Skip to content

images: stable client and security bumps for v1.11.2 - #506

Merged
OisinKyne merged 1 commit into
main-v1.11from
oisin/v1.11.2-stable-clients
Oct 22, 2026
Merged

OisinKyne merged 1 commit into
main-v1.11from
oisin/v1.11.2-stable-clients

Conversation

@OisinKyne

Copy link
Copy Markdown
Contributor

Mainnet-safe patch on the 1.11 charon line (charon stays v1.11.2): every client moves to its latest stable release, picking up this week's security fixes (Lighthouse v8.3.1 for the eMudhra CA compromise, Nethermind 2.2.0 with the October .NET servicing release, patched Go builds) without Charon v2 or any release candidate. Gloas code in these releases is inactive on mainnet.

Lighthouse v8.3.1, Teku 26.10.1, Lodestar v1.50.0, Prysm v7.3.0, Nimbus v26.10.1, Nethermind 2.2.0, Reth v2.8.0, Commit-Boost v0.11.0; Prometheus v3.15.1, Grafana 13.2.4, Loki 3.7.9, Tempo 2.10.10, Alloy v1.21.1, cAdvisor v0.60.6, and prom/node-exporter v1.12.1 instead of the deprecated bitnamilegacy image. The stack's Nethermind flags are unaffected by 2.x breaking changes (JsonRpc.Host is the explicit 0.0.0.0).

Mainnet-safe patch on the 1.11 charon line (charon stays v1.11.2): every client
moves to its latest stable release, picking up this week's security fixes
(Lighthouse v8.3.1 for the eMudhra CA compromise, Nethermind 2.2.0 with the
October .NET servicing release, patched Go builds) without Charon v2 or any
release candidate. Gloas code in these releases is inactive on mainnet.

Lighthouse v8.3.1, Teku 26.10.1, Lodestar v1.50.0, Prysm v7.3.0, Nimbus
v26.10.1, Nethermind 2.2.0, Reth v2.8.0, Commit-Boost v0.11.0; Prometheus
v3.15.1, Grafana 13.2.4, Loki 3.7.9, Tempo 2.10.10, Alloy v1.21.1, cAdvisor
v0.60.6, and prom/node-exporter v1.12.1 instead of the deprecated
bitnamilegacy image. The stack's Nethermind flags are unaffected by 2.x
breaking changes (JsonRpc.Host is the explicit 0.0.0.0).
@sonarqubecloud

Copy link
Copy Markdown

@OisinKyne
OisinKyne merged commit 920e705 into main-v1.11 Oct 22, 2026
2 checks passed
@OisinKyne
OisinKyne deleted the oisin/v1.11.2-stable-clients branch October 22, 2026 10:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant