Release Notes - v0.206.1

v0.206.1

Title: Limit peer responses and improve validation

Version: v0.206.1

This release limits peer sharing responses, expands ledger verification coverage without changing production behavior, and rejects malformed pool relay data during decoding.

Breaking Changes

• Updated SharePeers response handling: The server truncates each reply to the requested number of peer addresses, up to MaxSharedPeers=230. The protocol framework rejects messages larger than MaxPendingMessageBytes=5,760. The client returns ErrTooManyPeersShared only when the received peer-address count exceeds the recorded requested amount.
• Hardened pool relay decoding: PoolRelay.UnmarshalCBOR rejects IPv4 widths other than 4 bytes, IPv6 widths other than 16 bytes, and null dns_name values for hostname relay types, returning ErrPoolRelayAddressWidth or ErrPoolRelayMissingHostname for these invalid values.

Additional Changes

• Expanded ledger verification coverage: Tests use real mainnet Conway fixtures with the production NewBlockFromCbor, VerifyBlock, VerifyKes, and VerifyKesComponents paths to validate block body hashes, VRF data, and KES data. This release adds coverage without changing production behavior.

Release: v0.206.1

Compare: v0.206.0…v0.206.1

---

Docs authored by Doc Holiday