Release Notes

Security

Fixed an inactive invoice subscription not removed from invoice registry. When an invoice subscription is created and canceled immediately, it could be left uncleaned due to the cancel signal is processed before the creation. It is now properly handled by moving creation before deletion.
When the block height+delta specified by a network message is greater than the gossiper's best height, it will be considered as premature and ignored. These premature messages are now saved into a cache and processed once the height has reached.
Fixed failure to limit our number of hop hints in private invoices. When a private invoice is created, and the node had > 20 (our hop hint limit) private channels with inbound > invoice amount, hop hint selection would add too many hop hints. When a node had many channels meeting this criteria, it could result in an "invoice too large" error when creating invoices. Hints are now properly limited to our maximum of 20.

Add value to the field remote_balance in pending_force_closing_channels under pendingchannels whereas before was empty(zero).
Add dev only RPC subserver and the devrpc.ImportGraph call
Extend the HTLC interceptor API to provide more control over failure messages. With this change, it allows encrypted failure messages to be returned to the sender. Additionally it is possible to signal a malformed htlc.

Refactored itest to better manage contexts inside integration tests.
Fix itest not picking up local config file or creating directories in home dir of the user.
A refactor of SelectHopHints allows code external to lnd to call the function, where previously it would require access to lnd's internals.
rpc-check fails if it finds any changes including new and deleted files.
The golangci-lint package was updated and new linters were enabled. Note to developers: please make sure you delete the old version of golangci-lint in your $GOPATH/bin directory. make lint does not automatically replace it with the new version if the binary already exists!