microsoft/CCF ccf-7.0.4

7.0.4

Repository: microsoft/CCF

Tag: ccf-7.0.4

Published: 2026-06-05T18:38:12Z

Prerelease: no

Release notes:

Added

• Added verify_uvm_attestation_and_endorsements as a release artifact alongside the logging sample app (#7920).

Changed

• JSON parsing can now reject inputs whose object/array nesting depth exceeds a certain value, defaulting to 64 levels and overridable per call site via ccf::parse_json_safe's max_depth parameter (#7896).
• NetworkIdentitySubsystem retries when walking the previous-identity endorsement chain are now bounded by a new optional identity_history_fetch node startup config (max_attempts, retry_interval). On exhaustion the subsystem transitions to a new terminal FetchStatus::Partial: the validated suffix of the chain is still served, but historical receipts for seqnos below it fail with an error. Both the chain-extension retries and the pre-bootstrap waits (for the node to join the network, for the service-create txid, and for the first endorsement entry) now poll at retry_interval (default 100ms); the pre-bootstrap polling interval was previously hardcoded to 1s (#7922).

Deprecated

• Accessing ledger-signature names (table names, exception classes) via ccf.ledger now emits a DeprecationWarning; import them from ccf.signatures instead (#7904).

Fixed

• ccf.ledger MERKLE verification level now also verifies COSE-only ledgers (previously a silent no-op) (#7904).
• Nodes started in recovery or join mode from a snapshot more recent than the latest ledger file now correctly resume writing from the snapshot boundary (#7901).