fix: update Lightning dependencies for security fixes

CHANGELOG.md

@@ -1,7 +1,8 @@
-# 0.7.0-rc.71 (Synonym Fork)
+# 0.7.0-rc.72 (Synonym Fork)
 
 ## Bug Fixes
 
+- Bump `lightning`, `lightning-liquidity` and `lightning-transaction-sync` to 0.2.7, which fixes a counterparty-exploitable funds-theft vulnerability (lightningdevkit/rust-lightning#5057) and an Electrum sync denial of service (lightningdevkit/rust-lightning#4867).
 - Prevent native SIGABRT crashes when stopping and rebuilding the node by making runtime teardown deterministic.
 - Keep exported payment and liquidity handles from calling into a shutting-down runtime, refuse restart while detached work is still live, and stop Electrum confirm gating from blocking or panicking shutdown.
 - Add keep consumer rules for JNA types UniFFI needs under R8.

Cargo.toml

@@ -4,7 +4,7 @@ exclude = ["bindings/uniffi-bindgen"]
 
 [package]
 name = "ldk-node"
-version = "0.7.0-rc.71"
+version = "0.7.0-rc.72"
 authors = ["Elias Rohrer <dev@tnull.de>"]
 homepage = "https://lightningdevkit.org/"
 license = "MIT OR Apache-2.0"
@@ -33,16 +33,16 @@ panic = 'abort'     # Abort on panic
 default = []
 
 [dependencies]
-lightning = { version = "0.2.0", features = ["std"] }
+lightning = { version = "0.2.7", features = ["std"] }
 lightning-types = { version = "0.3.0" }
 lightning-invoice = { version = "0.34.0", features = ["std"] }
 lightning-net-tokio = { version = "0.2.0" }
 lightning-persister = { version = "0.2.0", features = ["tokio"] }
 lightning-background-processor = { version = "0.2.0" }
 lightning-rapid-gossip-sync = { version = "0.2.0" }
 lightning-block-sync = { version = "0.2.0", features = ["rest-client", "rpc-client", "tokio"] }
-lightning-transaction-sync = { version = "0.2.0", features = ["esplora-async-https", "time", "electrum-rustls-ring"] }
-lightning-liquidity = { version = "0.2.0", features = ["std"] }
+lightning-transaction-sync = { version = "0.2.7", features = ["esplora-async-https", "time", "electrum-rustls-ring"] }
+lightning-liquidity = { version = "0.2.7", features = ["std"] }
 lightning-macros = { version = "0.2.0" }
 
 bdk_chain = { version = "0.23.0", default-features = false, features = ["std"] }

Package.swift

@@ -3,8 +3,8 @@
 
 import PackageDescription
 
-let tag = "v0.7.0-rc.71"
-let checksum = "56bdacc3388c997a55af9da94758e1332ad4296fcf5369c2dc9184ec9d355258"
+let tag = "v0.7.0-rc.72"
+let checksum = "c9e939298419e21198a30fba3ff0d2dff73854a2cf44808d33c1090d29d54a1c"
 let url = "https://github.com/synonymdev/ldk-node/releases/download/\(tag)/LDKNodeFFI.xcframework.zip"
 
 let package = Package(

bindings/kotlin/ldk-node-android/gradle.properties

@@ -3,4 +3,4 @@ android.useAndroidX=true
 android.enableJetifier=true
 kotlin.code.style=official
 group=com.synonym
-version=0.7.0-rc.71
+version=0.7.0-rc.72

bindings/kotlin/ldk-node-jvm/gradle.properties

@@ -1,4 +1,4 @@
 org.gradle.jvmargs=-Xmx1536m
 kotlin.code.style=official
 group=com.synonym
-version=0.7.0-rc.71
+version=0.7.0-rc.72

bindings/python/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "ldk_node"
-version = "0.7.0-rc.71"
+version = "0.7.0-rc.72"
 authors = [
   { name="Elias Rohrer", email="dev@tnull.de" },
 ]