Skip to content

feat: v1.11 hardening follow up - #513

Merged
OisinKyne merged 2 commits into
main-v1.11from
oisin/v1.11-hardening-follow-up
Oct 28, 2026
Merged

OisinKyne merged 2 commits into
main-v1.11from
oisin/v1.11-hardening-follow-up

Conversation

@OisinKyne

Copy link
Copy Markdown
Contributor

Summary

Backport of #512 to main-v1.11, plus the charon bump to v1.11.3, which redacts credentials and API keys in logged beacon node and execution URLs.

  • Cherry-picks both security: close the remaining gaps after the Grafana hardening #512 commits. The client version variable fix conflicted on the default versions; this line keeps its own defaults (Grandine 2.0.6, Lighthouse v8.3.1, Nethermind 2.2.0, Reth v2.8.0) and takes the documented variable names.
  • charon v1.11.2 → v1.11.3 in the compose files and the scripts/edit scripts. The edit e2e test keeps v1.11.2 until the image exists.

Merge after charon v1.11.3 is published, otherwise docker compose pull fails.

Release note: a client version left uncommented in .env, which was ignored until now, takes effect after upgrading.

…ng (backport of #512)

Backport to v1.11. The client version variable fix keeps this line's
default versions.

(cherry picked from commit 2d7a1ac and 7fa593f)
@sonarqubecloud

Copy link
Copy Markdown

@OisinKyne
OisinKyne merged commit 9179abf into main-v1.11 Oct 28, 2026
8 of 10 checks passed
@OisinKyne
OisinKyne deleted the oisin/v1.11-hardening-follow-up branch October 28, 2026 13:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants