim wasm (#3007)

- [#3023](https://github.com/near/mpc/pull/3023)(@pbeza): *(contract)* Slim attestation crate wasm by 14.38 KiB (#3023)

- [#3035](https://github.com/near/mpc/pull/3035)(@DSharifi): Use jemalloc as memory allocator on node (#3035)


### 🧪 Testing

- [#2922](https://github.com/near/mpc/pull/2922)(@anodar): Pass account_id in request, implement ToNearKey trait (#2922)

- [#2844](https://github.com/near/mpc/pull/2844)(@DSharifi): Update sandbox integration test to use a builder pattern for setup (#2844)

- [#2946](https://github.com/near/mpc/pull/2946)(@anodar): Port test_cleanup_lagging_node from pytest to Rust e2e (#2946)

- [#2953](https://github.com/near/mpc/pull/2953)(@anodar): Port foreign chain policy and transaction validation from pytest to Rust e2e (#2953)

- [#2988](https://github.com/near/mpc/pull/2988)(@anodar): Port migration endpoint and migration service from pytest to Rust e2e (#2988)

- [#3015](https://github.com/near/mpc/pull/3015)(@anodar): Port multi-domain key event and robust ECDSA request-during-resharing from pytest to Rust (#3015)

- [#3041](https://github.com/near/mpc/pull/3041)(@barakeinav1): Update allowance to unlimited in all scrips (#3041)

- [#3124](https://github.com/near/mpc/pull/3124)(@anodar): Flaky migration service test (#3124)

- [#3147](https://github.com/near/mpc/pull/3147)(@gilcu3): Add e2e for contract upgrade compatibility (#3147)

- [#3126](https://github.com/near/mpc/pull/3126)(@anodar): Flaky key_resharing test (#3126)

- [#3133](https://github.com/near/mpc/pull/3133)(@gilcu3): *(perf)* Measure testnet signing performance using devnet (#3133)


### ⚙️ Miscellaneous Tasks

- [#2927](https://github.com/near/mpc/pull/2927)(@DSharifi): Bump tooling versions on CI and nix (#2927)

- [#2924](https://github.com/near/mpc/pull/2924)(@gilcu3): Leave some amount of contract increase without breaking CI (#2924)

- [#2926](https://github.com/near/mpc/pull/2926)(@gilcu3): Use Ed25519PublicKey in the contract interface consistently (#2926)

- [#2940](https://github.com/near/mpc/pull/2940)(@gilcu3): Update migrations after 3.9.0 release (#2940)

- [#2958](https://github.com/near/mpc/pull/2958)(@gilcu3): Fix dependabot vulnerability, bump rand (#2958)

- [#2968](https://github.com/near/mpc/pull/2968)(@dependabot[bot]): Bump tokio-metrics from 0.4.9 to 0.5.0 (#2968)

- [#2969](https://github.com/near/mpc/pull/2969)(@dependabot[bot]): Bump the rust-minor-and-patch group across 1 directory with 3 updates (#2969)

- [#2949](https://github.com/near/mpc/pull/2949)(@barakeinav1): *(localnet)* Use slirp gateway for NEAR_BOOT_NODES so CVMs reach neard on loopback (#2949)

- [#2974](https://github.com/near/mpc/pull/2974)(@gilcu3): Make account public key non-optional (#2974)

- [#2993](https://github.com/near/mpc/pull/2993)(@DSharifi): Update rustls due to RUSTSEC-2026-0104 (#2993)

- [#2990](https://github.com/near/mpc/pull/2990)(@gilcu3): Reduce contract size by disabling anyhow features (#2990)

- [#3003](https://github.com/near/mpc/pull/3003)(@dependabot[bot]): Bump openssl from 0.10.76 to 0.10.78 in the cargo group across 1 directory (#3003)

- [#3038](https://github.com/near/mpc/pull/3038)(@dependabot[bot]): Bump average from 0.16.0 to 0.17.0 (#3038)

- [#3040](https://github.com/near/mpc/pull/3040)(@dependabot[bot]): Bump lru from 0.16.4 to 0.17.0 (#3040)

- [#3037](https://github.com/near/mpc/pull/3037)(@dependabot[bot]): Bump the rust-minor-and-patch group across 1 directory with 4 updates (#3037)

- [#3047](https://github.com/near/mpc/pull/3047)(@gilcu3): Remove image hashes, manifest digest is enough to guarantee repro (#3047)

- [#3018](https://github.com/near/mpc/pull/3018)(@anodar): Factor out pytests into daily workflow (#3018)

- [#3052](https://github.com/near/mpc/pull/3052)(@DSharifi): Add nix build job for mpc-node (#3052)

- [#3064](https://github.com/near/mpc/pull/3064)(@kevindeforth): Improve handshake error messages (#3064)

- [#3065](https://github.com/near/mpc/pull/3065)(@gilcu3): Remove unused infra folder (#3065)

- [#3058](https://github.com/near/mpc/pull/3058)(@DSharifi): Use nix for running CI checks except remaining builds (#3058)

- [#3066](https://github.com/near/mpc/pull/3066)(@gilcu3): Update migrations after 3.9.1 (#3066)

- [#3072](https://github.com/near/mpc/pull/3072)(@anodar): Concurrency group in nix-build-mpc-node.yml (#3072)

- [#3078](https://github.com/near/mpc/pull/3078)(@DSharifi): Deprecate ForeignChainPolicyVotes storage key (#3078)

- [#2972](https://github.com/near/mpc/pull/2972)(@barakeinav1): *(localnet)* Finish Python-launcher removal on localnet path (#2972)

- [#3082](https://github.com/near/mpc/pull/3082)(@gilcu3): Add comments and tests for untagged ecdsa payload (#3082)

- [#3084](https://github.com/near/mpc/pull/3084)(@gilcu3): Remove 3.9.0 compatibility serde serialization (#3084)

- [#3076](https://github.com/near/mpc/pull/3076)(@anodar): Remove pytests, nearcore submodule, and pytests workflow, update docs (#3076)

- [#3093](https://github.com/near/mpc/pull/3093)(@netrome): Ignore hickory-proto related advisories + clear out stale advisory + bump wasmtime (#3093)

- [#3102](https://github.com/near/mpc/pull/3102)(@gilcu3): Make schemars crate excluded from compiling under wasm32 target (#3102)

- [#3100](https://github.com/near/mpc/pull/3100)(@gilcu3): Unify the protocol_state_to_string function (#3100)

- [#3120](https://github.com/near/mpc/pull/3120)(@dependabot[bot]): Bump lru from 0.17.0 to 0.18.0 (#3120)

- [#3117](https://github.com/near/mpc/pull/3117)(@dependabot[bot]): Bump the rust-minor-and-patch group with 2 updates (#3117)

- [#3122](https://github.com/near/mpc/pull/3122)(@gilcu3): Make Claude reviews more thorough, similar to Copilot (#3122)

- [#3112](https://github.com/near/mpc/pull/3112)(@pbeza): Ban trailing whitespace via `.editorconfig` and CI grep step (#3112)

- [#3125](https://github.com/near/mpc/pull/3125)(@gilcu3): Bump claude-code action (#3125)

- [#3129](https://github.com/near/mpc/pull/3129)(@gilcu3): Workaround for claude-code bug (#3129)

- [#3131](https://github.com/near/mpc/pull/3131)(@anodar): Bump up cluster wait timeout (#3131)

- [#3128](https://github.com/near/mpc/pull/3128)(@pbeza): Enforce all `.editorconfig` rules via `editorconfig-checker` (#3128)

- [#3074](https://github.com/near/mpc/pull/3074)(@gilcu3): Upd changelog in main after 3.9.1 (#3074)

- [#3141](https://github.com/near/mpc/pull/3141)(@pbeza): *(editorconfig)* Drop LICENSE exemption, add final newline (#3141)

- [#3146](https://github.com/near/mpc/pull/3146)(@gilcu3): Remove mpc-contract dep from devnet (#3146)

- [#3157](https://github.com/near/mpc/pull/3157)(@dependabot[bot]): Bump openssl from 0.10.78 to 0.10.79 in the cargo group across 1 directory (#3157)

- [#3175](https://github.com/near/mpc/pull/3175)(@kevindeforth): Additional label for signature request timeouts (#3175)

- [#3204](https://github.com/near/mpc/pull/3204)(@dependabot[bot]): Bump inferno from 0.11.21 to 0.12.6 (#3204)

- [#3201](https://github.com/near/mpc/pull/3201)(@dependabot[bot]): Bump tokio from 1.52.1 to 1.52.2 in the rust-minor-and-patch group (#3201)

- [#3250](https://github.com/near/mpc/pull/3250)(@dependabot[bot]): Bump rkyv from 0.8.15 to 0.8.16 in the cargo group across 1 directory (#3250)

- [#3260](https://github.com/near/mpc/pull/3260)(@gilcu3): Remove curve from DomainConfig (#3260)


## [3.9.1] - 2026-04-21

### 🐛 Bug Fixes

- [#2956](https://github.com/near/mpc/pull/2956)(@gilcu3): Cleanup of stored attestations (#2956)


### ⚙️ Miscellaneous Tasks

- [#2978](https://github.com/near/mpc/pull/2978)(@gilcu3): Bump nearcore to 2.11.1 (#2978)


## [3.9.0] - 2026-04-16

### 🚀 Features

- [#2727](https://github.com/near/mpc/pull/2727)(@barakeinav1): Add metrics for TEE attestation generation attempts (#2727)

- [#2818](https://github.com/near/mpc/pull/2818)(@DSharifi): Support BNB chain in the contract (#2818)

- [#2784](https://github.com/near/mpc/pull/2784)(@DSharifi): *(contract)* API to submit foreign chain config without RPC url consensus (#2784)

- [#2822](https://github.com/near/mpc/pull/2822)(@DSharifi): Bnb support in foreign chain inspector (#2822)

- [#2824](https://github.com/near/mpc/pull/2824)(@DSharifi): Support BNB foreign transactions in the near-mpc-sdk crate (#2824)

- [#2823](https://github.com/near/mpc/pull/2823)(@DSharifi): Node handles BNB foreign chain transactions (#2823)

- [#2917](https://github.com/near/mpc/pull/2917)(@DSharifi): Mpc contract accepts base foreign chain requests (#2917)


### 🐛 Bug Fixes

- [#2729](https://github.com/near/mpc/pull/2729)(@DSharifi): Set default crypto provider in tee-launcher to avoid rustls panic (#2729)

- [#2706](https://github.com/near/mpc/pull/2706)(@barakeinav1): Add missing docker-cli package and merge Rust launcher CI jobs to use latest launcher code for CI testing (#2706)

- [#2762](https://github.com/near/mpc/pull/2762)(@netrome): Replace API key placeholder into RPC URL when path auth is used (#2762)

- [#2711](https://github.com/near/mpc/pull/2711)(@barakeinav1): Don't crash when TEE attestation fails on startup (#2711)

- [#2746](https://github.com/near/mpc/pull/2746)(@SimonRastikian): Assert in crypto layer replaced by proper error handling (#2746)

- [#2748](https://github.com/near/mpc/pull/2748)(@SimonRastikian): Witness should not inherit serde traits (#2748)

- [#2827](https://github.com/near/mpc/pull/2827)(@barakeinav1): Block GCP keyshare storage config in TEE mode (#2827)

- [#2851](https://github.com/near/mpc/pull/2851)(@gilcu3): Remove stale foreign chain votes from non-participants (#2851)

- [#2861](https://github.com/near/mpc/pull/2861)(@netrome): Remove race condition in `take_unowned` (#2861)

- [#2896](https://github.com/near/mpc/pull/2896)(@gilcu3): *(test)* Localnet script deleting non-existing validator config file (#2896)

- [#2892](https://github.com/near/mpc/pull/2892)(@netrome): Use `curve` instead of `scheme` in `vote_add_domain` parameters for localnet (#2892)

- [#2903](https://github.com/near/mpc/pull/2903)(@gilcu3): *(test)* Localnet  fixes for nearcore 2.11 (#2903)

- [#2908](https://github.com/near/mpc/pull/2908)(@anodar): Web_server web_endpoints (#2908)


### 💼 Other

- [#2780](https://github.com/near/mpc/pull/2780)(@barakeinav1): Switch MPC node image push to skopeo with --preserve-digests (#2780)

- [#2863](https://github.com/near/mpc/pull/2863)(@barakeinav1): Compute manifest digest locally without requiring --push (#2863)

- [#2916](https://github.com/near/mpc/pull/2916)(@DSharifi): *(nix)* Bump near-cli-rs version to meet localnet requirements (#2916)


### 🚜 Refactor

- [#2702](https://github.com/near/mpc/pull/2702)(@pbeza): Replace per-field `#[serde_as(as = "Hex")]` with newtype wrappers (#2702)

- [#2777](https://github.com/near/mpc/pull/2777)(@kevindeforth): Simplify contract error handling (#2777)

- [#2735](https://github.com/near/mpc/pull/2735)(@SimonRastikian): Getting rid of clippy slicing (#2735)

- [#2832](https://github.com/near/mpc/pull/2832)(@gilcu3): Make preconditions uniform for requests in the contract (#2832)

- [#2785](https://github.com/near/mpc/pull/2785)(@barakeinav1): Simplify launcher image validation by accepting manifest digest directly (#2785)

- [#2858](https://github.com/near/mpc/pull/2858)(@pbeza): Use canonical types from contract interface in `test-parallel-contract` (#2858)

- [#2870](https://github.com/near/mpc/pull/2870)(@gilcu3): Participants should depend on contract interface not contract (#2870)

- [#2907](https://github.com/near/mpc/pull/2907)(@anodar): Merge parallel tests, refactor code, reword comments (#2907)


### 📚 Documentation

- [#2672](https://github.com/near/mpc/pull/2672)(@barakeinav1): Pin QEMU 8.2.2 and add --qemu-version to dstack-mr command (#2672)

- [#2909](https://github.com/near/mpc/pull/2909)(@barakeinav1): Fix scheme to curve in contract README vote_add_domains example (#2909)

- [#2864](https://github.com/near/mpc/pull/2864)(@netrome): Refer to the bug bounty program instead of our security email (#2864)


### ⚡ Performance

- [#2775](https://github.com/near/mpc/pull/2775)(@gilcu3): *(bench)* Make snap-then-simulate benchmarks faster (#2775)


### 🧪 Testing

- [#2744](https://github.com/near/mpc/pull/2744)(@gilcu3): Remove async account creation workaround (#2744)

- [#2759](https://github.com/near/mpc/pull/2759)(@anodar): Improve e2e framework, implement tests for web_endpoints, submit_participant_info, robust_ecdsa (#2759)

- [#2751](https://github.com/near/mpc/pull/2751)(@gilcu3): Add benchmarks with latency PoC (#2751)

- [#2760](https://github.com/near/mpc/pull/2760)(@anodar): Implement request_during_resharing test (#2760)

- [#2820](https://github.com/near/mpc/pull/2820)(@DSharifi): Add integration tests for foreign chain requests (#2820)

- [#2761](https://github.com/near/mpc/pull/2761)(@anodar): Implement key_resharing, cancellation_of_resharing tests (#2761)

- [#2859](https://github.com/near/mpc/pull/2859)(@anodar): Migrate cdk_verification, cdk_pv_verification, lost_assets, parallel_sign_calls tests from pytests (#2859)


### ⚙️ Miscellaneous Tasks

- [#2724](https://github.com/near/mpc/pull/2724)(@gilcu3): Fix scheduled rust cache clean II (#2724)

- [#2709](https://github.com/near/mpc/pull/2709)(@barakeinav1): Add startup logging to start-with-config-file path (#2709)

- [#2742](https://github.com/near/mpc/pull/2742)(@DSharifi): Increase resources for contract sandbox tests (#2742)

- [#2726](https://github.com/near/mpc/pull/2726)(@DSharifi): Fix cargo clippy lint on MacOs (#2726)

- [#2731](https://github.com/near/mpc/pull/2731)(@gilcu3): Unify test-utils in the node and ts crates (#2731)

- [#2755](https://github.com/near/mpc/pull/2755)(@DSharifi): Fix localnet template by removing duplicate attribute (#2755)

- [#2736](https://github.com/near/mpc/pull/2736)(@pbeza): Clean up stale TODO comments and update issue references (#2736)

- [#2749](https://github.com/near/mpc/pull/2749)(@pbeza): Check for TODOs referencing closed issues (#2749)

- [#2763](https://github.com/near/mpc/pull/2763)(@gilcu3): Update contract migration after 3.8.1 release (#2763)

- [#2767](https://github.com/near/mpc/pull/2767)(@gilcu3): Remove legacy support of CKDAppPublicKey in the node (#2767)

- [#2787](https://github.com/near/mpc/pull/2787)(@dependabot[bot]): Bump the cargo group across 1 directory with 2 updates (#2787)

- [#2768](https://github.com/near/mpc/pull/2768)(@gilcu3): Add public verifiability support in ckd-example-cli (#2768)

- [#2830](https://github.com/near/mpc/pull/2830)(@gilcu3): Make rust-cache key depend on week (#2830)

- [#2835](https://github.com/near/mpc/pull/2835)(@gilcu3): Bump actions versions to avoid node 20 warning (#2835)

- [#2837](https://github.com/near/mpc/pull/2837)(@DSharifi): Add `.codex` file to git ignore (#2837)

- [#2773](https://github.com/near/mpc/pull/2773)(@barakeinav1): Use restricted access keys instead of full access keys for MPC nodes (#2773)

- [#2845](https://github.com/near/mpc/pull/2845)(@dependabot[bot]): Bump the rust-minor-and-patch group with 4 updates (#2845)

- [#2855](https://github.com/near/mpc/pull/2855)(@gilcu3): Add ExpectedMeasurements to MockAttestation (#2855)

- [#2771](https://github.com/near/mpc/pull/2771)(@kevindeforth): *(contract)* Remove DomainConfigCompat and CurveCompat (#2771)

- [#2165](https://github.com/near/mpc/pull/2165)(@DSharifi): Use contract interface sign request args instead of internal type in contract (#2165)

- [#2878](https://github.com/near/mpc/pull/2878)(@gilcu3): Add mise and worktrees to gitignore (#2878)

- [#2886](https://github.com/near/mpc/pull/2886)(@netrome): Bump rustls-webpki (#2886)

- [#2869](https://github.com/near/mpc/pull/2869)(@pbeza): Reduce contract WASM size and add CI size check (#2869)

- [#2911](https://github.com/near/mpc/pull/2911)(@netrome): Make llm agents better at following our testing conventions (#2911)

- [#2920](https://github.com/near/mpc/pull/2920)(@gilcu3): Prepare for 3.9.0 release  (#2920)


## [3.8.1] - 2026-04-07

### 🚀 Features

- [#2701](https://github.com/near/mpc/pull/2701)(@gilcu3): Support arbitrary OCI registries in the launcher (#2701)


### 🐛 Bug Fixes

- [#2718](https://github.com/near/mpc/pull/2718)(@netrome): Set default crypto provider to avoid rustls panic (#2718)


### 📚 Documentation

- [#2670](https://github.com/near/mpc/pull/2670)(@pbeza): Define attestation data for backup service (#2670)


### ⚙️ Miscellaneous Tasks

- [#2694](https://github.com/near/mpc/pull/2694)(@pbeza): Add workflow to automate `nearcore` version bumps (#2694)

- [#2699](https://github.com/near/mpc/pull/2699)(@gilcu3): Unify testing contract build steps (#2699)

- [#2720](https://github.com/near/mpc/pull/2720)(@gilcu3): Fix rust-tee launcher failing with OOM (#2720)

- [#2722](https://github.com/near/mpc/pull/2722)(@netrome): Bump changelog, crate versions and upgrade third-party licenses for 3.8.1 release (#2722)


## [3.8.0] - 2026-04-02

### 🚀 Features

- [#2464](https://github.com/near/mpc/pull/2464)(@kevindeforth): Chain gateway transaction sender (#2464)

- [#2483](https://github.com/near/mpc/pull/2483)(@gilcu3): Added ckd public verification support in the contract (#2483)

- [#2500](https://github.com/near/mpc/pull/2500)(@DSharifi): *(node)* Allow configuration of logging through configuration file (#2500)

- [#2495](https://github.com/near/mpc/pull/2495)(@gilcu3): Integrate CKD public verifiability in the node (#2495)

- [#2447](https://github.com/near/mpc/pull/2447)(@barakeinav1): Add voting mechanism for expected OS measurements (#2447)

- [#2505](https://github.com/near/mpc/pull/2505)(@pbeza): Add `tee-context` crate (#2505)

- [#2448](https://github.com/near/mpc/pull/2448)(@barakeinav1): Check OS measurements during attestation re-verification (#2448)

- [#2527](https://github.com/near/mpc/pull/2527)(@anodar): Add e2e-tests crate skeleton with port allocator (#2527)

- [#2601](https://github.com/near/mpc/pull/2601)(@anodar): Support hostnames in backup-cli (#2601)

- [#2621](https://github.com/near/mpc/pull/2621)(@barakeinav1): Add Rust tee-launcher crate (#2621)

- [#2667](https://github.com/near/mpc/pull/2667)(@DSharifi): Implement BorshSchema for NonEmptyBTreeMap (#2667)

- [#2625](https://github.com/near/mpc/pull/2625)(@kevindeforth): Chain-gateway block event subscriber (#2625)


### 🐛 Bug Fixes

- [#2431](https://github.com/near/mpc/pull/2431)(@anodar): Downgrade "peer closed connection without TLS close_notify" errors to debug (#2431)

- [#2348](https://github.com/near/mpc/pull/2348)(@SimonRastikian): Threshold signatures sensitive types print custom debug message (#2348)

- [#2567](https://github.com/near/mpc/pull/2567)(@gilcu3): Cleanup stale votes after resharing (#2567)

- [#2574](https://github.com/near/mpc/pull/2574)(@gilcu3): Remove rename scheme from DomainConfig (#2574)

- [#2549](https://github.com/near/mpc/pull/2549)(@barakeinav1): Set 0o600 permissions on secret files (#2549)

- [#2579](https://github.com/near/mpc/pull/2579)(@gilcu3): Use CKDOutput type both for sender and receiver (#2579)

- [#2585](https://github.com/near/mpc/pull/2585)(@gilcu3): Add more informative error messages for participant sets (#2585)

- [#2417](https://github.com/near/mpc/pull/2417)(@SimonRastikian): Improving security by adding zeroization to the secret cryptography material (#2417)

- [#2646](https://github.com/near/mpc/pull/2646)(@gilcu3): Ensure asset id origins are validated before use (#2646)

- [#2636](https://github.com/near/mpc/pull/2636)(@Copilot): Update stale localnet config template (#2636)

- [#2678](https://github.com/near/mpc/pull/2678)(@netrome): Log index lookup finds logs with matching .log_index fields (#2678)


### 💼 Other

- [#2640](https://github.com/near/mpc/pull/2640)(@barakeinav1): Add CI and build support for Rust launcher (#2640)

- [#2665](https://github.com/near/mpc/pull/2665)(@gilcu3): Make rust launcher docker build reproducible (#2665)

- [#2668](https://github.com/near/mpc/pull/2668)(@gilcu3): Use debian trixie for rust launcher image (#2668)


### 🚜 Refactor

- [#2494](https://github.com/near/mpc/pull/2494)(@anodar): Deduplicate dependencies in check-all target (#2494)

- [#2535](https://github.com/near/mpc/pull/2535)(@pbeza): *(tee-context)* Address post-merge review feedback from #2505 (#2535)

- [#2540](https://github.com/near/mpc/pull/2540)(@pbeza): Rename `MpcDockerImageHash` to `NodeImageHash` (#2540)

- [#2396](https://github.com/near/mpc/pull/2396)(@SimonRastikian): Changing SignatureScheme into Curve (#2396)

- [#2553](https://github.com/near/mpc/pull/2553)(@kevindeforth): Simplify `TeeContext` by removing `SubmitTransaction` indirection (#2553)

- [#2564](https://github.com/near/mpc/pull/2564)(@pbeza): Generalize `Hash32<T>` to `Hash<T, N>` and replace `Sha384Digest` (#2564)

- [#2584](https://github.com/near/mpc/pull/2584)(@pbeza): Replace `assert!(matches!(...))` with `assert_matches!` and enforce in CI (#2584)

- [#2489](https://github.com/near/mpc/pull/2489)(@kevindeforth): Start chain-gateway in dedicated multi-threaded tokio runtime + transaction sender integration test (#2489)

- [#2633](https://github.com/near/mpc/pull/2633)(@gilcu3): Split main.rs in tee-launcher crate (#2633)

- [#2645](https://github.com/near/mpc/pull/2645)(@DSharifi): Use tokio `TaskInterval` type (#2645)

- [#2619](https://github.com/near/mpc/pull/2619)(@pbeza): Unify duplicate hash newtype macros into a single generic `HashDigest<S, N>` type in `primitives` (#2619)

- [#2664](https://github.com/near/mpc/pull/2664)(@anodar): Extract StartConfig from mpc-node into a lightweight config crate (#2664)

- [#2409](https://github.com/near/mpc/pull/2409)(@SimonRastikian): Renaming Ed25519 to Edwards25519 (#2409)

- [#2634](https://github.com/near/mpc/pull/2634)(@SimonRastikian): Improve crypto code without banners (#2634)

- [#2681](https://github.com/near/mpc/pull/2681)(@barakeinav1): Remove unused HostEntry struct from tee-launcher (#2681)


### 📚 Documentation

- [#2472](https://github.com/near/mpc/pull/2472)(@DSharifi): Update releases.md to reflect current release process (#2472)

- [#2484](https://github.com/near/mpc/pull/2484)(@barakeinav1): Add vote_add_launcher_hash to deployment scripts and guides (#2484)

- [#2269](https://github.com/near/mpc/pull/2269)(@barakeinav1): AES transport key provisioning design (#2269)

- [#2488](https://github.com/near/mpc/pull/2488)(@barakeinav1): Add OS measurement voting to TEE setup flows (#2488)

- [#2427](https://github.com/near/mpc/pull/2427)(@barakeinav1): Update migration guide after testnet migration. (#2427)

- [#2446](https://github.com/near/mpc/pull/2446)(@anodar): Add design doc for Rust E2E test infrastructure (pytest deprecation) (#2446)

- [#2577](https://github.com/near/mpc/pull/2577)(@gilcu3): Update after public verifiability CKD (#2577)

- [#2522](https://github.com/near/mpc/pull/2522)(@SimonRastikian): Designing domain separation (#2522)

- [#2642](https://github.com/near/mpc/pull/2642)(@barakeinav1): Warn that docker inspect must run on Linux for hash verification (#2642)


### ⚡ Performance

- [#2644](https://github.com/near/mpc/pull/2644)(@kevindeforth): *(mpc-node)* Do not send duplicate values between threads (#2644)

- [#2623](https://github.com/near/mpc/pull/2623)(@SimonRastikian): DKG benchmarks implementations (#2623)


### 🧪 Testing

- [#2503](https://github.com/near/mpc/pull/2503)(@gilcu3): Add pytest for ckd public verifiability (#2503)

- [#2528](https://github.com/near/mpc/pull/2528)(@anodar): Implement mpc node manager (#2528)

- [#2545](https://github.com/near/mpc/pull/2545)(@barakeinav1): Extract launcher image hash from test assets and improve attestation docs (#2545)

- [#2589](https://github.com/near/mpc/pull/2589)(@anodar): Implement MPC cluster orchestration for Rust E2E tests (#2589)

- [#2590](https://github.com/near/mpc/pull/2590)(@anodar): Implement NearSandbox, NearBlockchain and request lifecycle test (#2590)


### ⚙️ Miscellaneous Tasks

- [#2473](https://github.com/near/mpc/pull/2473)(@DSharifi): Use `.cliffignore` file for ignoring commits with `git-cliff` (#2473)

- [#2475](https://github.com/near/mpc/pull/2475)(@gilcu3): Move vscode extension recommendations to doc (#2475)

- [#2457](https://github.com/near/mpc/pull/2457)(@DSharifi): Create interface crate for types shared between rust launcher and node (#2457)

- [#2477](https://github.com/near/mpc/pull/2477)(@gilcu3): Move CKDRequestArgs to the contract interface (#2477)

- [#2481](https://github.com/near/mpc/pull/2481)(@gilcu3): Cleanup migration after 3.7.0 release (#2481)

- [#2499](https://github.com/near/mpc/pull/2499)(@DSharifi): Move TEE config into launcher-interface and enforce image hash file (#2499)

- [#2504](https://github.com/near/mpc/pull/2504)(@DSharifi): Parallelize pytests in separate runners to speed up CI (#2504)

- [#2509](https://github.com/near/mpc/pull/2509)(@gilcu3): Prevent unbounded growth of rust cache (#2509)

- [#2513](https://github.com/near/mpc/pull/2513)(@gilcu3): Allow failed pytest jobs to re-run (#2513)

- [#2510](https://github.com/near/mpc/pull/2510)(@gilcu3): Optimize runners used for pytests (#2510)

- [#2518](https://github.com/near/mpc/pull/2518)(@DSharifi): Move reproducible build of contract as separate task (#2518)

- [#2525](https://github.com/near/mpc/pull/2525)(@gilcu3): Update to nearcore 2.11.0-rc.3 (#2525)

- [#2530](https://github.com/near/mpc/pull/2530)(@gilcu3): Parallelize cargo test (#2530)

- [#2531](https://github.com/near/mpc/pull/2531)(@gilcu3): Rust tests should not use same cache key (#2531)

- [#2534](https://github.com/near/mpc/pull/2534)(@gilcu3): Fix phala test filter (#2534)

- [#2537](https://github.com/near/mpc/pull/2537)(@anodar): Add comment on Code Style regarding checked operations in tests and allow local claude md (#2537)

- [#2550](https://github.com/near/mpc/pull/2550)(@barakeinav1): Bump rustls-webpki to fix RUSTSEC-2026-0049 (#2550)

- [#2556](https://github.com/near/mpc/pull/2556)(@barakeinav1): Bump tar to fix RUSTSEC-2026-0067/0068 (#2556)

- [#2557](https://github.com/near/mpc/pull/2557)(@gilcu3): Bump reqwest to 0.13 (#2557)

- [#2552](https://github.com/near/mpc/pull/2552)(@barakeinav1): Update dstack OS image 0.5.4 to 0.5.7 (#2552)

- [#2566](https://github.com/near/mpc/pull/2566)(@gilcu3): Cache cleanup should not delete cargo binary (#2566)

- [#2559](https://github.com/near/mpc/pull/2559)(@dependabot[bot]): Bump quinn-proto from 0.11.13 to 0.11.14 (#2559)

- [#2568](https://github.com/near/mpc/pull/2568)(@dependabot[bot]): Bump the rust-minor-and-patch group with 4 updates (#2568)

- [#2569](https://github.com/near/mpc/pull/2569)(@dependabot[bot]): Bump gcloud-sdk from 0.28.5 to 0.29.0 (#2569)

- [#2578](https://github.com/near/mpc/pull/2578)(@anodar): Bump MAX_GAS_FOR_THRESHOLD_VOTE from 178 to 180 (#2578)

- [#2573](https://github.com/near/mpc/pull/2573)(@barakeinav1): Update dstack OS image to 0.5.8 and gramine key provider (#2573)

- [#2437](https://github.com/near/mpc/pull/2437)(@gilcu3): Force usage of constructor for PermanentKeyshareData (#2437)

- [#2593](https://github.com/near/mpc/pull/2593)(@gilcu3): Make sure docs explain why we have deposits, handle deposits in a single function (#2593)

- [#2586](https://github.com/near/mpc/pull/2586)(@barakeinav1): Usability improvements for testing scripts (#2586)

- [#2620](https://github.com/near/mpc/pull/2620)(@dependabot[bot]): Bump requests from 2.32.4 to 2.33.0 in /tee_launcher in the pip group across 1 directory (#2620)

- [#2653](https://github.com/near/mpc/pull/2653)(@dependabot[bot]): Bump the rust-minor-and-patch group with 2 updates (#2653)

- [#2563](https://github.com/near/mpc/pull/2563)(@barakeinav1): Add localnet TEE scripts for Rust launcher (#2563)

- [#2658](https://github.com/near/mpc/pull/2658)(@barakeinav1): Add Rust launcher configs, docs, and templates (#2658)

- [#2669](https://github.com/near/mpc/pull/2669)(@gilcu3): Use BTreeMap for permanent keyshare data (#2669)

- [#2591](https://github.com/near/mpc/pull/2591)(@gilcu3): Bump to nearcore 2.11 (#2591)

- [#2689](https://github.com/near/mpc/pull/2689)(@gilcu3): Fix e2e tests, cache being overwritten (#2689)

- [#2674](https://github.com/near/mpc/pull/2674)(@gilcu3): Automatic draft release creation on tag push (#2674)

- [#2691](https://github.com/near/mpc/pull/2691)(@gilcu3): Fix and simplify release automation (#2691)

- [#2696](https://github.com/near/mpc/pull/2696)(@anodar): Create mpc-node release v3.8.0 (#2696)


## [3.7.0] - 2026-03-17

### 🚀 Features

- [#2329](https://github.com/near/mpc/pull/2329)(@anodar): Serve mpc-node configuration over debug endpoint (#2329)

- [#2211](https://github.com/near/mpc/pull/2211)(@barakeinav1): Add standalone attestation-cli for independent TEE verification (#2211)

- [#2332](https://github.com/near/mpc/pull/2332)(@DSharifi): Allow configuration files for full config of the mpc node (#2332)

- [#2378](https://github.com/near/mpc/pull/2378)(@DSharifi): [**breaking**] Remove derivation paths from foreign chain validation requests (#2378)

- [#2344](https://github.com/near/mpc/pull/2344)(@kevindeforth): Chain gateway state viewer (#2344)

- [#2343](https://github.com/near/mpc/pull/2343)(@barakeinav1): Vote on launcher image hash (#2343)

- [#2392](https://github.com/near/mpc/pull/2392)(@gilcu3): Ckd with public verifiability in ts crate (#2392)

- [#2455](https://github.com/near/mpc/pull/2455)(@DSharifi): *(node)* Start with config file option also initializes neard (#2455)

- [#2460](https://github.com/near/mpc/pull/2460)(@SimonRastikian): Viewing method for code hash votes and testings (#2460)


### 🐛 Bug Fixes

- [#2346](https://github.com/near/mpc/pull/2346)(@SimonRastikian): Using ct-eq ensures security (#2346)

- [#2386](https://github.com/near/mpc/pull/2386)(@gilcu3): Do not crash when vectors received are smaller than expected (#2386)


### 🚜 Refactor

- [#2318](https://github.com/near/mpc/pull/2318)(@anodar): Retry read calls in localnet script (#2318)

- [#2410](https://github.com/near/mpc/pull/2410)(@gilcu3): Feature gate mod testing in p2p.rs (#2410)


### 📚 Documentation

- [#2214](https://github.com/near/mpc/pull/2214)(@gilcu3): Added asset generation doc (#2214)

- [#2371](https://github.com/near/mpc/pull/2371)(@barakeinav1): Add attestation verification step to operator guide (#2371)

- [#2397](https://github.com/near/mpc/pull/2397)(@barakeinav1): Fix operator guide access key section (#2397)

- [#2414](https://github.com/near/mpc/pull/2414)(@barakeinav1): Update to latest dstack configuration (#2414)

- [#2408](https://github.com/near/mpc/pull/2408)(@gilcu3): Add cargo insta instructions to contributing guidelines (#2408)

- [#2324](https://github.com/near/mpc/pull/2324)(@pbeza): Restructure TEE lifecycle and extract TEE Context design doc (#2324)


### ⚙️ Miscellaneous Tasks

- [#2325](https://github.com/near/mpc/pull/2325)(@barakeinav1): Rename shadowed variable in verify_event_log_rtmr3 (#2325)

- [#2319](https://github.com/near/mpc/pull/2319)(@gilcu3): Added borsch schema snapshot test (#2319)

- [#2338](https://github.com/near/mpc/pull/2338)(@gilcu3): Replace ed25519_dalek::VerifyingKey with Ed25519PublicKey in node-types crate (#2338)

- [#2352](https://github.com/near/mpc/pull/2352)(@pbeza): Add security section to PR review prompt (#2352)

- [#2384](https://github.com/near/mpc/pull/2384)(@gilcu3): Update migrations after 3.6.0 release, remove infer domain purpose helpers (#2384)

- [#2372](https://github.com/near/mpc/pull/2372)(@dependabot[bot]): Bump the rust-minor-and-patch group with 3 updates (#2372)

- [#2389](https://github.com/near/mpc/pull/2389)(@gilcu3): Try all nearcore branches to have a better chance of getting the binary (#2389)

- [#2394](https://github.com/near/mpc/pull/2394)(@barakeinav1): Update TEE localnet deploy script and documentation (#2394)

- [#2405](https://github.com/near/mpc/pull/2405)(@gilcu3): Tiny follow up to contract cleanup in #2384 (#2405)

- [#2412](https://github.com/near/mpc/pull/2412)(@gilcu3): Add all features to rust tests in ci (#2412)

- [#2406](https://github.com/near/mpc/pull/2406)(@gilcu3): Remove usage of deprecated near_bindgen (#2406)

- [#2421](https://github.com/near/mpc/pull/2421)(@gilcu3): Ensure we do not block ci on external services tests (#2421)

- [#2306](https://github.com/near/mpc/pull/2306)(@DSharifi): Prepare workspace crates for publishing by setting version to 0.0.1 (#2306)

- [#2429](https://github.com/near/mpc/pull/2429)(@DSharifi): Add `near-mpc-` prefix for crates that will be published (#2429)

- [#2432](https://github.com/near/mpc/pull/2432)(@DSharifi): Add missing fields to publish all external crates (#2432)

- [#2426](https://github.com/near/mpc/pull/2426)(@DSharifi): Use cargo lint section for clippy lint rules (#2426)

- [#2436](https://github.com/near/mpc/pull/2436)(@DSharifi): Disallow allow attributes, and remove unexpected allows (#2436)

- [#2438](https://github.com/near/mpc/pull/2438)(@gilcu3): Remove EXTRA_HOST usage in launcher (#2438)

- [#2425](https://github.com/near/mpc/pull/2425)(@gilcu3): Upgrade to a patched nearcore 2.11.0-rc.1 (#2425)

- [#2468](https://github.com/near/mpc/pull/2468)(@DSharifi): Bump nearcore to 2.11.0-rc.2 (#2468)

- [#2465](https://github.com/near/mpc/pull/2465)(@dependabot[bot]): Bump the rust-minor-and-patch group with 3 updates (#2465)

- [#2466](https://github.com/near/mpc/pull/2466)(@DSharifi): Update changelog and bump workspace crates to 3.7.0 (#2466)


## [3.6.0] - 2026-03-05

### 🚀 Features

- [#2199](https://github.com/near/mpc/pull/2199)(@DSharifi): Add new collection type, `BoundedVec`, to the bounded collections crate (#2199)

- [#2132](https://github.com/near/mpc/pull/2132)(@barakeinav1): Allow passing mpc_ env variables (#2132)

- [#2202](https://github.com/near/mpc/pull/2202)(@DSharifi): Create `near-mpc-sdk` crate with types for sign requests (#2202)

- [#2218](https://github.com/near/mpc/pull/2218)(@DSharifi): *(sdk)* The SDK can build foreign chain requests for bitcoin (#2218)

- [#2222](https://github.com/near/mpc/pull/2222)(@DSharifi): *(sdk)* The SDK can build foreign chain requests for abstract (#2222)

- [#2224](https://github.com/near/mpc/pull/2224)(@DSharifi): *(sdk)* The SDK can build foreign chain requests for starknet (#2224)

- [#2233](https://github.com/near/mpc/pull/2233)(@DSharifi): *(sdk)* Add verification support of  foreign transaction signatures (#2233)

- [#2254](https://github.com/near/mpc/pull/2254)(@DSharifi): *(sdk)* Chain-specific builder entry points for foreign chain request builder (#2254)

- [#2258](https://github.com/near/mpc/pull/2258)(@olga24912): Add StarkNet event log extraction support (#2258)

- [#2266](https://github.com/near/mpc/pull/2266)(@DSharifi): *(sdk)* Add borsh serialization derives to all contract interface types and SDK verifier (#2266)

- [#2265](https://github.com/near/mpc/pull/2265)(@DSharifi): *(sdk)* Verify foreign transaction payload signatures (#2265)

- [#2281](https://github.com/near/mpc/pull/2281)(@gilcu3): Added support for abi generation in mpc-sdk and signature-verifier crate (#2281)


### 🐛 Bug Fixes

- [#2237](https://github.com/near/mpc/pull/2237)(@gilcu3): Update wasmtime to avoid vulnerability in CVE-2026-27204 (#2237)

- [#2257](https://github.com/near/mpc/pull/2257)(@gilcu3): Bug in from_be_bytes_mod_order when not a multiple of 8 bytes (#2257)

- [#2268](https://github.com/near/mpc/pull/2268)(@gilcu3): Use bounded incoming message buffers for all protocols (#2268)

- [#2308](https://github.com/near/mpc/pull/2308)(@gilcu3): Reject foreign chain transaction if requested chain not in policy (#2308)

- [#2310](https://github.com/near/mpc/pull/2310)(@netrome): Don't log raw mpc protocol messages (#2310)

- [#2309](https://github.com/near/mpc/pull/2309)(@gilcu3): Reject wrong payload versions for foreign chain transaction (#2309)

- [#2317](https://github.com/near/mpc/pull/2317)(@netrome): Ensure resharing leaders wait for start events to prevent them from getting stuck forever (#2317)


### 💼 Other

- [#2195](https://github.com/near/mpc/pull/2195)(@gilcu3): Make sure nix includes all needed tools (#2195)

- [#2200](https://github.com/near/mpc/pull/2200)(@SimonRastikian): Automate MPC release process (#2200)

- [#2291](https://github.com/near/mpc/pull/2291)(@anodar): Clang version in Nix flake for Darwin (#2291)


### 🚜 Refactor

- [#2279](https://github.com/near/mpc/pull/2279)(@anodar): Use strong threshold types in signature provider layer (#2279)

- [#2277](https://github.com/near/mpc/pull/2277)(@gilcu3): Unify crypto conversions (#2277)

- [#2294](https://github.com/near/mpc/pull/2294)(@gilcu3): Create mpc-crypto-types crate (#2294)

- [#2313](https://github.com/near/mpc/pull/2313)(@anodar): Handle errors on conversions to usize (#2313)

- [#2295](https://github.com/near/mpc/pull/2295)(@gilcu3): Reduce code duplication in buffer limit tests (#2295)


### 📚 Documentation

- [#2251](https://github.com/near/mpc/pull/2251)(@gilcu3): Rework the mpc readme (#2251)

- [#2270](https://github.com/near/mpc/pull/2270)(@barakeinav1): CVM upgrade mechanism with launcher and OS measurement voting (#2270)

- [#2204](https://github.com/near/mpc/pull/2204)(@pbeza): Archive Signer design for legacy HOT key support (#2204)


### ⚡ Performance

- [#2276](https://github.com/near/mpc/pull/2276)(@SimonRastikian): Split eddsa benchmarks (#2276)


### ⚙️ Miscellaneous Tasks

- [#2212](https://github.com/near/mpc/pull/2212)(@pbeza): Rename docs and scripts to kebab-case, add file naming CI check (#2212)

- [#2169](https://github.com/near/mpc/pull/2169)(@pbeza): Add `check-use-in-fn.py` CI script (#2169)

- [#2227](https://github.com/near/mpc/pull/2227)(@gilcu3): Add ts crate to the workspace (#2227)

- [#2229](https://github.com/near/mpc/pull/2229)(@netrome): Make CLAUDE.md a symlink to AGENTS.md (#2229)

- [#2172](https://github.com/near/mpc/pull/2172)(@barakeinav1): Launcher update process guide and automation script (#2172)

- [#2249](https://github.com/near/mpc/pull/2249)(@gilcu3): Make dependabot separate minor bumps from major bumps (#2249)

- [#2259](https://github.com/near/mpc/pull/2259)(@DSharifi): Create standalone crate to verify signatures that are in dto format (#2259)

- [#2278](https://github.com/near/mpc/pull/2278)(@dependabot[bot]): Bump the rust-minor-and-patch group with 2 updates (#2278)

- [#2304](https://github.com/near/mpc/pull/2304)(@gilcu3): Allow concurrent execution of release image workflow (#2304)

- [#2235](https://github.com/near/mpc/pull/2235)(@gilcu3): Update migration code and contract history after 3.5.1 is deployed (#2235)

- [#2312](https://github.com/near/mpc/pull/2312)(@gilcu3): Build docker workflows cancelling each other (#2312)

- [#2314](https://github.com/near/mpc/pull/2314)(@gilcu3): Update nearcore to 2.10.7 (#2314)

- [#2321](https://github.com/near/mpc/pull/2321)(@netrome): Update changelog, licenses and bump crate versions for 3.6.0 (#2321)


## [3.5.1] - 2026-02-20

### 🐛 Bug Fixes

- [#2189](https://github.com/near/mpc/pull/2189)(@netrome): Ensure nodes can read 3.4.1 state (#2189)

- [#2190](https://github.com/near/mpc/pull/2190)(@gilcu3): Add_domain_votes are preserver after resharing (#2190)


### 📚 Documentation

- [#2103](https://github.com/near/mpc/pull/2103)(@kevindeforth): Indexer proposal (#2103)


### ⚙️ Miscellaneous Tasks

- [#2174](https://github.com/near/mpc/pull/2174)(@gilcu3): Make logs -error reading config from chain- explicit (#2174)

- [#2192](https://github.com/near/mpc/pull/2192)(@gilcu3): Resolve rustdoc warnings and enforce warnings check in CI (#2192)

- [#2198](https://github.com/near/mpc/pull/2198)(@netrome): Update changelog and bump crate versions for 3.5.1 (#2198)


## [3.5.0] - 2026-02-19

### 🚀 Features

- [#1980](https://github.com/near/mpc/pull/1980)(@DSharifi): Implement JSON rpc client and extractor for bitcoin (#1980)

- [#1968](https://github.com/near/mpc/pull/1968)(@netrome): Foreign chain config & parsing (#1968)

- [#1998](https://github.com/near/mpc/pull/1998)(@netrome): Canonical sign payload for foreign chain transactions (#1998)

- [#2008](https://github.com/near/mpc/pull/2008)(@gilcu3): Implement verify foreign key logic in the contract (#2008)

- [#1997](https://github.com/near/mpc/pull/1997)(@netrome): Automatic foreign chain policy voting (#1997)

- [#2015](https://github.com/near/mpc/pull/2015)(@DSharifi): Foreign chain inspector for `abstract` block chain (#2015)

- [#2039](https://github.com/near/mpc/pull/2039)(@andrei-near): Add claude reviewer (#2039)

- [#2055](https://github.com/near/mpc/pull/2055)(@gilcu3): Integrate foreign chain tx feature in the node (#2055)

- [#2065](https://github.com/near/mpc/pull/2065)(@netrome): Allow SecretDB to open unknown column families (#2065)

- [#1990](https://github.com/near/mpc/pull/1990)(@pbeza): *(dtos)* Add Participants JSON serialization types to contract-interface (#1990)

- [#2070](https://github.com/near/mpc/pull/2070)(@netrome): Remove observed_at_block special response field (#2070)

- [#2075](https://github.com/near/mpc/pull/2075)(@DSharifi): Add extractor for evm `Log`s  (#2075)

- [#2087](https://github.com/near/mpc/pull/2087)(@gilcu3): Integrate Abstract in the node (#2087)

- [#2084](https://github.com/near/mpc/pull/2084)(@netrome): Starknet inspector (#2084)

- [#2129](https://github.com/near/mpc/pull/2129)(@pbeza): Update Claude model to use Opus 4.6 for code reviews (#2129)

- [#2126](https://github.com/near/mpc/pull/2126)(@DSharifi): Return payload hash instead of the payload for the sign foreign chain requests (#2126)

- [#2158](https://github.com/near/mpc/pull/2158)(@gilcu3): Adding consistent hashing to select RPC providers (#2158)

- [#2163](https://github.com/near/mpc/pull/2163)(@netrome): Domain separation (#2163)

- [#2179](https://github.com/near/mpc/pull/2179)(@DSharifi): Add on chain metrics for sign request payload version (#2179)

- [#2180](https://github.com/near/mpc/pull/2180)(@netrome): Add abstract rpc configuration in localnet guide + foreign policy serialization fix (#2180)


### 🐛 Bug Fixes

- [#2014](https://github.com/near/mpc/pull/2014)(@gilcu3): Broken reproducibility (#2014)

- [#2043](https://github.com/near/mpc/pull/2043)(@netrome): Three small post-merge fixes from #1997 (#2043)

- [#2107](https://github.com/near/mpc/pull/2107)(@netrome): Remove accidentally included prompt file (#2107)

- [#2124](https://github.com/near/mpc/pull/2124)(@gilcu3): Make run_receive_messages_loop infallible, log error on internal failures (#2124)

- [#2133](https://github.com/near/mpc/pull/2133)(@gilcu3): Ecdsa background tasks should be infallible (#2133)

- [#2137](https://github.com/near/mpc/pull/2137)(@SimonRastikian): Updating the documentation (#2137)

- [#2149](https://github.com/near/mpc/pull/2149)(@gilcu3): Boot nodes deduplication in docs (#2149)


### 💼 Other

- [#2048](https://github.com/near/mpc/pull/2048)(@DSharifi): Bump cargo resolver version to version `3` (#2048)

- [#2092](https://github.com/near/mpc/pull/2092)(@DSharifi): Use nixpkgss to install cargo-nextest (#2092)

- [#2184](https://github.com/near/mpc/pull/2184)(@DSharifi): Set Cargo linker for aarch64-darwin to resolve -lSystem (#2184)


### 🚜 Refactor

- [#2044](https://github.com/near/mpc/pull/2044)(@pbeza): Improve gas benchmark tests by optimizing account handling (#2044)

- [#2141](https://github.com/near/mpc/pull/2141)(@SimonRastikian): Const string contract methods (#2141)


### 📚 Documentation

- [#2013](https://github.com/near/mpc/pull/2013)(@barakeinav1): Add node migration guide for operators (#2013)


### 🧪 Testing

- [#1993](https://github.com/near/mpc/pull/1993)(@gilcu3): Check if 100s is enough to avoid flaky tests (#1993)

- [#2023](https://github.com/near/mpc/pull/2023)(@netrome): System test for foreign chain policy voting (#2023)

- [#2072](https://github.com/near/mpc/pull/2072)(@netrome): System test for foreign transaction validation (#2072)

- [#2125](https://github.com/near/mpc/pull/2125)(@gilcu3): Added system test for starknet (#2125)


### ⚙️ Miscellaneous Tasks

- [#1985](https://github.com/near/mpc/pull/1985)(@barakeinav1): Correct error codes (#1985)

- [#1995](https://github.com/near/mpc/pull/1995)(@DSharifi): *(nix)* Bump cargo-near version to 0.19.1 (#1995)

- [#2000](https://github.com/near/mpc/pull/2000)(@gilcu3): Make cargo-deny and license checks optional in CI (#2000)

- [#1991](https://github.com/near/mpc/pull/1991)(@gilcu3): Add missing verify foreign chain functions to the contract (#1991)

- [#1967](https://github.com/near/mpc/pull/1967)(@gilcu3): Bump gcloud-sdk to fix jsonwebsocket vuln (#1967)

- [#2019](https://github.com/near/mpc/pull/2019)(@DSharifi): Move `rustfmt.toml` file to workspace root (#2019)

- [#2010](https://github.com/near/mpc/pull/2010)(@DSharifi): Use `jsonrpsee` to support JSON-RPC v2 instead of manual implementation (#2010)

- [#2028](https://github.com/near/mpc/pull/2028)(@DSharifi): *(cargo-deny)* Remove unnecessary skip for `prost` (#2028)

- [#2034](https://github.com/near/mpc/pull/2034)(@gilcu3): Update ts reference (#2034)

- [#2026](https://github.com/near/mpc/pull/2026)(@gilcu3): Update contract history to 3.4.1 (#2026)

- [#2041](https://github.com/near/mpc/pull/2041)(@DSharifi): Remove `cargo-about` third-party licenses check from CI (#2041)

- [#2046](https://github.com/near/mpc/pull/2046)(@DSharifi): Update near cli version in nix shell (#2046)

- [#2049](https://github.com/near/mpc/pull/2049)(@DSharifi): Run `cargo-update` on lock file (#2049)

- [#2027](https://github.com/near/mpc/pull/2027)(@DSharifi): Remove usage of `near_o11` for metrics and test logger (#2027)

- [#2052](https://github.com/near/mpc/pull/2052)(@gilcu3): Upgrade and organize workspace deps (#2052)

- [#2059](https://github.com/near/mpc/pull/2059)(@gilcu3): Disable flaky robust-ecdsa test (#2059)

- [#2035](https://github.com/near/mpc/pull/2035)(@DSharifi): Revert the revert of using socket addresses (#2035)

- [#2079](https://github.com/near/mpc/pull/2079)(@DSharifi): Make API types specific per chain (#2079)

- [#2082](https://github.com/near/mpc/pull/2082)(@DSharifi): Make nix and ci version of tools in sync (#2082)

- [#2097](https://github.com/near/mpc/pull/2097)(@gilcu3): Update keccak to 0.1.6 (#2097)

- [#2098](https://github.com/near/mpc/pull/2098)(@gilcu3): Enable all steps in cargo deny except advisories in fast CI (#2098)

- [#2100](https://github.com/near/mpc/pull/2100)(@SimonRastikian): Dependabot with exceptions (#2100)

- [#2104](https://github.com/near/mpc/pull/2104)(@DSharifi): Add `From` and `TryFrom` conversions between dto and foreign chain inspector types (#2104)

- [#2117](https://github.com/near/mpc/pull/2117)(@gilcu3): Add exceptions to dependabot that are known to fail because of devnet (#2117)

- [#2115](https://github.com/near/mpc/pull/2115)(@pbeza): Extract Claude review prompt into standalone file (#2115)

- [#2131](https://github.com/near/mpc/pull/2131)(@DSharifi): Validate local RPC provider config with on chain config (#2131)

- [#2146](https://github.com/near/mpc/pull/2146)(@gilcu3): Bump buildkit and runner images versions to overcome build failure (#2146)

- [#2153](https://github.com/near/mpc/pull/2153)(@gilcu3): Disable rust cache temporarily, as warpbuilds is providing different runners for the same label (#2153)

- [#2144](https://github.com/near/mpc/pull/2144)(@DSharifi): *(nix)* Add jq and ruff to dev shell packages (#2144)

- [#2155](https://github.com/near/mpc/pull/2155)(@pbeza): Add CI workflow to validate PR title type against changed files (#2155)

- [#2139](https://github.com/near/mpc/pull/2139)(@DSharifi): Use non empty colletion types for foreign chain types (#2139)

- [#2162](https://github.com/near/mpc/pull/2162)(@gilcu3): Enable back rust-cache (#2162)

- [#2148](https://github.com/near/mpc/pull/2148)(@pbeza): Add `lychee` CI check for markdown link validation (#2148)

- [#2152](https://github.com/near/mpc/pull/2152)(@pbeza): Update `format_pr_comments` script to read JSON from file argument (#2152)

- [#2168](https://github.com/near/mpc/pull/2168)(@gilcu3): Fix flaky claude review permissions (#2168)

- [#2176](https://github.com/near/mpc/pull/2176)(@DSharifi): Exclude .direnv from lychee link checker (#2176)

- [#2181](https://github.com/near/mpc/pull/2181)(@gilcu3): Fix lychee not respecting gitignore (#2181)

- [#2187](https://github.com/near/mpc/pull/2187)(@SimonRastikian): Bump crate versions to 3.5.0 and update changelog (#2187)


## [3.4.1] - 2026-02-05

### 🚀 Features

- [#1923](https://github.com/near/mpc/pull/1923)(@DSharifi): *(contract)* Define contract API for verification of foreign transactions (#1923)

- [#1948](https://github.com/near/mpc/pull/1948)(@gilcu3): Added indexer types for verify foreign tx (#1948)

- [#1961](https://github.com/near/mpc/pull/1961)(@netrome): Add foreign chain policy types and voting method (#1961)


### 🐛 Bug Fixes

- [#1939](https://github.com/near/mpc/pull/1939)(@gilcu3): Ensure test_verify_tee_expired_attestation_triggers_resharing is not flaky (#1939)

- [#1831](https://github.com/near/mpc/pull/1831)(@kevindeforth): Properly fix network race condition (#1831)

- [#1983](https://github.com/near/mpc/pull/1983)(@kevindeforth): *(network)* TCP Listener task must not die (#1983)


### 📚 Documentation

- [#1920](https://github.com/near/mpc/pull/1920)(@netrome): Foreign chain transaction design doc (#1920)

- [#1928](https://github.com/near/mpc/pull/1928)(@barakeinav1): Update release guide (#1928)

- [#1925](https://github.com/near/mpc/pull/1925)(@netrome): Post-discussion updates for foreign chain transaction design doc (#1925)

- [#1931](https://github.com/near/mpc/pull/1931)(@netrome): Extractor-based foreign chain transaction validation design update (#1931)

- [#1938](https://github.com/near/mpc/pull/1938)(@netrome): Derive separate tweak for foreign transaction validation (#1938)

- [#1953](https://github.com/near/mpc/pull/1953)(@DSharifi): Include set of reommended extensions for VSCode (#1953)

- [#1964](https://github.com/near/mpc/pull/1964)(@DSharifi): Add note on branch being pushed to github pre `git-cliff` instructions (#1964)


### 🧪 Testing

- [#1945](https://github.com/near/mpc/pull/1945)(@gilcu3): Add timeout/retry mechanism to try to fix flaky test creating many accounts (#1945)

- [#1951](https://github.com/near/mpc/pull/1951)(@gilcu3): Enable test_embedded abi test (#1951)

- [#1937](https://github.com/near/mpc/pull/1937)(@barakeinav1): Add localnet TEE automation scripts and templates (#1937)


### ⚙️ Miscellaneous Tasks

- [#1894](https://github.com/near/mpc/pull/1894)(@gilcu3): Bump near crates, remove AccountId conversions (#1894)

- [#1916](https://github.com/near/mpc/pull/1916)(@netrome): Add CLAUDE.md and AGENTS.md to make coding agents more effective (#1916)

- [#1914](https://github.com/near/mpc/pull/1914)(@gilcu3): Update 3.3.2 mainnet contract history, clean-up previous contract migrations (#1914)

- [#1935](https://github.com/near/mpc/pull/1935)(@gilcu3): Remove the use of jemalloc (#1935)

- [#1879](https://github.com/near/mpc/pull/1879)(@barakeinav1): TEE testnet automation scripts and launcher (#1879)

- [#1933](https://github.com/near/mpc/pull/1933)(@DSharifi): *(clippy)* Enable warning on `assertions_on_result_states` clippy lint (#1933)

- [#1947](https://github.com/near/mpc/pull/1947)(@gilcu3): Update nearcore to 2.10.6 (#1947)

- [#1950](https://github.com/near/mpc/pull/1950)(@DSharifi): RPC requests to EVM chains should have separate struct per chain (#1950)

- [#1973](https://github.com/near/mpc/pull/1973)(@gilcu3): Remove extra license file (#1973)

- [#1982](https://github.com/near/mpc/pull/1982)(@DSharifi): Add `git-cliff` to nix dev environment (#1982)

- [#1972](https://github.com/near/mpc/pull/1972)(@SimonRastikian): Bump crate versions to 3.4.1 (#1972)


## [3.4.0] - 2026-01-29

### 🚀 Features

- [#1887](https://github.com/near/mpc/pull/1887)(@netrome): Remove storage deposit requirement from contract (#1887)


### 🐛 Bug Fixes

- [#1801](https://github.com/near/mpc/pull/1801)(@andrei-near): TCP user keepalive (#1801)

- [#1830](https://github.com/near/mpc/pull/1830)(@gilcu3): Cargo-make check-all using wrong profile parameter (#1830)

- [#1854](https://github.com/near/mpc/pull/1854)(@gilcu3): Update deps dcap-qvl and oneshot to avoid known vulnerabilities (#1854)

- [#1865](https://github.com/near/mpc/pull/1865)(@gilcu3): Hot loop bug in running state when no keyshares are found (#1865)

- [#1876](https://github.com/near/mpc/pull/1876)(@gilcu3): Bump wasmtime version due to RUSTSEC-2026-0006 (#1876)


### 💼 Other

- [#1808](https://github.com/near/mpc/pull/1808)(@DSharifi): *(nix)* Include `apple-sdk_14` package to build `neard` on MacOs (#1808)

- [#1812](https://github.com/near/mpc/pull/1812)(@DSharifi): *(nix)* Include `neard` as a nix flake (#1812)

- [#1845](https://github.com/near/mpc/pull/1845)(@DSharifi): *(nix)* Remove neard as a tool in dev shell (#1845)


### 📚 Documentation

- [#1850](https://github.com/near/mpc/pull/1850)(@barakeinav1): Add port 80 configuration support (#1850)


### ⚡ Performance

- [#1859](https://github.com/near/mpc/pull/1859)(@DSharifi): Avoid fragmented header writes on TCP connections (#1859)


### 🧪 Testing

- [#1804](https://github.com/near/mpc/pull/1804)(@gilcu3): Added automated localnet setup (#1804)

- [#1813](https://github.com/near/mpc/pull/1813)(@pbeza): Add benchmark regression tests for `Participants` struct (#1813)

- [#1886](https://github.com/near/mpc/pull/1886)(@gilcu3): Make account creation much faster using async transactions (#1886)

- [#1885](https://github.com/near/mpc/pull/1885)(@gilcu3): Add CI test for mpc-node through non-tee launcher (#1885)

- [#1896](https://github.com/near/mpc/pull/1896)(@gilcu3): Add 3.3.2 contract to contract-history (#1896)

- [#1899](https://github.com/near/mpc/pull/1899)(@gilcu3): Add fixture tests for key derivation path (#1899)


### ⚙️ Miscellaneous Tasks

- [#1816](https://github.com/near/mpc/pull/1816)(@DSharifi): Make pprof web server endpoint queriable (#1816)

- [#1818](https://github.com/near/mpc/pull/1818)(@netrome): Bump nearcore to 2.10.5 (#1818)

- [#1819](https://github.com/near/mpc/pull/1819)(@gilcu3): Update ts repo ref (#1819)

- [#1823](https://github.com/near/mpc/pull/1823)(@gilcu3): Fix cargo-deny warnings, adapt to changes in dcap-qvl (#1823)

- [#1838](https://github.com/near/mpc/pull/1838)(@gilcu3): Make launcher-script more user friendly (#1838)

- [#1837](https://github.com/near/mpc/pull/1837)(@DSharifi): *(metrics)* Track tokio runtime and task metrics and export it to prometheus (#1837)

- [#1840](https://github.com/near/mpc/pull/1840)(@gilcu3): Remove outdated research file (#1840)

- [#1843](https://github.com/near/mpc/pull/1843)(@gilcu3): [**breaking**] Use hex for attestation dto types (#1843)

- [#1849](https://github.com/near/mpc/pull/1849)(@DSharifi): Check licenses is up to date on CI (#1849)

- [#1862](https://github.com/near/mpc/pull/1862)(@DSharifi): Use `--force` flag for cargo-binstall installations (#1862)

- [#1855](https://github.com/near/mpc/pull/1855)(@DSharifi): Create histogram for bytes written on p2p TCP streams (#1855)

- [#1871](https://github.com/near/mpc/pull/1871)(@gilcu3): Optimize rust cache in CI (#1871)

- [#1873](https://github.com/near/mpc/pull/1873)(@DSharifi): Bump `axum` to 0.8.8 (#1873)

- [#1878](https://github.com/near/mpc/pull/1878)(@gilcu3): Enable ignored tests (#1878)

- [#1881](https://github.com/near/mpc/pull/1881)(@DSharifi): Bump flume to version `0.12.0` (#1881)

- [#1903](https://github.com/near/mpc/pull/1903)(@barakeinav1): Bump crate versions to 3.4.0 and update changelog (#1903)


## [3.3.2] - 2026-01-20

### 🐛 Bug Fixes

- [#1802](https://github.com/near/mpc/pull/1802)(@DSharifi): Include default value for pprof address (#1802)


### ⚙️ Miscellaneous Tasks

- [#1806](https://github.com/near/mpc/pull/1806)(@kevindeforth): Bump crate versions to 3.3.2 and update changelog (#1806)


## [3.3.1] - 2026-01-19

### 🐛 Bug Fixes

- [#1795](https://github.com/near/mpc/pull/1795)(@netrome): Revert #1707 (use SocketAddr instead of custom struct) (#1795)


### 💼 Other

- [#1786](https://github.com/near/mpc/pull/1786)(@DSharifi): Add instruction how to get `rust-analyzer` to work with nix flakes (#1786)


### ⚙️ Miscellaneous Tasks

- [#1798](https://github.com/near/mpc/pull/1798)(@netrome): Update version and changelog for `3.3.1` release (#1798)


## [3.3.0] - 2026-01-16

### 🚀 Features

- [#1723](https://github.com/near/mpc/pull/1723)(@DSharifi): *(node)* Add web endpoint to collect CPU profiles with `pprof-rs` (#1723)

- [#1735](https://github.com/near/mpc/pull/1735)(@barakeinav1): *(launcher)* Add ability to use the launcher also for non tee setups. (#1735)


### 🐛 Bug Fixes

- [#1729](https://github.com/near/mpc/pull/1729)(@gilcu3): Ruint unsoundness issue RUSTSEC-2025-0137 (#1729)

- [#1752](https://github.com/near/mpc/pull/1752)(@gilcu3): Enable TCP_KEEPALIVE for network connections (#1752)

- [#1764](https://github.com/near/mpc/pull/1764)(@kevindeforth): *(network)* Do not accept incoming connection if previous one is still active (#1764)

- [#1772](https://github.com/near/mpc/pull/1772)(@DSharifi): Don't crash MPC node on startup for failed attestation submission (#1772)


### 💼 Other

- [#1738](https://github.com/near/mpc/pull/1738)(@DSharifi): *(rust)* Add support for Nix build environment (#1738)

- [#1767](https://github.com/near/mpc/pull/1767)(@DSharifi): *(nix)* Add instructions to enable direnv with Nix flake (#1767)

- [#1771](https://github.com/near/mpc/pull/1771)(@DSharifi): *(nix)* Resolve openssl-sys compilation errors in devShell (#1771)


### 🚜 Refactor

- [#1697](https://github.com/near/mpc/pull/1697)(@DSharifi): Return Result type in `is_caller_an_attested_participant ` (#1697)


### 📚 Documentation

- [#1733](https://github.com/near/mpc/pull/1733)(@kevindeforth): Update readme to reflect correct test terminology (#1733)

- [#1661](https://github.com/near/mpc/pull/1661)(@barakeinav1): Support running two MPC CVMs (Frodo + Sam) on the same physical machine (#1661)


### ⚡ Performance

- [#1713](https://github.com/near/mpc/pull/1713)(@DSharifi): Enable `TCP_NODELAY` for nodes' P2P TCP connections (#1713)

- [#1663](https://github.com/near/mpc/pull/1663)(@DSharifi): *(contract)* Contract should not store full attestation submission (#1663)


### 🧪 Testing

- [#1708](https://github.com/near/mpc/pull/1708)(@gilcu3): Improve pytest handling of crate builds (#1708)

- [#1709](https://github.com/near/mpc/pull/1709)(@gilcu3): Refactor wait_for_state to avoid self.contract_state() in tight loop (#1709)

- [#1725](https://github.com/near/mpc/pull/1725)(@pbeza): Fix contract integration tests (#1725)

- [#1769](https://github.com/near/mpc/pull/1769)(@gilcu3): Handle transaction nonces locally (#1769)


### ⚙️ Miscellaneous Tasks

- [#1699](https://github.com/near/mpc/pull/1699)(@netrome): Initial contribution guidelines (#1699)

- [#1705](https://github.com/near/mpc/pull/1705)(@gilcu3): Add cargo-deny support (#1705)

- [#1707](https://github.com/near/mpc/pull/1707)(@gilcu3): Update testnet contract (#1707)

- [#1715](https://github.com/near/mpc/pull/1715)(@DSharifi): Ignore `RUSTSEC-2025-0137` in cargo-deny check (#1715)

- [#1717](https://github.com/near/mpc/pull/1717)(@DSharifi): Use `SocketAddr` instead of custom struct for addresses in configs (#1717)

- [#1718](https://github.com/near/mpc/pull/1718)(@barakeinav1): Update tee testnet guide (#1718)

- [#1722](https://github.com/near/mpc/pull/1722)(@DSharifi): Update rkyv version to fix `RUSTSEC-2026-0001` (#1722)

- [#1720](https://github.com/near/mpc/pull/1720)(@pbeza): Fix typo (#1720)

- [#1726](https://github.com/near/mpc/pull/1726)(@DSharifi): Ignore `RUSTSEC-2026-0002` in cargo-deny check (#1726)

- [#1739](https://github.com/near/mpc/pull/1739)(@kevindeforth): Unify ckd and sign sandbox tests (#1739)

- [#1744](https://github.com/near/mpc/pull/1744)(@gilcu3): Use attestation crate types (#1744)

- [#1749](https://github.com/near/mpc/pull/1749)(@gilcu3): Update to nearcore 2.10.4 (#1749)

- [#1742](https://github.com/near/mpc/pull/1742)(@pbeza): CI check to enforce TODO comment format (#1742)

- [#1756](https://github.com/near/mpc/pull/1756)(@gilcu3): Improve log messages for tokio tasks (#1756)

- [#1761](https://github.com/near/mpc/pull/1761)(@pbeza): Remove dead Python code (#1761)

- [#1774](https://github.com/near/mpc/pull/1774)(@gilcu3): Update mainnet history contract to 3.2.0 (#1774)

- [#1776](https://github.com/near/mpc/pull/1776)(@gilcu3): Add missing metrics in eddsa (#1776)

- [#1778](https://github.com/near/mpc/pull/1778)(@kevindeforth): Nodes accept peer with same or higher protocol version (#1778)

- [#1780](https://github.com/near/mpc/pull/1780)(@gilcu3): Refactor CI tests to group fast tests in a single run (#1780)

- [#1790](https://github.com/near/mpc/pull/1790)(@pbeza): Skip `TODO` format checks for `CHANGELOG.md` (#1790)

- [#1791](https://github.com/near/mpc/pull/1791)(@pbeza): Update version and changelog for `3.3.0` release (#1791)


## [3.2.0] - 2025-12-18

### 🚀 Features

- [#1627](https://github.com/near/mpc/pull/1627)(@gilcu3): Add derivation path support for ckd (#1627)

- [#1670](https://github.com/near/mpc/pull/1670)(@gilcu3): Add robust ecdsa SignatureScheme variant (#1670)

- [#1658](https://github.com/near/mpc/pull/1658)(@kevindeforth): Add new signature scheme variant to contract (#1658)

- [#1679](https://github.com/near/mpc/pull/1679)(@gilcu3): Robust_ecdsa provider implementation (#1679)


### 🐛 Bug Fixes

- [#1614](https://github.com/near/mpc/pull/1614)(@DSharifi): Use gas value in the new config for the update promise (#1614)

- [#1620](https://github.com/near/mpc/pull/1620)(@DSharifi): Code hashes can now be be voted for in all code protocol states (#1620)

- [#1635](https://github.com/near/mpc/pull/1635)(@barakeinav1): Correct error reporting of invalid TEE participants (#1635)

- [#1636](https://github.com/near/mpc/pull/1636)(@pbeza): Remove votes from `UpdateEntry` (#1636)

- [#1665](https://github.com/near/mpc/pull/1665)(@pbeza): Bump `ProposedUpdatesEntries` to `V3` and clean up `V2` (#1665)

- [#1673](https://github.com/near/mpc/pull/1673)(@gilcu3): Fix derivation_path params in ckd-example-cli (#1673)


### 🚜 Refactor

- [#1626](https://github.com/near/mpc/pull/1626)(@pbeza): Remove `ReportData::new()` (#1626)

- [#1642](https://github.com/near/mpc/pull/1642)(@DSharifi): Remove stale comment and improve if condition for charging of attestation storage (#1642)

- [#1668](https://github.com/near/mpc/pull/1668)(@pbeza): Move gas constants for voting from test to common module (#1668)

- [#1695](https://github.com/near/mpc/pull/1695)(@DSharifi): Clarify that `tee_state` contains attestations for not just active participants (#1695)


### 📚 Documentation

- [#1456](https://github.com/near/mpc/pull/1456)(@barakeinav1): Create a guide for localnet + MPC node running in TEE setup (#1456)

- [#1604](https://github.com/near/mpc/pull/1604)(@barakeinav1): Testnet with tee support guide (#1604)


### ⚡ Performance

- [#1659](https://github.com/near/mpc/pull/1659)(@netrome): Use procedural macro to include expected measurements at compile time (#1659)


### 🧪 Testing

- [#1623](https://github.com/near/mpc/pull/1623)(@DSharifi): *(pytest)* Run all pytests with 1 validator (#1623)

- [#1637](https://github.com/near/mpc/pull/1637)(@kevindeforth): Migration system test (#1637)

- [#1671](https://github.com/near/mpc/pull/1671)(@gilcu3): Refactor pytests, several improvements preparing for robust ecdsa integration (#1671)

- [#1672](https://github.com/near/mpc/pull/1672)(@gilcu3): Refactor integration test in the node, improve PortSeed struct (#1672)

- [#1678](https://github.com/near/mpc/pull/1678)(@kevindeforth): Fix sign sandbox tests (#1678)

- [#1682](https://github.com/near/mpc/pull/1682)(@gilcu3): Add tests for robust ecdsa (#1682)


### ⚙️ Miscellaneous Tasks

- [#1613](https://github.com/near/mpc/pull/1613)(@DSharifi): Remove `latest_code_hash` method from contract (#1613)

- [#1612](https://github.com/near/mpc/pull/1612)(@pbeza): Introduce a gas constant for `vote_update` (#1612)

- [#1618](https://github.com/near/mpc/pull/1618)(@barakeinav1): Update config files (#1618)

- [#1633](https://github.com/near/mpc/pull/1633)(@gilcu3): Update reference to ts repo (#1633)

- [#1648](https://github.com/near/mpc/pull/1648)(@gilcu3): Enforce kebab-case for crate names (#1648)

- [#1651](https://github.com/near/mpc/pull/1651)(@gilcu3): Broken contract verification (#1651)

- [#1653](https://github.com/near/mpc/pull/1653)(@netrome): Bump nearcore to 2.10.2 (#1653)

- [#1676](https://github.com/near/mpc/pull/1676)(@DSharifi): Run test profile on cargo nextest invocation (#1676)

- [#1681](https://github.com/near/mpc/pull/1681)(@DSharifi): Enable debug-asserttions on CI test profile (#1681)

- [#1692](https://github.com/near/mpc/pull/1692)(@gilcu3): Update version and changelog for 3.2.0 release  (#1692)

- [#1683](https://github.com/near/mpc/pull/1683)(@kevindeforth): *(contract)* Sandbox code organization (#1683)

- [#1698](https://github.com/near/mpc/pull/1698)(@gilcu3): Bump nearcore to 2.10.3 (#1698)


## [3.1.0] - 2025-12-04

### 🚀 Features

- [#1552](https://github.com/near/mpc/pull/1552)(@gilcu3): Scale all remaining sandbox tests (#1552)

- [#1554](https://github.com/near/mpc/pull/1554)(@gilcu3): Add cargo-make support (#1554)

- [#1563](https://github.com/near/mpc/pull/1563)(@gilcu3): Embed abi in contract (#1563)

- [#1527](https://github.com/near/mpc/pull/1527)(@barakeinav1): *(launcher)* Add support for multiple MPC hashes with fallback logic (#1527)

- [#1566](https://github.com/near/mpc/pull/1566)(@DSharifi): *(contract)* Make contract configuration values configurable (#1566)

- [#1559](https://github.com/near/mpc/pull/1559)(@pbeza): Clear update votes from non-participants after resharing (#1559)


### 🐛 Bug Fixes

- [#1556](https://github.com/near/mpc/pull/1556)(@DSharifi): Only allow contract itself to call `migrate` function (#1556)

- [#1576](https://github.com/near/mpc/pull/1576)(@gilcu3): Check python code quality in CI enabled (#1576)

- [#1594](https://github.com/near/mpc/pull/1594)(@gilcu3): Wrong tag name in gcp image creation (#1594)


### 📚 Documentation

- [#1610](https://github.com/near/mpc/pull/1610)(@DSharifi): Create release changelog for `3.1.0` release (#1610)


### 🧪 Testing

- [#1581](https://github.com/near/mpc/pull/1581)(@DSharifi): Fix broken example `pytest` command (#1581)

- [#1538](https://github.com/near/mpc/pull/1538)(@DSharifi): *(pytest fix)* Remove 1 validator override in pytests (#1538)


### ⚙️ Miscellaneous Tasks

- [#1501](https://github.com/near/mpc/pull/1501)(@DSharifi): Remove pub migrate function and make gas deposit for upgrades configurable (#1501)

- [#1558](https://github.com/near/mpc/pull/1558)(@gilcu3): Provide cargo-binstall with a token (#1558)

- [#1561](https://github.com/near/mpc/pull/1561)(@gilcu3): Bump attestation submission frequency (#1561)

- [#1569](https://github.com/near/mpc/pull/1569)(@DSharifi): Don't take self needlessly on contract methods (#1569)

- [#1580](https://github.com/near/mpc/pull/1580)(@DSharifi): *(dead-code)* Remove `allowed_code_hashes` and `mig_migration_info` methods from the contract (#1580)

- [#1579](https://github.com/near/mpc/pull/1579)(@DSharifi): Bump `near-sdk` to 5.18.1  (#1579)

- [#1577](https://github.com/near/mpc/pull/1577)(@gilcu3): Create mpc attestation wrapper crate (#1577)

- [#1593](https://github.com/near/mpc/pull/1593)(@netrome): Bump nearcore to 2.10.0 (#1593)

- [#1586](https://github.com/near/mpc/pull/1586)(@DSharifi): Bump project version to `3.1.0` (#1586)

- [#1588](https://github.com/near/mpc/pull/1588)(@gilcu3): Make attestation crate independent of the mpc (#1588)

- [#1551](https://github.com/near/mpc/pull/1551)(@netrome): Document how to make a release (#1551)

- [#1584](https://github.com/near/mpc/pull/1584)(@barakeinav1): Update dockerhub configuration parameter and add integration test for validate_image_hash using Docker Hub image (#1584)

- [#1602](https://github.com/near/mpc/pull/1602)(@DSharifi): Use `jemalloc` as memory allocator (#1602)

- [#1607](https://github.com/near/mpc/pull/1607)(@DSharifi): Remove dead legacy code in contract (#1607)

- [#1603](https://github.com/near/mpc/pull/1603)(@gilcu3): Remove legacy support in devnet (#1603)

- [#1609](https://github.com/near/mpc/pull/1609)(@netrome): Bump nearcore to 2.10.1 (#1609)


## [3.0.6] - 2025-11-25

### 🚀 Features

- [#1533](https://github.com/near/mpc/pull/1533)(@gilcu3): Fix rust-cache in CI (#1533)

- [#1537](https://github.com/near/mpc/pull/1537)(@kevindeforth): Allow participants to withdraw their update vote (#1537)

- [#1542](https://github.com/near/mpc/pull/1542)(@gilcu3): Initial ckd example app (#1542)


### 🐛 Bug Fixes

- [#1521](https://github.com/near/mpc/pull/1521)(@gilcu3): Both test could be fixed by bumping gas appropiately (#1521)

- [#1530](https://github.com/near/mpc/pull/1530)(@gilcu3): Enable pytest optimizations removed in #1511  (#1530)

- [#1531](https://github.com/near/mpc/pull/1531)(@gilcu3): Use reproducible build in existing test (#1531)

- [#1539](https://github.com/near/mpc/pull/1539)(@gilcu3): Use correct nearcore commit in submodule (#1539)

- [#1547](https://github.com/near/mpc/pull/1547)(@gilcu3): Patch nearcore version 210 (#1547)


### 📚 Documentation

- [#1467](https://github.com/near/mpc/pull/1467)(@pbeza): Design TEE-enabled backup service (#1467)


### ⚙️ Miscellaneous Tasks

- [#1549](https://github.com/near/mpc/pull/1549)(@netrome): Bump crate versions to 3.0.6 and update changelog (#1549)


## [3.0.5] - 2025-11-23

### 🚀 Features

- [#1505](https://github.com/near/mpc/pull/1505)(@andrei-near): Periodic mpc build workflow (#1505)

- [#1506](https://github.com/near/mpc/pull/1506)(@kevindeforth): Contract allows querying update proposals (#1506)

- [#1510](https://github.com/near/mpc/pull/1510)(@gilcu3): Sandbox tests support for any number of participants (#1510)


### 🐛 Bug Fixes

- [#1488](https://github.com/near/mpc/pull/1488)(@kevindeforth): *(contract)* Fix ProposeUpdate vote method and add unit test (#1488)

- [#1490](https://github.com/near/mpc/pull/1490)(@gilcu3): Remove balance checks (#1490)

- [#1492](https://github.com/near/mpc/pull/1492)(@barakeinav1): *(test)* Enable and update test_from_str_valid (#1492)

- [#1509](https://github.com/near/mpc/pull/1509)(@andrei-near): Nightly build MPC workflow (#1509)

- [#1525](https://github.com/near/mpc/pull/1525)(@netrome): Use patched near core supporting reproducible builds (#1525)


### 🧪 Testing

- [#1498](https://github.com/near/mpc/pull/1498)(@pbeza): Add unit tests for `do_update` function in `contract.rs` (#1498)

- [#1504](https://github.com/near/mpc/pull/1504)(@barakeinav1): Update attestation test and refresh asset extraction files (#1504)


### ⚙️ Miscellaneous Tasks

- [#1503](https://github.com/near/mpc/pull/1503)(@DSharifi): Update mainnet to use 3_0_2 release for backwards compatibilit… (#1503)

- [#1511](https://github.com/near/mpc/pull/1511)(@DSharifi): Bump nearcore dependency to `2.10.0-rc.3` (#1511)

- [#1523](https://github.com/near/mpc/pull/1523)(@netrome): Bump crate versions to 3.0.5 and update changelog (#1523)


## [3.0.4] - 2025-11-18

### 🚀 Features

- [#1428](https://github.com/near/mpc/pull/1428)(@barakeinav1): *(verification)* Allow RTMR2 to match production or dev measurements (#1428)

- [#1438](https://github.com/near/mpc/pull/1438)(@gilcu3): Add support for abi snapshots (#1438)

- [#1459](https://github.com/near/mpc/pull/1459)(@gilcu3): Add pytest with CKD private verification (#1459)

- [#1468](https://github.com/near/mpc/pull/1468)(@gilcu3): Group compatible pytests to use shared cluster (#1468)


### 🐛 Bug Fixes

- [#1448](https://github.com/near/mpc/pull/1448)(@barakeinav1): *(localnet)* Ensure MPC node can sync after delay by updating neard retention policy (#1448)

- [#1446](https://github.com/near/mpc/pull/1446)(@gilcu3): Align waiting time with number of added domains (#1446)

- [#1463](https://github.com/near/mpc/pull/1463)(@gilcu3): Update snapshot after recent contract ABI changes (#1463)

- [#1469](https://github.com/near/mpc/pull/1469)(@netrome): Separate build workflows for launcher and node (#1469)

- [#1471](https://github.com/near/mpc/pull/1471)(@gilcu3): Make sure cargo-near is installed from binary release (#1471)

- [#1480](https://github.com/near/mpc/pull/1480)(@gilcu3): Fetch mpc secret store key and add gcp image (#1480)


### ⚙️ Miscellaneous Tasks

- [#1451](https://github.com/near/mpc/pull/1451)(@gilcu3): Update testnet contract (#1451)

- [#1454](https://github.com/near/mpc/pull/1454)(@gilcu3): Update contract readme wrt CKD (#1454)

- [#1460](https://github.com/near/mpc/pull/1460)(@netrome): Improved docker workflows for node and launcher image (#1460)

- [#1464](https://github.com/near/mpc/pull/1464)(@gilcu3): Extend localnet guide to include eddsa and ckd examples as well (#1464)

- [#1487](https://github.com/near/mpc/pull/1487)(@netrome): Bump crate versions to 3.0.4 and update changelog (#1487)


## [3.0.3] - 2025-11-12

### 🐛 Bug Fixes

- [#1441](https://github.com/near/mpc/pull/1441)(@pbeza): Reduce log noise in migration monitor task (#1441)


### ⚙️ Miscellaneous Tasks

- [#1434](https://github.com/near/mpc/pull/1434)(@barakeinav1): Fix key names in localnet guide (#1434)

- [#1444](https://github.com/near/mpc/pull/1444)(@netrome): Bump nearcore to include 2.9.1 (#1444)

- [#1445](https://github.com/near/mpc/pull/1445)(@netrome): Bump crate versions to 3.0.3 and update changelog (#1445)


## [3.0.2] - 2025-11-11

### 🚀 Features

- [#1412](https://github.com/near/mpc/pull/1412)(@gilcu3): Validate attestation before submission (#1412)


### 🐛 Bug Fixes

- [#1405](https://github.com/near/mpc/pull/1405)(@gilcu3): Test_latest_allowed_image_hash_is_written assuming wrong order (#1405)

- [#1413](https://github.com/near/mpc/pull/1413)(@gilcu3): Remove wrong near_sdk::PublicKey conversions (#1413)

- [#1414](https://github.com/near/mpc/pull/1414)(@pbeza): Disable state sync in `start.sh` for localnet (#1414)

- [#1418](https://github.com/near/mpc/pull/1418)(@gilcu3): Path to store latest mpc node image hashes in devnet (#1418)

- [#1426](https://github.com/near/mpc/pull/1426)(@barakeinav1): *(tee)* Add  prefix to written image digest for launcher compatibility (#1426)

- [#1432](https://github.com/near/mpc/pull/1432)(@gilcu3): Enable user_views tests in the contract (#1432)

- [#1436](https://github.com/near/mpc/pull/1436)(@gilcu3): Add pub_migrate function to get current contract migration unstuck (#1436)


### 🧪 Testing

- [#1406](https://github.com/near/mpc/pull/1406)(@kevindeforth): Improve unit tests (#1406)


### ⚙️ Miscellaneous Tasks

- [#1409](https://github.com/near/mpc/pull/1409)(@Copilot): Downgrade account balance fetch log to debug level (#1409)

- [#1427](https://github.com/near/mpc/pull/1427)(@barakeinav1): Remove "exit 1" that could close ssh session (#1427)

- [#1430](https://github.com/near/mpc/pull/1430)(@netrome): Bump protocol version (#1430)

- [#1439](https://github.com/near/mpc/pull/1439)(@netrome): Update version and changelog for 3.0.2 release (#1439)


## [3.0.1] - 2025-11-06

### 🚀 Features

- [#1401](https://github.com/near/mpc/pull/1401)(@pbeza): Add default behavior if `MPC_LATEST_ALLOWED_HASH_FILE` is not set (#1401)


### 🐛 Bug Fixes

- [#1396](https://github.com/near/mpc/pull/1396)(@gilcu3): Compute fresh attestations before submitting (#1396)

- [#1403](https://github.com/near/mpc/pull/1403)(@kevindeforth): Node uses correct latest docker image hash (#1403)


### ⚙️ Miscellaneous Tasks

- [#1385](https://github.com/near/mpc/pull/1385)(@barakeinav1): Small operator guide fixes (#1385)

- [#1398](https://github.com/near/mpc/pull/1398)(@kevindeforth): Generate backup encryption key if env var is not provided (#1398)

- [#1397](https://github.com/near/mpc/pull/1397)(@netrome): Update nearcore to a modified 2.9 with testnet voting date set (#1397)

- [#1404](https://github.com/near/mpc/pull/1404)(@netrome): Update version and changelog for 3.0.1 release (#1404)


## [3.0.0] - 2025-11-05

### 🚀 Features

- [#489](https://github.com/near/mpc/pull/489)(@kevindeforth): *(devnet)* Loadtest tracks success statistics (#489)

- [#410](https://github.com/near/mpc/pull/410)(@pbeza): *(contract)* Add support for TEE (#410)

- [#511](https://github.com/near/mpc/pull/511)(@DSharifi): *(contract)* Add method to contract to get allowed image hashes (#511)

- [#468](https://github.com/near/mpc/pull/468)(@kevindeforth): *(Tee)* Automatic kickout mechanism for invalid TEE status (#468)

- [#509](https://github.com/near/mpc/pull/509)(@pbeza): *(contract)* Verification of TEE RTMRs 0-2 and MRTD (#509)

- [#513](https://github.com/near/mpc/pull/513)(@DSharifi): *(indexer)* Periodically fetch allowed image hashes from mpc contract (#513)

- [#525](https://github.com/near/mpc/pull/525)(@DSharifi): *(tee)* Node monitors latest allowed image hashes from contract (#525)

- [#524](https://github.com/near/mpc/pull/524)(@barakeinav1): Initial launcher script (#524)

- [#445](https://github.com/near/mpc/pull/445)(@kuksag): *(tee)* Generate p2p key/near signer key inside MPC node (#445)

- [#516](https://github.com/near/mpc/pull/516)(@pbeza): *(contract)* Verification of RTMR3 (#516)

- [#537](https://github.com/near/mpc/pull/537)(@pbeza): *(contract)* Verify `report_data` field of the TEE quote (#537)

- [#541](https://github.com/near/mpc/pull/541)(@barakeinav1): *(remote attestation )* RTMRs and app_compose field checks (#541)

- [#543](https://github.com/near/mpc/pull/543)(@DSharifi): Submit remote attestation on startup (#543)

- [#553](https://github.com/near/mpc/pull/553)(@kevindeforth): *(Tee)* Join logic for new participant and readme (#553)

- [#558](https://github.com/near/mpc/pull/558)(@kevindeforth): *(devnet)* Enable ssd support (#558)

- [#576](https://github.com/near/mpc/pull/576)(@kevindeforth): *(pytest)* Interactive pytest (#576)

- [#560](https://github.com/near/mpc/pull/560)(@kevindeforth): Enable network hardship simulation (#560)

- [#639](https://github.com/near/mpc/pull/639)(@barakeinav1): *(tee)* Add p2p public key to StaticWebData and http endpoint (#639)

- [#632](https://github.com/near/mpc/pull/632)(@pbeza): *(tee)* Custom attestation module (#632)

- [#653](https://github.com/near/mpc/pull/653)(@pbeza): *(tee)* Implement attestation quote generation in attestation module (#653)

- [#665](https://github.com/near/mpc/pull/665)(@DSharifi): *(contract)* Key resharing can be cancelled on the contract (#665)

- [#684](https://github.com/near/mpc/pull/684)(@kevindeforth): *(metrics)* Expose peers block height metric (#684)

- [#683](https://github.com/near/mpc/pull/683)(@pbeza): *(tee)* Implement TEE quote verification in attestation module (#683)

- [#722](https://github.com/near/mpc/pull/722)(@gilcu3): Added TEE enabled dockerfile + github workflow (#722)

- [#734](https://github.com/near/mpc/pull/734)(@gilcu3): Add support for cargo-near reproducible build (#734)

- [#711](https://github.com/near/mpc/pull/711)(@pbeza): *(tee)* Add Docker image verification logic to attestation (#711)

- [#776](https://github.com/near/mpc/pull/776)(@kevindeforth): Export account balances as metric (#776)

- [#747](https://github.com/near/mpc/pull/747)(@barakeinav1): Add CLI script to deploy the Launcher in dstack CVM (#747)

- [#769](https://github.com/near/mpc/pull/769)(@andrei-near): Build info metrics (#769)

- [#885](https://github.com/near/mpc/pull/885)(@gilcu3): Add CKD support to the MPC contract (#885)

- [#934](https://github.com/near/mpc/pull/934)(@gilcu3): Add DomainId to CKDRequest (#934)

- [#956](https://github.com/near/mpc/pull/956)(@gilcu3): CKD support in indexer - node/src/indexer/ changes (#956)

- [#957](https://github.com/near/mpc/pull/957)(@gilcu3): CKD support in indexer - store + web changes (#957)

- [#942](https://github.com/near/mpc/pull/942)(@pbeza): *(tee)* Clean TEE state when concluding a resharing (#942)

- [#964](https://github.com/near/mpc/pull/964)(@andrei-near): Overwrite mpc/near configs from ENV vars (#964)

- [#968](https://github.com/near/mpc/pull/968)(@gilcu3): CKD indexer - queue refactor (#968)

- [#974](https://github.com/near/mpc/pull/974)(@gilcu3): CKD provider support (#974)

- [#967](https://github.com/near/mpc/pull/967)(@netrome): Cli option to configure attestation authority (#967)

- [#985](https://github.com/near/mpc/pull/985)(@gilcu3): Added pytests for CKD (#985)

- [#1008](https://github.com/near/mpc/pull/1008)(@gilcu3): DomainId separation enforcement in the contract (#1008)

- [#1032](https://github.com/near/mpc/pull/1032)(@kevindeforth): Improve asset cleanup behavior when entering running or resharing (#1032)

- [#1038](https://github.com/near/mpc/pull/1038)(@gilcu3): Make leader explicit in completed requests (#1038)

- [#1023](https://github.com/near/mpc/pull/1023)(@gilcu3): CKD support in devnet (#1023)

- [#1061](https://github.com/near/mpc/pull/1061)(@kevindeforth): Change of participant set leads to exit of running state. (#1061)

- [#1064](https://github.com/near/mpc/pull/1064)(@gilcu3): Achieve reproducible builds for the mpc node and launcher (#1064)

- [#1070](https://github.com/near/mpc/pull/1070)(@barakeinav1): *(pytest)* Restrict signer keys to MPC contract method (clean) (#1070)

- [#1153](https://github.com/near/mpc/pull/1153)(@andrei-near): Failed cluster signatures metrics main (#1153)

- [#1162](https://github.com/near/mpc/pull/1162)(@kevindeforth): Contract supports migration service (#1162)

- [#1155](https://github.com/near/mpc/pull/1155)(@barakeinav1): Devnet add missing image_hash and latest_allowed_hash_file (#1155)

- [#1197](https://github.com/near/mpc/pull/1197)(@DSharifi): Enforce all participants to have valid attestations (#1197)

- [#1219](https://github.com/near/mpc/pull/1219)(@gilcu3): Update to use new ts rerandomization+coordinator API (#1219)

- [#1233](https://github.com/near/mpc/pull/1233)(@kevindeforth): Metrics tracking participant ids in failed signature computations (#1233)

- [#1215](https://github.com/near/mpc/pull/1215)(@kevindeforth): Import keyshares into empty keyshare storage (#1215)

- [#1225](https://github.com/near/mpc/pull/1225)(@gilcu3): New dtos_contract::PublicKey type (#1225)

- [#1223](https://github.com/near/mpc/pull/1223)(@pbeza): Re-submit attestation if node detects it has no attestation on chain (#1223)

- [#1241](https://github.com/near/mpc/pull/1241)(@gilcu3): Add near_sdk compatible serde serialization for dto types + Bls types (#1241)

- [#1250](https://github.com/near/mpc/pull/1250)(@kevindeforth): Indexer fetches migration state from contract and displays it on a web-endpoint (#1250)

- [#1239](https://github.com/near/mpc/pull/1239)(@gilcu3): Ckd bls pivot (#1239)

- [#1267](https://github.com/near/mpc/pull/1267)(@kevindeforth): Onboarding logic for MPC node (#1267)

- [#1272](https://github.com/near/mpc/pull/1272)(@gilcu3): Support CKD with BLS in pytests (#1272)

- [#1289](https://github.com/near/mpc/pull/1289)(@pbeza): Scaffold initial backup service (#1289)

- [#1216](https://github.com/near/mpc/pull/1216)(@kevindeforth): Import keyshares into non empty keyshare storage (#1216)

- [#1283](https://github.com/near/mpc/pull/1283)(@kevindeforth): Migration service web server and client logic (#1283)

- [#1270](https://github.com/near/mpc/pull/1270)(@barakeinav1): Add public key enforcement feature (#1270)

- [#1300](https://github.com/near/mpc/pull/1300)(@gilcu3): Add read-only getter for keyshares (#1300)

- [#1301](https://github.com/near/mpc/pull/1301)(@gilcu3): Backup_cli store secrets in json file (#1301)

- [#1313](https://github.com/near/mpc/pull/1313)(@barakeinav1): Add enforcement that contract call are by attested participants (#1313)

- [#1317](https://github.com/near/mpc/pull/1317)(@gilcu3): Backup-cli http over mtls support (#1317)

- [#1319](https://github.com/near/mpc/pull/1319)(@kevindeforth): Mpc node spawns recovery web endpoint (1295) (#1319)

- [#1316](https://github.com/near/mpc/pull/1316)(@barakeinav1): Use pre predecessor_account_id (#1316)

- [#1329](https://github.com/near/mpc/pull/1329)(@Copilot): Add secrets.json migration support for 2.2.0 → 3.0.0 upgrade path (#1329)

- [#1339](https://github.com/near/mpc/pull/1339)(@gilcu3): Update to current ts version, more changes than I expected, some tricky deps changes as well (#1339)

- [#1353](https://github.com/near/mpc/pull/1353)(@gilcu3): Ensure docker compose file is up to date in get docker compose hash (#1353)

- [#1333](https://github.com/near/mpc/pull/1333)(@pbeza): Implement public key registration for the backup service (#1333)

- [#1366](https://github.com/near/mpc/pull/1366)(@barakeinav1): Update launcher to remove old MPC container (#1366)

- [#1369](https://github.com/near/mpc/pull/1369)(@netrome): More detailed error messages when attestation validation fails (#1369)

- [#1375](https://github.com/near/mpc/pull/1375)(@netrome): Don't enforce secure time (#1375)

- [#1380](https://github.com/near/mpc/pull/1380)(@netrome): *(launcher)* Allow passing through NEAR_TESTS_PROTOCOL_UPGRADE_OVERRIDE env var (#1380)

- [#1376](https://github.com/near/mpc/pull/1376)(@kevindeforth): Send AES-256 encrypted secrets over mutual TLS instead of plaintext (#1376)

- [#1384](https://github.com/near/mpc/pull/1384)(@pbeza): Implement `KeyshareStorageAdapter` for keyshare persistence (#1384)


### 🐛 Bug Fixes

- [#552](https://github.com/near/mpc/pull/552)(@pbeza): *(tee)* Hotfix of TEE `report_data` verification (#552)

- [#585](https://github.com/near/mpc/pull/585)(@pbeza): *(tee)* Ensure quote verification status is `UpToDate` (#585)

- [#578](https://github.com/near/mpc/pull/578)(@kevindeforth): *(devnet)* Refill contract account for initalization (#578)

- [#595](https://github.com/near/mpc/pull/595)(@kevindeforth): Ignore peers who are behind in a computation (#595)

- [#589](https://github.com/near/mpc/pull/589)(@barakeinav1): Harden launcher docker-compose config against privilege escalation (#589)

- [#617](https://github.com/near/mpc/pull/617)(@DSharifi): *(dstack)* Bump dstack rust sdk version (#617)

- [#627](https://github.com/near/mpc/pull/627)(@DSharifi): *(tee)* Don't re-encode tdx_quote to hex (#627)

- [#629](https://github.com/near/mpc/pull/629)(@DSharifi): *(tee)* Serialize `quote_collateral` to a `serde_json::Value` instead of String (#629)

- [#588](https://github.com/near/mpc/pull/588)(@barakeinav1): *(launcher)* Enforce env var allow-list and custom host/port parsing in user-config (#588)

- [#620](https://github.com/near/mpc/pull/620)(@DSharifi): *(dstack)* Bump dstack rust sdk version (#620)

- [#612](https://github.com/near/mpc/pull/612)(@DSharifi): Create tokio enter guard for spawning TEE related tasks (#612)

- [#667](https://github.com/near/mpc/pull/667)(@andrei-near): Add boot nodes at near indexer config init state (#667)

- [#680](https://github.com/near/mpc/pull/680)(@kuksag): Adjust invariant checks when selecting participants (#680)

- [#705](https://github.com/near/mpc/pull/705)(@kevindeforth): *(deployment)* Gcp start script key error (#705)

- [#704](https://github.com/near/mpc/pull/704)(@netrome): Transparent serialization for Hash32 (#704)

- [#715](https://github.com/near/mpc/pull/715)(@kevindeforth): *(devnet)* Compatibility with upcoming mpc node version 3.0.0 (#715)

- [#724](https://github.com/near/mpc/pull/724)(@gilcu3): Fixes test_from_str_valid test in the contract crate (#724)

- [#740](https://github.com/near/mpc/pull/740)(@gilcu3): Display error message when participant list is empty in mpc-node generate-test-configs (#740)

- [#755](https://github.com/near/mpc/pull/755)(@andrei-near): Bumping nearcore to 2.7.0-rc4 (#755)

- [#768](https://github.com/near/mpc/pull/768)(@DSharifi): Defer creating `allowed_image_hash` file until write (#768)

- [#762](https://github.com/near/mpc/pull/762)(@barakeinav1): *(launcher)* Fixing of issues found during testing (#762)

- [#778](https://github.com/near/mpc/pull/778)(@kevindeforth): Spawn mointor docker images task before listening to blocks indefinitely (#778)

- [#785](https://github.com/near/mpc/pull/785)(@jaswinder6991): Update README.md to fix the broken link to Cait-Sith blog post (#785)

- [#800](https://github.com/near/mpc/pull/800)(@gilcu3): Replay all RTMR3 required events (#800)

- [#802](https://github.com/near/mpc/pull/802)(@DSharifi): Node ignores peers lagging 50 blocks behind (#802)

- [#780](https://github.com/near/mpc/pull/780)(@barakeinav1): *(node)* Enforce RTMR3 validation on event checks (#780)

- [#807](https://github.com/near/mpc/pull/807)(@kevindeforth): Node abort_key_event_instance instead of abort_key_event (#807)

- [#774](https://github.com/near/mpc/pull/774)(@gilcu3): Verify docker compose hashes correctly (#774)

- [#816](https://github.com/near/mpc/pull/816)(@barakeinav1): *(contract)* Correct tee_status and verify_tee logic (#816)

- [#838](https://github.com/near/mpc/pull/838)(@gilcu3): Fix typos and name inconsistencies (#838)

- [#852](https://github.com/near/mpc/pull/852)(@kevindeforth): Api mismatch for submitting participant info (#852)

- [#851](https://github.com/near/mpc/pull/851)(@kevindeforth): Propose join and rename to submit_participant_info (#851)

- [#788](https://github.com/near/mpc/pull/788)(@gilcu3): Use download_config parameter in mpc-node cli (#788)

- [#887](https://github.com/near/mpc/pull/887)(@pbeza): *(tee)* Ensure participants run valid TEE or none (#887)

- [#925](https://github.com/near/mpc/pull/925)(@kevindeforth): Increase gas limit for sign calls (#925)

- [#928](https://github.com/near/mpc/pull/928)(@gilcu3): CI get docker manifest timeouts (#928)

- [#955](https://github.com/near/mpc/pull/955)(@gilcu3): Add domainid ckdrequest again (#955)

- [#971](https://github.com/near/mpc/pull/971)(@pbeza): *(tee)* Avoid passing `ExpectedMeasurements` as a parameter in contract (#971)

- [#997](https://github.com/near/mpc/pull/997)(@think-in-universe): Redundant secure_time validation for app compose (#997)

- [#1022](https://github.com/near/mpc/pull/1022)(@gilcu3): Use correct assert_matches (#1022)

- [#1031](https://github.com/near/mpc/pull/1031)(@netrome): Use version controlled contracts in compatibility tests (#1031)

- [#1040](https://github.com/near/mpc/pull/1040)(@netrome): Add missing bs58 dependency in contract_history crate (#1040)

- [#1096](https://github.com/near/mpc/pull/1096)(@DSharifi): Return participants with invalid attestation in error message (#1096)

- [#1149](https://github.com/near/mpc/pull/1149)(@netrome): Ignore broken tests (#1149)

- [#1146](https://github.com/near/mpc/pull/1146)(@pbeza): Don't cleanup allowed hashes on getters (#1146)

- [#738](https://github.com/near/mpc/pull/738)(@robin-near): Stream while syncing instead of waiting for full sync. (#738)

- [#1170](https://github.com/near/mpc/pull/1170)(@gilcu3): Add needed deps in dockerfile, remove unnecessary (#1170)

- [#1165](https://github.com/near/mpc/pull/1165)(@pbeza): Contract was refunding too much of deposit (#1165)

- [#1189](https://github.com/near/mpc/pull/1189)(@pbeza): Address post-merge code review comments for PR #1183 (#1189)

- [#1193](https://github.com/near/mpc/pull/1193)(@gilcu3): Restore exact workflow before #1113 not including MPC launcher (#1193)

- [#1174](https://github.com/near/mpc/pull/1174)(@DSharifi): Node should retry attestation submission until its observed onchain (#1174)

- [#1202](https://github.com/near/mpc/pull/1202)(@pbeza): Resubmit participant info more frequently (#1202)

- [#1229](https://github.com/near/mpc/pull/1229)(@netrome): Run attestation requests within a tokio runtime (#1229)

- [#1247](https://github.com/near/mpc/pull/1247)(@pbeza): `tee_authority::get_with_backoff` was ending up in a hot loop (#1247)

- [#1258](https://github.com/near/mpc/pull/1258)(@netrome): Remove references to stale scripts (#1258)

- [#1266](https://github.com/near/mpc/pull/1266)(@gilcu3): Devnet using ckd with BLS (#1266)

- [#1281](https://github.com/near/mpc/pull/1281)(@gilcu3): Use more efficient DomainRegistry (#1281)

- [#1282](https://github.com/near/mpc/pull/1282)(@gilcu3): Remaining issues in TDX external guide (#1282)

- [#1330](https://github.com/near/mpc/pull/1330)(@gilcu3): Bug wasm execution failed error when running mpc localnet nodes (#1330)

- [#1350](https://github.com/near/mpc/pull/1350)(@netrome): Use port 24566 instead of 24567 for boot node arg in localnet guide (#1350)

- [#1358](https://github.com/near/mpc/pull/1358)(@gilcu3): Ensure hex serialization in vote-code-hash (#1358)

- [#1364](https://github.com/near/mpc/pull/1364)(@netrome): Disable state sync in localnet (#1364)

- [#1365](https://github.com/near/mpc/pull/1365)(@gilcu3): Github actions by pinning versions, added zizmor to CI (#1365)

- [#1374](https://github.com/near/mpc/pull/1374)(@gilcu3): Continue when receiver has lagged messages and log event (#1374)

- [#1381](https://github.com/near/mpc/pull/1381)(@barakeinav1): Update operator guide with correct port configuration (#1381)

- [#1382](https://github.com/near/mpc/pull/1382)(@gilcu3): Update the measurements that are actually used in the contract (#1382)


### 🚜 Refactor

- [#670](https://github.com/near/mpc/pull/670)(@barakeinav1): *(launcher)* Update user-config format and values (#670)

- [#758](https://github.com/near/mpc/pull/758)(@pbeza): *(tee)* Move attestation generation logic (#758)

- [#882](https://github.com/near/mpc/pull/882)(@DSharifi): *(attestation)* Remove `TcbInfo` wrapper struct (#882)

- [#884](https://github.com/near/mpc/pull/884)(@DSharifi): Remove `Quote` wrapper struct in attestation (#884)

- [#890](https://github.com/near/mpc/pull/890)(@netrome): Consistent usage of SerializableEdwardsPoint in crypto_shared/types.rs (#890)

- [#998](https://github.com/near/mpc/pull/998)(@netrome): Get rid of `mod.rs` files (#998)

- [#1098](https://github.com/near/mpc/pull/1098)(@DSharifi): Make `verify_tee_participant` API infallible (#1098)


### 📚 Documentation

- [#733](https://github.com/near/mpc/pull/733)(@gilcu3): Added doc on how to deploy an MPC node within a TEE (#733)

- [#886](https://github.com/near/mpc/pull/886)(@barakeinav1): Operator guide first version (#886)

- [#877](https://github.com/near/mpc/pull/877)(@kevindeforth): Document disaster recovery plan (#877)

- [#954](https://github.com/near/mpc/pull/954)(@DSharifi): Update readme to list testnet RPC providers for devnet tool (#954)

- [#980](https://github.com/near/mpc/pull/980)(@barakeinav1): Tdx cloud providers (#980)

- [#983](https://github.com/near/mpc/pull/983)(@barakeinav1): Update operator's guide with CVM update flow (#983)

- [#979](https://github.com/near/mpc/pull/979)(@barakeinav1): TEE design doc (#979)

- [#992](https://github.com/near/mpc/pull/992)(@barakeinav1): Explain how to get dstack logs (#992)

- [#993](https://github.com/near/mpc/pull/993)(@barakeinav1): Add link to HLD (#993)

- [#1002](https://github.com/near/mpc/pull/1002)(@think-in-universe): Make the launcher docs more readable (#1002)

- [#999](https://github.com/near/mpc/pull/999)(@barakeinav1): Port collision documentation (#999)

- [#1001](https://github.com/near/mpc/pull/1001)(@barakeinav1): Update production_settings (#1001)

- [#1033](https://github.com/near/mpc/pull/1033)(@barakeinav1): Add explanation about key generation (#1033)

- [#1030](https://github.com/near/mpc/pull/1030)(@barakeinav1): How to add MPC node key into account (#1030)

- [#1043](https://github.com/near/mpc/pull/1043)(@barakeinav1): Getting lasted MPC hash from the contract (#1043)

- [#1045](https://github.com/near/mpc/pull/1045)(@barakeinav1): Voting_new_hash (#1045)

- [#1041](https://github.com/near/mpc/pull/1041)(@barakeinav1): Add vote_new_parameters documentation (#1041)

- [#1059](https://github.com/near/mpc/pull/1059)(@barakeinav1): Update TEE difference table (#1059)

- [#1048](https://github.com/near/mpc/pull/1048)(@barakeinav1): Update local key provider section (#1048)

- [#1072](https://github.com/near/mpc/pull/1072)(@barakeinav1): Update information about MPC node retrieval (#1072)

- [#1062](https://github.com/near/mpc/pull/1062)(@barakeinav1): Add submit_participant_info details (#1062)

- [#1106](https://github.com/near/mpc/pull/1106)(@barakeinav1): Add reproducible build instructions for Dstack (#1106)

- [#1154](https://github.com/near/mpc/pull/1154)(@barakeinav1): Update RTMR generation instructions for dstack 0.5.4 (#1154)

- [#1178](https://github.com/near/mpc/pull/1178)(@pbeza): Update contract README with gas cost details (#1178)

- [#1256](https://github.com/near/mpc/pull/1256)(@netrome): Document contract interface crate (#1256)

- [#1262](https://github.com/near/mpc/pull/1262)(@netrome): Operator guide includes installation instructions for dstack-vmm instead of referencing their readme (#1262)

- [#1278](https://github.com/near/mpc/pull/1278)(@pbeza): *(localnet)* Refine `localnet` setup instructions (#1278)


### 🧪 Testing

- [#481](https://github.com/near/mpc/pull/481)(@DSharifi): Test that threshold from previous running state is used when serving sign requests in resharing (#481)

- [#498](https://github.com/near/mpc/pull/498)(@kevindeforth): *(node)* Add timeout to avoid race condition in integration test (#498)

- [#555](https://github.com/near/mpc/pull/555)(@kevindeforth): *(pytest)* Resolve pytest nonce conflicts (#555)

- [#682](https://github.com/near/mpc/pull/682)(@DSharifi): Create pytest to test cancellation of key resharing (#682)

- [#746](https://github.com/near/mpc/pull/746)(@pbeza): *(tee)* Add an integration test for attestation verification (#746)

- [#819](https://github.com/near/mpc/pull/819)(@pbeza): *(tee)* Add contract integration test for MPC image hash voting (#819)

- [#834](https://github.com/near/mpc/pull/834)(@DSharifi): Re-organize tests in attestation crate (#834)

- [#828](https://github.com/near/mpc/pull/828)(@pbeza): *(contract)* Integration test to ensure contract rejects invalid remote attestations (#828)

- [#1099](https://github.com/near/mpc/pull/1099)(@pbeza): Expired attestation kickout flow (#1099)

- [#1168](https://github.com/near/mpc/pull/1168)(@DSharifi): Move sandbox integration tests into separate directory. (#1168)

- [#1183](https://github.com/near/mpc/pull/1183)(@pbeza): Add grace period test for multi-node voting (#1183)

- [#1186](https://github.com/near/mpc/pull/1186)(@DSharifi): Rewrite upgrade test as a sandbox integration tests (#1186)

- [#1200](https://github.com/near/mpc/pull/1200)(@DSharifi): Wait for TEE attestations on resharings in pytests (#1200)

- [#986](https://github.com/near/mpc/pull/986)(@DSharifi): Proposal for adding new participant without valid TEE attestation should fail (#986)

- [#1211](https://github.com/near/mpc/pull/1211)(@DSharifi): Resolve flaky test caused by ordering of attestations (#1211)

- [#1066](https://github.com/near/mpc/pull/1066)(@pbeza): *(contract)* System test for `submit_tee_participant_info` (#1066)


### ⚙️ Miscellaneous Tasks

- [#493](https://github.com/near/mpc/pull/493)(@netrome): Update devnet docs (#493)

- [#494](https://github.com/near/mpc/pull/494)(@netrome): Initial Changelog + CI check (#494)

- [#508](https://github.com/near/mpc/pull/508)(@kuksag): *(pytests)* Split cluster setup logic  (#508)

- [#526](https://github.com/near/mpc/pull/526)(@DSharifi): Increase bytes allocated to version in report data from u8 to u16 (#526)

- [#549](https://github.com/near/mpc/pull/549)(@kevindeforth): *(tee)* Launcher cleanup (#549)

- [#564](https://github.com/near/mpc/pull/564)(@DSharifi): Fix docker build and publish action (#564)

- [#571](https://github.com/near/mpc/pull/571)(@andrei-near): Sanitize docker build CI to replace invalid tag symbol (#571)

- [#572](https://github.com/near/mpc/pull/572)(@kuksag): Remove p2p and signer key retrival via gcp (#572)

- [#569](https://github.com/near/mpc/pull/569)(@netrome): Enable support for JSON logging (#569)

- [#586](https://github.com/near/mpc/pull/586)(@sergey-ni): Migrated stats into IndexerState (#586)

- [#574](https://github.com/near/mpc/pull/574)(@DSharifi): Add info logs when creating file handle for TEE image hash (#574)

- [#573](https://github.com/near/mpc/pull/573)(@kuksag): Add `near_responder_id` and number of responder keys in `gcp-start.sh` logic (#573)

- [#575](https://github.com/near/mpc/pull/575)(@DSharifi): Keep MPC node running if image hash is disallowed (#575)

- [#615](https://github.com/near/mpc/pull/615)(@netrome): Bump nearcore to `2.7.0-rc.2` (#615)

- [#640](https://github.com/near/mpc/pull/640)(@gilcu3): Rename cait-sith -> threshold-signatures (#640)

- [#631](https://github.com/near/mpc/pull/631)(@netrome): Define release process (#631)

- [#649](https://github.com/near/mpc/pull/649)(@andrei-near): Build Docker image as part of CI tests (#649)

- [#651](https://github.com/near/mpc/pull/651)(@DSharifi): Use workspace for dependencies (#651)

- [#659](https://github.com/near/mpc/pull/659)(@DSharifi): Add `--enable-bulk-memory-opt` requirement in contract readme (#659)

- [#662](https://github.com/near/mpc/pull/662)(@DSharifi): Do not wait for indexer sync before generating TEE attestation (#662)

- [#669](https://github.com/near/mpc/pull/669)(@DSharifi): Use the right `protocol_state` type for MpcContractV1 state (#669)

- [#673](https://github.com/near/mpc/pull/673)(@DSharifi): Update pytest build step to include `--enable-bulk-memory` flag (#673)

- [#677](https://github.com/near/mpc/pull/677)(@DSharifi): Setup `black` as formatter for pytest code (#677)

- [#686](https://github.com/near/mpc/pull/686)(@kuksag): Make python formatter apply for the whole repo (#686)

- [#633](https://github.com/near/mpc/pull/633)(@IkerAlus): *(readme)* Eddsa example in readme.md (#633)

- [#685](https://github.com/near/mpc/pull/685)(@kuksag): Add TEE Launcher image building step to CI (#685)

- [#692](https://github.com/near/mpc/pull/692)(@kuksag): Fix failing CI for TEE Launcher build (#692)

- [#688](https://github.com/near/mpc/pull/688)(@kuksag): Add `tee_launcher` tests in CI (#688)

- [#694](https://github.com/near/mpc/pull/694)(@kuksag): Specify TEE Launcher image from `nearone` registry (#694)

- [#700](https://github.com/near/mpc/pull/700)(@DSharifi): Remove unused threshold parameter in start_cluster_with_mpc (#700)

- [#707](https://github.com/near/mpc/pull/707)(@kevindeforth): *(deployment)* Gcp start bash script: avoid unnecessary warning (#707)

- [#708](https://github.com/near/mpc/pull/708)(@kevindeforth): Rename web endpoint /get_public_data to /public_data (#708)

- [#718](https://github.com/near/mpc/pull/718)(@netrome): Override org-wide issue template (#718)

- [#720](https://github.com/near/mpc/pull/720)(@netrome): Move MPC node modules to `lib.rs` (#720)

- [#742](https://github.com/near/mpc/pull/742)(@DSharifi): *(devnet)* Add support for voting new approved code hash on devnet (#742)

- [#749](https://github.com/near/mpc/pull/749)(@kuksag): Remove mpc-keys crate in contract (#749)

- [#660](https://github.com/near/mpc/pull/660)(@hackpk): *(lazy_static)* Replace lazy_static with LazyLock  (#660)

- [#750](https://github.com/near/mpc/pull/750)(@kuksag): Add python linter (#750)

- [#751](https://github.com/near/mpc/pull/751)(@kuksag): Allow contract to generate ABI (#751)

- [#773](https://github.com/near/mpc/pull/773)(@gilcu3): Execute python lint/format CI only when needed (#773)

- [#775](https://github.com/near/mpc/pull/775)(@DSharifi): Remove i/o code from attestation crate (#775)

- [#783](https://github.com/near/mpc/pull/783)(@gilcu3): Unify near-sdk versions (#783)

- [#787](https://github.com/near/mpc/pull/787)(@kevindeforth): *(ci)* Split ci-tests into multiple jobs (#787)

- [#790](https://github.com/near/mpc/pull/790)(@gilcu3): Remove nightly features from fmt config (#790)

- [#793](https://github.com/near/mpc/pull/793)(@gilcu3): Fix cargo-near install failure in CI (#793)

- [#792](https://github.com/near/mpc/pull/792)(@barakeinav1): *(launcher)* Small update of variable and file name for better clarity (#792)

- [#796](https://github.com/near/mpc/pull/796)(@kevindeforth): *(pytests)* Speedup - reduce rpc poll timeout and send txs in parallel (#796)

- [#798](https://github.com/near/mpc/pull/798)(@kevindeforth): *(ci)* Add clippy all-features (#798)

- [#810](https://github.com/near/mpc/pull/810)(@kevindeforth): *(pytest)* Improve test_lost_assets.py performance and coverage (#810)

- [#812](https://github.com/near/mpc/pull/812)(@kevindeforth): *(pytest)* Fix flaky test_signature_lifecycle (#812)

- [#813](https://github.com/near/mpc/pull/813)(@gilcu3): Use our own fork of dcap-qvl v0.2.4 (#813)

- [#821](https://github.com/near/mpc/pull/821)(@gilcu3): Remove default features prometheus (#821)

- [#806](https://github.com/near/mpc/pull/806)(@DSharifi): Implement serde + borsh (de)serialization for attestation crate types (#806)

- [#822](https://github.com/near/mpc/pull/822)(@gilcu3): Upd near-crypto in infra/scripts/generate_keys/ (#822)

- [#840](https://github.com/near/mpc/pull/840)(@DSharifi): Update `dcap-qvl` crate to upstream version (#840)

- [#833](https://github.com/near/mpc/pull/833)(@barakeinav1): *(launcher script)* Update readme (#833)

- [#870](https://github.com/near/mpc/pull/870)(@DSharifi): Replace `YamlValue` with a String wrapper for docker_compose_file (#870)

- [#835](https://github.com/near/mpc/pull/835)(@DSharifi): Add docker TEE build as a CI check (#835)

- [#871](https://github.com/near/mpc/pull/871)(@gilcu3): Added  test_vote_code_hash_doesnt_accept_account_id_not_in_participant_list test (#871)

- [#873](https://github.com/near/mpc/pull/873)(@DSharifi): Implement borsh schema for attestation crate types (#873)

- [#874](https://github.com/near/mpc/pull/874)(@kevindeforth): *(test)* More detailed error checking in contract test (#874)

- [#876](https://github.com/near/mpc/pull/876)(@DSharifi): Update phala cloud API endpoint for collateral generation (#876)

- [#869](https://github.com/near/mpc/pull/869)(@pbeza): *(tee)* Remove account key from report data (#869)

- [#867](https://github.com/near/mpc/pull/867)(@gilcu3): Integrate ts#22 refactor (#867)

- [#878](https://github.com/near/mpc/pull/878)(@DSharifi): Integrate the attestation module into the contract code (#878)

- [#889](https://github.com/near/mpc/pull/889)(@DSharifi): Remove `near_crypto` from attestation crate (#889)

- [#922](https://github.com/near/mpc/pull/922)(@kevindeforth): *(contract)* Remove stale log of random seed in contract (#922)

- [#933](https://github.com/near/mpc/pull/933)(@DSharifi): Remove `near_crypto` dependency from smart contract (#933)

- [#937](https://github.com/near/mpc/pull/937)(@DSharifi): Move config.rs unit test behind feature gated test module (#937)

- [#872](https://github.com/near/mpc/pull/872)(@barakeinav1): *(deploy script)* Update MPC node ports  (#872)

- [#914](https://github.com/near/mpc/pull/914)(@DSharifi): [**breaking**] Remove near_crypto from node code (#914)

- [#963](https://github.com/near/mpc/pull/963)(@kevindeforth): *(node)* Move tls into crate (#963)

- [#989](https://github.com/near/mpc/pull/989)(@gilcu3): Bump version tracing-subscriber (#989)

- [#991](https://github.com/near/mpc/pull/991)(@gilcu3): Bump dcap-qvl to released version (#991)

- [#995](https://github.com/near/mpc/pull/995)(@DSharifi): Use configuration value instead of constant for `TEE_UPGRADE_PERIOD` (#995)

- [#1000](https://github.com/near/mpc/pull/1000)(@DSharifi): Upgrade `ed25519-dalek` version in contract (#1000)

- [#1004](https://github.com/near/mpc/pull/1004)(@DSharifi): Use crates.io version of dstack-sdk (#1004)

- [#1010](https://github.com/near/mpc/pull/1010)(@netrome): Enable running with dstack TEE authority in start.sh (#1010)

- [#1007](https://github.com/near/mpc/pull/1007)(@DSharifi): Delete `docker_release_tee.yaml` workflow (#1007)

- [#1011](https://github.com/near/mpc/pull/1011)(@gilcu3): Fix warning while building contract in pytests (#1011)

- [#1021](https://github.com/near/mpc/pull/1021)(@gilcu3): Fix deployment start script  (#1021)

- [#1013](https://github.com/near/mpc/pull/1013)(@DSharifi): Use `test_utils` crate for image hashes in contract tests (#1013)

- [#1018](https://github.com/near/mpc/pull/1018)(@barakeinav1): Set MPC authority stared by launcher to always expect real TDX HW (#1018)

- [#1036](https://github.com/near/mpc/pull/1036)(@andrei-near): Test for new docker images (#1036)

- [#1047](https://github.com/near/mpc/pull/1047)(@gilcu3): Avoid storing migration contract binary (#1047)

- [#1016](https://github.com/near/mpc/pull/1016)(@DSharifi): Enhance mock attestation struct with conditional validation (#1016)

- [#1068](https://github.com/near/mpc/pull/1068)(@kevindeforth): *(test)* Fix resharing tests (#1068)

- [#1082](https://github.com/near/mpc/pull/1082)(@kevindeforth): Update disaster recovery doc (#1082)

- [#1093](https://github.com/near/mpc/pull/1093)(@gilcu3): Refactor to adapt to API changes in threshold-signatures (#1093)

- [#1104](https://github.com/near/mpc/pull/1104)(@barakeinav1): Unify launcher folders (#1104)

- [#1108](https://github.com/near/mpc/pull/1108)(@DSharifi): Remove redundant and duplicate clippy check for `devnet` crate (#1108)

- [#1101](https://github.com/near/mpc/pull/1101)(@DSharifi): Create an interface for submitting transactions with response (#1101)

- [#1113](https://github.com/near/mpc/pull/1113)(@gilcu3): Update ci to use reproducible builds (#1113)

- [#1102](https://github.com/near/mpc/pull/1102)(@DSharifi): Move contract crate into root workspace (#1102)

- [#1116](https://github.com/near/mpc/pull/1116)(@gilcu3): Add detailed steps for mpc node image code inspection during upgrades (#1116)

- [#1122](https://github.com/near/mpc/pull/1122)(@DSharifi): Fix build script for builds in detached head (#1122)

- [#1124](https://github.com/near/mpc/pull/1124)(@gilcu3): Added security policy (#1124)

- [#1125](https://github.com/near/mpc/pull/1125)(@DSharifi): Pin serde to `1.0.2191` to fix compilation issue with `dstack-sdk` (#1125)

- [#1127](https://github.com/near/mpc/pull/1127)(@gilcu3): *(ci)* Separate CI actions for launcher and node (#1127)

- [#1131](https://github.com/near/mpc/pull/1131)(@gilcu3): *(docs)* Update docs after #1127 (#1131)

- [#1136](https://github.com/near/mpc/pull/1136)(@DSharifi): Move all workspace members in to `/crates` directory (#1136)

- [#1115](https://github.com/near/mpc/pull/1115)(@barakeinav1): Update user guide with dstack 0.5.4 changes (#1115)

- [#1143](https://github.com/near/mpc/pull/1143)(@gilcu3): Adapt to API changes in ts#78 (#1143)

- [#1120](https://github.com/near/mpc/pull/1120)(@kevindeforth): Index nodes by account id & TLS key in TEE State (#1120)

- [#1142](https://github.com/near/mpc/pull/1142)(@gilcu3): Use workspace versions in contract Cargo.toml (#1142)

- [#1111](https://github.com/near/mpc/pull/1111)(@DSharifi): Remove enum `VersionedMpcContract` contract state in favor of a single version struct (#1111)

- [#1157](https://github.com/near/mpc/pull/1157)(@gilcu3): Bring back legacy CI (#1157)

- [#1159](https://github.com/near/mpc/pull/1159)(@DSharifi): Update error message in image hash watcher (#1159)

- [#1151](https://github.com/near/mpc/pull/1151)(@DSharifi): Create DTO types for the attestation submission method (#1151)

- [#1166](https://github.com/near/mpc/pull/1166)(@DSharifi): Use time durations instead of block numbers for tee grace period (#1166)

- [#1190](https://github.com/near/mpc/pull/1190)(@gilcu3): Make sure devnet tests ckd (#1190)

- [#1141](https://github.com/near/mpc/pull/1141)(@DSharifi): Add github action for unused dependencies (#1141)

- [#1221](https://github.com/near/mpc/pull/1221)(@pbeza): Remove redundant `allow` attribute (#1221)

- [#1230](https://github.com/near/mpc/pull/1230)(@DSharifi): Use base58 encoding for public key serialization on node HTTP server. (#1230)

- [#1231](https://github.com/near/mpc/pull/1231)(@DSharifi): Document how to run a local mpc network (#1231)

- [#1251](https://github.com/near/mpc/pull/1251)(@gilcu3): Remove unneeded deps in attestation crate (#1251)

- [#1253](https://github.com/near/mpc/pull/1253)(@gilcu3): Added systemd service for VMM (#1253)

- [#1273](https://github.com/near/mpc/pull/1273)(@kevindeforth): Resolve flaky integration tests (#1273)

- [#1261](https://github.com/near/mpc/pull/1261)(@gilcu3): Contract unit tests for ckd (#1261)

- [#1276](https://github.com/near/mpc/pull/1276)(@kevindeforth): Contract move helpers (#1276)

- [#1274](https://github.com/near/mpc/pull/1274)(@gilcu3): Add support for CKD BLS in contract sandbox tests (#1274)

- [#1305](https://github.com/near/mpc/pull/1305)(@kevindeforth): Use read-write lock for keyshare storage (#1305)

- [#1315](https://github.com/near/mpc/pull/1315)(@DSharifi): Enforce sorted cargo dependencies on CI (#1315)

- [#1323](https://github.com/near/mpc/pull/1323)(@netrome): Bump nearcore to 2.9.0 (#1323)

- [#1326](https://github.com/near/mpc/pull/1326)(@netrome): Use pinned nextest version and standard installation action (#1326)

- [#1338](https://github.com/near/mpc/pull/1338)(@gilcu3): Use proper serialization format for PersistentSecrets (#1338)

- [#1336](https://github.com/near/mpc/pull/1336)(@netrome): Add support for dockerized localnet (#1336)

- [#1340](https://github.com/near/mpc/pull/1340)(@pbeza): Cargo update and fix deprecated API usage (#1340)

- [#1347](https://github.com/near/mpc/pull/1347)(@Copilot): Document reproducible builds in README.md (#1347)

- [#1352](https://github.com/near/mpc/pull/1352)(@gilcu3): Use 0 as SOURCE_DATE_EPOCH for repro builds (#1352)

- [#1344](https://github.com/near/mpc/pull/1344)(@gilcu3): Move test-utils to ts repo (#1344)

- [#1378](https://github.com/near/mpc/pull/1378)(@gilcu3): Updated hard-coded TCB info for 3.0.0 release (#1378)

- [#1383](https://github.com/near/mpc/pull/1383)(@netrome): Set crate versions to 3.0.0 and update changelog (#1383)

- [#1388](https://github.com/near/mpc/pull/1388)(@netrome): Support publishing images from git tags (#1388)


### ◀️ Revert

- [#779](https://github.com/near/mpc/pull/779)(@DSharifi): "refactor(tee): move attestation generation logic" (#779)


## [2.2.0-rc1] - 2025-06-11

### ⚙️ Miscellaneous Tasks

- [#490](https://github.com/near/mpc/pull/490)(@DSharifi): Bump versions for new release candidate (#490)


## [2.0.1-rc2] - 2025-06-10

### 🚀 Features

- [#466](https://github.com/near/mpc/pull/466)(@DSharifi): *(TEE)* Implement remote attestation information generation (#466)


### 🐛 Bug Fixes

- [#480](https://github.com/near/mpc/pull/480)(@DSharifi): Use threshold number for previous running state in resharing (#480)


### ⚙️ Miscellaneous Tasks

- [#477](https://github.com/near/mpc/pull/477)(@netrome): Add MIT license and third party license notices (#477)


## [2.0.1-rc1] - 2025-06-03

### 🚀 Features

- [#438](https://github.com/near/mpc/pull/438)(@DSharifi): Parallel resharing and running (#438)


### 🐛 Bug Fixes

- [#370](https://github.com/near/mpc/pull/370)(@DSharifi): Return early in Indexer thread and listen_blocks if channel to MPC node is closed.


### 💼 Other

- [#416](https://github.com/near/mpc/pull/416)(@andrei-near): Fix import keyshare  (#416)


### ⚙️ Miscellaneous Tasks

- [#366](https://github.com/near/mpc/pull/366)(@DSharifi): Add metrics for latency of signature request responses (#366)

- [#373](https://github.com/near/mpc/pull/373)(@DSharifi): Add metrics for latency of signature request responses in seconds

- [#371](https://github.com/near/mpc/pull/371)(@DSharifi): Remove spawn_blocking call wrapping the indexer thread (#371)

- [#406](https://github.com/near/mpc/pull/406)(@DSharifi): Remove unwrap in `monitor_passive_channels_inner` (#406)


## [2.0.0-rc.1] - 2025-04-11

### 🚀 Features

- [#294](https://github.com/near/mpc/pull/294)(@DSharifi): *(EdDSA)* Add support for EdDSA signature requests on the smart contract (#294)


### 🐛 Bug Fixes

- [#209](https://github.com/near/mpc/pull/209)(@pbeza): *(audit)* Fix TLS certificate verification (#209)

- [#268](https://github.com/near/mpc/pull/268)(@DSharifi): Pinned legacy contract dependency to git revistion (#268)

- [#328](https://github.com/near/mpc/pull/328)(@DSharifi): Add pre-computed edwards_point of EdDSA keys to contract state (#328)

- [#358](https://github.com/near/mpc/pull/358)(@DSharifi): Use internal tag for signature response type for backwards compatibility (#358)


### 💼 Other

- [#260](https://github.com/near/mpc/pull/260)(@andrei-near): MPC Load Balancer removal (#260)

- [#267](https://github.com/near/mpc/pull/267)(@andrei-near): Implement import-export keyshare (#267)

- [#274](https://github.com/near/mpc/pull/274)(@peter-near): Removed unused cipher key generation (#274)

- [#292](https://github.com/near/mpc/pull/292)(@andrei-near): Tokio runtime for import/export keyshare commands (#292)

- [#300](https://github.com/near/mpc/pull/300)(@andrei-near): Vote leave cmd (#300)

- [#269](https://github.com/near/mpc/pull/269)(@kuksag): Reuse `PayloadHash` and `Epsilon` types from contact (#269)

- [#304](https://github.com/near/mpc/pull/304)(@andrei-near): Warpbuild GHA runners (#304)

- [#331](https://github.com/near/mpc/pull/331)(@andrei-near): Option to use own funding account (#331)

- [#335](https://github.com/near/mpc/pull/335)(@andrei-near): MPC_HOME_DIR in image init script (#335)

- [#336](https://github.com/near/mpc/pull/336)(@peter-near): Added IDE configs to git ignore (#336)


### 🚜 Refactor

- [#210](https://github.com/near/mpc/pull/210)(@pbeza): *(audit)* Remove explicit .into_iter (#210)

- [#215](https://github.com/near/mpc/pull/215)(@pbeza): *(audit)* Shorten CLI's function bodies (#215)

- [#283](https://github.com/near/mpc/pull/283)(@DSharifi): Use `[u8; 32]` instead of Scalar type from `k256` crate in contract (#283)

- [#341](https://github.com/near/mpc/pull/341)(@DSharifi): Remove ScalarExt trait (#341)


### 🧪 Testing

- [#265](https://github.com/near/mpc/pull/265)(@bowenwang1996): Reduce flakiness by reducing the amount of assets buffered in tests (#265)

- [#339](https://github.com/near/mpc/pull/339)(@DSharifi): Test public key derivation in contract (#339)

- [#347](https://github.com/near/mpc/pull/347)(@DSharifi): *(eddsa)* Add integration test for EdDSA signature requests (#347)

- [#348](https://github.com/near/mpc/pull/348)(@DSharifi): Enable EdDSA signature requets in pytests (#348)


### ⚙️ Miscellaneous Tasks

- [#281](https://github.com/near/mpc/pull/281)(@DSharifi): Remove self dependency to `legacy_contract` (#281)

- [#286](https://github.com/near/mpc/pull/286)(@DSharifi): Pin `near-sdk` version to 5.2.1 (#286)

- [#282](https://github.com/near/mpc/pull/282)(@DSharifi): Move `crypto-shared` to a module in contract (#282)

- [#359](https://github.com/near/mpc/pull/359)(@DSharifi): Fix typo in codebase edd25519 to ed25519

- [#334](https://github.com/near/mpc/pull/334)(@DSharifi): Add docs to EdDSA fields in `PublicKeyExtended`. (#334)


## [testnet-upgrade] - 2025-01-09

### 💼 Other

- [#59](https://github.com/near/mpc/pull/59)(@andrei-near): Replace cache with rust-cache (#59)

- [#115](https://github.com/near/mpc/pull/115)(@andrei-near): Workflow to build and publish MPC docker images (#115)

- [#116](https://github.com/near/mpc/pull/116)(@andrei-near): Docker image builder nit (#116)