Note: This release will be deployed to all networks.

Audits

All audits are hosted at https://github.com/solana-labs/security-audits#token-2022.

Verification

This build provided on the release uses solana-verifiable-build.

You can verify it by checking out the repo at commit d60c263 (which contains updated security.txt) and running:

$ solana-verify build --library-name spl_token_2022 -- --no-default-features

The --no-default-features flag ensures that the unsupported zero-knowledge proof functionality is omitted. Once the program is built, it's possible to verify it by running:

$ solana-verify get-executable-hash target/deploy/spl_token_2022.so
f7eabd3b22d487b19fb6795f6934b646741dcafa2ee87d3c3511e351889c2e5e

What's new

• Remove token-group and confidential-hook features (#7019) by @joncinque
• Adjust PodAccount initialized check (#6953) by @buffalojoec

Miscellaneous Tasks

• Bump serde_json from 1.0.117 to 1.0.118 (#6909) by @dependabot[bot]
• Bump serde_json from 1.0.118 to 1.0.119 (#6957) by @dependabot[bot]
• Bump serde_with from 3.8.1 to 3.8.2 (#6956) by @dependabot[bot]
• Bump serde_json from 1.0.119 to 1.0.120 (#6966) by @dependabot[bot]
• Bump serde_with from 3.8.2 to 3.8.3 (#6980) by @dependabot[bot]
• Bump serde from 1.0.203 to 1.0.204 (#6983) by @dependabot[bot]
• Bump serde_with from 3.8.3 to 3.9.0 (#7014) by @dependabot[bot]

NOTE: The program built from this release is not deployed to any network.

What's new

Breaking

• Update to Solana v2 crates

Other

• Remove usage of VoteStateVersions::vote_state_size_of (#6549) by @AshwinSekar
• Update security and audit info (#5945) by @joncinque
• Make update_validator_list_balance() more ergonomic (#6058) by @billythedummy
• Fix flaky test (#6151) by @joncinque
• Fix updating blockhash, force a new one (#6169) by @joncinque
• Don't send UpdateValidatorListBalance transactions for subslices of validator list that have already been updated (#6059) by @billythedummy
• Ceiling all fee calculations (HAL-01) (#6153) by @joncinque

Miscellaneous Tasks

• Bump borsh from 1.2.1 to 1.4.0 (#6520) by @dependabot[bot]
• Bump serde from 1.0.197 to 1.0.198 (#6589) by @dependabot[bot]
• Bump serde from 1.0.198 to 1.0.199 (#6647) by @dependabot[bot]
• Bump borsh from 1.4.0 to 1.5.0 (#6659) by @dependabot[bot]
• Bump serde from 1.0.199 to 1.0.200 (#6679) by @dependabot[bot]
• Bump serde from 1.0.200 to 1.0.201 (#6706) by @dependabot[bot]
• Bump bytemuck from 1.15.0 to 1.16.0 (#6729) by @dependabot[bot]
• Bump serde from 1.0.201 to 1.0.202 (#6733) by @dependabot[bot]
• Bump serde from 1.0.202 to 1.0.203 (#6763) by @dependabot[bot]
• Bump borsh from 1.5.0 to 1.5.1 (#6778) by @dependabot[bot]
• Bump proptest from 1.4.0 to 1.5.0 (#6899) by @dependabot[bot]
• Bump serde from 1.0.193 to 1.0.194 (#6047) by @dependabot[bot]
• Bump num_enum from 0.7.1 to 0.7.2 (#6072) by @dependabot[bot]
• Bump serde from 1.0.194 to 1.0.195 (#6075) by @dependabot[bot]
• Bump bytemuck from 1.14.0 to 1.14.1 (#6179) by @dependabot[bot]

What's new

Breaking

• Upgrade to Solana v2 (#6908) by @joncinque

Other

• Bump solana version to 1.18.11 (#6624) by @samkim-crypto
• Default to simulated compute units (#6635) by @joncinque
• Add Create & Update Token Commands to Stake-Pool CLI (#6805) by @sense112
• Add metaplex program to setup script (#6837) by @joncinque
• Fix some comments (#6318) by @cuishuang
• Don't send UpdateValidatorListBalance transactions for subslices of validator list that have already been updated (#6059) by @billythedummy

Miscellaneous Tasks

• Bump borsh from 1.2.1 to 1.4.0 (#6520) by @dependabot[bot]
• Bump serde_json from 1.0.115 to 1.0.116 (#6584) by @dependabot[bot]
• Bump serde from 1.0.197 to 1.0.198 (#6589) by @dependabot[bot]
• Add support for priority fees (#6499) by @joncinque
• Bump serde from 1.0.198 to 1.0.199 (#6647) by @dependabot[bot]
• Bump borsh from 1.4.0 to 1.5.0 (#6659) by @dependabot[bot]
• Bump serde from 1.0.199 to 1.0.200 (#6679) by @dependabot[bot]
• Bump serde_json from 1.0.116 to 1.0.117 (#6705) by @dependabot[bot]
• Bump serde from 1.0.200 to 1.0.201 (#6706) by @dependabot[bot]
• Bump serde from 1.0.201 to 1.0.202 (#6733) by @dependabot[bot]
• Bump serde from 1.0.202 to 1.0.203 (#6763) by @dependabot[bot]
• Bump borsh from 1.5.0 to 1.5.1 (#6778) by @dependabot[bot]
• Bump serde_json from 1.0.117 to 1.0.118 (#6909) by @dependabot[bot]
• Bump bs58 from 0.4.0 to 0.5.1 (#6935) by @dependabot[bot]
• Bump serde_json from 1.0.108 to 1.0.109 (#6039) by @dependabot[bot]
• Bump serde from 1.0.193 to 1.0.194 (#6047) by @dependabot[bot]
• Bump serde_json from 1.0.109 to 1.0.110 (#6053) by @dependabot[bot]
• Bump serde_json from 1.0.110 to 1.0.111 (#6060) by @dependabot[bot]
• Bump serde from 1.0.194 to 1.0.195 (#6075) by @dependabot[bot]
• Bump serde from 1.0.195 to 1.0.196 (#6193) by @dependabot[bot]
• Bump serde_json from 1.0.111 to 1.0.113 (#6195) by @dependabot[bot]
• Bump serde from 1.0.196 to 1.0.197 (#6270) by @dependabot[bot]
• Bump serde_json from 1.0.113 to 1.0.114 (#6272) by @dependabot[bot]
• Bump serde_json from 1.0.114 to 1.0.115 (#6495) by @dependabot[bot]

What's new

• Update member GROUP_TOKEN_ADDRESS arg (#6703) by @buffalojoec
• Fix typo (#6740) by @TheFox
• Update CU number on tests (#6814) by @joncinque
• Upgrade to Solana v2 (#6908) by @joncinque
• Fix some comments (#6777) by @jinjiadu
• Fix some typos (#6732) by @largemouth

Miscellaneous Tasks

• Bump serde from 1.0.198 to 1.0.199 (#6647) by @dependabot[bot]
• Bump serial_test from 3.1.0 to 3.1.1 (#6649) by @dependabot[bot]
• Bump base64 from 0.22.0 to 0.22.1 (#6670) by @dependabot[bot]
• Bump serde from 1.0.199 to 1.0.200 (#6679) by @dependabot[bot]
• Bump serde_json from 1.0.116 to 1.0.117 (#6705) by @dependabot[bot]
• Bump serde from 1.0.200 to 1.0.201 (#6706) by @dependabot[bot]
• Bump serde from 1.0.201 to 1.0.202 (#6733) by @dependabot[bot]
• Bump serde from 1.0.202 to 1.0.203 (#6763) by @dependabot[bot]
• Bump tokio from 1.37.0 to 1.38.0 (#6774) by @dependabot[bot]

What's new

• Upgrade to Solana v2 (#6908) by @joncinque

Miscellaneous Tasks

• Bump bytemuck from 1.15.0 to 1.16.0 (#6729) by @dependabot[bot]
• Bump bytemuck from 1.16.0 to 1.16.1 (#6875) by @dependabot[bot]

What's new

• Upgrade to Solana v2 (#6908) by @joncinque

Miscellaneous Tasks

• Bump tokio from 1.36.0 to 1.37.0 (#6519) by @dependabot[bot]
• Bump bytemuck from 1.15.0 to 1.16.0 (#6729) by @dependabot[bot]
• Bump tokio from 1.37.0 to 1.38.0 (#6774) by @dependabot[bot]
• Bump bytemuck from 1.16.0 to 1.16.1 (#6875) by @dependabot[bot]

NOTE: The SPL Token program built from this tag will not be deployed to any network.

What's new

• Upgrade to Solana v2 (#6908) by @joncinque
• Bump to v6 for Solana v2 compatibility (#6918)

What's new

• Upgrade to Solana v2 (#6908) by @joncinque

Miscellaneous Tasks

• Bump borsh from 1.2.1 to 1.4.0 (#6520) by @dependabot[bot]
• Bump serde_json from 1.0.115 to 1.0.116 (#6584) by @dependabot[bot]
• Bump serde from 1.0.197 to 1.0.198 (#6589) by @dependabot[bot]
• Bump serde from 1.0.198 to 1.0.199 (#6647) by @dependabot[bot]
• Bump borsh from 1.4.0 to 1.5.0 (#6659) by @dependabot[bot]
• Bump serde from 1.0.199 to 1.0.200 (#6679) by @dependabot[bot]
• Bump serde_json from 1.0.116 to 1.0.117 (#6705) by @dependabot[bot]
• Bump serde from 1.0.200 to 1.0.201 (#6706) by @dependabot[bot]
• Bump serde from 1.0.201 to 1.0.202 (#6733) by @dependabot[bot]
• Bump serde from 1.0.202 to 1.0.203 (#6763) by @dependabot[bot]
• Bump borsh from 1.5.0 to 1.5.1 (#6778) by @dependabot[bot]

What's new

Other

• Upgrade to tp3 (#6667) by @joncinque
• Add SetTransferFee instruction (#6678) by @nasjuice
• Add memo-transfer examples (#6668) by @joncinque
• Only allow one mint to initialize (#6812) by @joncinque
• Bump to 0.4.7 for release (#6910)

Miscellaneous Tasks

• Bump @types/node from 20.14.5 to 20.14.6 (#6888) by @dependabot[bot]
• Bump @solana/web3.js from 1.91.6 to 1.91.7 (#6598) by @dependabot[bot]
• Bump @typescript-eslint/parser from 7.7.0 to 7.7.1 (#6620) by @dependabot[bot]
• Bump @typescript-eslint/eslint-plugin from 7.7.0 to 7.7.1 (#6619) by @dependabot[bot]
• Bump @typescript-eslint/parser from 7.7.1 to 7.8.0 (#6664) by @dependabot[bot]
• Bump @typescript-eslint/eslint-plugin from 7.7.1 to 7.8.0 (#6661) by @dependabot[bot]
• Bump @types/node from 20.12.7 to 20.12.8 (#6675) by @dependabot[bot]
• Bump @types/chai from 4.3.14 to 4.3.15 (#6684) by @dependabot[bot]
• Bump @types/chai from 4.3.15 to 4.3.16 (#6692) by @dependabot[bot]
• Bump @solana/web3.js from 1.91.7 to 1.91.8 (#6693) by @dependabot[bot]
• Bump @types/node from 20.12.8 to 20.12.10 (#6699) by @dependabot[bot]
• Bump @types/node from 20.12.10 to 20.12.11 (#6711) by @dependabot[bot]
• Bump chai from 5.1.0 to 5.1.1 (#6717) by @dependabot[bot]
• Bump chai-as-promised from 7.1.1 to 7.1.2 (#6721) by @dependabot[bot]
• Bump @typescript-eslint/parser from 7.8.0 to 7.9.0 (#6726) by @dependabot[bot]
• Bump @types/node from 20.12.11 to 20.12.12 (#6727) by @dependabot[bot]
• Bump @typescript-eslint/eslint-plugin from 7.8.0 to 7.9.0 (#6728) by @dependabot[bot]
• Fix some typos (#6732) by @largemouth
• Bump @typescript-eslint/eslint-plugin from 7.9.0 to 7.10.0 (#6750) by @dependabot[bot]
• Bump @typescript-eslint/parser from 7.9.0 to 7.10.0 (#6752) by @dependabot[bot]
• Bump @typescript-eslint/eslint-plugin from 7.10.0 to 7.11.0 (#6768) by @dependabot[bot]
• Bump @typescript-eslint/parser from 7.10.0 to 7.11.0 (#6769) by @dependabot[bot]
• Bump @types/node from 20.12.12 to 20.12.13 (#6773) by @dependabot[bot]
• Bump prettier from 3.2.5 to 3.3.0 (#6781) by @dependabot[bot]
• Bump @types/node from 20.12.13 to 20.14.0 (#6782) by @dependabot[bot]
• Bump @types/node from 20.14.0 to 20.14.1 (#6787) by @dependabot[bot]
• Bump @typescript-eslint/parser from 7.11.0 to 7.12.0 (#6788) by @dependabot[bot]
• Bump @typescript-eslint/eslint-plugin from 7.11.0 to 7.12.0 (#6789) by @dependabot[bot]
• Bump @types/node from 20.14.1 to 20.14.2 (#6804) by @dependabot[bot]
• Bump start-server-and-test from 2.0.3 to 2.0.4 (#6797) by @dependabot[bot]
• Bump prettier from 3.3.0 to 3.3.1 (#6801) by @dependabot[bot]
• Bump @solana/web3.js from 1.91.8 to 1.92.3 (#6813) by @dependabot[bot]
• Bump chai-as-promised from 7.1.2 to 8.0.0 (#6826) by @dependabot[bot]
• Bump prettier from 3.3.1 to 3.3.2 (#6830) by @dependabot[bot]
• Bump @typescript-eslint/parser from 7.12.0 to 7.13.0 (#6831) by @dependabot[bot]
• Bump @typescript-eslint/eslint-plugin from 7.12.0 to 7.13.0 (#6833) by @dependabot[bot]
• Bump @solana/web3.js from 1.92.3 to 1.93.0 (#6841) by @dependabot[bot]
• Bump @typescript-eslint/eslint-plugin from 7.13.0 to 7.13.1 (#6872) by @dependabot[bot]
• Bump @typescript-eslint/parser from 7.13.0 to 7.13.1 (#6870) by @dependabot[bot]
• Bump @types/node from 20.14.2 to 20.14.5 (#6869) by @dependabot[bot]
• Bump @types/node from 20.14.6 to 20.14.7 (#6892) by @dependabot[bot]
• Bump @types/node from 20.14.7 to 20.14.8 (#6906) by @dependabot[bot]
• Bump typedoc from 0.25.13 to 0.26.2 (#6904) by @dependabot[bot]
• Bump @types/mocha from 10.0.6 to 10.0.7 (#6903) by @dependabot[bot]
• Bump @solana/web3.js from 1.93.0 to 1.93.1 (#6905) by @dependabot[bot]
• Bump typescript from 5.4.5 to 5.5.2 (#6894) by @dependabot[bot]

What's new

• Hash error codes (#6702) by @buffalojoec
• Upgrade to Solana v2 (#6908) by @joncinque

Miscellaneous Tasks

• Bump bytemuck from 1.15.0 to 1.16.0 (#6729) by @dependabot[bot]
• Bump bytemuck from 1.16.0 to 1.16.1 (#6875) by @dependabot[bot]