v0.23.1

Security Patch

This release bumps CometBFT to v0.38.21 to address security advisory CSA-2026-001.

---

Changes

• Security: Bump CometBFT to v0.38.21 (CSA-2026-001)
• CI: Modernize release workflow with checksums and multi-arch support

---

Upgrade Instructions

This is a non-breaking security patch. No coordinated upgrade required.

# 1. Stop the node
sudo systemctl stop bitsongd

# 2. Build new version
cd go-bitsong
git fetch --tags && git checkout v0.23.1
make install

# 3. Restart the node
sudo systemctl restart bitsongd

---

Verify Installation

Check version:

bitsongd version
# Expected output: 0.23.1

Check full version details:

bitsongd version --long

Expected output:

build_tags: netgo,ledger
commit: cb29c487cc4f8fd6d2ede2d335f0dbf43d6c1338
cosmos_sdk_version: v0.53.0
go: go version go1.23.2 linux/amd64
name: go-bitsong
server_name: bitsongd
version: 0.23.1

---

Verify Binary Checksum

Linux:

# Download binary and checksum
wget https://github.com/bitsongofficial/go-bitsong/releases/download/v0.23.1/bitsongd-0.23.1-linux-amd64.tar.gz
wget https://github.com/bitsongofficial/go-bitsong/releases/download/v0.23.1/bitsongd-0.23.1-linux-amd64.tar.gz.sha256

# Verify checksum
sha256sum -c bitsongd-0.23.1-linux-amd64.tar.gz.sha256
# Expected: bitsongd-0.23.1-linux-amd64.tar.gz: OK

macOS:

shasum -a 256 -c bitsongd-0.23.1-darwin-arm64.tar.gz.sha256

---

Available Binaries

Platform	Architecture	Status
Linux	amd64	✅ Available
Linux	arm64	✅ Available
macOS	arm64 (Apple Silicon)	✅ Available
macOS	amd64 (Intel)	⏸️ Temporarily unavailable
Windows	amd64	⏸️ Temporarily unavailable

---

Full Changelog: https://github.com/bitsongofficial/go-bitsong/blob/main/CHANGELOG.md

v0.23.0

What's Changed

• v023 by @hard-nett in #285

Full Changelog: v0.22.0...v0.23.0

v0.22.0

What's Changed

• v0.22.0: - resolve v018-v021 issues by @hard-nett in #278
• patch: replace cosmos-sdk, bump cometbft
• dev: prep for v022 upgrade
• dev: add custom export cli command
• dev: update ed25519 library used in-place-testnet
• logs: update replace docs
• fix testnet issues
• docs
• readd v021 upgradeHandler for in-place-testnet
• add historical custom upgrade patch logic
• dev: remove unnecessary x/account feegrant query
• dev: bumps to upggradeHandler logs & tests
• dev: bump export custom
• dev: return err instead of panic, require no error in tests
• add default replace, bump docker alpine version
• go mod tidy
• wip: retain broken validator in testnet for patch assertion
• wip: retain validator in staking store
• tests: 1 log file printed for debugging v022 upgradeHandler, added upgradeHandler logic to in-place-testnet
• dev: access appKeepers from top level app
• test: add unbonded control validator to unit tests
• cosmos-sdk@v0.53, implement x/protocol-pool
• register protocol pool in our app modules basic manager
• ict: impl x/protocolpool tests
• protocol-pool test
• init protocolpool keeper prior to distribution keeper

Full Changelog: v0.21.6...v0.22.0

v0.21.6

This release contains a fix for ISA-2025-001.

This version addresses a security vulnerability in IBC-go's deserialisation of acknowledgements and we strongly encourage everyone in the affected versions to update their chain immediately. This patch is not state-breaking, so chains can upgrade in a rolling manner. This does not have to be a co-ordinated upgrade. However, validators should upgrade as soon as possible when the release is made available. If the vulnerability is exploited before 2/3 is patched, the chain will halt.

What's Changed

• chore: upgrade ibc to 8.7.0 by @angelorc in #281

Full Changelog: v0.21.5...v0.21.6

v0.21.5

What's Changed

• V0.21.5.rc - temp dir cache bug resolution, ASA-2025-004 patch by @hard-nett in #273

Full Changelog: v0.21.4...v0.21.5

v0.21.4

v0.21.4 - WasmVM Patch & Temp Dir Bug Resolution

HALT HEIGHT	21051500
HALT DATE (UTC)	Feb 19th 2025, 15:38:21+00:00
Go-Bitsong Version	v0.21.4

Read more: https://github.com/bitsongofficial/networks/blob/master/bitsong-2b/upgrades/manual-upgrades/wasmvm-patch.md

What's Changed

• V0.21.4.rc by @hard-nett in #272

Full Changelog: v0.21.2...v0.21.4

v0.21.2

What's Changed

• reformat sdk upstream validation by @angelorc in #269

Full Changelog: v0.21.1...v0.21.2

v0.21.1

What's Changed

• v0.21.1 - correct upgrade handler by @hard-nett in #268

Full Changelog: v0.21.0...v0.21.1

v0.21.1.rc

Full Changelog: v0.21.0...v0.21.1.rc

v0.21.0

What's Changed

• v0.21 - cosmos-sdk@v0.50, wasmvm@v2, ibc-go@v8 by @hard-nett in #265

Full Changelog: v0.20.5...v0.21.0