Version 17.0.0

2026-11-09 09:42:03 +00:00 · 2026-11-09 09:42:03 +00:00 · 72589eb5bf
commit 72589eb5bf
parent 2fe498b1a0
2 changed files with 93 additions and 1 deletions
--- a/doc/release-notes/release-notes-v17.0.0.md
+++ b/doc/release-notes/release-notes-v17.0.0.md
@ -0,0 +1,92 @@
+### MMGen Wallet Version 17.0.0 Release Notes
+
+This version of MMGen Wallet introduces THORChain memoless swaps and XMR swaps.
+These features are enabled in the test suite only for now, but mainnet support
+can easily be switched on when they go live on the THORChain network.
+
+Most importantly for Monero users, this version introduces transaction data
+integrity checking during the XMR signing process.  This critical security
+upgrade ensures that the change address in the transaction belongs to your
+wallet and that the amount shown is going to the destination shown, preventing
+an attacker from stealing your funds in the event your online installation is
+ever compromised.  These checks were always performed by the wallet for non-
+privacy coins but were regrettably overlooked for Monero.  Monero users are
+thus urgently advised to upgrade.
+
+The release also includes some minor bugfixes, a new transaction versioning
+system, more secure handling of legacy transaction files, and lots of code
+cleanups suggested by static analyzers, so an upgrade will benefit all users.
+
+As an afterword to the Monero security fix, it must be mentioned that no system,
+however secure, can do everything for the user. When sending funds to an outside
+address, for example, the offline installation has no way of knowing whether the
+destination and amount are what the user intended.  A good rule of thumb is to
+always check the offline signing summary to ensure that the transaction type is
+correct and, for transfers, that the address and amount are correct. This advice
+applies to all coins, by the way, not just Monero.
+
+#### Important new features:
+
+ - ffe488ff, d9e24494, ff35b01c THORChain memoless swaps (testing only)
+ - ea9c2d29 THORChain XMR swaps (testing only)
+ - 2fe498b1 transaction integrity checking for XMR
+
+#### Other features and improvements:
+
+ - ef61dd10 XMR subaddress generation
+ - f17416ca XMR compat: encapsulate legacy transaction data
+ - 13623ed9 mmgen-swaptxcreate: add `--quote` option
+ - 8a23f986 new `mmgen-remote` utility
+ - 9666e687 XMR compat: support viewing of transaction files via `mmgen-tool`
+ - 5e41407b XMR: change handling of default datadirs
+
+#### Testing:
+
+ - 75b881a6 keygen: move unsafe pubkey generation backends to test suite
+ - b036207b remove test-related env vars from production code
+
+#### Security:
+
+ - 7e2aa808 transaction versioning
+ - 33773ecf new `allow_legacy_tx_files` and `forbid_version_mismatched_tx_files` options
+ - dd714815, 852cdeda tx.file: refuse to parse legacy TX files for signing ops
+ - 256970f3 setup.py extmod: convert gcc warnings to errors
+
+Python requirement: >= 3.11 (tested on 3.11, 3.12, 3.13, 3.14 and 3.15)
+
+This release has been tested on the following platforms:
+
+    NixOS 26.05 / x86_64
+    Arch Linux 2026-11-06 [Python 3.14.9] / x86_64
+    Debian 14 (Forky) [Python 3.14.6] / x86_64
+    Debian 13 (Trixie) [Python 3.13.3] / x86_64 (+)
+    Debian 12 (Bookworm) [Python 3.11.2] / x86_64
+    Debian 13 (Trixie) [Python 3.15.2 free-threaded] / x86_64 (++)
+    Ubuntu 26.04 (Resolute) [Python 3.14.4] / x86_64
+    Ubuntu 24.04 (Noble) [Python 3.12.3] / x86_64
+    Radxa Debian 12 (Bookworm) [Python 3.11.2] / Radxa Rock 5B [arm64] (*, **)
+    Armbian Debian 13 (Trixie) / Nano Pi M6 [arm64] (**, +)
+    Armbian Debian 13 (Trixie) / Banana Pi F3 [riscv64] (***, +, +++)
+    Windows 11 Enterprise / MSYS2 2026-06-11 (Python 3.14.7) / x86_64 [qemu] (no Reth)
+    macOS 13.7.6 (Ventura) / Homebrew 7.0.12 (Python 3.15.2, Bash 5.3.9) / x86_64 [qemu]
+
+    Notes:
+
+	* (see notes to previous release)
+
+and with the following coin daemon versions:
+
+    Bitcoin Core 31.1
+    Bitcoin Cash Node 29.1
+    Litecoin Core 0.21.5.6
+    Monero CLI 0.18.5.4
+    Go Ethereum (Geth) 1.17.5
+    Rust Ethereum (Reth) 2.8.1 (2.2.0 on macOS, 2.3.0 on NixOS)
+    Parity Ethereum 2.7.2
+
+Solc 0.8.26 or newer is required for ERC20 token contract creation
+
+Coin address generation has been additionally tested using the following
+reference tools:
+
+    * (see reference tools list to previous release)
--- a/mmgen/data/version
+++ b/mmgen/data/version
@ -1 +1 @@
-16.3.0dev25
+17.0.0