Midnight has released Node 1.0.3, a security focused update that the ecosystem has been watching closely. It is now available across all of Midnight's network environments, according to the Midnight Foundation.

What Is in the Update

Node 1.0.3 is a security patch, meaning an update aimed at fixing weaknesses rather than adding flashy new features. Per the Foundation, it:

  • Addresses a security advisory in an npm dependency. npm is a popular library of reusable JavaScript code, and a dependency is outside code that a program relies on.

  • Removes debugging utilities, which are tools used during development that should not be left in production software.

  • Updates the logic for importing historical blocks, which helps nodes correctly catch up on past blockchain data.

Validator operators were told to upgrade their node software before applying runtime updates. A validator is a node that helps produce and confirm blocks.

Why People Are Excited

This release has been widely described as one of the final steps before permissionless smart contracts on Midnight. Today, deploying a contract to mainnet has required a security review on Preprod first. Permissionless deployment would let any developer publish directly to mainnet, much like launching an app on the open web.

Developer Tools Keep Improving

Separately, version 2.10 of midnight-js was released this month. midnight-js is the core JavaScript library developers use to connect their apps to the Midnight network.

What Comes Next

With security housekeeping done, attention now turns to opening up mainnet to all builders. If that happens, it could mark the moment Midnight shifts from a carefully managed launch into a fully open platform.