Note: This release will be deployed to all networks.

Audits

All audits are hosted at https://github.com/solana-labs/security-audits#token-2022.

Verification

This build provided on the release uses solana-verifiable-build.

You can verify it by checking out the repo at commit https://github.com/solana-labs/solana-program-library/commit/d60c2637f63636bddaf8957ec40f648e8cb33f95 (which contains updated security.txt) and running:

$ solana-verify build --library-name spl_token_2022 -- --no-default-features

The --no-default-features flag ensures that the unsupported zero-knowledge proof functionality is omitted. Once the program is built, it's possible to verify it by running:

$ solana-verify get-executable-hash target/deploy/spl_token_2022.so f7eabd3b22d487b19fb6795f6934b646741dcafa2ee87d3c3511e351889c2e5e

What's new

• Remove token-group and confidential-hook features (#7019) by @joncinque
• Adjust PodAccount initialized check (#6953) by @buffalojoec

Miscellaneous Tasks

• Bump serde_json from 1.0.117 to 1.0.118 (#6909) by @dependabot[bot]
• Bump serde_json from 1.0.118 to 1.0.119 (#6957) by @dependabot[bot]
• Bump serde_with from 3.8.1 to 3.8.2 (#6956) by @dependabot[bot]
• Bump serde_json from 1.0.119 to 1.0.120 (#6966) by @dependabot[bot]
• Bump serde_with from 3.8.2 to 3.8.3 (#6980) by @dependabot[bot]
• Bump serde from 1.0.203 to 1.0.204 (#6983) by @dependabot[bot]
• Bump serde_with from 3.8.3 to 3.9.0 (#7014) by @dependabot[bot]