Release v1.18.0 - #223
Merged
Merged
Conversation
Merge the two Fixed sections the release accumulated and put the sections back in Keep a Changelog order.
Contributor
Author
🔍 Vulnerabilities of
|
| digest | sha256:a12a74e99c023bb689a4954c327fad6ddbbee8df24dcc67e951d4cffa6bf5f41 |
| vulnerabilities |     |
| platform | linux/amd64 |
| size | 160 MB |
| packages | 509 |
📦 Base Image ubuntu:24.04
| also known as |
|
| digest | sha256:1e0a86e57d247923571b75e0aaf48a1449cf8c543d51fb3e07a4a7d7bfa79316 |
| vulnerabilities |   |
UlysseCorbeil
approved these changes
Aug 21, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Stamps the accumulated
Unreleasedsection asv1.18.0. No code change.Also merges the two
### Fixedsections the section had accumulated across merges, and puts the subsections back in Keep a Changelog order (Added, Changed, Deprecated, Fixed, Security). All 29 entries are preserved verbatim.Highlights of what ships in this release:
--substreams-tier2-hosted-store-registry-addressis removed — remove it from yoursubstreams-tier2configuration before upgrading or the process refuses to start on an unknown flag.firecore.HideGlobalFlagsOnChildCmdis now a no-op; global flags are hidden behind--gh.golang.org/x/modv0.40.0, clearing CVE-2026-56864 and CVE-2026-56865 (both HIGH).--print-clock-only, unlinkable live blocks in thefirehoseapp andsubstreams-tier1, superviser restart deadlock).--validate-blocksonfirecore tools check merged-blocks, and a largesubstreamsbump (progress logging, worker accounting, thev4estimate RPC, thecontextWASM host module).substreamsstays pinned atv1.21.1-0.20260820161654-1cffa6c10a8d; the commits sitting onsubstreams@developpast that pin are deliberately not included.🤖 Generated with Claude Code
https://claude.ai/code/session_01F468AyRrW8saShuLPBRtmX