Bug Fixes

• add short-circuit for sqrt(0) (#19631) #19631 (Marco Ilardi)

Documentation

• consensus: fix 'QuorurmCertificate' -> 'QuorumCertificate' in block/block_data doc comments (#19511) #19511 (Mukunda Rao Katta)

Commits

• 48c6902: fix reference safety checker v3 for non-reference Call destinations (#19409) (Teng Zhang) #19409
• 32bb839: [mono-move] Add gas design doc (#19209) (Calin Tataru) #19209
• 7479153: Confidential assets v1.1.3: add emergency pause (#19433) (Alin Tomescu) #19433
• c1dfd4f: Adjust quorum store queue handling (#19446) (Balaji Arun) #19446
• 0723fa7: Update Docker images (aptos-bot)
• db26bbc: fix benchmark option for Move prover (#19472) (Teng Zhang) #19472
• 217874c: [types] Bind encrypted payloads to auth keys (#19460) (Balaji Arun) #19460
• c805f71: [forge] bump deployer version (aptos-bot) #19349
• db98b19: Harden encrypted transaction decryption handling (#19461) (Balaji Arun) #19461
• 8c36781: [storage] Extract helpers from create_buffered_state_from_latest_snapshot (wqfish) #19399
• b50e6c9: [storage] Move total_value_bytes tracking into HotStateLRU and simplify total_key_bytes (wqfish) #19399
• 1f25be6: [storage] Truncate hot and cold state merkle DBs to the same version on restart (wqfish) #19399
• e65a8d1: [storage] Load hot state from DB on restart when persistence is enabled (wqfish) #19399
• 5d8877c: [config] Rename decryption_setup_blob_path to digest_key_blob_path (#19487) (Balaji Arun) #19487
• 0223daa: [Config] Update default testnet seeds. (Josh Lind) #19482
• 1a10b78: [consensus] Harden SecretShareManager: state preservation, skipped rounds, requester ordering (#19476) (Balaji Arun) #19476
• b4ca925: [consensus] Harden SecretShare ingress validation against DoS (#19475) (Balaji Arun) #19475
• 3621758: [vm] Add closure design doc for mono-move runtime (#19363) (Victor Gao) #19363
• 4156aff: [vm] Staking-based transaction limits (#19109) (George Mitenkov) #19109
• 5f8f520: [forge] bump deployer version (aptos-bot) #19478
• 17687cd: [ci] Calibrate single-node execution performance values (aptos-bot) #19452
• 01cde5c: [ci] Notify #feed-move-alerts on calibration PR (George Mitenkov) #19452
• dd42df2: [consensus] Fix proposer_delay_proposal histogram buckets (#19474) (Daniel Xiang) #19474
• 83f1f55: [lint] Fix false positive in needless visibility checker (#19481) (Vineeth Kashyap) #19481
• 86056c2: [lint] Create a new lint check for unreachable code warning (#19485) (Vineeth Kashyap) #19485
• 81b3d57: [consensus] Fix BATCH_NUM_PER_BLOCK histogram buckets (#19473) (Daniel Xiang) #19473
• 9434ca2: Improve replay-verify scheduler observability and resilience (#19435) (Victor Gao) #19435
• e8188b6: [smoke-test] Fix aptos-debugger jemalloc HPA hang (wqfish) #19517
• 2be8ebf: [storage] Filter pointer-only hot-state slots from JMT update paths (wqfish) #19498
• eded91a: [vm] Remove MoveVmExt pass-through wrapper (#19503) (George Mitenkov) #19503
• 2f7730a: [compiler-v2] Do not inline callees that emit cross-module events (#19507) (George Mitenkov) #19507
• d601270: [compiler-v2] Implement a new abstraction for derived call graph query caching: fixes many subtle bugs. (#19486) (Vineeth Kashyap) #19486
• dc09d24: [cli] Release Aptos CLI 9.2.0 (#19521) (Greg Nazario) #19521
• 5f98cb9: [cli] Fix release job if expression (#19523) (Greg Nazario) #19523
• 52e7298: susetting jwk_consensus_config from genesis (#19494) (zhoujunma) #19494
• e48def4: [mono-move] Add gas benchmarks (#19470) (Calin Tataru) #19470
• 5267c48: [gas] Charge extra gas for encrypted transactions (#19453) (Balaji Arun) #19453
• 0ec54dd: [codeowners] Add dedicated owners for third_party/move/mono-move (#19529) (George Mitenkov) #19529
• 1a365d3: [docker] release tags always with the git sha (#19463) (Rustie Lin) #19463
• 62412e7: [mono-vm][specializer] Move a fusing operation from lowering to destacking phase (#19431) (Vineeth Kashyap) #19431
• fc1d67b: [mono-vm] Factor specializer pipeline out of the executable and into the specialize crate. (#19454) (Vineeth Kashyap) #19454
• 891bddb: [mono-vm][specializer] Remove explicit types from simulated operand stack (#19466) (Vineeth Kashyap) #19466
• 0db93e5: Switch replay-verify to the main PFN deployments in us-central1 (Stelian Ionescu) #19533
• 8a8d269: [storage] Verify hot-state proofs in ProvableStateSummary (wqfish) #19520
• 3660486: [inspection-service] opens immediately (#19488) (Rustie Lin) #19488
• 41edbe5: [mono-move] Initial cross-module call support (#19510) (Calin Tataru) #19510
• 4e205c0: [mono-move] Migrate from using the old type representation to the new one (#19530) (Vineeth Kashyap) #19530
• 5507bee: [gas profiler] Fix native_gas leak; add consistency-check opt-out (#19532) (Victor Gao) #19532
• ce53608: [mono-move] Add module loader with versioned cache slots (#19506) (George Mitenkov) #19506
• fb1baae: [storage] Stable hot state order across restarts (wqfish) #19539
• 2cb040e: [Move][Spec] Fix specs and other miscs (#19310) (Teng Zhang) #19310
• 53fb6c0: [ci] Calibrate single-node execution performance values (#19513) (aptos-bot) #19513
• 0c3c894: [mono-vm] Unify tests under testsuite (#19556) (Vineeth Kashyap) #19556
• 512ad35: [mono-move] Remove global context dependency for specializer (#19551) (George Mitenkov) #19551
• ec2ffd7: [framework] Expose is_encrypted_txn() to Move smart contracts (#19543) (Balaji Arun) #19543
• 697e854: [Rust Setup] Fix linker build issue. (Josh Lind) #19564
• 622eefe: chunky DKG stall recovery fixes (#19538) (Balaji Arun) #19538
• 56ff86c: [natives] Isolate rayon work on a dedicated pool (Balaji Arun) #19541
• a2abcbf: [natives] Per-caller-thread native rayon pools (Balaji Arun) #19541
• 83daaf1: Fix encrypted transaction validation for multi-signer and unsupported auth types (#19546) (Balaji Arun) #19546
• cc0d3a9: [dkg] Fix security and DoS issues in ChunkyDKG manager (#19544) (Balaji Arun) #19544
• a599dab: [prover] Universal state quantification and other bug fixes in dynamic dispatch handling (#19502) (Wolfgang Grieskamp) #19502
• 5d2fb92: [mono-move] LoadedModule with ModuleIR to be used in code cache (#19553) (George Mitenkov) #19553
• 720c8fa: [mono-move] Lazy layout population (#19555) (George Mitenkov) #19555
• bd74b0b: [consensus] Reject encrypted batches when feature is disabled (#19548) (Balaji Arun) #19548
• 75ed054: [storage] Re-write hot state KV in restart replay (wqfish) #19549
• 5f9e0e0: [forge] bump deployer version (aptos-bot) #19515
• 632e488: [mono-move] Combine enum and struct types (#19572) (George Mitenkov) #19572
• 3732789: [paper] Higher-order functions and dynamic dispatch in MVP (#19558) (Wolfgang Grieskamp) #19558
• 52ec857: [cli] Show rich abort info in local simulation vm_status (#19490) (Victor Gao) #19490
• 0c5bc4a: [vm] Initial closure runtime for mono-move (#19519) (Victor Gao) #19519
• f29dc41: [consensus] Enable sending Batch V2 and OptQS V2 proposals (#19573) (Balaji Arun) #19573
• 9f544b6: [consensus] Add UseCaseAndEncryptedTxnsAwareShuffler for encrypted txn ordering (#19562) (Balaji Arun) #19562
• 1890a03: [vm] Versioned enum-based transaction prologue and epilogue (#19468) (George Mitenkov) #19468
• 918bb6d: [gha] do not publish docker on hotfix suffix (#19577) (Rustie Lin) #19577
• 5d77808: fix enum bug (#19578) (Teng Zhang) #19578
• b93d811: [encrypted mempool] Fix PVSS sigma proof shape check (#19587) (Rex Fernando) #19587
• 5846f08: combining differential and snapshot testing (#19585) (Vineeth Kashyap) #19585
• 6a2e420: [paper] Resolving supposed unsoundness issue around aborts behavioral predicate (#19584) (Wolfgang Grieskamp) #19584
• cf97766: [storage] Persist hot-state promotions in epilogue (wqfish) #19547
• 05a4c3d: Add onchain signer utilities (#19179) (igor-aptos) #19179
• c831e51: [mono-move] Eager interning of signatures (#19557) (George Mitenkov) #19557
• d0d1069: [vm] Iterative Drop for nested Move values (security fix) (#415) (Victor Gao) #19596
• 83d8c2e: [Cached Packages] Rebuild packages. (Josh Lind) #19596
• b6c06b6: [mono-move] Integrate loader into cross-module calls (#19581) (Calin Tataru) #19581
• 09dc092: [gas] Move V1_46-gated params back to V1_45 (wqfish) #19614
• 38059a7: [mono-move] Encapsulate ObjectDescriptor and ObjectDescriptorTable (#19589) (Victor Gao) #19589
• aff3b97: [mono-move] flesh out u64 arithmetic / bitwise / shift micro-ops (#19591) (Victor Gao) #19591
• 98f795a: [Forge] Clean up forge stable. (Josh Lind)
• 2e56da6: [vm] Use errors for invariant violations (#19627) (George Mitenkov) #19627
• 9f5fb37: First-class StorageSlot type and derived StorageSlotOrInline (#18723) (igor-aptos) #18723
• 30a20d1: [storage] sequence kv before tree in snapshot restore (wqfish) #19625
• f0fd94f: [consensus] Skip decryption when block has DKG-result vtxn (Balaji Arun) #19634
• a8c70db: [consensus] Add regression tests for decryption pipeline (Balaji Arun) #19634
• 19ee0af: [ts-deps] Upgrade ts deps (#19637) (Greg Nazario) #19637
• 69c07c9: [ci] Calibrate single-node execution performance values (#19604) (aptos-bot) #19604
• b67c776: [prover] Improve spec inference: normalize exits, rewrite BPs over vector intrinsics (#19640) (Wolfgang Grieskamp) #19640
• 6a430a4: [paper] Draft inference paper for FMCAD 2026 (#19641) (Wolfgang Grieskamp) #19641
• 4051a73: [vm] Optimize Drop for values (#19628) (George Mitenkov) #19628
• cbebe66: [Prover] fix modifies-clause bugs and Boogie codegen for exists S in * + |&mut T| closures (#19611) (Teng Zhang) #19611
• f253676: [consensus] Cap encrypted decryption by block-execute limit and trusted-setup capacity (#19647) (Balaji Arun) #19647
• 55fd2ea: update draft (#19648) (Teng Zhang) #19648
• ad7011f: [block-executor] replace rayon BlockSTM pool with plain std-thread pool (wqfish) #19643
• a020d7b: avoid recomputing next validator set (#19380) (zhoujunma) #19380
• c6e9a3f: [admin-service] Allow overriding heap profile output path via query param (wqfish) #19659