This release is a security release. All users on v1.6.0 or earlier are recommended to upgrade.

Security Fixes

This release addresses the following security advisories:

• GHSA-396x-v8w4-9x82: MemoryMerkleAir allows below-leaf rows to alter memory roots.
• GHSA-j29p-wr24-hp4f: OpenVmHalo2Verifier self-call can bypass proof verification.
• GHSA-w82q-w67c-67wv: OpenVmHalo2Verifier accepts non-canonical app commitments.

Changed

• (Circuits/Memory) Fix a soundness issue in MemoryMerkleAir by rejecting Merkle expansion rows below the leaf layer, preventing malformed traces from changing the committed memory root without a corresponding memory operation.
• (Verifier) Fix a selector-clash issue in the Solidity verifier wrapper to ensure proof verification runs through the generated Halo2 fallback.
• (Verifier) Reject non-canonical BN254 scalar encodings for appExeCommit and appVmCommit in the Solidity verifier wrapper.

Full Changelog: v1.6.0...v1.7.0

This release is a security release. All users on v1.5.0 or earlier are recommended to upgrade.

Security Fixes

This release addresses the following security advisories:

• GHSA-9jfx-4f4f-497j: SHA-256 and Keccak circuits under-constrained.
• GHSA-76mq-v757-53gr: openvm-pairing pairing check missing proper subfield check on scaling factor.
• GHSA-j9m2-fxc5-fr82: Native recursion verifier missing constraints in program and circuit.
• GHSA-fh29-29h9-qm9h: System AIRs missing boolean or zero assertions.

This release also incorporates the upstream Plonky3 fix for GHSA-vj64-rjf3-w3v7 (MultiField32Challenger transcript binding) via the update to Plonky3 v0.4.3.

Changed

• (Transpiler) Reject non-contiguous executable segments in ELF decoder.
• (Circuits/VM) Add boolean constraints to PhantomAir (is_valid) and VmConnectorAir (is_terminate) bus interaction multiplicities.
• (Circuits/SHA-256) Enforce that the Sha256Air trace ends on a padding row.
• (Circuits/SHA-256) Add range checks on byte limbs in Sha256VmAir message length comparison to prevent field-modulus wraparound.
• (Circuits/SHA-256) Enforce is_last_block is constant across all rows within a block in Sha256VmAir.
• (Circuits/SHA-256) Constrain padding block count after the terminal marker in Sha256VmAir to prevent extra padding blocks.
• (Circuits/Keccak) Add terminal finalization constraint to KeccakVmAir to ensure partial tail rows (since 24 never divides a power of two) cannot contain enabled instructions.
• (Circuits/Keccak) Add explicit boolean assertion on is_enabled in KeccakVmAir.
• (Circuits/Memory) Anchor the root node's as_label and address_label to zero in MemoryMerkleAir.
• (Recursion) Constrain air_perm_by_height in the recursive STARK verifier to be a valid permutation of AIR indices.
• (Recursion) Add bounds checks for unchecked builder.get on dynamic arrays in the recursive STARK verifier and continuations verifier to prevent out-of-bounds reads from malicious proof data.
• (Recursion) Zero-fill the mask array in verify_raps to prevent reads of uninitialized memory in the permutation check.
• (Recursion) Validate that each AIR proof's exposed_values_after_challenge length matches verifier key advice, preventing injection of extra post-challenge exposed-value vectors.
• (Recursion) Fix add_felt_exti ASM lowering to correctly compute lhs + rhs[0] for the base coefficient instead of silently dropping rhs[0].
• (Recursion) Constrain VERIFY_BATCH inside-row hashing to start at the correct opened_values index and prevent opened_index from advancing across row boundaries.
• (Recursion) Update Plonky3 to v0.4.3. The static verifier challenger now mirrors MultiField32Challenger from that release: each absorb packs the pending F scalars and tags the block with the number of F elements consumed, and each squeeze splits the PF rate cells into canonical base-|F| limbs. Also adds a DSL primitive (CircuitVarToFieldOrderLimbsF) that constrains the in-circuit base-|F| decomposition to be canonical.
• (Guest Library/IO) Add checked arithmetic to hint stream read and deserialization buffer allocation to prevent integer overflow from untrusted hint lengths.
• (Guest Library/Algebra) Ensure zero is always reported as a perfect square in modular arithmetic.
• (Guest Library/Pairing) Add Fp6 subfield checks for the hinted scalar factor in openvm-pairing BN254/BLS12-381 pairing check optimization.
• (Guest Library/ECC) Make all from_xy_* point constructors unsafe since they do not perform subgroup membership checks.
• (Guest Library/ECC) Reject the identity point (point at infinity) as a valid public key in ECDSA verification.
• (Guest Library/ruint) Restrict zkVM-accelerated bitwise intrinsics (and, or, xor) to 256-bit Uint types only. Fix cmp fallback to avoid infinite recursion on non-256-bit types.
• (Guest Library/ruint) Fix OOB read in ruint shift intrinsics by passing correctly sized buffer.

Removed

• (Recursion) Delete dead and buggy ConstraintCompiler code.

Full Changelog: v1.5.0...v1.6.0

Preview of v2.0.0-alpha: https://blog.openvm.dev/2.0

Added

• Formal verification of the RV32IM VM extension in Lean.

Changed

• Updated Plonky3 to crates.io v0.4.1.
• Updated STARK protocol to 100 bits of provable security with FRI.
• (Verifier/CLI) The Halo2ProvingKey and Halo2Verifier.sol verifier contract generated by the CLI now requires wrapper_k = 24.

All users are recommended to upgrade to the new v1.5.0 release such that the STARK backend targets 100 bits of provable security.

What's Changed

• feat: add instruction count table to openvm-prof by @876pol in #2342
• chore: add SWIRL link to docs by @yi-sun in #2380
• release: v1.5.0-rc.0 by @jonathanpwang in #2331
• feat: update plonky3 to 0.4 by @zlangley in #2293
• feat: update to provable params by @zlangley in #2301
• feat(recursion): add DEEP PoW witness verification by @jonathanpwang in #2361
• fix: allow cli prove without source code by @luffykai in #2344
• fix(cli): increase max trusted setup to download by @jonathanpwang in #2387
• chore: prove stark with configurable agg pk path by @luffykai in #2383
• perf(vm): avoid zeroed allocation in BasicMemory::clone by @MozirDmitriy in #2352
• chore: make config per version by @luffykai in #2390
• release: v1.5.0 by @jonathanpwang in #2394

New Contributors

• @MozirDmitriy made their first contribution in #2352

Full Changelog: v1.4.3...v1.5.0

What's Changed

• docs: update stark-backend docs redirect to v1.2.2 by @jonathanpwang in #2308
• feat: add parallel proof time for fixed number of devices by @shuklaayush in #2315
• ci: add auto rebase for develop-new-keccak by @shuklaayush in #2322
• perf: no serial mark_parents by @Golovanov399 in #2325
• ci: address cargo-audit for ruint by @jonathanpwang in #2335
• fix: make with_halo2_pk panic on duplicate key by @GarmashAlex in #2324
• fix(aot): execute_metered should error if exit code nonzero by @jonathanpwang in #2336
• fix: limit mulh kernel threads by @shuklaayush in #2337
• fix: keep track of memory accesses since last checkpoint by @shuklaayush in #2332
• fix(aot): x86 assembly for addr_space_access_count update by @jonathanpwang in #2340
• chore: update stark-backend to v1.2.3 by @jonathanpwang in #2346
• release: v1.4.3 by @jonathanpwang in #2348

New Contributors

• @GarmashAlex made their first contribution in #2324

Full Changelog: v1.4.2...v1.4.3

v1.4.2

Added

• (Executor) Added ahead of time (AOT) compilation of OpenVM executables to host x86 binaries using x86 assembly and dynamic linking.

Changed

• Workspace MSRV has been updated to Rust 1.90.0.
• (Verifier) The formatting of the Solidity code generated for the EVM SNARK verifier has changed due to an update to forge-fmt v1.5.0. No other change to the smart contract besides formatting.
• (Prover) Fix metered execution trace height estimations to account for uninitialized memory.
• (Prover) More robust CUDA stream synchronization for memory merkle tree trace generation.
• (Prover) Updated cuda-backend with fixes to virtual memory management for long running processes.
• (Executor) Performance optimizations to elliptic curve host execution.

What's Changed

• fix: order of fields in metered execution tracing log by @shuklaayush in #2184
• perf: avoid re-computing memory merkle tree for user public values proof by @jonathanpwang in #2207
• ci: fix codspeed instrumentation benchmark by @jonathanpwang in #2231
• feat: ahead of time (AOT) compilation of VmExe on x86_64 by @nyunyunyunyu in #2195
• fix(cuda): ensure streams have observed events before destroying by @jonathanpwang in #2242
• chore: switch to git dependency for halo2curves-axiom by @nyunyunyunyu in #2264
• perf: exponentiate on naf representation by @shuklaayush in #2272
• fix: use set_trace_height function to set trace height by @shuklaayush in #2267
• perf: switch halo2curve dependency to use the newly wrapped invert() … by @GunaDD in #2268
• perf: use blstrs for algebra/ecc bls operations by @shuklaayush in #2274
• perf: use blstrs for bls field operations in exp_naf by @shuklaayush in #2273
• chore: add tracing spans for aot exec methods by @shuklaayush in #2275
• fix: update the ctx.instret_left in E1 from the register by @GunaDD in #2276
• docs(book): add instructions for NVIDIA open source drivers by @jonathanpwang in #2285
• fix(ci): rust cache needs to be cuda architecture specific by @jonathanpwang in #2287
• fix: lazy_update_boundary_heights needs to handle uninitialized memory by @jonathanpwang in #2286
• fix(cuda): use vpmm v4 by @gaxiom in #2281
• fix: invalid handling of empty persistent initial memory on CUDA by @Golovanov399 in #2277
• chore: use stark-backend v1.2.2-rc.1 by @jonathanpwang in #2292
• chore: update forge-fmt, alloy-sol-types, rust toolchain by @shuklaayush in #2299
• ci: add workflow to auto-rebase feature branches by @jonathanpwang in #2290
• chore(test): add GpuChipTestBuilder::new_persistent by @DeVikingMark in #2191
• chore(ci): fix formatting in slack message for rebase bot by @jonathanpwang in #2306
• release: v1.4.2 by @jonathanpwang in #2307

New Contributors

• @DeVikingMark made their first contribution in #2191

Full Changelog: v1.4.1...v1.4.2

This release updates to stark-backend v1.2.1 for CUDA performance gains in the backend. Other changes include:

Added

• (CLI) Add configurable segmentation arguments to cargo openvm prove commands.

Changed

• (Toolchain) Update cargo openvm build to use Rust nightly version nightly-2025-08-02.
• (Primitives Library) Fix in openvm-algebra-complex-macros to ensure const byte arrays have proper memory alignment.
• (Executor) Modified VirtualMachine::build_metered_ctx to take the program (&VmExe<Val<E::SC>>) as an argument.
• (Prover/Executor) Changed default segmentation limits and updated segmentation logic.

What's Changed

• chore: mention "keygen before commit" in the docs by @Golovanov399 in #2111
• ci(vocs): update pnpm lock file by @jonathanpwang in #2112
• ci(vocs): hard copy all symlink dirs by @jonathanpwang in #2113
• ci(ami): add RunsOn image for cuda 12.9 by @jonathanpwang in #2115
• fix(ci/docs): recommend CUDA toolkit 12.9 by @jonathanpwang in #2116
• ci: build docs with cuda feature by @jonathanpwang in #2117
• ci: add release workflow to upload agg,halo2 pk to s3 by @jonathanpwang in #2114
• chore(audit): ignore cargo audit false positive by @jonathanpwang in #2120
• docs: add whitepaper link to vocs by @Qumeric in #2119
• ci: skip debug during CI air test by @stephenh-axiom-xyz in #2118
• fix: reduce threads per block for FRI tracegen launcher by @stephenh-axiom-xyz in #2124
• ci: script + workflow to run clang-tidy during CUDA lints by @stephenh-axiom-xyz in #2122
• docs(vocs): use versioned rustdocs redirect by @jonathanpwang in #2125
• perf: pass state variables by value in tco exec handlers by @shuklaayush in #2121
• chore(cuda): use newer ami by @gaxiom in #2131
• ci(cuda-13): clean git cache by @jonathanpwang in #2132
• perf: only do exit check for instructions that can exit by @shuklaayush in #2126
• ci(runs-on): set CUDA_ARCH env var in pre-install by @jonathanpwang in #2133
• chore(cuda): update cuda-backend with Virtual Memory Manager and NTT refactor by @gaxiom in #2127
• fix: add std feature to openvm-prof serde by @stephenh-axiom-xyz in #2135
• fix: take program air height into account in metered execution by @shuklaayush in #2137
• chore(cuda): update poseidon2 kernel to use memory manager by @gaxiom in #2108
• fix: ensure segments are below thresholds by @shuklaayush in #2138
• fix: log more information for segments by @shuklaayush in #2143
• feat: E2 supports suspension & VmExecState supports clone by @nyunyunyunyu in #2140
• chore: Rename execute_metered_until_suspension to execute_metered_until_suspend by @nyunyunyunyu in #2144
• chore: update install link by @trevor-trinh in #2146
• chore: bump stark-backend to v1.2.1-rc.2 by @jonathanpwang in #2148
• chore(cuda): BabyBear unified + CUDA_DEBUG + opener in natural order by @gaxiom in #2149
• fix: Over-align public constants in moduli_init by @Avaneesh-axiom in #2150
• chore: update openvm build nightly version by @jonathanpwang in #2152
• fix: execution from non-zero instret by @jonathanpwang in #2155
• chore: add sdk app prove without verify by @luffykai in #2164
• chore(cuda): keccakf memcpy handling of padding by @jonathanpwang in #2167
• feat(cuda): VPMM v3 and async app prover by @gaxiom in #2165
• chore: Remove send + sync bound on executor by @Schaeff in #2156
• feat(cuda): use VPMM v3.1 by @gaxiom in #2169
• docs(transpiler): clarify itof function definition by @jonathanpwang in #2170
• audit: v1.4.1 report by @jonathanpwang in #2172
• chore(docs): update link to example repo by @jonathanpwang in #2176
• fix(cuda): sync memory subtree streams before drop by @jonathanpwang in #2175
• fix: Expose CUDA primitives by @qwang98 in #2179
• feat(cli): add SegmentationArgs to prove command by @jonathanpwang in #2178
• release: v1.4.1 by @jonathanpwang in #2171

New Contributors

• @trevor-trinh made their first contribution in #2146
• @Schaeff made their first contribution in #2156
• @qwang98 made their first contribution in #2179

Full Changelog: v1.4.0...v1.4.1

This release focuses on performance:

• Execution was rewritten for much better performance and to support our distributed proving architecture.
• All proving after execution, including trace generation, is now supported on Nvidia GPUs through new CUDA kernels and Rust bindings.

Users are recommended to upgrade all guest and host crates to openvm v1.4.0.

See CHANGELOG.md for more details.

What's Changed

• feat: make merkle tree finalization parallel by @Golovanov399 in #1701
• fix(new-execution): return segments in execute_metered by @shuklaayush in #1702
• refactor: Move Streams into VmStateMut by @nyunyunyunyu in #1707
• fix(new-execution): remove hardcoded trace heights by @shuklaayush in #1715
• feat: Do not build a BTreeMap when we don't need to by @Golovanov399 in #1718
• feat: new execution e4 for memory adapters by @Golovanov399 in #1733
• feat: use memmap instead of paged_vecs on platforms that support it by @pjabbarzade in #1734
• chore: merge main branch by @jonathanpwang in #1740
• chore: add serde to segment by @luffykai in #1749
• fix(new-execution): cleanup vm.rs by @shuklaayush in #1751
• ci: add benches for execute_metered by @shuklaayush in #1752
• chore(new-execution): clk/cycles -> instret/insns by @shuklaayush in #1755
• chore: merge main by @jonathanpwang in #1759
• feat: generalize E3 with generic RecordArena by @jonathanpwang in #1761
• chore: add execution insn/s logging by @jonathanpwang in #1764
• fix(new-execution): prevent segmentation in single segment executor by @shuklaayush in #1766
• fix(new-execution): use StdRng for deterministic execution by @shuklaayush in #1769
• perf(new-execution): use page-based approach for merkle tree metering by @shuklaayush in #1770
• fix(ci): make codspeed instrumentation dispatch only by @shuklaayush in #1771
• feat: RecordArena implementation on DenseRecordArena for variable length records by @arayikhalatyan in #1775
• chore(ci): fix REF_HASH calculation by @jonathanpwang in #1776
• feat(sdk): derive Debug traits in config by @Qumeric in #1777
• chore: make testing ProgramDummyAir mod public by @stephenh-axiom-xyz in #1781
• chore: make RANGE_CHECKER_BUS pub by @stephenh-axiom-xyz in #1783
• chore: add 'allocated' method to DenseRecordArena by @arayikhalatyan in #1785
• chore: fix last chore by @arayikhalatyan in #1786
• refactor(new-execution): make ExecutionCtrls stateless by @shuklaayush in #1789
• fix: proper memory access functions in execute_e1_impl in the native poseidon chip by @Golovanov399 in #1790
• chore: use tracing spans for metrics by @jonathanpwang in #1791
• chore: make memory volatile and persistent boundary chips pub by @stephenh-axiom-xyz in #1792
• refactor: use PagedVec for TracingMemory metadata storage by @jonathanpwang in #1793
• feat(new-execution): change default PAGE_BITS value in e2 to 6 by @shuklaayush in #1794
• fix(new-execution): no segmentation in single segment executor by @shuklaayush in #1796
• ci(new-execution): run codspeed instrumentation on push by @shuklaayush in #1797
• feat(new-execution): ignore register addr space for memory ops by @shuklaayush in #1798
• fix(new-execution): remove duplicate assignment by @shuklaayush in #1799
• fix: account for E1 / E2 execution in metrics summary by @yi-sun in #1800
• fix(new-execution): disable loads from address space 1 by @shuklaayush in #1802
• fix(new-execution): adapter offset should be boundary_idx + 1 by @shuklaayush in #1803
• chore(ci): fix the instance type for codspeed benches by @jonathanpwang in #1811
• chore: update stark-backend commit by @jonathanpwang in #1812
• feat: extract_layout implementation for native Poseidon2 by @stephenh-axiom-xyz in #1813
• chore: make plonky3 nightly-features optional by @jonathanpwang in #1818
• feat: modify fri records + tests by @arayikhalatyan in #1819
• fix: native Poseidon2 record size should be in bytes instead of u32 by @stephenh-axiom-xyz in #1821
• refactor(new-execution): optimize E1/E2 implementation by @nyunyunyunyu in #1827
• fix(openvm-prof): replace unwraps with better error strings by @shuklaayush in #1833
• feat: update architecture for generic ProverBackends by @jonathanpwang in #1836
• feat: use cached max trace heights in leaf/internal aggregation by @stephenh-axiom-xyz in #1839
• fix(new-execution): add register contribtions on reset_segment by @shuklaayush in #1843
• chore: merge main by @jonathanpwang in #1844
• feat: Add pubs needed for gpu by @Golovanov399 in #1860
• feat: RecordSeeker::get_aligned_record_size by @arayikhalatyan in #1863
• chore: General Sys phantom by @nyunyunyunyu in #1867
• fix(new-execution): don't pass total_widths to execute_metered by @shuklaayush in #1868
• feat: public sha2 trace by @matejav in #1881
• feat(new-execution): optimize algebra extension e1/e2 execution by @shuklaayush in #1882
• fix(new-execution): use smaller fib number in verify_stark test by @shuklaayush in #1893
• chore: move record arena implementation to separate file by @jonathanpwang in #1894
• fix(new-execution): assign bls12_381 output properly by @shuklaayush in #1895
• chore: Optimistic E3 Execution for Poseidon2 Chip by @nyunyunyunyu in #1896
• perf: remove step from Program by @jonathanpwang in #1897
• chore: use explicit Result<_, ExecutionError> and pre_compute* returns StaticProgramError by @jonathanpwang in #1898
• chore(perf): use constant for address space in tracing_read when possible by @jonathanpwang in #1899
• fix(new-execution): replace segmentation strategy with segmentation limits by @shuklaayush in #1901
• perf(new-execution): use unchecked ops in e2 by @shuklaayush in #1902
• feat: add host configurable memory cell type to MemoryConfig by @jonathanpwang in #1903
• fix: native FriReducedOpeningRecord size calculation by @teokitan in #1905
• chore: make SdkVmConfig::to_inner pub by @jonathanpwang in #1906
• chore: PairingProverExt is vacuous by @jonathanpwang in #1907
• chore: clean up benchmarks by @jonathanpwang in #1908
• fix(metrics): cycle tracker spans recorded only with "perf-metrics" by @jonathanpwang in #1910
• chore(tracing): trace individual AIR tracegen by @jonathanpwang in #1911
• feat: generate_app_proof always verifies segment proofs by @jonathanpwang in #1912
• chore: remove DenseRecordArena::current_size by @jonathanpwang in #1913
• feat: execute_metered returns final memory by @jonathanpwang in #1914
• feat: add "stark-debug" feature by @jonathanpwang in #1915
• fix(docs): update isa spec to specify alignment requirements by @shuklaayush in #1917
• fix(new-execution): always inline execute_impl by @shuklaayush in #1919
• fix(...

No circuit constraints or verifying keys were changed in this release.

A substantial refactor has been done to the guest libraries to separate the low level Rust bindings for OpenVM intrinsic instructions from the higher level user interface. For each VM extension, the openvm-$name-guest crate is now a primitives library containing only the Rust bindings for the intrinsic instructions and essential logic related to the extension (e.g., ECDSA signature verification). We introduce new guest libraries as standalone Rust crates which provide the high-level interfaces guest programs should use to interact with the associated VM extensions.

We also add a new guest library openvm-verify-stark which provides functionality to verify OpenVM STARK proofs from Rust programs using acceleration from the native field arithmetic VM extension.

Users are advised to switch to using the new guest libraries.

What's Changed

• chore(ecc-guest): remove k256, p256 modules and fix guest-libs to allow patching (#1708) (Jonathan Wang)
• feat: optimize Group::is_identity (#1709) (Avaneesh-axiom)
• perf(ecc-guest): optimize setup handling in ecc guest bindings (#1706) (Jonathan Wang)
• perf: update stark-backend commit (Jonathan Wang)
• feat: Patch ecdsa VerifyingKey::recover_from_prehash to skip message verification (#1691) (Avaneesh-axiom)
• refactor: guest bindings (#1613) (Jonathan Wang)
• refactor: guest bindings (#1613) (Avaneesh-axiom)
• feat: ensure all CLI commit outputs are in hex + fix verify STARK (#1697) (stephenh-axiom-xyz)
• feat: CLI prove use bin name for output path + e2e stark verify (#1675) (stephenh-axiom-xyz)
• feat: init command for cargo openvm (#1670) (stephenh-axiom-xyz)
• feat: commit command for cargo openvm (#1667) (stephenh-axiom-xyz)
• feat: cargo CLI update target directory (#1662) (stephenh-axiom-xyz)
• chore: add entry point to book examples without openvm::init!() (#1663) (stephenh-axiom-xyz)
• docs: add CHANGELOG.md (#1660) (HrikB)
• fix: verifier read dir (#1658) (HrikB)
• refactor: CLI Build & Setup (#1649) (Xinding Wei)
• feat: helper functions for verify_openvm_stark (#1631) (Xinding Wei)
• feat: Macro define_verify_openvm_stark (#1620) (Xinding Wei)
• feat: Root Verifier ASM (#1615) (Xinding Wei)
• feat: Add Rv32HintLoadByKey (#1606) (Xinding Wei)
• feat: Add e2e stark proof support (#1597) (Xinding Wei)
• feat: openvm build can build multiple targets + additional cargo options (#1647) (stephenh-axiom-xyz)
• chore: update getrandom to v0.3 in openvm lib (#1635) (Jonathan Wang)
• feat: Lazily call setup function for moduli and curves on first use (#1603) (Avaneesh-axiom)
• feat: Build script for calling init macros (#1596) (Avaneesh-axiom)
• refactor: ELF and Program (#1638) (Xinding Wei)
• chore(ci): patch examples to use local crates by @jonathanpwang in #1712
• chore: change to dual license by @yi-sun in #1713
• fix(sw-macro): host set_up_once undefined by @jonathanpwang in #1717
• docs: Add comment explaining the is_identity optimization by @Avaneesh-axiom in #1716
• fix(cli): generate openvm_init.rs before building by @jonathanpwang in #1721
• chore: macro crate should use workspace version by @jonathanpwang in #1723
• docs: update division typo in ISA.md by @stephenh-axiom-xyz in #1726
• chore(ecc-guest): placeholder trait and function implementations for patch compilation by @jonathanpwang in #1720
• chore: fix typos and links by @jonathanpwang in #1730
• feat: Add feature gating for halo2 imports in SDK and CLI crates by @devin-ai-integration[bot] in #1731
• fix: use seed for deterministic re-execution by @jonathanpwang in #1741
• docs: Add VERSIONING.md documentation by @devin-ai-integration[bot] in #1735
• fix(ecdsa): match upstream behavior to error on overflowing add by @jonathanpwang in #1742
• fix(ecdsa): validate public key is not identity by @jonathanpwang in #1743
• fix(k256): ecdsa verify needs custom hook by @jonathanpwang in #1744
• fix(ecc): checked from_be_bytes by @jonathanpwang in #1746
• fix: from_sec1_bytes should reject identity by @jonathanpwang in #1747
• fix: Elliptic curve point decompression doesn't check if y = 0 by @Avaneesh-axiom in #1768
• fix: verify stark test by @HrikB in #1779
• chore: update stark-backend to v1.1.1 tag by @jonathanpwang in #1784
• docs: Add README.md for verify_stark by @nyunyunyunyu in #1774
• chore: run verify-stark tests in ci by @HrikB in #1788
• feat(toolchain): support getrandom v0.2 and v0.3 simultaneously by @jonathanpwang in #1795
• ci: add versioning compatibility workflow for INT-4160 by @devin-ai-integration[bot] in #1753
• fix: getrandom pulling in std by @jonathanpwang in #1804
• feat(cli): update version command and add version tag to init by @jonathanpwang in #1820
• docs: guest libs by @HrikB in #1805
• docs(book): add docs on init! macro by @jonathanpwang in #1837
• docs(book): clarify read-only reflection by @jonathanpwang in #1838
• fix(test): use local openvm for testing cargo openvm init by @jonathanpwang in #1842
• fix(test): CLI init test patching not triggered by @jonathanpwang in #1846
• audit: add cantina report for v1.3.0 by @jonathanpwang in #1855
• chore: bump workspace version to v1.3.0 by @jonathanpwang in #1854
• docs: update CHANGELOG with breaking changes since v1.2.0 by @devin-ai-integration[bot] in #1732
• fix(sdk): aggregate_leaf_proofs should always generate an internal proof by @jonathanpwang in #1866
• chore: update book for v1.3.0 release by @jonathanpwang in #1865

Full Changelog: v1.2.0...v1.3.0