[renovate]

This PR contains the following updates:

Package	Update	Change
filecoin-project/lotus	minor	v1.37.0 → v1.38.3

---

Release Notes

filecoin-project/lotus

v1.38.3

Compare Source

This patch release rebuilds the Lotus node, miner and worker binaries and Docker images with Go 1.26.10, which makes crypto/x509 reject known compromised intermediate certificates (GO-2026-6809). It has no other functional changes since Node v1.38.2, and aligns the Miner release with Node at v1.38.3 (the previous Miner release was miner/v1.38.0).

• Operators running earlier published binaries or Docker images should upgrade.
• Building from source now requires Go 1.26.10 or later.
• Operators upgrading directly from v1.37.0 should review the v1.38.0 upgrade warnings, including API permissions, gas limits and gateway limits.

☢️ Upgrade Warnings ☢️

• build: raise the minimum Go version to 1.26.10. (filecoin-project/lotus#13951)

📝 Changelog

• Node: Changes since v1.38.2
• Miner: Changes since miner/v1.38.0

👨‍👩‍👧‍👦 Contributors

Contributor	Commits	Lines ±	Files Changed
Phi-rjan	3	+37/-10	8

v1.38.2

Compare Source

This patch release rebuilds the Lotus node, miner and worker binaries and Docker images with Go 1.26.10, which makes crypto/x509 reject known compromised intermediate certificates (GO-2026-6809). It has no other functional changes since Node v1.38.2, and aligns the Miner release with Node at v1.38.3 (the previous Miner release was miner/v1.38.0).

• Operators running earlier published binaries or Docker images should upgrade.
• Building from source now requires Go 1.26.10 or later.
• Operators upgrading directly from v1.37.0 should review the v1.38.0 upgrade warnings, including API permissions, gas limits and gateway limits.

☢️ Upgrade Warnings ☢️

• build: raise the minimum Go version to 1.26.10. (filecoin-project/lotus#13951)

📝 Changelog

• Node: Changes since v1.38.2
• Miner: Changes since miner/v1.38.0

👨‍👩‍👧‍👦 Contributors

Contributor	Commits	Lines ±	Files Changed
Phi-rjan	3	+37/-10	8

v1.38.1

Compare Source

This Node-only patch release fixes excessive splitstore memory use during initial warmup after a snapshot import and during lotus-shed splitstore check. It also fixes the gateway message lookback bound for negative limits.

🐛 Bug Fixes

• fix(gateway): StateSearchMsg and StateWaitMsg now clamp every negative lookback limit to the gateway's message lookback bound. (filecoin-project/lotus#13934)
• fix(splitstore): excessive memory use after a snapshot import (regression in v1.38.0). (filecoin-project/lotus#13943)

📝 Changelog

Changes since v1.38.1

👨‍👩‍👧‍👦 Contributors

Contributor	Commits	Lines ±	Files Changed
Steve Loeppky	6	+416/-231	32
LexLuthr	1	+105/-8	3
Rod Vagg	2	+99/-3	6
Phi-rjan	2	+89/-3	2
Kaif	1	+14/-4	3
zoupingcenter	1	+4/-4	1
luangucun	1	+4/-4	1
elonfliter	1	+3/-4	1
kleonyuan	1	+3/-2	2

v1.38.0

Compare Source

This patch release rebuilds the Lotus node, miner and worker binaries and Docker images with Go 1.26.10, which makes crypto/x509 reject known compromised intermediate certificates (GO-2026-6809). It has no other functional changes since Node v1.38.2, and aligns the Miner release with Node at v1.38.3 (the previous Miner release was miner/v1.38.0).

• Operators running earlier published binaries or Docker images should upgrade.
• Building from source now requires Go 1.26.10 or later.
• Operators upgrading directly from v1.37.0 should review the v1.38.0 upgrade warnings, including API permissions, gas limits and gateway limits.

☢️ Upgrade Warnings ☢️

• build: raise the minimum Go version to 1.26.10. (filecoin-project/lotus#13951)

📝 Changelog

• Node: Changes since v1.38.2
• Miner: Changes since miner/v1.38.0

👨‍👩‍👧‍👦 Contributors

Contributor	Commits	Lines ±	Files Changed
Phi-rjan	3	+37/-10	8

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 4am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.