v2.2.8

Notice

Non-mandatory upgrade

Security

• Reject non-literal hostV6 to avoid blocking DNS lookups on the discovery I/O thread (#134,#136)
• Only accept STATUS messages on discovery channels (#133)

New Features

• Add lookUpIp to resolve an InetAddress by domain (#130)

Changes

• Increase randomness when selecting TCP nodes (#94)
• Optimize findnode message processing to improve neighbor-discovery efficiency (#106)

Build

• Ignore sources and javadoc checksum verification (#130)
• Bump bcprov-jdk18on/bcpkix-jdk18on to 1.84 and grpc-java to 1.81.0 (#131)
• Update gradle/verification-metadata.xml for guava (#132)

v2.2.7

Notice

Support publish to maven and jitpack. (#109, #111, #124, #125)

New Features

Major Changes

• Security dependency upgrades:( #112, #108)
  • Bump org.apache.commons:commons-lang3 from 3.4 to 3.18.0
  • Bump Protobuf and gRPC dependencies
  • Bump com.google.protobuf:protobuf-java and com.google.protobuf:protobuf-java-util from 3.25.5 to 3.25.8
  • Bump io.grpc:grpc-netty from 1.60.0 to 1.75.0

Changes

• Fix meta data verification on Windows (#110)
• connPool and resource management improvements (#116)
  • Fix network timeout issues causing OOM
• Concurrent external IP retrieval with validation using CompletionService (#120, #121)
• Network detection optimization (#122)
  • Enhanced logic for detecting local LAN IP address
• Logging improvements(README) and doc updates (#113, #115, #117)
  • Support JDK 17 compilation
  • Fix garbled HelloMessage logs

Integrity Check

All available JAR files in this release are signed via this GPG key.
For more information about the GPG public key, please refer to: Integrity Check.

From the download listings below you should see links to the downloadable jar files as well as sig signature files. To verify the authenticity of any jar file, grab the jar and sig files with the same prefix name and then execute the verification process: GPG signature verification

release-v2.2.6

Notice

Non-mandatory upgrade

New Features

Major Changes

1. Upgrade dependencies for security: (#97)
   Remove ch.qos.logback:logback-classic and ch.qos.logback:logback-core
   Remove org.web3j:crypto
   Bump org.slf4j:slf4j-api from 1.7.25 to 1.7.36
   Bump junit:junit from 4.12 to 4.13.2

Changes

1. Upgrade Gradle to 7.6.4 and enable dependency verification. (#99, #101, #102)

2. Adjust the getExternalIpV4 endpoint from ifconfig.me to ifconfig.me/ip. (#98)

v2.2.5

Notice

Non-mandatory upgrade

New Features

Core

Change

1. Bump io.grpc:grpc-netty from 1.52.1 to 1.60.0

2. Bump ch.qos.logback:logback-classic from 1.2.9 to 1.2.13

3. Bump ch.qos.logback:logback-core from 1.2.9 to 1.2.13

4. Bump org.bouncycastle:bcprov-jdk15on version 1.69 to org.bouncycastle:bcprov-jdk18on version 1.79

5. Bump dnsjava:dnsjava from 3.5.2 to 3.6.2

Integrity Check

All available JAR files in this release are signed via this GPG key.
For more information about the GPG public key, please refer to: Integrity Check.

From the download listings below you should see links to the downloadable jar files as well as sig signature files. To verify the authenticity of any jar file, grab the jar and sig files with the same prefix name and then execute the verification process: GPG signature verification

v2.2.4

Notice

Non-mandatory upgrade

New Features

Core

Change

Bump com.google.protobuf:protobuf-java from 3.21.12 to 3.25.5

Integrity Check

All available JAR files in this release are signed via this GPG key.
For more information about the GPG public key, please refer to: Integrity Check.

From the download listings below you should see links to the downloadable jar files as well as sig signature files. To verify the authenticity of any jar file, grab the jar and sig files with the same prefix name and then execute the verification process: GPG signature verification

---

v2.2.1

Notices

• Non-mandatory upgrade

Changes

• Update snappy-java version #74
• Set log level to warn when UDP InvalidProtocolBufferException happens #75
• Add column lanIp for P2pConfig #76
• Optimize duplicate peer scenario logic in handshake #78

---

Integrity Check

All jar files available in this release are signed via this GPG key:

• pub: 1254 F859 D2B1 BD9F 66E7 107D F859 BCB4 4A28 290B
• uid: build@tron.network

From the download listings below you should see links to the downloadable jar files as well as asc signature files. To verify the authenticity of any jar file, grab the jar and asc files with the same prefix name and then execute the verification process: GPG signature verification

---

v2.1.0

Notices

• Non-mandatory upgrade

Changes

• Optimize Logic of Acquiring Internet IP #55
• Don't submit new task if server is closing #56
• Optimize thread pool and thread name in Libp2p #57
• Send message P2pDisconnectMessage before closing channel #63
• Optimize p2p handshake logic #65
• Add message length check logic #66
• Update the versions of grpc and protobuf #67

---

Integrity Check

All jar files available in this release are signed via this GPG key:

• pub: 1254 F859 D2B1 BD9F 66E7 107D F859 BCB4 4A28 290B
• uid: build@tron.network

From the download listings below you should see links to the downloadable jar files as well as asc signature files. To verify the authenticity of any jar file, grab the jar and asc files with the same prefix name and then execute the verification process: GPG signature verification

---

v1.2.0

Notices

• Non-mandatory upgrade

Changes

• TIP-547 Connection precheck before P2P communication #7
• TIP-548 Node Discovery via DNS
• TIP-549 P2P support IPv6 protocol #4
• TIP-550 P2P message snappy compression #7
• Optimize active connection logic #34

---

Integrity Check

All jar files available in this release are signed via this GPG key:

• pub: 1254 F859 D2B1 BD9F 66E7 107D F859 BCB4 4A28 290B
• uid: build@tron.network

From the download listings below you should see links to the downloadable jar files as well as asc signature files. To verify the authenticity of any jar file, grab the jar and asc files with the same prefix name and then execute the verification process: GPG signature verification

---

v1.1.0

Notices

• Non-mandatory upgrade

---

Integrity Check

All jar files available in this release are signed via this GPG key:

• pub: 1254 F859 D2B1 BD9F 66E7 107D F859 BCB4 4A28 290B
• uid: build@tron.network

From the download listings below you should see links to the downloadable jar files as well as asc signature files. To verify the authenticity of any jar file, grab the jar and asc files with the same prefix name and then execute the verification process: GPG signature verification

---

v0.1.5

Notices

• Non-mandatory upgrade

Changes

• Update io.grpc from 1.14.0 to 1.52.1 #43

---

Integrity Check

All jar files available in this release are signed via this GPG key:

• pub: 1254 F859 D2B1 BD9F 66E7 107D F859 BCB4 4A28 290B
• uid: build@tron.network

From the download listings below you should see links to the downloadable jar files as well as asc signature files. To verify the authenticity of any jar file, grab the jar and asc files with the same prefix name and then execute the verification process: GPG signature verification

---