Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the go_modules group across 1 directory with 5 updates #8

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Bump the go_modules group across 1 directory with 5 updates #8

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Apr 19, 2024

Bumps the go_modules group with 2 updates in the / directory: github.com/cosmos/cosmos-sdk and github.com/cosmos/ibc-go/v4.

Updates github.com/cosmos/cosmos-sdk from 0.45.16 to 0.50.5

Release notes

Sourced from github.com/cosmos/cosmos-sdk's releases.

v0.50.5

Cosmos SDK v0.50.5 Release Notes

馃挰 Release Discussion

馃殌 Highlights

This is time for another patch release of Cosmos SDK Eden. This release includes a few notable fixes:

  • Fix a bypass delegator slashing: GHSA-86h5-xcpx-cfqc
  • Fix an issue in baseapp.ValidateVoteExtensions helper: GHSA-95rx-m9m5-m94v
  • Allow to provide custom signers for x/auth/tx using depinject

We recommended to upgrade to this patch release as soon as possible.
When upgrading from <= v0.50.4, please ensure that 2/3 of the validator power upgrade to v0.50.5.

馃摑 Changelog

Check out the changelog for an exhaustive list of changes, or compare changes from the last release.

Refer to the upgrading guide when migrating from v0.47.x to v0.50.1. Note, that the next SDK release, v0.51, will not include x/params migration, when migrating from < v0.47, v0.50.x or v0.47.x, is a mandatory migration.

v0.50.4

Cosmos SDK v0.50.4 Release Notes

馃挰 Release Discussion

馃殌 Highlights

Some months ago Cosmos SDK Eden was released. Missed the announcement? Read it here. For this month patch release of the v0.50.x line, a few features and improvements were added to the SDK.

Notably, we added and fixed the following:

  • Adds in-place testnet CLI command for creating testnets from local state (kudos to @鈥媍zarcas7ic)
  • Multiple fixes in baseapp, with fixes in DefaultProposalHandler and vote extensions
  • Add a missed check in x/auth/vesting: GHSA-4j93-fm92-rp4m

We recommended to upgrade to this patch release as soon as possible.
When upgrading from <= v0.50.3, please ensure that 2/3 of the validator power upgrade to v0.50.4.

馃摑 Changelog

Check out the changelog for an exhaustive list of changes, or compare changes from the last release.

Refer to the upgrading guide when migrating from v0.47.x to v0.50.1. Note, that the next SDK release, v0.51.0, will not include x/params migration, when migrating from < v0.47, v0.50.x or v0.47.x, is a mandatory migration.

... (truncated)

Changelog

Sourced from github.com/cosmos/cosmos-sdk's changelog.

v0.50.5 - 2024-03-12

Features

  • (baseapp) #19626 Add DisableBlockGasMeter option to BaseApp, which removes the block gas meter during transaction execution.

Improvements

  • (x/distribution) #19707 Add autocli config for DelegationTotalRewards for CLI consistency with q rewards commands in previous versions.
  • (x/auth) #19651 Allow empty public keys in GetSignBytesAdapter.

Bug Fixes

  • (x/gov) #19725 Fetch a failed proposal tally from proposal.FinalTallyResult in the gprc query.
  • (types) #19709 Fix skip staking genesis export when using CoreAppModuleAdaptor / CoreAppModuleBasicAdaptor for it.
  • (x/auth) #19549 Accept custom get signers when injecting x/auth/tx.
  • (x/staking) Fix a possible bypass of delegator slashing: GHSA-86h5-xcpx-cfqc
  • (baseapp) Fix a bug in baseapp.ValidateVoteExtensions helper (GHSA-95rx-m9m5-m94v). The helper has been fixed and for avoiding API breaking changes currentHeight and chainID arguments are ignored. Those arguments are removed from the helper in v0.51+.

v0.50.4 - 2023-02-19

Features

  • (server) #19280 Adds in-place testnet CLI command.

Improvements

  • (client) #19393 Add ReadDefaultValuesFromDefaultClientConfig to populate the default values from the default client config in client.Context without creating a app folder.

Bug Fixes

  • (x/auth/vesting) GHSA-4j93-fm92-rp4m Add BlockedAddr check in CreatePeriodicVestingAccount.
  • (baseapp) #19338 Set HeaderInfo in context when calling setState.
  • (baseapp): #19200 Ensure that sdk side ve math matches cometbft.
  • #19106 Allow empty public keys when setting signatures. Public keys aren't needed for every transaction.
  • (baseapp) #19198 Remove usage of pointers in logs in all optimistic execution goroutines.
  • (baseapp) #19177 Fix baseapp DefaultProposalHandler same-sender non-sequential sequence.
  • (crypto) #19371 Avoid CLI redundant log in stdout, log to stderr instead.

v0.50.3 - 2023-01-15

Features

  • (types) #18991 Add SignerExtractionAdapter to PriorityNonceMempool/Config and provide Default implementation matching existing behavior.
  • (gRPC) #19043 Add halt_height to the gRPC /cosmos/base/node/v1beta1/config request.

Improvements

  • (x/bank) #18956 Introduced a new DenomOwnersByQuery query method for DenomOwners, which accepts the denom value as a query string parameter, resolving issues with denoms containing slashes.
  • (x/gov) #18707 Improve genesis validation.

... (truncated)

Commits

Updates github.com/cosmos/ibc-go/v4 from 4.4.2 to 4.6.0

Release notes

Sourced from github.com/cosmos/ibc-go/v4's releases.

v4.6.0

This release includes a fix for the ASA-2024-007 security advisory. Credits to Maxwell Dulin (@鈥媘dulin2) at Asymmetric Research for the discovery and disclosure via our bug bounty program.

Please see the v4.6.0 changelog for the full set of changes included in this release.

To learn more about ibc-go versioning, please read our RELEASES.md.

IMPORTANT: Please read the migration guides for any versions of ibc-go that you might be going through when upgrading to this version. For example: if you upgrade from the IBC module contained in the Cosmos SDK 0.42.0 to SDK v0.45.16 and ibc-go v4.6.0, please follow:

  1. The migration from SDK 0.41.x or 0.42.x to the IBC module in the ibc-go repository based on the SDK v0.44.x.
  2. The migration from ibc-go v1 to v2.
  3. The migration from ibc-go v2 to v3.
  4. The migration from ibc-go v3 to v4.

v4.5.1

UPDATES

We present here a summary of the most relevant changes, please see the v4.5.1 changelog for the full set of changes included in this release.

apps/transfer

  • The REST endpoints /ibc/apps/transfer/v1/denom_traces/{hash} and /ibc/apps/transfer/v1/denom_hashes/{trace} accept now values for hash and trace that contain slashes.

Special thanks to our external contributors in this release: @鈥媏midev98

Please note that the v4 release line contains a bug where fee-enabled Interchain Accounts channels cannot be reopened in case of channel closure due to packet timeout. Regular Interchain Accounts channels (i.e. non fee-enabled) can be reopened. In order to be able to reopen fee-enabled Interchain Accounts channels, please upgrade to v5.3.1 or above.

To learn more about ibc-go versioning, please read our RELEASES.md.

IMPORTANT: Please read the migration guides for any versions of ibc-go that you might be going through when upgrading to this version. For example: if you upgrade from the IBC module contained in the Cosmos SDK 0.42.0 to SDK v0.45.16 and ibc-go v4.5.1, please follow:

  1. The migration from SDK 0.41.x or 0.42.x to the IBC module in the ibc-go repository based on the SDK v0.44.x.
  2. The migration from ibc-go v1 to v2.
  3. The migration from ibc-go v2 to v3.
  4. The migration from ibc-go v3 to v4.

v4.4.3

UPDATES

... (truncated)

Changelog

Sourced from github.com/cosmos/ibc-go/v4's changelog.

v4.6.0 - 2024-04-05

v4.5.1 - 2023-10-20

Bug Fixes

  • (apps/transfer) #3045 allow value with slashes in URL template for denom_traces and denom_hashes queries.
  • (apps/transfer) #4709 Order query service RPCs to fix availability of denom traces endpoint when no args are provided.

v4.5.0 - 2023-10-03

Dependencies

  • #4738 Bump Cosmos SDK to v0.45.16.
  • #4782 Bump ics23 to v0.9.1.

v4.4.3 - 2023-10-20

Bug Fixes

  • (apps/transfer) #3045 allow value with slashes in URL template for denom_traces and denom_hashes queries.
  • (apps/transfer) #4709 Order query service RPCs to fix availability of denom traces endpoint when no args are provided.
Commits

Updates github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0

Commits

Updates golang.org/x/net from 0.17.0 to 0.21.0

Commits
  • 73d21fd go.mod: update golang.org/x dependencies
  • 643fd16 html: fix SOLIDUS '/' handling in attribute parsing
  • 73e4b50 dns/dnsmessage: allow name compression for SRV resource parsing
  • b2208d0 internal/quic/qlog: fix typo
  • 0d0b98c http2: avoid goroutine starvation in TestServer_Push_RejectAfterGoAway
  • 07e05fd http2: remove suspicious uint32->v conversion in frame code
  • 26b646e quic: avoid deadlock in Endpoint.Close
  • cb5b10f go.mod: update golang.org/x dependencies
  • 689bbc7 quic: deflake TestStreamsCreateConcurrency
  • f12db26 internal/quic/cmd/interop: use wget --no-verbose in Dockerfile
  • Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.31.0 to 1.33.0

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump the go_modules group across 1 directory with 5 updates
c61aa82 
Bumps the go_modules group with 2 updates in the / directory: [github.com/cosmos/cosmos-sdk](https://github.com/cosmos/cosmos-sdk) and [github.com/cosmos/ibc-go/v4](https://github.com/cosmos/ibc-go).


Updates `github.com/cosmos/cosmos-sdk` from 0.45.16 to 0.50.5
- [Release notes](https://github.com/cosmos/cosmos-sdk/releases)
- [Changelog](https://github.com/cosmos/cosmos-sdk/blob/main/CHANGELOG.md)
- [Commits](cosmos/cosmos-sdk@v0.45.16...v0.50.5)

Updates `github.com/cosmos/ibc-go/v4` from 4.4.2 to 4.6.0
- [Release notes](https://github.com/cosmos/ibc-go/releases)
- [Changelog](https://github.com/cosmos/ibc-go/blob/main/CHANGELOG.md)
- [Commits](cosmos/ibc-go@v4.4.2...v4.6.0)

Updates `github.com/dvsekhvalnov/jose2go` from 1.5.0 to 1.6.0
- [Commits](dvsekhvalnov/jose2go@v1.5...v1.6.0)

Updates `golang.org/x/net` from 0.17.0 to 0.21.0
- [Commits](golang/net@v0.17.0...v0.21.0)

Updates `google.golang.org/protobuf` from 1.31.0 to 1.33.0

---
updated-dependencies:
- dependency-name: github.com/cosmos/cosmos-sdk
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/cosmos/ibc-go/v4
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/dvsekhvalnov/jose2go
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: google.golang.org/protobuf
  dependency-type: indirect
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 19, 2024
@dependabot dependabot bot mentioned this pull request Apr 19, 2024
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
0 participants