Release of Canton 3.5.18

Canton 3.5.18 has been released on September 17, 2026.

Summary

This is a maintenace release that brings improvements to CantonBFT, LSU, and other minor improvements.

Batch fetching: retry patience defaults are now shorter to avoid long delays in case a batch is not retrieved timely.
Improved flow control defaults to avoid slowing down catch-up.
Fixed spurious “Detected identity equivocation when trying to associate P2P endpoint” warnings and security.noncompliant metric marks: a P2P endpoint pointing back to the node itself (a misconfiguration) is now reported as such, without marking a security violation, and its connection is shut down instead of being retried indefinitely.
Improved performance during catch-up by making batch validation asynchronous
Multicasted messages are now only serialized once in total, rather than once per peer (per message)

Ensure a node can process announcement for an LSU to protocol version 36. This fixes a bug that makes the node unable to process an LSU announcement with target synchronizer on protocol version 36.
Topology purging is now enabled by default to reduce storage duplication after LSUs.

Added runbook for reinitializing commitments to a recent point in time without reading or processing past changes.
Bumped the da-base-image docker image to 1.0.14 to address security vulnerabilities in grpc health probe.

The following Canton protocol versions are supported:

Dependency	Version
Canton protocol versions	34, 35

Canton has been tested against the following versions of its dependencies:

Dependency	Version
Java Runtime	OpenJDK 64-Bit Server VM (build 21.0.12+2-nixos, mixed mode, sharing)
Postgres	Recommended: PostgreSQL 17.10 (Debian 17.10-1.pgdg13+1) – Also tested: PostgreSQL 14.24 (Debian 14.24-1.pgdg13+2), PostgreSQL 15.19 (Debian 15.19-1.pgdg13+2), PostgreSQL 16.15 (Debian 16.15-1.pgdg13+2), PostgreSQL 18.6 (Debian 18.6-1.pgdg13+2)