release: CHANGELOG and version bumps for v26.06.6
What changed, and why it matters
This commit is purely a release housekeeping change: it updates version strings from v26.06.2 to v26.06.6 and adds a CHANGELOG entry for the new release. The CHANGELOG mentions two fixes that were already made in earlier commits (a Python build fix and rejecting reused channel funding outpoints), but this commit itself does not contain any code changes that fix a security issue. It is not a security patch.
No action needed for this commit. Review the referenced pull requests #9325 and #9318 separately if assessing the actual fixes.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff only touches .version, CHANGELOG.md, version strings in three Python packages, pyproject.toml version fields, tools/reckless, and uv.lock. There are no functional code changes. The CHANGELOG notes two prior fixes: updating pyln-proto’s coincurve dependency and rejecting channels that reuse an existing funding outpoint. Those fixes are not present in this diff, so this commit cannot be evaluated as a security patch on its own.
Changed components
Inspect captured patch +24 / −12
diff --git a/.version b/.version
index 85ac303f..492142d0 100644
--- a/.version
+++ b/.version
@@ -1 +1 @@
-v26.06.2
+v26.06.6
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2226f733..0dd85a1e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,7 +4,19 @@ All notable changes to this project will be documented in this file.
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
-## [26.06.2] - 2026-06-24: "Qantum-Resistant Lightning Channel II"
+## [26.06.6] - 2026-07-20: "Quantum-Resistant Lightning Channel III"
+
+v26.06.3, v26.06.4, and v26.06.5 had issues during publishing with the pypi releases and were deleted.
+
+### Fixed
+
+ - update pyln-proto's coincurve to a v21 fork to fix Python build environments ([#9325])
+ - reject a channel that reuses an existing funding outpoint ([#9318])
+
+[#9297]: https://github.com/ElementsProject/lightning/pull/9325
+[#9318]: https://github.com/ElementsProject/lightning/pull/9318
+
+## [26.06.2] - 2026-06-29: "Quantum-Resistant Lightning Channel II"
This point release if recommended for all minimal OS setups, including docker images, that have no root certificates for TLS installed.
diff --git a/contrib/pyln-client/pyln/client/__init__.py b/contrib/pyln-client/pyln/client/__init__.py
index 096ba007..53e5a6cc 100644
--- a/contrib/pyln-client/pyln/client/__init__.py
+++ b/contrib/pyln-client/pyln/client/__init__.py
@@ -4,7 +4,7 @@ from .gossmap import Gossmap, GossmapNode, GossmapChannel, GossmapHalfchannel, G
from .gossmapstats import GossmapStats
from .version import NodeVersion
-__version__ = "v26.06.2"
+__version__ = "v26.06.6"
__all__ = [
"LightningRpc",
diff --git a/contrib/pyln-client/pyproject.toml b/contrib/pyln-client/pyproject.toml
index 115adefe..47858d82 100644
--- a/contrib/pyln-client/pyproject.toml
+++ b/contrib/pyln-client/pyproject.toml
@@ -1,6 +1,6 @@
[project]
name = "pyln-client"
-version = "v26.06.2"
+version = "v26.06.6"
description = "Client library and plugin library for Core Lightning"
authors = [{ name = "Christian Decker", email = "decker.christian@gmail.com" }]
license = { text = "BSD-MIT" }
diff --git a/contrib/pyln-proto/pyln/proto/__init__.py b/contrib/pyln-proto/pyln/proto/__init__.py
index 376ef611..1bf1100f 100644
--- a/contrib/pyln-proto/pyln/proto/__init__.py
+++ b/contrib/pyln-proto/pyln/proto/__init__.py
@@ -4,7 +4,7 @@ from .invoice import Invoice
from .onion import OnionPayload, TlvPayload, LegacyOnionPayload
from .wire import LightningConnection, LightningServerSocket
-__version__ = "v26.06.2"
+__version__ = "v26.06.6"
__all__ = [
"Invoice",
diff --git a/contrib/pyln-proto/pyproject.toml b/contrib/pyln-proto/pyproject.toml
index 19145ef0..d7bf2d7e 100644
--- a/contrib/pyln-proto/pyproject.toml
+++ b/contrib/pyln-proto/pyproject.toml
@@ -1,6 +1,6 @@
[project]
name = "pyln-proto"
-version = "v26.06.2"
+version = "v26.06.6"
description = "This package implements some of the Lightning Network protocol in pure python. It is intended for protocol testing and some minor tooling only. It is not deemed secure enough to handle any amount of real funds (you have been warned!)."
authors = [
{name = "Christian Decker", email = "decker.christian@gmail.com"}
diff --git a/contrib/pyln-testing/pyln/testing/__init__.py b/contrib/pyln-testing/pyln/testing/__init__.py
index b6057636..20304d71 100644
--- a/contrib/pyln-testing/pyln/testing/__init__.py
+++ b/contrib/pyln-testing/pyln/testing/__init__.py
@@ -1,4 +1,4 @@
-__version__ = "v26.06.2"
+__version__ = "v26.06.6"
__all__ = [
"__version__",
diff --git a/contrib/pyln-testing/pyproject.toml b/contrib/pyln-testing/pyproject.toml
index e6b1a0cc..03af1b3b 100644
--- a/contrib/pyln-testing/pyproject.toml
+++ b/contrib/pyln-testing/pyproject.toml
@@ -1,6 +1,6 @@
[project]
name = "pyln-testing"
-version = "v26.06.2"
+version = "v26.06.6"
description = "Test your Core Lightning integration, plugins or whatever you want"
authors = [{ name = "Christian Decker", email = "decker.christian@gmail.com" }]
license = { text = "BSD-MIT" }
diff --git a/tools/reckless b/tools/reckless
index 450c2f4b..62bfe625 100755
--- a/tools/reckless
+++ b/tools/reckless
@@ -21,7 +21,7 @@ from urllib.error import HTTPError
import venv
-__VERSION__ = 'v26.06.2'
+__VERSION__ = 'v26.06.6'
logging.basicConfig(
level=logging.INFO,
diff --git a/uv.lock b/uv.lock
index 9157d9b9..f764e3e3 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1403,7 +1403,7 @@ dev = [{ name = "pyln-proto", editable = "contrib/pyln-proto" }]
[[package]]
name = "pyln-client"
-version = "26.6.2"
+version = "26.6.6"
source = { editable = "contrib/pyln-client" }
dependencies = [
{ name = "pyln-bolt7" },
@@ -1461,7 +1461,7 @@ dev = [
[[package]]
name = "pyln-proto"
-version = "26.6.2"
+version = "26.6.6"
source = { editable = "contrib/pyln-proto" }
dependencies = [
{ name = "base58" },
@@ -1490,7 +1490,7 @@ dev = [{ name = "pytest", specifier = ">=8.0.0" }]
[[package]]
name = "pyln-testing"
-version = "26.6.2"
+version = "26.6.6"
source = { editable = "contrib/pyln-testing" }
dependencies = [
{ name = "cheroot" },
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.