Polkadot stable2609-2

Release notes

This release contains the changes from polkadot-stable2609-1 to polkadot-stable2609-2.

ℹ️ Please note: this is a patch release for the latest stable version stable2609. If your nodes are already running on this stable release, you should upgrade to this patch version to get the latest fixes.

Once published, polkadot-stable2609-2 will also be tagged as polkadot-v1.25.2; the node version for this release is v1.25.2.

The following crates were updated to the corresponding versions:

Changed crates:

• pallet-revive-uapi@0.15.7

• pallet-revive-fixtures@0.17.0

• pallet-revive-types@0.2.1

• frame-support@49.1.0

• pallet-assets@54.1.0

• pallet-election-provider-multi-block@0.13.0

• pallet-nfts@45.0.0

• pallet-psm@0.8.0

• pallet-uniques@51.0.0

• staging-xcm-executor@29.0.2

• pallet-assets-holder@0.14.1

• pallet-revive@0.22.0

• pallet-asset-conversion-precompiles@0.9.0

• pallet-assets-freezer@0.19.1

• pallet-assets-precompiles@0.14.0

• pallet-bounties@50.0.0

• pallet-nft-fractionalization@36.0.0

• pallet-vesting-precompiles@0.8.0

• pallet-xcm@31.1.0

• pallet-child-bounties@50.0.0

• pallet-staking-async@0.17.1

• pallet-xcm-precompiles@0.13.0

• xcm-simulator-example@34.0.0

• rococo-runtime@40.0.0

• assets-common@0.42.0

• asset-test-utils@44.0.0

• penpal-runtime@0.50.0

• snowbridge-inbound-queue-primitives@0.23.0

• asset-hub-rococo-runtime@0.46.0

• asset-hub-westend-runtime@0.59.0

• bridge-hub-test-utils@0.43.0

• emulated-integration-tests-common@43.0.0

• snowbridge-pallet-inbound-queue-fixtures@0.42.0

• snowbridge-pallet-inbound-queue-v2-fixtures@0.23.0

• polkadot-voter-bags@41.0.0

• snowbridge-pallet-inbound-queue@0.34.0

• snowbridge-pallet-inbound-queue-v2@0.23.0

• bridge-hub-rococo-runtime@0.41.0

• bridge-hub-westend-runtime@0.38.0

• frame-benchmarking-cli@64.0.1

• polkadot-collator-protocol@36.0.1

• polkadot-service@43.0.0

• cumulus-relay-chain-minimal-node@0.43.0

• polkadot-cli@43.0.0

• cumulus-relay-chain-inprocess-interface@0.43.0

• polkadot-jemalloc-shim@0.13.0

• cumulus-client-service@0.43.0

• frame-omni-bencher@0.29.0

• polkadot@42.0.0

• polkadot-omni-node-lib@0.25.0

• polkadot-omni-node@0.25.0

• polkadot-sdk@2609.3.0

• revive-dev-runtime@0.13.0

• yet-another-parachain-runtime@0.18.0

• pallet-revive-eth-rpc@0.25.0

📦 The complete changelog with full descriptions is attached to this release as CHANGELOG.md, and in machine-readable form as changelog.json.

💥 Breaking Changes

7 changes are breaking according to Rust SemVer (each bumps the major version of at least one crate). Details in the 💥-marked entries below.

• Smart Contracts (Revive): #13617 [pallet-revive] Bound per-transaction receipt size (pallet-revive)

• Smart Contracts (Revive): #13689 [pallet-revive] align terminate precompile with opcodes (pallet-revive-fixtures)

• Staking & Elections: #13722 EPMB: determine the signed base deposit at registration (pallet-election-provider-multi-block, asset-hub-westend-runtime)

• Governance: #13673 pallet-bounties: Pay out only spendable funds (pallet-bounties)

• Assets: #13256 pallet-psm: reject the None origin as a PSM admin (pallet-psm)

• Assets: #13626 pallet-psm: simplify PSM account handling (pallet-psm)

• Assets: #13742 pallet-nfts, pallet-uniques: enforce full deposit transfer on collection owner change (pallet-nfts, pallet-uniques)

Changelog

XCM

🛠️ Runtime Dev

#13704: More XCM rollback hardening

Adding more hardening to the XCM executor. None of the fixes are vulnerabilities, but could become so later if executor upstream or downstream assumptions change. This PR reduces the number of assumptions by adding defense in depth directly on the executor, and adds documentation and tests for remaining assumptions. Changes:

• roll back delivery fees of report instructions and failed BuyExecution state

• Harden BuyExecution by recording the asset to be used for delivery fees only when BuyExecution succeeds.

• fail ExportMessage when the exporter cannot…