What's Changed
- fix: bump Go to 1.26.2 and deps to resolve govulncheck failures by @rootulp in https://github.com/celestiaorg/celestia-core/pull/2943
- fix: add default case to handleHaves select to prevent reactor halt (backport #2813) by @mergify[bot] in https://github.com/celestiaorg/celestia-core/pull/2941
- chore: sync CODEOWNERS with main by @rootulp in https://github.com/celestiaorg/celestia-core/pull/2942
- fix(mempool): cap SeenTxSet size to prevent OOM from SeenTx flooding (backport #2887) by @mergify[bot] in https://github.com/celestiaorg/celestia-core/pull/2927
- fix: release P2P channel receive buffer after large message EOF (backport #2815) by @mergify[bot] in https://github.com/celestiaorg/celestia-core/pull/2939
- fix: bump github.com/cloudflare/circl to v1.6.3 (backport #2840) by @mergify[bot] in https://github.com/celestiaorg/celestia-core/pull/2938
- fix: add missing QuerySequence case to socket client resMatchesReq (backport #2844) by @mergify[bot] in https://github.com/celestiaorg/celestia-core/pull/2937
- fix: strip BlobTx wrappers in ExecCommitBlock during crash replay (backport #2846) by @mergify[bot] in https://github.com/celestiaorg/celestia-core/pull/2935
- fix: enforce PubKey-Address binding in LCA evidence validation (backport #2848) by @mergify[bot] in https://github.com/celestiaorg/celestia-core/pull/2933
- fix: enforce maxRequestsPerPeer on direct SeenTx path in CAT mempool (backport #2880) by @mergify[bot] in https://github.com/celestiaorg/celestia-core/pull/2932
- fix: cross-validate ExtendedCommit against LastCommit in blocksync (backport #2884) by @mergify[bot] in https://github.com/celestiaorg/celestia-core/pull/2930
- fix(types): validate nil SignedHeader in LightClientAttackEvidence (backport #2923) by @mergify[bot] in https://github.com/celestiaorg/celestia-core/pull/2925
- fix: disconnect peers that send invalid chunks during state sync (backport #2814) by @mergify[bot] in https://github.com/celestiaorg/celestia-core/pull/2940
- fix: increase ensureVote timeout to fix flaky TestStateOversizedBlock (backport #2842) by @mergify[bot] in https://github.com/celestiaorg/celestia-core/pull/2947
- fix: reduce flakiness in three consensus tests (backport #2810) by @mergify[bot] in https://github.com/celestiaorg/celestia-core/pull/2946
- fix: validate PartSetHeader.Total upper bound in ValidateBasic (backport #2885) by @mergify[bot] in https://github.com/celestiaorg/celestia-core/pull/2929
- fix: increase TestByzantinePrevoteEquivocation timeout to reduce flakes (backport #2850) by @mergify[bot] in https://github.com/celestiaorg/celestia-core/pull/2949
- fix: guard nil syncer dereference in statesync Reactor.Receive (backport #2883) by @mergify[bot] in https://github.com/celestiaorg/celestia-core/pull/2931
- fix: prevent uint32 overflow in RowProof.Validate() (backport #2886) by @mergify[bot] in https://github.com/celestiaorg/celestia-core/pull/2928
- fix: increase base ensureTimeout from 200ms to 400ms (backport #2849) by @mergify[bot] in https://github.com/celestiaorg/celestia-core/pull/2948
- build(deps): bump github.com/celestiaorg/nmt from 0.24.2 to 0.24.3 (backport #2944) by @mergify[bot] in https://github.com/celestiaorg/celestia-core/pull/2951
- fix: prevent CompactBlock.Proofs() cache poisoning on validation failure (backport #2847) by @mergify[bot] in https://github.com/celestiaorg/celestia-core/pull/2934
- fix: correct .PHONY target for test_deadlock (backport #2882) by @mergify[bot] in https://github.com/celestiaorg/celestia-core/pull/2952
- fix: use dynamic ports in node tests to prevent port conflicts (backport #2851) by @mergify[bot] in https://github.com/celestiaorg/celestia-core/pull/2953
- fix: use assert.Eventually in TestReactorRecordsVotesAndBlockParts (backport #2841) by @mergify[bot] in https://github.com/celestiaorg/celestia-core/pull/2954
Full Changelog: https://github.com/celestiaorg/celestia-core/compare/v0.39.27...v0.39.28
