Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

build(deps): bump the go_modules group across 2 directories with 9 updates #1259

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

build(deps): bump the go_modules group across 2 directories with 9 updates #1259

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 20, 2025

Bumps the go_modules group with 4 updates in the / directory: cosmossdk.io/x/tx, github.com/cometbft/cometbft, github.com/CosmWasm/wasmvm/v2 and github.com/docker/docker.
Bumps the go_modules group with 4 updates in the /tests/slinky directory: cosmossdk.io/x/tx, github.com/cometbft/cometbft, github.com/cosmos/cosmos-sdk and github.com/ethereum/go-ethereum.

Updates cosmossdk.io/x/tx from 0.13.4 to 1.1.0

Release notes

Sourced from cosmossdk.io/x/tx's releases.

Cosmovisor v1.1.0

Release Notes

New execution model

With this release we are shifting to a new CLI design:

  • in the past, Cosmovisor was designed to act as a wrapper for a Cosmos App. An admin could link it and use it instead of the Cosmos App. When running it will pass all options and configuration parameters to the app. Hence the only way to configure the Cosmovisor was through environment variables.
  • now, we are moving to a more traditional model, where Cosmovisor has it's own command set and is a true supervisor.

New commands have been added:

  • run will start the Cosmos App and pass remaining arguments to the app (similar to npm run)
  • help will display Cosmovisor help
  • version will display both Cosmovisor and the associated app version.

The existing way of starting an app with Cosmovisor has been deprecated (cosmovisor [app params]) and will be removed in the future version. Please use cosmovisor run [app pararms] instead.

New Features

We added a new configuration option: DAEMON_BACKUP_DIR (as env variable). When set, Cosmovisor will create backup the app data backup in that directory (instead of using the app home directory) before running the update. See the README file for more details.

Bug Fixes

  • Fixed cosmovisor version output when installed using 'go install github.com/cosmos/cosmos-sdk/cosmovisor/cmd/[email protected]'.

Changelog

For more details, please see the CHANGELOG.

DB v1.0.0-beta.1

github.com/cosmos/cosmos-sdk/db (cosmos-sdk/db here an after) is a module in the Cosmos SDK repository. It is used in store/v2 instead of tendermint/tm-db which is now deprecated. cosmos-sdk/db extends the tendermint/tm-db interface. however, it only supports BaggerDB and RocksDB (the databases we tested, which provide snapshot functionality necessary for store/v2 and ADR-040 implementation).

v0.52.0-rc.2

Cosmos SDK v0.52.0-rc.2 Release Notes

This second release canditate include bug fixes found during integration. Additionally, it bumps the SDK dependencies to their final release:

  • cosmossdk.io/core v1.0.0
  • cosmossdk.io/collection v1.0.0
  • cosmossdk.io/schema v1.0.0
  • cosmossdk.io/x/tx v1.0.0

Modules remained stable and nothing has changed since their first release candidate. We encourage chains to already start integrating with this release candidate as APIs are stable.

Cosmos SDK Olympus is the first totally modular (as in package) release of the Cosmos SDK. Many components have been extracted in their own modules. Refer to the version matrix to understand what it means.

A final release is expected in the coming days.

... (truncated)

Changelog

Sourced from cosmossdk.io/x/tx's changelog.

Changelog

[Unreleased]

Every module contains its own CHANGELOG.md. Please refer to the module you are interested in.

Features

  • (baseapp) #20291 Simulate nested messages.
  • (client/keys) #21829 Add support for importing hex key using standard input.
  • (x/auth/ante) #23128 Allow custom verifyIsOnCurve when validate tx for public key like ethsecp256k1.
  • (x/auth/ante) #23283 Allow ed25519 transaction signatures.

... (truncated)

Commits
  • be5e3aa feat(log): extend logger options (#15956)
  • 851e9e8 docs: update roadmap for q2 (#15952)
  • 91278f6 refactor(x/authz)!: Use KVStoreService, context.Context and return errors ins...
  • 26faee9 refactor: bcrypt key derivation to aead (#509) (#15817)
  • 428e19f refactor(x/distribution)!: Use KVStoreService, context.Context and return err...
  • a6ea094 ci: skip fix registration for linting (#15965)
  • 00b78fa refactor(x/auth): v2 adaptable tx instead of double decode (#15910)
  • 1179285 feat(hubl): cache bech32 prefix (#15954)
  • 6a8251a build(deps): bump cometbft to v0.37.1 (#15955)
  • 6dfe735 refactor!: use KVStoreService and context.Context in x/bank (#15891)
  • Additional commits viewable in compare view

Updates github.com/cometbft/cometbft from 0.38.15 to 0.38.17

Release notes

Sourced from github.com/cometbft/cometbft's releases.

v0.38.17

See the CHANGELOG for this release.

v0.38.16

See the CHANGELOG for this release.

Changelog

Sourced from github.com/cometbft/cometbft's changelog.

v0.38.17

February 3, 2025

This release fixes two security issues (ASA-2025-001, ASA-2025-002). Users are encouraged to upgrade as soon as possible.

BUG FIXES

  • [blocksync] Ban peer if it reports height lower than what was previously reported (ASA-2025-001)
  • [types] Check that Part.Index equals Part.Proof.Index (ASA-2025-001)

DEPENDENCIES

  • [go/runtime] Bump minimum Go version to 1.22.11 (#4891)

v0.38.16

December 20 2024

This release:

  • fixes a bug that caused a node produce errors caused by the sending of next PEX requests too soon. As a consequence of this incorrect behavior a node would be marked as BAD.
  • Adds a proper description of ExtendedVoteInfo and VoteInfo in the spec.

BUG FIXES

  • [mocks] Mockery v2.49.0 broke the mocks. We had to add a .mockery.yaml to properly handle this change. (#4521)
Commits
  • d03254d chore: v0.38.17 release (#4909)
  • d8b51b4 build(deps): Bump google.golang.org/grpc from 1.69.4 to 1.70.0 (#4901)
  • 415c0da Merge commit from fork
  • 2cebfde Merge commit from fork
  • 68f79b1 build(deps): Bump google.golang.org/protobuf from 1.36.3 to 1.36.4 (#4900)
  • 4f70ba6 build(deps): bump Go version to 1.22.11 (#4891)
  • 930813e build(deps): Bump docker/build-push-action from 6.12.0 to 6.13.0 (#4882)
  • c86f898 build(deps): Bump github.com/prometheus/common from 0.61.0 to 0.62.0 (#4865)
  • 807bd18 build(deps): Bump github.com/go-git/go-git/v5 from 5.13.0 to 5.13.2 (#4861)
  • 7d8440b build(deps): Bump golang.org/x/net from 0.33.0 to 0.34.0 (#4859)
  • Additional commits viewable in compare view

Updates github.com/CosmWasm/wasmvm/v2 from 2.1.2 to 2.1.5

Release notes

Sourced from github.com/CosmWasm/wasmvm/v2's releases.

v2.1.5

Fixes CWA-2025-001 and CWA-2025-002.

This patch is consensus breaking.

v2.1.4

  • Add SimulateStoreCode
  • Fix dangling pointer crash (#571)

v2.1.3

Fixes CWA-2024-007 and CWA-2024-008.

This is a consensus breaking patch.

Commits

Updates github.com/docker/docker from 27.3.1+incompatible to 28.0.0+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

v28.0.0

28.0.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

New

  • Add ability to mount an image inside a container via --mount type=image. moby/moby#48798
    • You can also specify --mount type=image,image-subpath=[subpath],... option to mount a specific path from the image. docker/cli#5755
  • docker images --tree now shows metadata badges. docker/cli#5744
  • docker load, docker save, and docker history now support a --platform flag allowing you to choose a specific platform for single-platform operations on multi-platform images. docker/cli#5331
  • Add OOMScoreAdj to docker service create and docker stack. docker/cli#5145
  • docker buildx prune now supports reserved-space, max-used-space, min-free-space and keep-bytes filters. moby/moby#48720
  • Windows: Add support for running containerd as a child process of the daemon, instead of using a system-installed containerd. moby/moby#47955

Networking

  • The docker-proxy binary has been updated, older versions will not work with the updated dockerd. moby/moby#48132
    • Close a window in which the userland proxy (docker-proxy) could accept TCP connections, that would then fail after iptables NAT rules were set up.
    • The executable rootlesskit-docker-proxy is no longer used, it has been removed from the build and distribution.
  • DNS nameservers read from the host's /etc/resolv.conf are now always accessed from the host's network namespace. moby/moby#48290
    • When the host's /etc/resolv.conf contains no nameservers and there are no --dns overrides, Google's DNS servers are no longer used, apart from by the default bridge network and in build containers.
  • Container interfaces in bridge and macvlan networks now use randomly generated MAC addresses. moby/moby#48808
    • Gratuitous ARP / Neighbour Advertisement messages will be sent when the interfaces are started so that, when IP addresses are reused, they're associated with the newly generated MAC address.
    • IPv6 addresses in the default bridge network are now IPAM-assigned, rather than being derived from the MAC address.
  • The deprecated OCI prestart hook is now only used by build containers. For other containers, network interfaces are added to the network namespace after task creation is complete, before the container task is started. moby/moby#47406
  • Add a new gw-priority option to docker run, docker container create, and docker network connect. This option will be used by the Engine to determine which network provides the default gateway for a container. On docker run, this option is only available through the extended --network syntax. docker/cli#5664
  • Add a new netlabel com.docker.network.endpoint.ifname to customize the interface name used when connecting a container to a network. It's supported by all built-in network drivers on Linux. moby/moby#49155
    • When a container is created with multiple networks specified, there's no guarantee on the order networks will be connected to the container. So, if a custom interface name uses the same prefix as the auto-generated names, for example eth, the container might fail to start.
    • The recommended practice is to use a different prefix, for example en0, or a numerical suffix high enough to never collide, for example eth100.
    • This label can be specified on docker network connect via the --driver-opt flag, for example docker network connect --driver-opt=com.docker.network.endpoint.ifname=foobar ….
    • Or via the long-form --network flag on docker run, for example docker run --network=name=bridge,driver-opt=com.docker.network.endpoint.ifname=foobar …
  • If a custom network driver reports capability GwAllocChecker then, before a network is created, it will get a GwAllocCheckerRequest with the network's options. The custom driver may then reply that no gateway IP address should be allocated. moby/moby#49372

Port publishing in bridge networks

  • dockerd now requires ipset support in the Linux kernel. moby/moby#48596
    • The iptables and ip6tables rules used to implement port publishing and network isolation have been extensively modified. This enables some of the following functional changes, and is a first step in refactoring to enable native nftables support in a future release. moby/moby#48815
    • If it becomes necessary to downgrade to an earlier version of the daemon, some manual cleanup of the new rules will be necessary. The simplest and surest approach is to reboot the host, or use iptables -F and ip6tables -F to flush all existing iptables rules from the filter table before starting the older version of the daemon. When that is not possible, run the following commands as root:
      • iptables -D FORWARD -m set --match-set docker-ext-bridges-v4 dst -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT; ip6tables -D FORWARD -m set --match-set docker-ext-bridges-v6 dst -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
      • iptables -D FORWARD -m set --match-set docker-ext-bridges-v4 dst -j DOCKER; ip6tables -D FORWARD -m set --match-set docker-ext-bridges-v6 dst -j DOCKER
      • If you were previously running with the iptables filter-FORWARD policy set to ACCEPT and need to restore access to unpublished ports, also delete per-bridge-network rules from the DOCKER chains. For example, iptables -D DOCKER ! -i docker0 -o docker0 -j DROP.
  • Fix a security issue that was allowing remote hosts to connect directly to a container on its published ports. moby/moby#49325
  • Fix a security issue that was allowing neighbor hosts to connect to ports mapped on a loopback address. moby/moby#49325

... (truncated)

Commits
  • af898ab Merge pull request #49495 from vvoland/update-buildkit
  • d67f035 vendor: github.com/moby/buildkit v0.20.0
  • 00ab386 Merge pull request #49491 from vvoland/update-buildkit
  • 1fde8c4 builder-next: fix cdi manager
  • cde9f07 vendor: github.com/moby/buildkit v0.20.0-rc3
  • 89e1429 Merge pull request #49490 from thaJeztah/dockerfile_linting
  • b2b5590 Dockerfile: fix linting warnings
  • 62bc597 Merge pull request #49480 from thaJeztah/docs_api_1.48
  • 670cd81 Merge pull request #49485 from vvoland/c8d-list-panic
  • a3628f3 docs/api: add documentation for API v1.48
  • Additional commits viewable in compare view

Updates github.com/golang/glog from 1.2.2 to 1.2.3

Release notes

Sourced from github.com/golang/glog's releases.

v1.2.3

What's Changed

Full Changelog: golang/glog@v1.2.2...v1.2.3

Commits

Updates golang.org/x/crypto from 0.28.0 to 0.32.0

Commits
  • 8929309 go.mod: update golang.org/x dependencies
  • 4a75ba5 all: make function and struct comments match the names
  • b4f1988 ssh: make the public key cache a 1-entry FIFO cache
  • 7042ebc openpgp/clearsign: just use rand.Reader in tests
  • 3e90321 go.mod: update golang.org/x dependencies
  • 8c4e668 x509roots/fallback: update bundle
  • 6018723 go.mod: update golang.org/x dependencies
  • 71ed71b README: don't recommend go get
  • 750a45f sha3: add MarshalBinary, AppendBinary, and UnmarshalBinary
  • 36b1725 sha3: avoid trailing permutation
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.30.0 to 0.34.0

Commits
  • 8da7ed1 go.mod: update golang.org/x dependencies
  • 2124140 all: make function and struct comments match the names
  • e9d95ba http2: do not surface errors from a conn's idle timer expiring
  • c2be992 quic: remember which remote connection IDs have been retired
  • dfc720d go.mod: update golang.org/x dependencies
  • 8e66b04 html: use strings.EqualFold instead of lowering ourselves
  • b935f7b html: avoid endless loop on error token
  • 9af49ef route: remove unused sizeof* consts
  • 6705db9 quic: clean up crypto streams when dropping packet protection keys
  • 4ef7588 quic: handle ACK frame in packet which drops number space
  • Additional commits viewable in compare view

Updates cosmossdk.io/x/tx from 0.13.4 to 1.1.0

Release notes

Sourced from cosmossdk.io/x/tx's releases.

Cosmovisor v1.1.0

Release Notes

New execution model

With this release we are shifting to a new CLI design:

  • in the past, Cosmovisor was designed to act as a wrapper for a Cosmos App. An admin could link it and use it instead of the Cosmos App. When running it will pass all options and configuration parameters to the app. Hence the only way to configure the Cosmovisor was through environment variables.
  • now, we are moving to a more traditional model, where Cosmovisor has it's own command set and is a true supervisor.

New commands have been added:

  • run will start the Cosmos App and pass remaining arguments to the app (similar to npm run)
  • help will display Cosmovisor help
  • version will display both Cosmovisor and the associated app version.

The existing way of starting an app with Cosmovisor has been deprecated (cosmovisor [app params]) and will be removed in the future version. Please use cosmovisor run [app pararms] instead.

New Features

We added a new configuration option: DAEMON_BACKUP_DIR (as env variable). When set, Cosmovisor will create backup the app data backup in that directory (instead of using the app home directory) before running the update. See the README file for more details.

Bug Fixes

  • Fixed cosmovisor version output when installed using 'go install github.com/cosmos/cosmos-sdk/cosmovisor/cmd/[email protected]'.

Changelog

For more details, please see the CHANGELOG.

DB v1.0.0-beta.1

github.com/cosmos/cosmos-sdk/db (cosmos-sdk/db here an after) is a module in the Cosmos SDK repository. It is used in store/v2 instead of tendermint/tm-db which is now deprecated. cosmos-sdk/db extends the tendermint/tm-db interface. however, it only supports BaggerDB and RocksDB (the databases we tested, which provide snapshot functionality necessary for store/v2 and ADR-040 implementation).

v0.52.0-rc.2

Cosmos SDK v0.52.0-rc.2 Release Notes

This second release canditate include bug fixes found during integration. Additionally, it bumps the SDK dependencies to their final release:

  • cosmossdk.io/core v1.0.0
  • cosmossdk.io/collection v1.0.0
  • cosmossdk.io/schema v1.0.0
  • cosmossdk.io/x/tx v1.0.0

Modules remained stable and nothing has changed since their first release candidate. We encourage chains to already start integrating with this release candidate as APIs are stable.

Cosmos SDK Olympus is the first totally modular (as in package) release of the Cosmos SDK. Many components have been extracted in their own modules. Refer to the version matrix to understand what it means.

A final release is expected in the coming days.

... (truncated)

Changelog

Sourced from cosmossdk.io/x/tx's changelog.

Changelog

[Unreleased]

Every module contains its own CHANGELOG.md. Please refer to the module you are interested in.

Features

  • (baseapp) #20291 Simulate nested messages.
  • (client/keys) #21829 Add support for importing hex key using standard input.
  • (x/auth/ante) #23128 Allow custom verifyIsOnCurve when validate tx for public key like ethsecp256k1.
  • (x/auth/ante) #23283 Allow ed25519 transaction signatures.

... (truncated)

Commits
  • be5e3aa feat(log): extend logger options (#15956)
  • 851e9e8 docs: update roadmap for q2 (#15952)
  • 91278f6 refactor(x/authz)!: Use KVStoreService, context.Context and return errors ins...
  • 26faee9 refactor: bcrypt key derivation to aead (#509) (#15817)
  • 428e19f refactor(x/distribution)!: Use KVStoreService, context.Context and return err...
  • a6ea094 ci: skip fix registration for linting (#15965)
  • 00b78fa refactor(x/auth): v2 adaptable tx instead of double decode (#15910)
  • 1179285 feat(hubl): cache bech32 prefix (#15954)
  • 6a8251a build(deps): bump cometbft to v0.37.1 (#15955)
  • 6dfe735 refactor!: use KVStoreService and context.Context in x/bank (#15891)
  • Additional commits viewable in compare view

Updates github.com/cometbft/cometbft from 0.38.15 to 0.38.17

Release notes

Sourced from github.com/cometbft/cometbft's releases.

v0.38.17

See the CHANGELOG for this release.

v0.38.16

See the CHANGELOG for this release.

Changelog

Sourced from github.com/cometbft/cometbft's changelog.

v0.38.17

February 3, 2025

This release fixes two security issues (ASA-2025-001, ASA-2025-002). Users are encouraged to upgrade as soon as possible.

BUG FIXES

  • [blocksync] Ban peer if it reports height lower than what was previously reported (ASA-2025-001)
  • [types] Check that Part.Index equals Part.Proof.Index (ASA-2025-001)

DEPENDENCIES

  • [go/runtime] Bump minimum Go version to 1.22.11 (#4891)

v0.38.16

December 20 2024

This release:

  • fixes a bug that caused a node produce errors caused by the sending of next PEX requests too soon. As a consequence of this incorrect behavior a node would be marked as BAD.
  • Adds a proper description of ExtendedVoteInfo and VoteInfo in the spec.

BUG FIXES

  • [mocks] Mockery v2.49.0 broke the mocks. We had to add a .mockery.yaml to properly handle this change. (#4521)
Commits
  • d03254d chore: v0.38.17 release (#4909)
  • d8b51b4 build(deps): Bump google.golang.org/grpc from 1.69.4 to 1.70.0 (#4901)
  • 415c0da Merge commit from fork
  • 2cebfde Merge commit from fork
  • 68f79b1 build(deps): Bump google.golang.org/protobuf from 1.36.3 to 1.36.4 (#4900)
  • 4f70ba6 build(deps): bump Go version to 1.22.11 (#4891)
  • 930813e build(deps): Bump docker/build-push-action from 6.12.0 to 6.13.0 (#4882)
  • c86f898 build(deps): Bump github.com/prometheus/common from 0.61.0 to 0.62.0 (#4865)
  • 807bd18 build(deps): Bump github.com/go-git/go-git/v5 from 5.13.0 to 5.13.2 (#4861)
  • 7d8440b build(deps): Bump golang.org/x/net from 0.33.0 to 0.34.0 (#4859)
  • Additional commits viewable in compare view

Updates github.com/golang/glog from 1.2.2 to 1.2.3

Release notes

Sourced from github.com/golang/glog's releases.

v1.2.3

What's Changed

Full Changelog: golang/glog@v1.2.2...v1.2.3

Commits

Updates golang.org/x/crypto from 0.28.0 to 0.32.0

Commits
  • 8929309 go.mod: update golang.org/x dependencies
  • 4a75ba5 all: make function and struct comments match the names
  • b4f1988 ssh: make the public key cache a 1-entry FIFO cache
  • 7042ebc openpgp/clearsign: just use rand.Reader in tests
  • 3e90321 go.mod: update golang.org/x dependencies
  • 8c4e668 x509roots/fallback: update bundle
  • 6018723 go.mod: update golang.org/x dependencies
  • 71ed71b README: don't recommend go get
  • 750a45f sha3: add MarshalBinary, AppendBinary, and UnmarshalBinary
  • 36b1725 sha3: avoid trailing permutation
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.30.0 to 0.34.0

Commits
  • 8da7ed1 go.mod: update golang.org/x dependencies
  • 2124140 all: make function and struct comments match the names
  • e9d95ba http2: do not surface errors from a conn's idle timer expiring
  • c2be992 quic: remember which remote connection IDs have been retired
  • dfc720d go.mod: update golang.org/x dependencies
  • 8e66b04 html: use strings.EqualFold instead of lowering ourselves
  • b935f7b html: avoid endless loop on error token
  • 9af49ef route: remove unused sizeof* consts
  • 6705db9 quic: clean up crypto streams when dropping packet protection keys
  • 4ef7588 quic: handle ACK frame in packet which drops number space
  • Additional commits viewable in compare view

Updates github.com/cosmos/cosmos-sdk from 0.50.9 to 0.50.12

Release notes

Sourced from github.com/cosmos/cosmos-sdk's releases.

v0.50.12

Cosmos SDK v0.50.12 Release Notes

💬 Release Discussion

🚀 Highlights

This patch release fixes GHSA-x5vx-95h7-rv4p. It resolves a x/group module issue that can halt chain when handling a malicious proposal. Only users of the x/group module are affected by this issue.

We recommended to upgrade to this patch release as soon as possible. When upgrading from <= v0.50.11, please use a chain upgrade to ensure that 2/3 of the validator power upgrade to v0.50.12.

📝 Changelog

Check out the changelog for an exhaustive list of changes, or compare changes from the last release.

v0.50.11

Cosmos SDK v0.50.11 Release Notes

💬 Release Discussion

🚀 Highlights

We are back on schedule for our monthly v0.50.x patch releases. The last two months, next to ramping up on v0.52 and v2, we added a few bug fixes and (UX) improvements.

Notable changes:

  • Fix ABS-0043/ABS-0044.
  • New Linux-only backend that adds Linux kernel's keyctl support
  • Skip sims test when running dry on validators

📝 Changelog

Check out the changelog for an exhaustive list of changes, or compare changes from the last release.

Maintenance Policy

Cosmos SDK Olympus (v0.52) final release is approaching really soon. That means the Eden line (v0.50.x) will soon only be supported for bug fixes only, as per our release policy. Earlier versions are not maintained.

Note, that the next SDK release, v0.52, does not include x/params migration, when migrating from < v0.47, v0.50.x or v0.47.x, is a mandatory migration.

Start integrating with Cosmos SDK Eden (v0.52) and enjoy and the new features and performance improvements.

v0.50.10

Cosmos SDK v0.50.10 Release Notes

... (truncated)

Changelog

Sourced from github.com/cosmos/cosmos-sdk's changelog.

v0.50.12 - 2025-02-20

Bug Fixes

v0.50.11 - 2024-12-16

Features

  • (crypto/keyring) #21653 New Linux-only backend that adds Linux kernel's keyctl support.

Improvements

  • (server) #21941 Regenerate addrbook.json for in place testnet.

Bug Fixes

  • Fix ABS-0043/ABS-0044 Limit recursion depth for unknown field detection and unpack any
  • (server) #22564 Fix fallback genesis path in server
  • (x/group) #22425 Proper address rendering in error
  • (sims) #21906 Skip sims test when running dry on validators
  • (cli) #21919 Query address-by-acc-num by account_id instead of id.
  • (x/group) #22229 Accept 1 and try in CLI for group proposal exec.

v0.50.10 - 2024-09-20

Features

  • (cli) #20779 Added module-hash-by-height command to query and retrieve module hashes at a specified blockchain height, enhancing debugging capabilities.
  • (cli) #21372 Added a bulk-add-genesis-account genesis command to add many genesis accounts at once.
  • (types/collections) #21724 Added LegacyDec collection value.

Improvements

  • (x/bank) #21460 Added Sender attribute in MsgMultiSend event.
  • (genutil) #21701 Improved error messages for genesis validation.
  • (testutil/integration) #21816 Allow to pass baseapp options in NewIntegrationApp.

Bug Fixes

  • (runtime) #21769 Fix baseapp options ordering to avoid overwriting options set by modules.
  • (x/consensus) #21493 Fix regression that prevented to upgrade to > v0.50.7 without consensus version params.
  • (baseapp) #21256 Halt height will not commit the block indicated, meaning that if halt-height is set to 10, only blocks until 9 (included) will be committed. This is to go back to the original behavior before a change was introduced in v0.50.0.
  • (baseapp) #21444 Follow-up, Return PreBlocker events in FinalizeBlockResponse.
  • (baseapp) #21413 Fix data race in sdk mempool.
Commits
  • 9816440 Merge commit from fork
  • 158f146 chore: remove unused orm module (backport #23633) (#23637)
  • effb71f docs: correct explanation on how to set custom signer via depinject (backport...
  • b9db4d2 docs(keyring): add keyctl docs (backport #23563) (#23566)
  • 5f08d21 feat(client/v2): add map support (backport #23544) (#23554)
  • f1b139d feat(x/tx): add an option to encode maps using amino json (backport #23539) (...
  • 9d3c384 build(deps): Bump github.com/cosmos/ledger-cosmos-go from 0.13.3 to 0.14.0 (#...
  • f465587 build(deps): Bump github.com/cosmos/cosmos-db from 1.1.0 to 1.1.1 (#23030)
  • eb1a8e8 chore: prep v0.50.11 release notes (#22898)
  • ba7ac45 Merge commit from fork
  • Additional commits viewable in compare view

Updates github.com/ethereum/go-ethereum from 1.14.7 to 1.14.13

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Schwarzschild (v1.14.13)

This is a security release, fixing a vulnerability (CVE-2025-24883).

Please update your nodes ASAP.

As with all our previous releases, you can find the:

Gei Hinnom (v1.14.12)

This release covers quite a lot of time, and has many changes across the codebase. In particular; changes in tracing and account management, optimizations in database, trie and evm, and, as always bugfixes.

This release removes the personal RPC namespace. It was already previously deprecated, and has not been accessible by default for nearly two years. We also removed the --unlock command-line parameter, with a view towards removing key/account management from the geth binary.

  • Key management:
    • Remove --unlock command line flag from geth (#30737)
    • Remove personal RPC namespace (#30704)
  • Builds:
    • RISC-V docker images (#30739)
    • ppa-builds for ubuntu 24.10 (#30580)
  • Tracing:
    • invoke OnCodeChange-hook on selfdestruct (#30686, #30497)
    • improvements to flatCallTracer (#30539)
    • invoke tx-end hook in runtime helpers (#30711)
    • disableCode and disableStorage options for prestateTracer (#30648)
    • tracing of system calls (#30666)
    • Change to how chainconfig is passed to tracers (breaking change) (#30540)
    • add GetTransientState method to StateDB interface (#30531)
  • Signing:
    • improved support for EIP-712 array types (#30620)
    • non-legacy transactions support for ledger wallets (#30180)
  • Bugfixes:
    • Set basefee for AccessList based on given block, not chain tip (#30538)
    • Multiple issues in benchmarks (#30667)
    • Fix bug with resolving a payload (#30615)
  • Database optimizations
    • Run pebble in non-sync mode (#30573, #29792). This change makes quite a big difference on certain OS:es, particularly MacOSX/Darwin, where it has been noted that fsync is notoriously slow.
    • Use to increasing level sizes (#30602), This change makes pebble use larger files, reducing the number of files from 160K to 10K.
  • Assorted:
    • Make jwtsecretflag expand tilde
    • Work on verkle (#30672)
    • Work on EIP-7002 and EIP 7251 (#30571)
    • Implement EIP-7685 and EIP-6110 (flat requests enconding) (#30425)
    • Validation of EOF containers (#30418)

... (truncated)

Commits
  • eb00f16 version: release go-ethereum v1.14.13 stable
  • 159fb1a crypto: add IsOnCurve check (

@dependabot
build(deps): bump the go_modules group across 2 directories with 9 up…
c3237a3 
…dates

Bumps the go_modules group with 4 updates in the / directory: [cosmossdk.io/x/tx](https://github.com/cosmos/cosmos-sdk), [github.com/cometbft/cometbft](https://github.com/cometbft/cometbft), [github.com/CosmWasm/wasmvm/v2](https://github.com/CosmWasm/wasmvm) and [github.com/docker/docker](https://github.com/docker/docker).
Bumps the go_modules group with 4 updates in the /tests/slinky directory: [cosmossdk.io/x/tx](https://github.com/cosmos/cosmos-sdk), [github.com/cometbft/cometbft](https://github.com/cometbft/cometbft), [github.com/cosmos/cosmos-sdk](https://github.com/cosmos/cosmos-sdk) and [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum).


Updates `cosmossdk.io/x/tx` from 0.13.4 to 1.1.0
- [Release notes](https://github.com/cosmos/cosmos-sdk/releases)
- [Changelog](https://github.com/cosmos/cosmos-sdk/blob/main/CHANGELOG.md)
- [Commits](cosmos/cosmos-sdk@x/tx/v0.13.4...log/v1.1.0)

Updates `github.com/cometbft/cometbft` from 0.38.15 to 0.38.17
- [Release notes](https://github.com/cometbft/cometbft/releases)
- [Changelog](https://github.com/cometbft/cometbft/blob/v0.38.17/CHANGELOG.md)
- [Commits](cometbft/cometbft@v0.38.15...v0.38.17)

Updates `github.com/CosmWasm/wasmvm/v2` from 2.1.2 to 2.1.5
- [Release notes](https://github.com/CosmWasm/wasmvm/releases)
- [Changelog](https://github.com/CosmWasm/wasmvm/blob/main/CHANGELOG.md)
- [Commits](CosmWasm/wasmvm@v2.1.2...v2.1.5)

Updates `github.com/docker/docker` from 27.3.1+incompatible to 28.0.0+incompatible
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](moby/moby@v27.3.1...v28.0.0)

Updates `github.com/golang/glog` from 1.2.2 to 1.2.3
- [Release notes](https://github.com/golang/glog/releases)
- [Commits](golang/glog@v1.2.2...v1.2.3)

Updates `golang.org/x/crypto` from 0.28.0 to 0.32.0
- [Commits](golang/crypto@v0.28.0...v0.32.0)

Updates `golang.org/x/net` from 0.30.0 to 0.34.0
- [Commits](golang/net@v0.30.0...v0.34.0)

Updates `cosmossdk.io/x/tx` from 0.13.4 to 1.1.0
- [Release notes](https://github.com/cosmos/cosmos-sdk/releases)
- [Changelog](https://github.com/cosmos/cosmos-sdk/blob/main/CHANGELOG.md)
- [Commits](cosmos/cosmos-sdk@x/tx/v0.13.4...log/v1.1.0)

Updates `github.com/cometbft/cometbft` from 0.38.15 to 0.38.17
- [Release notes](https://github.com/cometbft/cometbft/releases)
- [Changelog](https://github.com/cometbft/cometbft/blob/v0.38.17/CHANGELOG.md)
- [Commits](cometbft/cometbft@v0.38.15...v0.38.17)

Updates `github.com/golang/glog` from 1.2.2 to 1.2.3
- [Release notes](https://github.com/golang/glog/releases)
- [Commits](golang/glog@v1.2.2...v1.2.3)

Updates `golang.org/x/crypto` from 0.28.0 to 0.32.0
- [Commits](golang/crypto@v0.28.0...v0.32.0)

Updates `golang.org/x/net` from 0.30.0 to 0.34.0
- [Commits](golang/net@v0.30.0...v0.34.0)

Updates `github.com/cosmos/cosmos-sdk` from 0.50.9 to 0.50.12
- [Release notes](https://github.com/cosmos/cosmos-sdk/releases)
- [Changelog](https://github.com/cosmos/cosmos-sdk/blob/v0.50.12/CHANGELOG.md)
- [Commits](cosmos/cosmos-sdk@v0.50.9...v0.50.12)

Updates `github.com/ethereum/go-ethereum` from 1.14.7 to 1.14.13
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.14.7...v1.14.13)

---
updated-dependencies:
- dependency-name: cosmossdk.io/x/tx
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/cometbft/cometbft
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/CosmWasm/wasmvm/v2
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/docker/docker
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/golang/glog
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: cosmossdk.io/x/tx
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/cometbft/cometbft
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/golang/glog
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/cosmos/cosmos-sdk
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/ethereum/go-ethereum
  dependency-type: indirect
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Feb 20, 2025
@vercel Vercel
Copy link

vercel bot commented Feb 20, 2025 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for Git ↗︎

1 Skipped Deployment
Name Status Preview Comments Updated (UTC)
warden-help-center ⬜️ Ignored (Inspect) Visit Preview Feb 20, 2025 8:21pm

@coderabbitai coderabbitai
Copy link
Contributor

coderabbitai bot commented Feb 20, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?

❤️ Share
🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>, please review it.
    • Generate unit testing code for this file.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
    • @coderabbitai generate unit testing code for this file.
    • @coderabbitai modularize this function.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
    • @coderabbitai read src/utils.ts and generate unit testing code.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
    • @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

  • @coderabbitai pause to pause the reviews on a PR.
  • @coderabbitai resume to resume the paused reviews.
  • @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
  • @coderabbitai full review to do a full review from scratch and review all the files again.
  • @coderabbitai summary to regenerate the summary of the PR.
  • @coderabbitai generate docstrings to generate docstrings for this PR. (Beta)
  • @coderabbitai resolve resolve all the CodeRabbit review comments.
  • @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
  • @coderabbitai help to get help.

Other keywords and placeholders

  • Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
  • Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
  • Add @coderabbitai anywhere in the PR title to generate the title automatically.

Documentation and Community

  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants