Summary
TL;DR: The Rootstock Collective Foundation is pleased to announce V12.0, a milestone release that introduces product-wide analytics instrumentation, strengthens session security, and delivers meaningful reliability improvements to the rewards and state-sync experience. Building on V11.2 — which refreshed the visual identity and expanded proposal milestone support — V12.0 focuses on tightening the authentication lifecycle, and eliminating the error showing “0” values on reward distributions. To access the latest version, simply refresh your browser or visit https://app.rootstockcollective.xyz !
Community Benefits
Product-wide analytics with privacy in mind — V12.0 rolls out PostHog instrumentation across the dApp’s most important flows: staking, unstaking, backing, rewards claiming, delegation, proposal submission, and voting. Instrumentation is intentionally narrowed to failure events only so the Foundation can spot friction quickly without collecting unnecessary usage data.
Stronger session hygiene on wallet disconnect — Signing out or disconnecting wallet now fully clears the http-only authentication cookie on the server side, not just the local token. Previously a stale credential could linger for up to 24 hours after disconnecting and continuing authenticating requests. Every sign-out path now revokes it immediately.
No more “0” flashes after reward distribution — Two long-standing sources of momentarily-empty reward values are now resolved:
- The state-sync health-check no longer discards cached rewards and ABI metrics when it briefly flaps to unhealthy — cached data is preserved and the error boundary is only shown when there is genuinely nothing to display.
- A subgraph-level fix (v3.1.2, deployed to dao-qa, rc-mainnet, rc-testnet, and mainnet) prevents the recurring “0” value that occasionally appeared for a couple of cycles right after rewards were distributed.
Faster navigation to Active Builders — The Active Builders count on the Collective Rewards view is now clickable and scrolls directly to the builders table, and the “Total active Builders” label on the Builders page is aligned to the same size and interaction — a small polish that shortens a common navigation path.
Security hardening — The hono dependency has been upgraded to `4.12.27` to patch a CORS advisory (GHSA-88fw-hqm2-52qc) pulled in transitively via WalletConnect’s AppKit. On the state-sync side, TheGraph API key exposure has been closed and database SSL configuration now fails loudly when a certificate is missing rather than silently degrading.
Under-the-hood reliability (state-sync v1.6.2) — The state-sync service now enforces a safe Postgres batch-size limit that prevents parameter-count overflow, and adds the dao-qa subgraph deployment id alongside the existing mainnet and testnet targets —the same subgraph release that resolves the “0” reward flash mentioned above.
Details
A link to the full set of changes can be found here:
For those already enjoying the dApp, please proceed to the updated version and do not hesitate to leave your feedback on socials or suggest further Developer improvements through the Discord channel, Telegram or RootstockCollective Governance Forum.