ci fixes

(cherry picked from commit caf40e7a37)

.github/workflows/ci-build-upload-binaries.yml

@@ -21,7 +21,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        platform: [ arc-ubuntu-22.04 ]
+        platform: [ arc-linux-latest ]
 
     runs-on: ${{ matrix.platform }}
     env:

.github/workflows/ci-build-vpn-api-wasm.yml

@@ -9,7 +9,7 @@ on:
 
 jobs:
   wasm:
-    runs-on: arc-ubuntu-22.04
+    runs-on: arc-linux-latest
     env:
       CARGO_TERM_COLOR: always
       RUSTUP_PERMIT_COPY_RENAME: 1

.github/workflows/ci-contracts.yml

@@ -17,7 +17,7 @@ jobs:
   build:
     # since it's going to be compiled into wasm, there's absolutely
     # no point in running CI on different OS-es
-    runs-on: ubuntu-22.04
+    runs-on: arc-linux-latest
     env:
       CARGO_TERM_COLOR: always
       RUSTUP_PERMIT_COPY_RENAME: 1

.github/workflows/ci-nym-wallet-rust.yml

@@ -11,7 +11,7 @@ on:
 
 jobs:
   build:
-    runs-on: arc-ubuntu-22.04
+    runs-on: arc-linux-latest
     env:
       CARGO_TERM_COLOR: always
       RUSTUP_PERMIT_COPY_RENAME: 1

.github/workflows/ci-sdk-wasm.yml

@@ -11,7 +11,7 @@ on:
 
 jobs:
   wasm:
-    runs-on: arc-ubuntu-22.04
+    runs-on: arc-linux-latest
     env:
       CARGO_TERM_COLOR: always
       RUSTUP_PERMIT_COPY_RENAME: 1

.github/workflows/publish-nym-binaries.yml

@@ -21,7 +21,7 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - os: arc-ubuntu-22.04
+          - os: arc-linux-latest
             target: x86_64-unknown-linux-gnu
     runs-on:  ${{ matrix.os }}
 
@@ -30,11 +30,13 @@ jobs:
       release_date: ${{ fromJSON(steps.create-release.outputs.assets)[0].published_at }}
       client_hash: ${{ steps.binary-hashes.outputs.client_hash }}
       nymvisor_hash: ${{ steps.binary-hashes.outputs.nymvisor_hash }}
+      nymnode_hash: ${{ steps.binary-hashes.outputs.nymnode_hash }}
       socks5_hash: ${{ steps.binary-hashes.outputs.socks5_hash }}
       netreq_hash: ${{ steps.binary-hashes.outputs.netreq_hash }}
       cli_hash: ${{ steps.binary-hashes.outputs.cli_hash }}
       client_version: ${{ steps.binary-versions.outputs.client_version }}
       nymvisor_version: ${{ steps.binary-versions.outputs.nymvisor_version }}
+      nymnode_version: ${{ steps.binary-versions.outputs.nymnode_version }}
       socks5_version: ${{ steps.binary-versions.outputs.socks5_version }}
       netreq_version: ${{ steps.binary-versions.outputs.netreq_version }}
       cli_version: ${{ steps.binary-versions.outputs.cli_version }}
@@ -74,6 +76,7 @@ jobs:
             target/release/nym-network-requester
             target/release/nym-cli
             target/release/nymvisor
+            target/release/nym-node
           retention-days: 30
     
       - id: create-release
@@ -88,6 +91,7 @@ jobs:
             target/release/nym-network-requester
             target/release/nym-cli
             target/release/nymvisor
+            target/release/nym-node
 
   push-release-data-client:
     if: ${{ (startsWith(github.ref, 'refs/tags/nym-binaries-') && github.event_name == 'release') || github.event_name == 'workflow_dispatch' }}

.github/workflows/push-credential-proxy.yaml

@@ -8,7 +8,7 @@ env:
 
 jobs:
   build-container:
-    runs-on: arc-ubuntu-22.04-dind
+    runs-on: arc-linux-latest-dind
     steps:
       - name: Login to Harbor
         uses: docker/login-action@v3

CHANGELOG.md

@@ -4,6 +4,84 @@ Post 1.0.0 release, the changelog format is based on [Keep a Changelog](https://
 
 ## [Unreleased]
 
+## [2025.17-isabirra] (2025-09-29)
+
+- Bugfix | Fix the registration handshake ([#6062])
+- Convenience for ShutdownTracker ([#6038])
+- chore: made http-api-client-macro doctest compile ([#6037])
+- feat: refresh mixnet contract on epoch progression ([#6023])
+- chore: remove legacy nodes from nym api [and kinda-ish from node status api] ([#6021])
+- Feature/credential proxy crate ([#6018])
+- Moving clients crate from vpn-client repo to here ([#6015])
+- Feature/cancellation migration ([#6014])
+- Use default value for the ports until api is deployed ([#6007])
+- bugfix: return from MixTrafficController if client request channel has closed ([#6002])
+- Revert "Create an axum_test client for more integrated unit testing (… ([#5999])
+- chore: upgraded syn to 2.0 and removed nym-execute ([#5998])
+- feat: use `ShutdownToken` (`CancellationToken` inside) for nym-api ([#5997])
+- bugfix: Recipient deserialisation for deserialisers missing bytes specialisation ([#5991])
+- chore: use updated version of simulate endpoint ([#5988])
+- chore: purge temp databases on build ([#5984])
+- Bump sha.js from 2.4.11 to 2.4.12 ([#5983])
+- Feature: Delegation program stake checker and adjuster ([#5980])
+- build(deps): bump actions/setup-java from 4 to 5 ([#5975])
+- Domain fronting integration ([#5974])
+- chore: internal hidden command to force advance nyx epoch ([#5964])
+- Create an axum_test client for more integrated unit testing ([#5956])
+- feat: shared library for attempting to retrieve update mode attestation ([#5954])
+- Bump slab from 0.4.10 to 0.4.11 ([#5952])
+- build(deps): bump actions/first-interaction from 1 to 3 ([#5950])
+- fix: use WASM compatible time API in client ([#5948])
+- feat: credential proxy deposit pool ([#5945])
+- build(deps): bump actions/download-artifact from 4 to 5 ([#5939])
+- feat: nym signers monitor ([#5933])
+- Bump console from 0.15.11 to 0.16.0 ([#5931])
+- Bump mock_instant from 0.5.3 to 0.6.0 ([#5930])
+- Bump tokio from 1.46.1 to 1.47.1 ([#5929])
+- Bump defguard_wireguard_rs from v0.4.7 to v0.7.5 ([#5928])
+- Bump indicatif from 0.17.11 to 0.18.0 ([#5924])
+- Feature: Nym node autorun CLI ([#5916])
+- build(deps): bump mikefarah/yq from 4.45.4 to 4.47.1 ([#5911])
+- build(deps): bump pbkdf2 from 3.1.2 to 3.1.3 ([#5869])
+
+[#6062]: https://github.com/nymtech/nym/pull/6062
+[#6038]: https://github.com/nymtech/nym/pull/6038
+[#6037]: https://github.com/nymtech/nym/pull/6037
+[#6023]: https://github.com/nymtech/nym/pull/6023
+[#6021]: https://github.com/nymtech/nym/pull/6021
+[#6018]: https://github.com/nymtech/nym/pull/6018
+[#6015]: https://github.com/nymtech/nym/pull/6015
+[#6014]: https://github.com/nymtech/nym/pull/6014
+[#6007]: https://github.com/nymtech/nym/pull/6007
+[#6002]: https://github.com/nymtech/nym/pull/6002
+[#5999]: https://github.com/nymtech/nym/pull/5999
+[#5998]: https://github.com/nymtech/nym/pull/5998
+[#5997]: https://github.com/nymtech/nym/pull/5997
+[#5991]: https://github.com/nymtech/nym/pull/5991
+[#5988]: https://github.com/nymtech/nym/pull/5988
+[#5984]: https://github.com/nymtech/nym/pull/5984
+[#5983]: https://github.com/nymtech/nym/pull/5983
+[#5980]: https://github.com/nymtech/nym/pull/5980
+[#5975]: https://github.com/nymtech/nym/pull/5975
+[#5974]: https://github.com/nymtech/nym/pull/5974
+[#5964]: https://github.com/nymtech/nym/pull/5964
+[#5956]: https://github.com/nymtech/nym/pull/5956
+[#5954]: https://github.com/nymtech/nym/pull/5954
+[#5952]: https://github.com/nymtech/nym/pull/5952
+[#5950]: https://github.com/nymtech/nym/pull/5950
+[#5948]: https://github.com/nymtech/nym/pull/5948
+[#5945]: https://github.com/nymtech/nym/pull/5945
+[#5939]: https://github.com/nymtech/nym/pull/5939
+[#5933]: https://github.com/nymtech/nym/pull/5933
+[#5931]: https://github.com/nymtech/nym/pull/5931
+[#5930]: https://github.com/nymtech/nym/pull/5930
+[#5929]: https://github.com/nymtech/nym/pull/5929
+[#5928]: https://github.com/nymtech/nym/pull/5928
+[#5924]: https://github.com/nymtech/nym/pull/5924
+[#5916]: https://github.com/nymtech/nym/pull/5916
+[#5911]: https://github.com/nymtech/nym/pull/5911
+[#5869]: https://github.com/nymtech/nym/pull/5869
+
 ## [2025.16-halloumi] (2025-09-16)
 
 - Backport metadata endpoint ([#6010])

Cargo.lock

@@ -4883,7 +4883,7 @@ dependencies = [
 
 [[package]]
 name = "nym-api"
-version = "1.1.65"
+version = "1.1.66"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -5095,7 +5095,7 @@ dependencies = [
 
 [[package]]
 name = "nym-cli"
-version = "1.1.62"
+version = "1.1.63"
 dependencies = [
  "anyhow",
  "base64 0.22.1",
@@ -5178,7 +5178,7 @@ dependencies = [
 
 [[package]]
 name = "nym-client"
-version = "1.1.62"
+version = "1.1.63"
 dependencies = [
  "bs58",
  "clap",
@@ -6316,7 +6316,7 @@ dependencies = [
 
 [[package]]
 name = "nym-network-requester"
-version = "1.1.63"
+version = "1.1.64"
 dependencies = [
  "addr",
  "anyhow",
@@ -6366,7 +6366,7 @@ dependencies = [
 
 [[package]]
 name = "nym-node"
-version = "1.18.0"
+version = "1.16.0"
 dependencies = [
  "anyhow",
  "arc-swap",
@@ -6853,7 +6853,7 @@ dependencies = [
 
 [[package]]
 name = "nym-socks5-client"
-version = "1.1.62"
+version = "1.1.63"
 dependencies = [
  "bs58",
  "clap",
@@ -7611,7 +7611,7 @@ dependencies = [
 
 [[package]]
 name = "nymvisor"
-version = "0.1.27"
+version = "0.1.28"
 dependencies = [
  "anyhow",
  "bytes",

clients/native/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "nym-client"
-version = "1.1.62"
+version = "1.1.63"
 authors = ["Dave Hrycyszyn <futurechimp@users.noreply.github.com>", "Jędrzej Stuczyński <andrew@nymtech.net>"]
 description = "Implementation of the Nym Client"
 edition = "2021"

clients/socks5/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "nym-socks5-client"
-version = "1.1.62"
+version = "1.1.63"
 authors = ["Dave Hrycyszyn <futurechimp@users.noreply.github.com>"]
 description = "A SOCKS5 localhost proxy that converts incoming messages to Sphinx and sends them to a Nym address"
 edition = "2021"

common/network-defaults/src/mainnet.rs

@@ -44,7 +44,7 @@ pub const NYM_APIS: &[ApiUrlConst] = &[
         front_hosts: None,
     },
     ApiUrlConst {
-        url: "https://nym-fronntdoor.vercel.app/api/",
+        url: "https://nym-frontdoor.vercel.app/api/",
         front_hosts: Some(&["vercel.app", "vercel.com"]),
     },
     ApiUrlConst {

gateway/src/node/client_handling/websocket/connection_handler/fresh.rs

@@ -922,47 +922,48 @@ impl<R, S> FreshHandler<R, S> {
         S: AsyncRead + AsyncWrite + Unpin + Send,
         R: CryptoRng + RngCore + Send,
     {
-        let initial_request = match self.wait_for_initial_message().await {
-            Ok(req) => req,
-            Err(err) => {
-                self.send_and_forget_error_response(err).await;
-                return None;
+        loop {
+            let req = self.wait_for_initial_message().await;
+            let initial_request = match req {
+                Ok(req) => req,
+                Err(err) => {
+                    self.send_and_forget_error_response(err).await;
+                    return None;
+                }
+            };
+
+            // see if we managed to register the client through this request
+            let maybe_auth_res = match self.handle_initial_client_request(initial_request).await {
+                Ok(maybe_auth_res) => maybe_auth_res,
+                Err(err) => {
+                    debug!("initial client request handling error: {err}");
+                    self.send_and_forget_error_response(err).await;
+                    return None;
+                }
+            };
+
+            if let Some(registration_details) = maybe_auth_res {
+                let (mix_sender, mix_receiver) = mpsc::unbounded();
+                // Channel for handlers to ask other handlers if they are still active.
+                let (is_active_request_sender, is_active_request_receiver) = mpsc::unbounded();
+                self.shared_state.active_clients_store.insert_remote(
+                    registration_details.address,
+                    mix_sender,
+                    is_active_request_sender,
+                    registration_details.session_request_timestamp,
+                );
+
+                return AuthenticatedHandler::upgrade(
+                    self,
+                    registration_details,
+                    mix_receiver,
+                    is_active_request_receiver,
+                )
+                .await
+                .inspect_err(|err| error!("failed to upgrade client handler: {err}"))
+                .ok();
             }
-        };
-
-        // see if we managed to register the client through this request
-        let maybe_auth_res = match self.handle_initial_client_request(initial_request).await {
-            Ok(maybe_auth_res) => maybe_auth_res,
-            Err(err) => {
-                debug!("initial client request handling error: {err}");
-                self.send_and_forget_error_response(err).await;
-                return None;
-            }
-        };
-
-        if let Some(registration_details) = maybe_auth_res {
-            let (mix_sender, mix_receiver) = mpsc::unbounded();
-            // Channel for handlers to ask other handlers if they are still active.
-            let (is_active_request_sender, is_active_request_receiver) = mpsc::unbounded();
-            self.shared_state.active_clients_store.insert_remote(
-                registration_details.address,
-                mix_sender,
-                is_active_request_sender,
-                registration_details.session_request_timestamp,
-            );
-
-            AuthenticatedHandler::upgrade(
-                self,
-                registration_details,
-                mix_receiver,
-                is_active_request_receiver,
-            )
-            .await
-            .inspect_err(|err| error!("failed to upgrade client handler: {err}"))
-            .ok();
         }
-
-        None
     }
 
     pub(crate) async fn wait_for_initial_message(

nym-api/Cargo.toml

@@ -4,7 +4,7 @@
 [package]
 name = "nym-api"
 license = "GPL-3.0"
-version = "1.1.65"
+version = "1.1.66"
 authors.workspace = true
 edition = "2021"
 rust-version.workspace = true

nym-api/src/unstable_routes/v2/nym_nodes/semi_skimmed/mod.rs

@@ -67,7 +67,8 @@ pub struct PaginatedCachedNodesExpandedResponseSchema {
 /// Return all Nym Nodes and optionally legacy mixnodes/gateways (if `no-legacy` flag is not used)
 /// that are currently bonded.
 #[utoipa::path(
-    tag = "Unstable Nym Nodes",
+    operation_id = "v2_nodes_expanded",
+    tag = "Unstable Nym Nodes v2",
     get,
     params(NodesParamsWithRole),
     path = "",

nym-api/src/unstable_routes/v2/nym_nodes/skimmed/handlers.rs

@@ -15,7 +15,8 @@ use nym_api_requests::nym_nodes::NodeRoleQueryParam;
 /// Return all Nym Nodes and optionally legacy mixnodes/gateways (if `no-legacy` flag is not used)
 /// that are currently bonded.
 #[utoipa::path(
-    tag = "Unstable Nym Nodes",
+    operation_id = "v2_nodes_basic_all",
+    tag = "Unstable Nym Nodes v2",
     get,
     params(NodesParamsWithRole),
     path = "",
@@ -52,7 +53,8 @@ pub(crate) async fn nodes_basic_all(
 /// Returns Nym Nodes and optionally legacy mixnodes (if `no-legacy` flag is not used)
 /// that are currently bonded and support mixing role.
 #[utoipa::path(
-    tag = "Unstable Nym Nodes",
+    operation_id = "v2_mixnodes_basic_all",
+    tag = "Unstable Nym Nodes v2",
     get,
     params(NodesParams),
     path = "/mixnodes/all",
@@ -75,7 +77,8 @@ pub(crate) async fn mixnodes_basic_all(
 /// Returns Nym Nodes and optionally legacy mixnodes (if `no-legacy` flag is not used)
 /// that are currently bonded and are in the active set with one of the mixing roles.
 #[utoipa::path(
-    tag = "Unstable Nym Nodes",
+    operation_id = "v2_mixnodes_basic_active",
+    tag = "Unstable Nym Nodes v2",
     get,
     params(NodesParams),
     path = "/mixnodes/active",
@@ -98,7 +101,8 @@ pub(crate) async fn mixnodes_basic_active(
 /// Returns Nym Nodes and optionally legacy gateways (if `no-legacy` flag is not used)
 /// that are currently bonded and support entry gateway role.
 #[utoipa::path(
-    tag = "Unstable Nym Nodes",
+    operation_id = "v2_entry_gateways_basic_all",
+    tag = "Unstable Nym Nodes v2",
     get,
     params(NodesParams),
     path = "/entry-gateways",
@@ -121,7 +125,8 @@ pub(crate) async fn entry_gateways_basic_all(
 /// Returns Nym Nodes and optionally legacy gateways (if `no-legacy` flag is not used)
 /// that are currently bonded and support exit gateway role.
 #[utoipa::path(
-    tag = "Unstable Nym Nodes",
+    operation_id = "v2_exit_gateways_basic_all",
+    tag = "Unstable Nym Nodes v2",
     get,
     params(NodesParams),
     path = "/exit-gateways",

nym-credential-proxy/nym-credential-proxy/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "nym-credential-proxy"
-version = "0.2.0"
+version = "0.3.0"
 authors.workspace = true
 repository.workspace = true
 homepage.workspace = true

service-providers/network-requester/Cargo.toml

@@ -4,7 +4,7 @@
 [package]
 name = "nym-network-requester"
 license = "GPL-3.0"
-version = "1.1.63"
+version = "1.1.64"
 authors.workspace = true
 edition.workspace = true
 rust-version = "1.70"

tools/nym-cli/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "nym-cli"
-version = "1.1.62"
+version = "1.1.63"
 authors.workspace = true
 edition = "2021"
 license.workspace = true

tools/nymvisor/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "nymvisor"
-version = "0.1.27"
+version = "0.1.28"
 authors.workspace = true
 repository.workspace = true
 homepage.workspace = true