chore(release): finalize changelogs and end-of-support height for v6.2.1 (#11055)

Author: upbqdn

CHANGELOG.md

@@ -5,7 +5,7 @@ All notable changes to Zebra are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org).
 
-## [Unreleased]
+## [Zebra 6.2.1](https://github.com/ZcashFoundation/zebra/releases/tag/v6.2.1) - 2026-07-22
 
 ### Changed
 
@@ -24,6 +24,14 @@ and this project adheres to [Semantic Versioning](https://semver.org).
   [zcash/zips#1321](https://github.com/zcash/zips/issues/1321))
   ([#10873](https://github.com/ZcashFoundation/zebra/pull/10873))
 
+### Security
+
+- Allow chain synchronization to immediately retry an honest block body after rejecting a body
+  with the same header hash, without waiting for a child block to trigger cleanup.
+- Mitigate a peer-driven CPU-exhaustion vector on nodes with NU6.3 (Ironwood) active: reject
+  underpaying and structurally invalid shielded mempool transactions before their expensive proof
+  verification, and disconnect peers that send transactions with invalid shielded proofs.
+
 ## [Zebra 6.2.0](https://github.com/ZcashFoundation/zebra/releases/tag/v6.2.0) - 2026-07-17
 
 ### Added

zebra-consensus/CHANGELOG.md

@@ -5,13 +5,30 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [Unreleased]
+## [13.0.0] - 2026-07-22
 
-### Breaking Changes
+### Added
+
+- `error::TransactionError`:
+  - `Halo2VerificationFailed`
+  - `SaplingVerificationFailed`
+
+### Changed
+
+- `transaction::Verifier::check_maturity_height` is now private and takes `tx`, `height`,
+  `network`, and `spent_utxos` directly instead of `&Request`
+  ([#10843](https://github.com/ZcashFoundation/zebra/pull/10843)).
+- `zebra-state` dependency bumped to `11.1.1`.
+
+### Security
 
-- `transaction::Verifier::check_maturity_height` is now private and takes
-  `tx`, `height`, `network`, and `spent_utxos` directly instead of `&Request`.
-  ([#10843](https://github.com/ZcashFoundation/zebra/pull/10843))
+- Check the ZIP-317 mempool rules before verifying a transaction's shielded proofs, so an
+  underpaying transaction is rejected before the expensive cryptographic checks run
+  ([#11053](https://github.com/ZcashFoundation/zebra/pull/11053)).
+- Score failed shielded proof and signature verifications, and non-canonical Orchard and
+  Ironwood proof sizes, as mempool misbehaviour, so a peer sending invalid shielded transactions
+  is disconnected instead of repeatedly forcing their verification
+  ([#11054](https://github.com/ZcashFoundation/zebra/pull/11054)).
 
 ## [12.0.1] - 2026-07-17
 

zebra-rpc/CHANGELOG.md

@@ -5,6 +5,15 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [13.0.0] - 2026-07-22
+
+### Changed
+
+- Requires `zebra-consensus` 13.0.0. `zebra-consensus`'s `error::TransactionError` appears in this
+  crate's public API (`TransactionTemplate::new_coinbase`), so its new variants are a breaking
+  change here too.
+- `zebra-state` dependency bumped to `11.1.1`.
+
 ## [12.1.0] - 2026-07-17
 
 ### Added

zebra-state/CHANGELOG.md

@@ -5,7 +5,7 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [Unreleased]
+## [11.1.1] - 2026-07-22
 
 ### Security
 

zebra-utils/CHANGELOG.md

@@ -5,6 +5,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [9.1.3] - 2026-07-22
+
+### Changed
+
+- `zebra-rpc` dependency bumped to `13.0.0`.
+
 ## [9.1.2] - 2026-07-17
 
 ### Changed

zebrad/src/components/sync/end_of_support.rs

@@ -13,7 +13,7 @@ use zebra_chain::{
 use crate::application::release_version;
 
 /// The estimated height that this release will be published.
-pub const ESTIMATED_RELEASE_HEIGHT: u32 = 3_417_000;
+pub const ESTIMATED_RELEASE_HEIGHT: u32 = 3_422_000;
 
 /// The maximum number of days after `ESTIMATED_RELEASE_HEIGHT` where a Zebra server will run
 /// without halting.