Merge tag 'v1.35.1' into streaming

# Conflicts:
#	CHANGELOG.md
#	build/openrpc/full.json
#	build/openrpc/gateway.json
#	build/openrpc/miner.json
#	build/openrpc/v0/gateway.json
#	build/openrpc/v2/full.json
#	build/openrpc/v2/gateway.json
#	build/openrpc/worker.json
#	build/version.go
#	documentation/en/cli-lotus-miner.md
#	documentation/en/cli-lotus-worker.md
#	documentation/en/cli-lotus.md

Author: astudnev

CHANGELOG.md

@@ -9,10 +9,70 @@
 
 # UNRELEASED
 
+## ☢️ Upgrade Warnings ☢️
+
+## ⭐ New Features
+
+## 🐛 Bug Fixes
+
+## 👌 Improvements
+
+# Node v1.35.1 / 2026-03-31
+
+This is the stable release of Lotus node v1.35.1, a patch release that extends EC finality tooling into the v2 API, Eth RPC, and `lotus-shed`, improves Ethereum RPC and gas estimation behavior, lowers several CLI batch defaults to reduce out-of-gas failures, and raises the minimum supported Golang version to `1.25.0`. The final release also includes late backports for Ethereum RLP hardening, proof-parameter fetch robustness, indexed `StateSearchMsg` lookback handling, tightened Ethereum filter block-range enforcement, and null-round-aware EC finality chain walks.
+
+## ☢️ Upgrade Warnings ☢️
+
+- The minimum supported Golang version is now `1.25.0`. ([filecoin-project/lotus#13538](https://github.com/filecoin-project/lotus/pull/13538))
+
+## ⭐ New Features
+
+- feat(api): integrate [FRC-0089](https://github.com/filecoin-project/FIPs/blob/master/FRCs/frc-0089.md) EC finality calculator into v2 API and Eth RPC, so `"finalized"` and `"safe"` tags reflect actual chain health (~20-30 epochs) rather than worst-case static 900-epoch fallback. Adds `ChainGetTipSetFinalityStatus` v2 endpoint for finality diagnostics. ([filecoin-project/lotus#13547](https://github.com/filecoin-project/lotus/pull/13547))
+- feat(shed): add `lotus-shed finality-calculator` for EC finality probability computation per FRC-0089 ([filecoin-project/lotus#12093](https://github.com/filecoin-project/lotus/pull/12093))
+
 ## 🐛 Bug Fixes
 
+- fix(rlp): modernize and harden Ethereum RLP decoding with tighter canonical-encoding validation, explicit nesting and input bounds, and expanded roundtrip coverage for transaction parsing ([filecoin-project/lotus#13555](https://github.com/filecoin-project/lotus/pull/13555))
+- fix(gateway): return `ErrFilterNotFound` instead of an empty result for unknown filter IDs in `EthGetFilterLogs` ([filecoin-project/lotus#13519](https://github.com/filecoin-project/lotus/pull/13519))
+- fix(eth): handle failed contract creates with nil result addresses in `trace_filter` ([filecoin-project/lotus#13549](https://github.com/filecoin-project/lotus/pull/13549))
+- fix(chainstore): remove expected CBOR decode warnings in `GetCMessage` for Ethereum-style transactions, reducing log spam on busy nodes ([filecoin-project/lotus#13524](https://github.com/filecoin-project/lotus/pull/13524))
+- fix(net): update FIL DevTTY WebTransport certhashes in the mainnet bootstrap list ([filecoin-project/lotus#13530](https://github.com/filecoin-project/lotus/pull/13530))
+- fix(gas): stricter bounds for `GasEstimateGasPremium` lookback ([filecoin-project/lotus#13556](https://github.com/filecoin-project/lotus/pull/13556))
+- fix: remove duplicate SQL statement entries from `preparedStatementMapping` ([filecoin-project/lotus#13545](https://github.com/filecoin-project/lotus/pull/13545))
+- fix(api): make `StateSearchMsg` respect `lookbackLimit` when returning indexed results ([filecoin-project/lotus#13562](https://github.com/filecoin-project/lotus/pull/13562))
+- fix(eth): tighten block range handling for `trace_filter` and `eth_getLogs`, including consistent `-32005` limit-exceeded errors and gateway range enforcement for `trace_filter` ([filecoin-project/lotus#13561](https://github.com/filecoin-project/lotus/pull/13561))
+- fix(ecfinality): account for null rounds in EC finality calculator chain walk, aligning with FRC-0089 theoretical model and fixing depth-to-height conversion ([filecoin-project/lotus#13565](https://github.com/filecoin-project/lotus/pull/13565))
+
 ## 👌 Improvements
 
+- perf(MessagePool): cache `Pending()` snapshots to reduce repeated message pool reconstruction work ([filecoin-project/lotus#13542](https://github.com/filecoin-project/lotus/pull/13542))
+- chore(cli): lower default batch sizes for claim extension, deal settlement, and sector extension commands to reduce out-of-gas failures ([filecoin-project/lotus#13537](https://github.com/filecoin-project/lotus/pull/13537))
+- chore(paramfetch): bump `go-paramfetch` to `v0.0.5`, improving parameter downloads by rejecting unexpected HTTP responses and avoiding redundant concurrent fetches ([filecoin-project/lotus#13559](https://github.com/filecoin-project/lotus/pull/13559))
+- build(deps): bump `github.com/ipfs/boxo` to `0.37.0`, `github.com/drand/drand/v2` to `2.1.4`, `github.com/drand/kyber` to `1.3.2`, and `github.com/libp2p/go-libp2p-kad-dht` to `0.38.0` ([filecoin-project/lotus#13541](https://github.com/filecoin-project/lotus/pull/13541), [filecoin-project/lotus#13510](https://github.com/filecoin-project/lotus/pull/13510), [filecoin-project/lotus#13516](https://github.com/filecoin-project/lotus/pull/13516), [filecoin-project/lotus#13502](https://github.com/filecoin-project/lotus/pull/13502))
+
+## 📝 Changelog
+
+For the set of changes since the last stable release:
+
+- Node: https://github.com/filecoin-project/lotus/compare/release/v1.35.0...release/v1.35.1
+
+## 👨‍👩‍👧‍👦 Contributors
+
+| Contributor | Commits | Lines ± | Files Changed |
+|-------------|---------|---------|---------------|
+| Rod Vagg | 10 | +3670/-595 | 63 |
+| Phi-rjan | 6 | +485/-159 | 49 |
+| dependabot[bot] | 4 | +98/-89 | 8 |
+| William Morriss | 3 | +351/-15 | 18 |
+| beck | 1 | +6/-6 | 5 |
+| eroderust | 1 | +7/-7 | 5 |
+| hanabi1224 | 1 | +0/-17 | 1 |
+| Hubert | 1 | +0/-1 | 1 |
+| relotnek | 1 | +1/-1 | 1 |
+| Shashank | 1 | +3/-2 | 3 |
+| stringsbuilder | 1 | +2/-2 | 1 |
+| TippyFlits | 1 | +0/-5 | 1 |
+
 # Node and Miner v1.35.0 / 2026-02-19
 
 The Lotus and Lotus-Miner v1.35.0 release includes Ethereum RPC compatibility improvements, CLI enhancements, and numerous dependency updates. Highlights include FRC-0102 signing envelope support, an Ethereum RPC error code correction for tooling compatibility, and updated OpenTelemetry tracing.
@@ -23,22 +83,23 @@ The Lotus and Lotus-Miner v1.35.0 release includes Ethereum RPC compatibility im
 
 ## ⭐ New Features
 
-- feat(cli): implement FRC-0102 signing envelope for `wallet sign` and `wallet verify` ([filecoin-project/lotus#13471](https://github.com/filecoin-project/lotus/pull/13471))
+- feat(cli): implement FRC-0102 signing envelope for `wallet sign` and `wallet verify` ([filecoin-project/lotus#13388](https://github.com/filecoin-project/lotus/pull/13388))
 - feat(cli): add `--order-by-nonce` flag to list messages sequentially when filtering by sender ([filecoin-project/lotus#13394](https://github.com/filecoin-project/lotus/pull/13394))
-- feat: add slog integration for libp2p log level control ([filecoin-project/lotus#13497](https://github.com/filecoin-project/lotus/pull/13497))
+- feat: add slog integration for libp2p log level control ([filecoin-project/lotus#13422](https://github.com/filecoin-project/lotus/pull/13422))
 
 ## 🐛 Bug Fixes
 
 - fix(eth): use error code 3 for `EExecutionReverted` for Ethereum RPC tooling compatibility ([filecoin-project/lotus#13467](https://github.com/filecoin-project/lotus/pull/13467))
 - fix(eth): fix `eth_syncing` result property casing & implement `UnmarshalJSON` for `EthSyncingResult` ([filecoin-project/lotus#13484](https://github.com/filecoin-project/lotus/pull/13484))
-- fix(f3): set initial power table CID in calibnet F3 manifest ([filecoin-project/lotus#13495](https://github.com/filecoin-project/lotus/pull/13495))
+- fix(f3): set initial power table CID in calibnet F3 manifest ([filecoin-project/lotus#13496](https://github.com/filecoin-project/lotus/pull/13496))
 - fix(itests): prevent wdPostLoop deadline skip race condition ([filecoin-project/lotus#13464](https://github.com/filecoin-project/lotus/pull/13464))
 
 ## 👌 Improvements
 
-- chore(tracing): update OpenTelemetry semconv from v1.7.0 to v1.39.0 ([filecoin-project/lotus#13497](https://github.com/filecoin-project/lotus/pull/13497))
+- chore(tracing): update OpenTelemetry semconv from v1.7.0 to v1.39.0 ([filecoin-project/lotus#13511](https://github.com/filecoin-project/lotus/pull/13511))
 - chore(deps): replace `golang.org/x/crypto/sha3` with go-keccak, upgrade x/crypto ([filecoin-project/lotus#13477](https://github.com/filecoin-project/lotus/pull/13477))
 - chore: bump FFI to v1.34.6 ([filecoin-project/lotus#13521](https://github.com/filecoin-project/lotus/pull/13521))
+- perf: MessagePool Pending() snapshot ([filecoin-project/lotus#13542](https://github.com/filecoin-project/lotus/pull/13542))
 
 ## 📝 Changelog
 

CONTRIBUTING.md

@@ -126,8 +126,8 @@ When updating the Go version (either patch or minor), the following files must b
 #### Step-by-Step Process
 
 ```bash
-OLD_GO_VERSION="1.23.7"
-NEW_GO_VERSION="1.23.10"
+OLD_GO_VERSION="1.24.7"
+NEW_GO_VERSION="1.25.0"
 
 # Update go.mod
 sed -i "s/go $OLD_GO_VERSION/go $NEW_GO_VERSION/" go.mod
@@ -139,7 +139,7 @@ echo "$NEW_GO_VERSION" > GO_VERSION_MIN
 sed -i "s/$OLD_GO_VERSION/$NEW_GO_VERSION/g" README.md
 
 # Update Dockerfile
-sed -i "s/FROM golang:$OLD_GO_VERSION-bullseye/FROM golang:$NEW_GO_VERSION-bullseye/" Dockerfile
+sed -i "s/FROM golang:$OLD_GO_VERSION-bookworm/FROM golang:$NEW_GO_VERSION-bookworm/" Dockerfile
 
 # Add a changelog entry
 

Dockerfile

@@ -1,5 +1,5 @@
 #####################################
-FROM golang:1.24.7-bookworm AS lotus-builder
+FROM golang:1.25.0-bookworm AS lotus-builder
 MAINTAINER Lotus Development Team
 
 RUN apt-get update && apt-get install -y ca-certificates build-essential clang ocl-icd-opencl-dev ocl-icd-libopencl1 jq libhwloc-dev

GO_VERSION_MIN

@@ -1 +1 @@
-1.24.7
+1.25.0

README.md

@@ -11,7 +11,7 @@
   <a href="https://github.com/filecoin-project/lotus/actions/workflows/check.yml"><img src="https://github.com/filecoin-project/lotus/actions/workflows/check.yml/badge.svg"></a>
   <a href="https://github.com/filecoin-project/lotus/actions/workflows/test.yml"><img src="https://github.com/filecoin-project/lotus/actions/workflows/test.yml/badge.svg"></a>
   <a href="https://goreportcard.com/report/github.com/filecoin-project/lotus"><img src="https://goreportcard.com/badge/github.com/filecoin-project/lotus" /></a>
-  <a href=""><img src="https://img.shields.io/badge/golang-%3E%3D1.24.7-blue.svg" /></a>
+  <a href=""><img src="https://img.shields.io/badge/golang-%3E%3D1.25.0-blue.svg" /></a>
   <br>
 </p>
 
@@ -58,10 +58,10 @@ For other distributions you can find the required dependencies [here.](https://l
 
 #### Go
 
-To build Lotus, you need a working installation of [Go 1.24.7 or higher](https://golang.org/dl/):
+To build Lotus, you need a working installation of [Go 1.25.0 or higher](https://golang.org/dl/):
 
 ```bash
-wget -c https://golang.org/dl/go1.24.7.linux-amd64.tar.gz -O - | sudo tar -xz -C /usr/local
+wget -c https://golang.org/dl/go1.25.0.linux-amd64.tar.gz -O - | sudo tar -xz -C /usr/local
 ```
 
 **TIP:**

api/api_errors.go

@@ -32,6 +32,10 @@ const (
 	EPaymentChannelDisabled
 )
 
+// ELimitExceeded is the standard Ethereum JSON-RPC error code for request limit
+// violations (EIP-1474). Used when a block range exceeds the configured maximum.
+const ELimitExceeded jsonrpc.ErrorCode = -32005
+
 var (
 	RPCErrors = jsonrpc.NewErrors()
 
@@ -67,6 +71,8 @@ var (
 	_ error                 = (*ErrNullRound)(nil)
 	_ jsonrpc.RPCErrorCodec = (*ErrNullRound)(nil)
 	_ error                 = (*errPaymentChannelDisabled)(nil)
+	_ error                 = (*ErrBlockRangeExceeded)(nil)
+	_ jsonrpc.RPCErrorCodec = (*ErrBlockRangeExceeded)(nil)
 )
 
 func init() {
@@ -82,6 +88,7 @@ func init() {
 	RPCErrors.Register(EExecutionReverted, new(*ErrExecutionReverted))
 	RPCErrors.Register(ENullRound, new(*ErrNullRound))
 	RPCErrors.Register(EPaymentChannelDisabled, new(*errPaymentChannelDisabled))
+	RPCErrors.Register(ELimitExceeded, new(*ErrBlockRangeExceeded))
 }
 
 func ErrorIsIn(err error, errorTypes []error) bool {
@@ -246,3 +253,40 @@ type errPaymentChannelDisabled struct{}
 func (errPaymentChannelDisabled) Error() string {
 	return "payment channels disabled (EnablePaymentChannelManager=false)"
 }
+
+// ErrBlockRangeExceeded signals that a request's block range exceeds the configured
+// maximum. Returned with the standard Ethereum JSON-RPC -32005 "limit exceeded" code.
+type ErrBlockRangeExceeded struct {
+	Message string
+}
+
+func NewErrBlockRangeExceeded(maxBlockRange, given uint64) *ErrBlockRangeExceeded {
+	return &ErrBlockRangeExceeded{
+		Message: fmt.Sprintf("block range exceeds maximum of %d (got %d)", maxBlockRange, given),
+	}
+}
+
+func (e *ErrBlockRangeExceeded) Error() string {
+	return e.Message
+}
+
+func (e *ErrBlockRangeExceeded) FromJSONRPCError(jerr jsonrpc.JSONRPCError) error {
+	if jerr.Code != ELimitExceeded {
+		return fmt.Errorf("unexpected error code: %d", jerr.Code)
+	}
+	e.Message = jerr.Message
+	return nil
+}
+
+func (e *ErrBlockRangeExceeded) ToJSONRPCError() (jsonrpc.JSONRPCError, error) {
+	return jsonrpc.JSONRPCError{
+		Code:    ELimitExceeded,
+		Message: e.Error(),
+	}, nil
+}
+
+// Is performs a non-strict type check so errors.Is works regardless of field values.
+func (e *ErrBlockRangeExceeded) Is(target error) bool {
+	_, ok := target.(*ErrBlockRangeExceeded)
+	return ok
+}

api/api_full.go

@@ -968,7 +968,7 @@ type FullNode interface {
 	// Implements OpenEthereum-compatible API method trace_filter
 	EthTraceFilter(ctx context.Context, filter ethtypes.EthTraceFilterCriteria) ([]*ethtypes.EthTraceFilterResult, error) //perm:read
 
-	// CreateBackup creates node backup onder the specified file name. The
+	// CreateBackup creates node backup under the specified file name. The
 	// method requires that the lotus daemon is running with the
 	// LOTUS_BACKUP_BASE_PATH environment variable set to some path, and that
 	// the path specified when calling CreateBackup is within the base path

api/docgen/docgen.go

@@ -481,6 +481,13 @@ func init() {
 		Input: ecchain,
 	})
 	addExample(types.TipSetSelectors.Finalized)
+	addExample(&types.FinalityStatus{
+		ECFinalityThresholdDepth: 30,
+		ECFinalizedTipSet:        &ts,
+		F3FinalizedTipSet:        &ts,
+		FinalizedTipSet:          &ts,
+		Head:                     &ts,
+	})
 }
 
 func GetAPIType(name, pkg string) (i interface{}, t reflect.Type, permStruct []reflect.Type) {

api/v2api/full.go

@@ -65,6 +65,16 @@ type FullNode interface {
 	//
 	ChainGetTipSet(context.Context, types.TipSetSelector) (*types.TipSet, error) //perm:read
 
+	// ChainGetTipSetFinalityStatus returns a breakdown of how the node is
+	// currently determining finality. The result includes the EC probabilistic
+	// finality depth (based on observed chain health), the F3-finalized tipset
+	// (if available), and the overall finalized tipset the node is using.
+	//
+	// Useful for monitoring chain health and diagnosing finality lag.
+	//
+	// Experimental: This API is experimental and may change without notice.
+	ChainGetTipSetFinalityStatus(context.Context) (*types.FinalityStatus, error) //perm:read
+
 	// MethodGroup: State
 	// The State method group contains methods for interacting with the Filecoin
 	// blockchain state, including actor information, addresses, and chain data.

api/v2api/gateway.go

@@ -18,6 +18,7 @@ var _ FullNode = (Gateway)(nil)
 
 type Gateway interface {
 	ChainGetTipSet(context.Context, types.TipSetSelector) (*types.TipSet, error)
+	ChainGetTipSetFinalityStatus(context.Context) (*types.FinalityStatus, error)
 	StateGetActor(context.Context, address.Address, types.TipSetSelector) (*types.Actor, error)
 	StateGetID(context.Context, address.Address, types.TipSetSelector) (*address.Address, error)
 	EthAddressToFilecoinAddress(ctx context.Context, ethAddress ethtypes.EthAddress) (address.Address, error)