Summary

This is a maintenance release that addresses several minor fixes.

What’s New

Canton

• Performance optimizations were implemented for a domain migration.
• TCP keepalive settings on Postgres connections were adjusted to enable a quick HA failover when a DB connection is stuck. The system-level default of 2h on Linux to trigger a TCP keep-alive results in a failing HA failover for 2h. The new TCP keep-alive setting of 10 seconds to initiate a TCP keep-alive enables quick failover.
• Calls to SequencerAuthenticationService.Challenge will now timeout if incomplete after parameters.timeouts.processing.network (defaults to 2 mins). This enables the existing retry mechanisms to kick in.
• Multiple CVEs addressed by updating dependencies.
• The command migrateDomain was fixed so it properly synchronizes the topology state.

PQS

• PQS no longer stops when it detects a new package is encountered from the Ledger API. Instead, PQS internally reloads the package definitions from the participant node and resumes ingestion. Such a process is now logged with:

No package for <package-id>:<module>:<entity> was seen on initialization. Retrying to discover new packages.

Please note that reloading the package definitions may take several seconds.