Release Notes - v0.205.6

v0.205.6

Title: Strengthen certificate and input validation

Version: v0.205.6

This release improves block certificate checks, hash input validation, CBOR decoding safety, and preservation of canonical UTxO outputs.

New Features

• Added operational certificate checks: VerifyBlock now validates cold signatures and reports invalid signatures through ValidationErrorTypeOpCert. ledger.ExtractOpCertFromHeader exposes operational certificate data from supported Shelley family and Babbage family headers.

Bug Fixes

• Improved hash validation: Blake2b constructors now reject hashes with the wrong length. Native script witness lookup and JSON decoding also reject wrong length hashes for MultiAsset policy IDs, PoolRegistrationCertificate VRF key hashes, and pool owners.

Additional Changes

• Updated CBOR decoding safety: Version v2.9.4 of github.com/fxamacker/cbor/v2, including its example modules, improves safety when decoding CBOR maps with uncomparable Go keys.
• Preserved canonical UTxO output encoding: github.com/blinklabs-io/ouroboros-mock v0.20.2 retains canonical CBOR output encoding in mock UTxO data.

Release: v0.205.6

Compare: v0.205.5…v0.205.6

---

Docs authored by Doc Holiday