by Unity Nodes
MPC (Chain Signatures)Stable

MPC (Chain Signatures) 3.14.0

3.14.0github.com

This release adds Sui foreign-transaction support (#3754, #3755), brings async TEE attestation verification (#3714), auto-expiring launcher image hashes (#3564), support for operators changing node URLs (#3806), EdDSA…

Open on GitHub (opens in a new tab)

MPC 3.14.0

This release adds Sui foreign-transaction support (#3754, #3755), brings async TEE attestation verification (#3714), auto-expiring launcher image hashes (#3564), support for operators changing node URLs (#3806), EdDSA signing of messages shorter than 32 bytes (#3876), and a bump to nearcore 2.13.3 (#4053).

🚀 Features

  • #3667(@kevindeforth): Add metrics to detect starvation and resolve CI flakyness (#3667)

  • #3691(@anodar): Support flag for wiping nearcore data (#3691)

  • #3706(@gilcu3): Add nearcore node config endpoint (#3706)

  • #3716(@gilcu3): Add foreign chain tx config checker (#3716)

  • #3752(@kevindeforth): (metrics) Expose the TEE image-hash allowlist expiry metrics (#3752)

  • #3754(@frolvanya): (foreign-tx) Sui support in contract interface (#3754)

  • #3781(@gilcu3): Small defense in depth check for the evm inspector (#3781)

  • #3755(@frolvanya): (foreign-tx) Sui inspector (#3755)

  • #3829(@anodar): (node) Register foreign-chain configs via the new contract API (#3829)

  • #3806(@gilcu3): Support operators changing node urls (#3806)

  • #3846(@anodar): (e2e) Extend e2e cluster with new API from available chains (#3846)

  • #3876(@gilcu3): Allow smaller than 32 bytes messages for edDSA (#3876)

  • #3640(@SimonRastikian): Adding reconstruction threshold in node (#3640)

  • #3853(@anodar): (node) Indexer publishes foreign-chain supporters via a watch channel (#3853)

  • #3872(@kevindeforth): (near-contract-transport) Introducing CallContract trait enabling different back-ends to share the same contract interface. (#3872)

  • #3873(@kevindeforth): Introduce MpcContractHandle as shared contract interface (#3873)

  • #3714(@pbeza): (contract) Async TEE attestation verification, drop dcap-qvl (#3714)

  • #3874(@gilcu3): Require deposits for a few migration functions (#3874)

  • #3908(@pbeza): (contract) Add view for the current TEE verifier account (#3908)

  • #4014(@gilcu3): Add metrics for keyshare backups (#4014)

  • #4017(@haiyuechen-nearone): Add expected_network_fingerprint to foreign chain config (#4017)

  • #4013(@haiyuechen-nearone): Starknet RPC healthcheck probing logic (#4013)

  • #3564(@barakeinav1): (contract) Auto-expire unused launcher image hashes (#3564)

🐛 Bug Fixes

  • #3663(@gilcu3): (ci) Order correctly the release candidates versions from nearcore (#3663)

  • #3672(@gilcu3): (docs) Add http prefix to prevent node operators falling into the same trap (#3672)

  • #3678(@gilcu3): A single participant with wrong url should not break the node (#3678)

  • #3659(@gilcu3): Node crash on malformed participant set in task (#3659)

  • #3713(@gilcu3): Indexer wedging on startup (#3713)

  • #3705(@barakeinav1): (launcher) Reuse MPC container across restarts to preserve logs (#3705)

  • #3736(@barakeinav1): (node) Confirm submit_participant_info via advancing attestation expiry (#3736)

  • #3796(@barakeinav1): (node) Migrate state_sync ExternalStorage → Peers on start (#3796)

  • #3834(@gilcu3): Add timeout for tls incomming connection acceptor (#3834)

  • #3836(@netrome): Report computations lead metrics after finishing computations + more labels (#3836)

  • #3885(@pbeza): (tee-verifier) Inherit repository for reproducible builds (#3885)

  • #3890(@gilcu3): Account timeout properly for lagging nodes (#3890)

  • #3812(@metalurgical): Decryption error message (#3812)

  • #3937(@gilcu3): (tests) Do no attach deposit when not needed (#3937)

  • #3945(@gilcu3): Extend max collateral age (#3941) (#3945)

  • #3948(@barakeinav1): (attestation) Revert DEFAULT_EXPIRATION_DURATION_SECONDS to 7 days (#3948)

  • #3940(@pbeza): (contract) Drop the deposit for submit_participant_info (#3940)

  • #3995(@gilcu3): Make online assets metric more informative (#3995)

  • #3785(@barakeinav1): (contract) Make mock attestations cleanable via expiry (#3785)

💼 Other

  • #4024(@karim-en): Bump near-sdk to 5.29.0 (#4024)

🚜 Refactor

  • #3684(@kevindeforth): Unify gas type to not expose near indexer internals (#3684)

  • #3729(@kevindeforth): Establish contract-interfac/call_args.rs as source of truth (#3729)

  • #3778(@SimonRastikian): Reducing code redundancy (#3778)

  • #3780(@metalurgical): Upgrade aes gcm 0.11.0 (#3780)

  • #3832(@pbeza): (contract) Share NodeId/auth test helpers via primitives::test_utils (#3832)

  • #3828(@anodar): (node) Make VerifyForeignTxProvider methods inherent (#3828)

  • #3772(@haiyuechen-nearone): Deduplicate test port allocators into a single allocator (#3772)

  • #3845(@kevindeforth): Move ProposeUpdateArgs to the interface crate (#3845)

  • #3797(@haiyuechen-nearone): Extract foreign-chain-health-check library from config-tester (#3797)

  • #3870(@kevindeforth): (chain-gateway) Unify view calls behind a single ViewContract trait (#3870)

  • #3871(@kevindeforth): Near-contract-transport crate for NEAR call/view vocabulary (#3871)

  • #3911(@SimonRastikian): Renaming per-domain reconstruction-threshold identifiers (#3911)

  • #3931(@SimonRastikian): THRESHOLD into GOVERNANCE_THRESHOLD (#3931)

  • #3935(@SimonRastikian): Contract internal-only renames from threshold to reconstruction threshold (#3935)

  • #3914(@kevindeforth): Typed sign on MpcContractHandle (#3914)

  • #3811(@metalurgical): Add distinct errors for small_t and q consistency checks (#3811)

  • #3938(@SimonRastikian): Cross-crate type renames (#3938)

  • #3916(@kevindeforth): Typed request_app_private_key on MpcContractHandle (#3916)

  • #3952(@SimonRastikian): (ops) Move prepare-release.sh under scripts/ops/ (#3952)

  • #3798(@SimonRastikian): Shortening the line to StdRng::seed_from_u64 (#3798)

  • #3920(@kevindeforth): Typed propose_update and vote_update on MpcContractHandle (#3920)

📚 Documentation

  • #3614(@barakeinav1): (tdx) Add key-provider "DCAP error" troubleshooting entry (#3614)

  • #3707(@gilcu3): Clarify that OT setup cannot be reused in our implementation (#3707)

  • #3749(@barakeinav1): (migration) Fix backup-key (Step 3) and P2P-key (Step 4) retrieval for TEE nodes (#3749)

  • #3745(@barakeinav1): (tdx) Warn that changing app-compose breaks the sealed disk (#3745)

  • #3824(@barakeinav1): Add reproducibility-verification step to the release guide (#3824)

  • #3675(@netrome): Clarify how to set backup encryption key (#3675)

  • #3882(@pbeza): TEE verifier deploy + vote-in runbook (#3882)

  • #4011(@barakeinav1): (design) Operator-prepaid attestation storage (#4011)

⚡ Performance

  • #3958(@gilcu3): (tests) Improve newly introduced test performance by reducing timout (#3958)

🧪 Testing

  • #3656(@gilcu3): Add support for wycheproof vectors verification for signatures (#3656)

  • #3759(@haiyuechen-nearone): Cover all foreign provider auth kinds in verify-foreign-tx e2e (#3759)

  • #3791(@frolvanya): (foreign-tx) Sui inspector tests + localnet docs (#3791)

  • #3815(@gilcu3): Add test vectors for CKD (#3815)

  • #3855(@pbeza): (localnet) Deploy and vote in the TEE verifier contract (#3855)

  • #3902(@kevindeforth): (contract) Implement CallContract for sandbox tests (#3902)

  • #3899(@kevindeforth): (e2e-tests) Near-kit CallContract backend for MpcContractHandle (#3899)

  • #4007(@gilcu3): Cover all schemes in per-domain threshold integration test (#4007)

⚙️ Miscellaneous Tasks

  • #3670(@gilcu3): Remove noisy warnings in cargo-shear and cargo-deny (#3670)

  • #3688(@barakeinav1): Standardize public debug port to 8080 across deployment templates (#3688)

  • #3698(@dependabot[bot]): Bump the rust-minor-and-patch group with 6 updates (#3698)

  • #3699(@dependabot[bot]): Bump itertools from 0.14.0 to 0.15.0 (#3699)

  • #3717(@gilcu3): Bump nearcore to 2.13.0-rc.2 (#3717)

  • #3730(@kevindeforth): Ignore quick-xml DoS advisories unreachable via our deps (#3730)

  • #3744(@dependabot[bot]): Bump mockall from 0.14.0 to 0.15.0 (#3744)

  • #3741(@dependabot[bot]): Bump near-workspaces from 0.22.2 to 0.22.4 in the rust-minor-and-patch group across 1 directory (#3741)

  • #3771(@gilcu3): (contract) Cleanup migrations after 3.13.0 release (#3771)

  • #3775(@haiyuechen-nearone): Remove orphaned pytest config-generation code (#3775)

  • #3800(@gilcu3): Bump triple timeout and triple metrics bucket sizes (#3800)

  • #3802(@haiyuechen-nearone): Mark foreign-chain rpc auth header values as sensitive (#3802)

  • #3804(@gilcu3): Fix changelog generation for patch releases from a branch (#3804)

  • #3792(@dependabot[bot]): Bump the rust-minor-and-patch group across 1 directory with 3 updates (#3792)

  • #3819(@gilcu3): Bump rust version to 1.97 (#3819)

  • #3808(@barakeinav1): Bump to nearcore 2.13.1 (#3808)

  • #3816(@gilcu3): Bump cargo near and use its new check feature (#3816)

  • #3861(@dependabot[bot]): Bump the rust-minor-and-patch group with 7 updates (#3861)

  • #3862(@dependabot[bot]): Bump near-workspaces from 0.22.4 to 0.23.0 (#3862)

  • #3859(@SimonRastikian): Delete orphan update-mpc-node.sh (#3859)

  • #3869(@anodar): Add semgrep job in the ci workflow (#3869)

  • #3879(@gilcu3): Make workflow runs cancellable automatically (#3879)

  • #3893(@gilcu3): Remove redundant opengrep step (#3893)

  • #3905(@pbeza): Lower contract WASM size limit to 1235000 (#3905)

  • #3930(@gilcu3): Use upstream version of dcap-qvl (#3930)

  • #3955(@gilcu3): Job restart not needed when governance threshold changes (#3955)

  • #3956(@gilcu3): Use trait to avoid free-form strings in tracking (#3956)

  • #3974(@dependabot[bot]): Bump quinn-proto from 0.11.14 to 0.11.16 in the cargo group across 1 directory (#3974)

  • #3895(@barakeinav1): (tee) Move cluster deploy/test scripts to mpc-private (#3895)

  • #3971(@gilcu3): Bump toolchain to 1.97.1 (#3971)

  • #3989(@gilcu3): Bump claude review and fix env overflow for big PRs (#3989)

  • #3988(@github-actions[bot]): Bump to nearcore 2.13.2 (#3988)

  • #4002(@andrei-near): Fix nightly build sed branch OR tags (#4002)

  • #3980(@dependabot[bot]): Bump syn from 2.0.118 to 3.0.3 (#3980)

  • #3996(@gilcu3): Ensure blstrs scalar Copy types are zeroized (#3996)

  • #3981(@dependabot[bot]): Bump near-kit from 0.11.2 to 0.12.1 (#3981)

  • #4001(@dependabot[bot]): Bump the rust-minor-and-patch group across 1 directory with 20 updates (#4001)

  • #4009(@gilcu3): Harden claude reviews (#4009)

  • #4019(@haiyuechen-nearone): Stop the review bot demanding license notices on dependency bumps (#4019)

  • #4022(@gilcu3): Make nix cache independent of Cargo.lock to avoid invalidating rust caches (#4022)

  • #4018(@haiyuechen-nearone): Bump ruint to 1.20.0 for RUSTSEC-2026-0220 (#4018)

  • #4033(@gilcu3): Add exception for wasmtime 45 vulnerability (#4033)

  • #4042(@dependabot[bot]): Bump serial_test from 3.5.0 to 4.0.1 (#4042)

  • #4041(@dependabot[bot]): Bump base64 from 0.22.1 to 0.23.0 (#4041)

  • #4044(@metalurgical): Bump nearkit from 0.12.1 to 0.14.0 (#4044)

  • #4039(@dependabot[bot]): Bump the rust-minor-and-patch group with 4 updates (#4039)

  • #4048(@anodar): Bump up rkyv as per RUSTSEC 2026-0233/0234/0235 (#4048)

  • #4046(@gilcu3): Make rust doc lints cover all cases (#4046)

  • #4036(@haiyuechen-nearone): Lint module declaration order by visibility and grouping (#4036)

  • #4053(@anodar): Bump nearcore to 2.13.3 (#4053)

Docker images

MPC contract

  • digest: sha256:c64ecba185096c6a52aad8477a2a1e6eecd74c8350328bedf5a60ee738807422
All MPC (Chain Signatures) releases