chore: use latest cometbft-db in v0.38.x #4296

faddat · 2024-10-15T07:39:08Z

Update docs and CI references for v0.38.x backport branch (Update docs and CI references for v0.38.x backport branch #596)
Release v0.38.0-alpha.1 (Release v0.38.0-alpha.1 #605)
rpc: tweaked the block search test (rpc: tweaked the block search test #579) (rpc: tweaked the block search test (backport #579) #618)
build(deps): Bump bufbuild/buf-setup-action from 1.15.1 to 1.16.0 (build(deps): Bump bufbuild/buf-setup-action from 1.15.1 to 1.16.0 #632)
Fix lints (backport Fix lints #625) (Fix lints (backport #625) #647)
Mark the gRPC broadcast API as deprecated (backport Mark the gRPC broadcast API as deprecated #651) (Mark the gRPC broadcast API as deprecated (backport #651) #657)
ci: Bump Go version for govulncheck to v1.20.3 (ci: Bump Go version for govulncheck to v1.20.3 #661) (ci: Bump Go version for govulncheck to v1.20.3 (backport #661) #664)
docs: fix wscat invocation and add TLS note (docs: fix wscat invocation and add TLS note #663) (docs: fix wscat invocation and add TLS note (backport #663) #667)
cmd: Remove snake case deprecation warning (cmd: Remove snake case deprecation warning #626) (cmd: Remove snake case deprecation warning (backport #626) #670)
Fix race condition in consensus.State code (Fix race condition in consensus.State code #673) (Fix race condition in consensus.State code (backport #673) #689)
Update govulncheck.yml (Update govulncheck.yml #685) (Update govulncheck.yml (backport #685) #694)
build(deps): Bump bufbuild/buf-setup-action from 1.16.0 to 1.17.0 (build(deps): Bump bufbuild/buf-setup-action from 1.16.0 to 1.17.0 #678)
Fix race condition in gossipVotesRoutine (Fix race condition in gossipVotesRoutine #692) (Fix race condition in gossipVotesRoutine (backport #692) #697)
Fill time in FinalizeBlock (Fill time in FinalizeBlock #688) (Fill time in FinalizeBlock (backport #688) #698)
light client: Address panic in response to empty signed header (backport light client: Address panic in response to empty signed header #577) (light client: Address panic in response to empty signed header (backport #577) #699)
Add more debugging data for bad http responses (Add more debugging data for bad http responses #638) (Add more debugging data for bad http responses (backport #638) #703)
crypto/merkle: Add error handling (crypto/merkle: Add error handling #558) (crypto/merkle: Add error handling (backport #558) #708)
e2e: Add thread-safe getters to app state (e2e: Add thread-safe getters to app state #713) (e2e: Add thread-safe getters to app state (backport #713) #715)
Update config file - 0.38.x (Update config file - 0.38.x #718)
Rephrase log when committed TX not in local mempool + make it debug (Rephrase log when committed TX not in local mempool + make it debug #738) (Rephrase log when committed TX not in local mempool + make it debug (backport #738) #749)
Fill time field in ExecCommitBlock (Fill time field in ExecCommitBlock #746) (Fill time field in ExecCommitBlock (backport #746) #752)
Fix TestStateOversizedBlock (Fix TestStateOversizedBlock #755) (Fix TestStateOversizedBlock (backport #755) #764)
Updated changelog with API changes in Remove unused code #286 (Updated changelog with API changes in #286 #748)
kvindexer: Removing event function type as it is always the same (backport kvindexer: Removing event function type as it is always the same #581) (kvindexer: Removing event function type as it is always the same (backport #581) #774)
Struct Client exposes sensitive data (Struct Client exposes sensitive data #784) (Struct Client exposes sensitive data (backport #784) #786)
Unsafe int cast in kill command (Unsafe int cast in kill command #783) (Unsafe int cast in kill command (backport #783) #792)
build(deps): Bump bufbuild/buf-setup-action from 1.17.0 to 1.18.0 (build(deps): Bump bufbuild/buf-setup-action from 1.17.0 to 1.18.0 #808)
rpc: Remove response data from response failure logs (backport rpc: Remove response data from response failure logs #829) (rpc: Remove response data from response failure logs (backport #829) #836)
Extend the infrastructure provider with StartNodes and StopTestnet (Extend the infrastructure provider with StartNodes and StopTestnet #796) (Extend the infrastructure provider with StartNodes and StopTestnet (backport #796) #845)
Digital Ocean implementation of StartNodes and StopTestnet (Digital Ocean implementation of StartNodes and StopTestnet #846) (Digital Ocean implementation of StartNodes and StopTestnet (backport #846) #849)
pubsub/kvindexer:support for big numbers - v2 (backport pubsub/kvindexer:support for big numbers - v2 #797) (pubsub/kvindexer:support for big numbers - v2 (backport #797) #840)
Release v0.38.0-alpha.2 (Release v0.38.0-alpha.2 #853)
Sort loadtime tool's report (Sort loadtime tool's report #854) (Sort loadtime tool's report (backport #854) #860)
proto: Restore snake_case JSON for ExecTxResult (backport proto: Restore snake_case JSON for ExecTxResult #856) (proto: Restore snake_case JSON for ExecTxResult (backport #856) #862)
qa: 200-nodes test on v0.38 (qa: 200-nodes test on v0.38 #877) (qa: 200-nodes test on v0.38 (backport #877) #887)
qa: rotating node test on v0.38.x (qa: rotating node test on v0.38.x #883) (qa: rotating node test on v0.38.x (backport #883) #885)
Changes to QA related files (e.g., method.md) (Changes to QA related files (e.g., method.md) #878) (Changes to QA related files (e.g., method.md) (backport #878) #886)
build(deps): Bump bufbuild/buf-setup-action from 1.18.0 to 1.19.0 (build(deps): Bump bufbuild/buf-setup-action from 1.18.0 to 1.19.0 #874)
build(deps): Bump slackapi/slack-github-action from 1.23.0 to 1.24.0 (build(deps): Bump slackapi/slack-github-action from 1.23.0 to 1.24.0 #875)
mempool: slight refactor for improving readability (mempool: slight refactor for improving readability #894) (mempool: slight refactor for improving readability (backport #894) #897)
New metrics to track duplicate votes and block parts (New metrics to track duplicate votes and block parts #896)
Add Vote Extension varying size testnet (backport Add Vote Extension varying size testnet results #888) (Add Vote Extension varying size testnet (backport #888) #906)
fix: lint fail when golangci-lint bump from v1.52.2 to v1.53.x (fix: lint fail when golangci-lint bump from v1.52.2 to v1.53.x #908) (backport: Fix lint failures on v0.38.x #922)
Release v0.38.0-rc1 (Release v0.38.0-rc1 #921)
build(deps): Bump bufbuild/buf-setup-action from 1.19.0 to 1.21.0 (build(deps): Bump bufbuild/buf-setup-action from 1.19.0 to 1.21.0 #924)
Prevent a transaction to appear twice in the mempool (Prevent a transaction to appear twice in the mempool #890) (v0.38.x: Prevent a transaction to appear twice in the mempool (backport #890) #925)
e2e tests are being skipped; INFRASTRUCTURE-* bug; portGen inconsistency bug (e2e tests are being skipped; INFRASTRUCTURE-* bug; portGen inconsistency bug #933) (e2e tests are being skipped; INFRASTRUCTURE-* bug; portGen inconsistency bug (backport #933) #935)
e2e: Generate prometheus.yaml on setup (e2e: Generate prometheus.yaml on setup #954) (e2e: Generate prometheus.yaml on setup (backport #954) #956)
build(deps): Bump docker/login-action from 2.1.0 to 2.2.0 (build(deps): Bump docker/login-action from 2.1.0 to 2.2.0 #951)
build(deps): Bump docker/setup-buildx-action from 2.5.0 to 2.7.0 (build(deps): Bump docker/setup-buildx-action from 2.5.0 to 2.7.0 #961)
build(deps): Bump docker/build-push-action from 4.0.0 to 4.1.1 (build(deps): Bump docker/build-push-action from 4.0.0 to 4.1.1 #960)
Add requirement for CheckTx in ABCI spec (Add requirement for CheckTx in ABCI spec #928) (Add requirement for CheckTx in ABCI spec (backport #928) #964)
*fix: avoid recursive call after rename to (PeerState).MarshalJSON (backport fix: avoid recursive call after rename to (*PeerState).MarshalJSON #865) (fix: avoid recursive call after rename to (*PeerState).MarshalJSON (backport #865) #968)
test/e2e: Fix Docker image build (test/e2e: Fix Docker image build #984) (test/e2e: Fix Docker image build (backport #984) #985)
Add CMT_HOME (or remove it?) (Add CMT_HOME (or remove it?) #983) (Add CMT_HOME (or remove it?) (backport #983) #998)
Extend ABCI max_block_size parameter to give extended control to the app (Extend ABCI max_block_size parameter to give extended control to the app #1003) (Extend ABCI max_block_size parameter to give extended control to the app (backport #1003) #1006)
feat: make handshake cancelable (feat: make handshake cancelable #857) (feat: make handshake cancelable (backport #857) #1011)
build(deps): Bump bufbuild/buf-setup-action from 1.21.0 to 1.22.0 (build(deps): Bump bufbuild/buf-setup-action from 1.21.0 to 1.22.0 #1030)
Release v0.38.0-rc2 (Release v0.38.0-rc2 #1031)
docs: Added double quotes to /abci_query path param (docs: Added double quotes to /abci_query path param #1015) (docs: Added double quotes to /abci_query path param (backport #1015) #1045)
Clarifies that processProposal may be called for set of transactions different from the one returned in the preceding prepareProposal (Clarifies that processProposal may be called for set of transactions different from the one returned in the preceding prepareProposal #1033) (Clarifies that processProposal may be called for set of transactions different from the one returned in the preceding prepareProposal (backport #1033) #1052)
v0.38.x: backport of new content on spec/p2p (v0.38.x: backport of new content on spec/p2p #1005)
build(deps): Bump bufbuild/buf-setup-action from 1.22.0 to 1.23.1 (build(deps): Bump bufbuild/buf-setup-action from 1.22.0 to 1.23.1 #1067)
build(deps): Bump docker/setup-buildx-action from 2.7.0 to 2.8.0 (build(deps): Bump docker/setup-buildx-action from 2.7.0 to 2.8.0 #1068)
Update Docs with Finalize Block (Update Docs with Finalize Block #760) (Update Docs with Finalize Block (backport #760) #1049)
build(deps): Bump docker/setup-buildx-action from 2.8.0 to 2.9.0 (build(deps): Bump docker/setup-buildx-action from 2.8.0 to 2.9.0 #1106)
node: Revert removal of public reactor accessors (backport node: Revert removal of public reactor accessors #1120) (node: Revert removal of public reactor accessors (backport #1120) #1122)
Revert "config: add bootstrap peers (#9680)" (backport Revert "config: add bootstrap peers (#9680)" #1109) (Revert "config: add bootstrap peers (#9680)" (backport #1109) #1121)
Release v0.38.0-rc3 (Release v0.38.0-rc3 #1124)
p2p: Remove UPnP functionality (p2p: Remove UPnP functionality #1114) (p2p: Remove UPnP functionality (backport #1114) #1125)
build(deps): Bump docker/setup-buildx-action from 2.9.0 to 2.9.1 (build(deps): Bump docker/setup-buildx-action from 2.9.0 to 2.9.1 #1135)
build(deps): Bump bufbuild/buf-setup-action from 1.23.1 to 1.24.0 (build(deps): Bump bufbuild/buf-setup-action from 1.23.1 to 1.24.0 #1136)
build(deps): Bump bufbuild/buf-setup-action from 1.24.0 to 1.25.0 (build(deps): Bump bufbuild/buf-setup-action from 1.24.0 to 1.25.0 #1161)
proxy: Rename "unsynchronized" to "connection-synchronized" local client creator (proxy: Rename "unsynchronized" to "connection-synchronized" local client creator #1145) (proxy: Rename "unsynchronized" to "connection-synchronized" local client creator (backport #1145) #1165)
blocksync: export errors (blocksync: export errors #1186) (blocksync: export errors (backport #1186) #1188)
Log proposer's address when correctly accepting a proposal (Log proposer's address when correctly accepting a proposal #1079) (Log proposer's address when correctly accepting a proposal (backport #1079) #1220)
Close evidence.db OnStop (Close evidence.db OnStop #1210) (Close evidence.db OnStop (backport #1210) #1224)
build(deps): Bump bufbuild/buf-setup-action from 1.25.0 to 1.25.1 (build(deps): Bump bufbuild/buf-setup-action from 1.25.0 to 1.25.1 #1212)
build(deps): Bump bufbuild/buf-setup-action from 1.25.1 to 1.26.0 (build(deps): Bump bufbuild/buf-setup-action from 1.25.1 to 1.26.0 #1243)
chore: log app_hash as hex (chore: log app_hash as hex #1264) (chore: log app_hash as hex (backport #1264) #1265)
build(deps): Bump bufbuild/buf-setup-action from 1.26.0 to 1.26.1 (build(deps): Bump bufbuild/buf-setup-action from 1.26.0 to 1.26.1 #1277)
build(deps): Bump docker/setup-buildx-action from 2.9.1 to 2.10.0 (build(deps): Bump docker/setup-buildx-action from 2.9.1 to 2.10.0 #1299)
Fixed mem aliasing in for loop (lint:fixed memory aliasing in for loop #1280) (lint:fixed memory aliasing in for loop (backport #1280) #1320)
Provide relevant block data in ExtendVote (backport Provide relevant block data in ExtendVote #1270) (Provide relevant block data in ExtendVote (backport #1270) #1310)
build(deps): Bump actions/checkout from 3 to 4 (build(deps): Bump actions/checkout from 3 to 4 #1312)
build(deps): Bump docker/build-push-action from 4.1.1 to 4.2.1 (build(deps): Bump docker/build-push-action from 4.1.1 to 4.2.1 #1313)
node/state:bootstrap state api (backport node/state:bootstrap state api #1057) (node/state:bootstrap state api (backport #1057) #1311)
Fix (Fix race condition in gossipVotesRoutine #1323) (Fix race condition in gossipVotesRoutine (backport #1323) #1325)
Create 9836-abci-add-vote-extension (Create 9836-abci-add-vote-extension #1333)
Added .md extension to vote extensions changelog (Add .md extension to vote extensions changelog #1336)
Removed begin_block_events and end_block_events from rpc doc (rpc: add finalize_block_events to rpc doc #1338) (rpc: add finalize_block_events to rpc doc (backport #1338) #1339)
Release v0.38.0 (Release v0.38.0 #1337)
build(deps): Bump docker/build-push-action from 4.2.1 to 5.0.0 (build(deps): Bump docker/build-push-action from 4.2.1 to 5.0.0 #1365)
build(deps): Bump docker/login-action from 2.2.0 to 3.0.0 (build(deps): Bump docker/login-action from 2.2.0 to 3.0.0 #1367)
build(deps): Bump docker/setup-buildx-action from 2.10.0 to 3.0.0 (build(deps): Bump docker/setup-buildx-action from 2.10.0 to 3.0.0 #1366)
build(deps): Bump goreleaser/goreleaser-action from 4 to 5 (build(deps): Bump goreleaser/goreleaser-action from 4 to 5 #1364)
Update to string (Update to string #1385) (Update to string (backport #1385) #1389)
docs: Fix broken links and remove invalid content on v0.38 docs (docs: Fix broken links and remove invalid content on v0.38 docs #1383)
doc: improve documentation of BlockParams.MaxBytes (backport doc: improve documentation of BlockParams.MaxBytes #1405) (doc: improve documentation of BlockParams.MaxBytes (backport #1405) #1409)
update language (backport update language #1263) (update language (backport #1263) #1267)
build(deps): Bump styfle/cancel-workflow-action from 0.11.0 to 0.12.0 (build(deps): Bump styfle/cancel-workflow-action from 0.11.0 to 0.12.0 #1452)
build(deps): Bump bufbuild/buf-setup-action from 1.26.1 to 1.27.0 (build(deps): Bump bufbuild/buf-setup-action from 1.26.1 to 1.27.0 #1451)
build(deps): Bump pillow from 9.3.0 to 10.0.1 in /scripts/qa/reporting (build(deps): Bump pillow from 9.3.0 to 10.0.1 in /scripts/qa/reporting #1493) (build(deps): Bump pillow from 9.3.0 to 10.0.1 in /scripts/qa/reporting (backport #1493) #1494)
Make BuildLastCommitInfo and BuildExtendedCommitInfo public (Make BuildLastCommitInfo and BuildExtendedCommitInfo public #1502) (Make BuildLastCommitInfo and BuildExtendedCommitInfo public (backport #1502) #1509)
build(deps): Bump bufbuild/buf-setup-action from 1.27.0 to 1.27.1 (build(deps): Bump bufbuild/buf-setup-action from 1.27.0 to 1.27.1 #1526)
v0.38.x: Fix linting (backport Fix linting on main #1531) (v0.38.x: Fix linting (backport #1531) #1537)
indexer-respect-height-params-on-query (indexer-respect-height-params-on-query #1529) (indexer-respect-height-params-on-query (backport #1529) #1542)
build(deps): Bump bufbuild/buf-setup-action from 1.27.1 to 1.27.2 (build(deps): Bump bufbuild/buf-setup-action from 1.27.1 to 1.27.2 #1548)
Max byte check (backport Max byte check #1384) (Max byte check (backport #1384) #1388)
Updates grpc and net dependencies to avoid https://pkg.go.dev/vuln/GO… (Updates grpc and net dependencies to avoid https://pkg.go.dev/vuln/GO… #1589)
mempool: Add metric size of pool in bytes (backport mempool: Add metric size of pool in bytes #1512) (mempool: Add metric size of pool in bytes (backport #1512) #1566)
build(deps): Bump bufbuild/buf-setup-action from 1.27.2 to 1.28.0 (build(deps): Bump bufbuild/buf-setup-action from 1.27.2 to 1.28.0 #1596)
Backports Experimental - Reduce # of connections effectively used to gossip transactions out #1558 and mempool: Limit gossip connections to persistent and non-persistent peers (experimental) #1584 to 0.38.x (Backports #1558 and #1584 to 0.38.x #1592)
deps: upgrade gogoproto to 1.4.11 (deps: upgrade gogoproto to 1.4.11 #1609)
This commit makes the test be the same as in main, that is, it ignores the order of transactions in the receiving reactor. (Fixes back port of test in 0.38 #1627)
v0.38.x: Bump Go version to v1.21 (v0.38.x: Bump Go version to v1.21 #1624)
Update SECURITY.md (backport Update SECURITY.md #1626) (Update SECURITY.md (backport #1626) #1633)
docs: various improvements (backport docs: various improvements #1603) (docs: various improvements (backport #1603) #1614)
Release v0.38.1 (Release v0.38.1 #1639)
proto: Prepare for publishing v0.38.x protos to Buf registry (proto: Prepare for publishing v0.38.x protos to Buf registry #1647)
proto: Update README (proto: Update README #1648) (proto: Update README (backport #1648) #1651)
build(deps): Bump docker/build-push-action from 5.0.0 to 5.1.0 (build(deps): Bump docker/build-push-action from 5.0.0 to 5.1.0 #1660)
build(deps): Bump bufbuild/buf-setup-action from 1.28.0 to 1.28.1 (build(deps): Bump bufbuild/buf-setup-action from 1.28.0 to 1.28.1 #1661)
test: respect P2PConfig fuzzing configuration in MultiplexTransport (test: respect P2PConfig fuzzing configuration in MultiplexTransport #1414) (test: respect P2PConfig fuzzing configuration in MultiplexTransport (backport #1414) #1668)
mempool: add nop mempool (backport mempool: add nop mempool #1643) (mempool: add nop mempool (backport #1643) #1680)
docs: various small improvements (part 2) (backport docs: various small improvements (part 2) #1683) (docs: various small improvements (part 2) (backport #1683) #1685)
Do not block indefinitely on the semaphore (backport Do not block indefinitely on the semaphore #1654) (Do not block indefinitely on the semaphore (backport #1654) #1688)
Release v0.38.2 (Release v0.38.2 #1700)
types: validate Validator#Address field (backport types: validate Validator#Address field #1715) (types: validate Validator#Address field (backport #1715) #1721)
fix: increase abci socket message size limit to 2GB (backport fix: increase abci socket message size limit to 2GB #1730) (fix: increase abci socket message size limit to 2GB (backport #1730) #1745)
fix: Txs Validate (fix: Txs Validate #1687) (fix: Txs Validate (backport #1687) #1751)
Add test missing in fix: Txs Validate #1687 (backport Add test missing in #1687 #1712) (Add test missing in #1687 (backport #1712) #1759)
perf(state): batch save State (backport perf(state): batch save State #1735) (perf(state): batch save State (backport #1735) #1762)
Update CODE_OF_CONDUCT.md (Update CODE_OF_CONDUCT.md #1708) (Update CODE_OF_CONDUCT.md (backport #1708) #1766)
[e2e] Fixes prepareProposal not to return oversized set of transactions (backport [e2e] Fixes prepareProposal not to return oversized set of transactions #1756) ([e2e] Fixes prepareProposal not to return oversized set of transactions (backport #1756) #1773)
perf(store): Batch save Block (perf(store): Batch save Block #1755) (perf(store): Batch save Block (backport #1755) #1778)
chore(docs): small improvements (backport chore(docs): small improvements #1781) (chore(docs): small improvements (backport #1781) #1803)
build(deps): Bump actions/setup-go from 4 to 5 (build(deps): Bump actions/setup-go from 4 to 5 #1784)
build(deps): Bump actions/stale from 8 to 9 (build(deps): Bump actions/stale from 8 to 9 #1785)
VerifyCommitLight and VerifyCommitLightTrusting never check all signatures (backport VerifyCommitLight and VerifyCommitLightTrusting _never_ check all signatures #1750) (VerifyCommitLight and VerifyCommitLightTrusting _never_ check all signatures (backport #1750) #1800)
chore(spec): specify which fields must be deterministic (backport chore(spec): specify which fields must be deterministic #1804) (chore(spec): specify which fields must be deterministic (backport #1804) #1813)
Add changelog for Bogus signatures in LightClientAttackEvidence #1749 (Add changelog for #1749 #1807) (Add changelog for #1749 (backport #1807) #1819)
Small improvements in Introduce countAllSignatures in VerifyCommitLight & VerifyCommitLightTrusting #1806 not present in VerifyCommitLight and VerifyCommitLightTrusting _never_ check all signatures #1750 (Small improvements in #1806 not present in #1750 #1808) (Small improvements in #1806 not present in #1750 (backport #1808) #1817)
chore(docs): explain the effect of timeout_propose (backport chore(docs): explain the effect of timeout_propose #1798) (chore(docs): explain the effect of timeout_propose (backport #1798) #1832)
Backport changelog for PR New metrics to track duplicate votes and block parts #896 to v0.38.x (Backport changelog for PR #896 to v0.38.x #1835)
build(deps): Bump actions/upload-artifact from 3 to 4 (build(deps): Bump actions/upload-artifact from 3 to 4 #1844)
Updates go crypto package to v0.17.0 (backport Updates go crypto package to v0.17.0 #1859) (Updates go crypto package to v0.17.0 (backport #1859) #1863)
The store DB and the companion BlockStore struct are sometimes out of sync (The store DB and the companion BlockStore struct are sometimes out of sync #1856) (The store DB and the companion BlockStore struct are sometimes out of sync (backport #1856) #1861)
Adds checks for nil keys and signatures (backport Adds checks for nil keys and signatures #1855) (Adds checks for nil keys and signatures (backport #1855) #1867)
Allow blocksync to not verify all signatures (Allow blocksync to not verify all signatures #1858) (Allow blocksync to not verify all signatures (backport #1858) #1870)
docs: Fix Discord links in README (backport docs: Fix Discord links in README #1874) (docs: Fix Discord links in README (backport #1874) #1894)
Extend kvstore example add with with key types (backport Extend kvstore example add with with key types #1876) (Extend kvstore example add with with key types (backport #1876) #1966)
perf(crypto/merkle, crypto/tmhash): simplify+optimize SHA256 hashing of multiple byteslices (backport perf(crypto/merkle, crypto/tmhash): simplify+optimize SHA256 hashing of multiple byteslices #1921) (perf(crypto/merkle, crypto/tmhash): simplify+optimize SHA256 hashing of multiple byteslices (backport #1921) #1969)
Update localnet-start Makefile (Update localnet-start Makefile #1975) (Update localnet-start Makefile (backport #1975) #1980)
*blocksync: wait for poolRoutine to stop in (Reactor).OnStop (blocksync: wait for poolRoutine to stop in (*Reactor).OnStop #1879) (blocksync: wait for poolRoutine to stop in (*Reactor).OnStop (backport #1879) #1982)
fix TestListenerTimeoutReadWrite (fix TestListenerTimeoutReadWrite #1947) (fix TestListenerTimeoutReadWrite (backport #1947) #1985)
feat: DefaultHttpClient support setting proxy from env (feat: DefaultHttpClient support setting proxy from env #1900) (feat: DefaultHttpClient support setting proxy from env (backport #1900) #1990)
mempool: Fix data races in CListMempool's height and notifiedTxsAvailable (backport mempool: Fix data races in CListMempool's height and notifiedTxsAvailable #2021) (mempool: Fix data races in CListMempool's height and notifiedTxsAvailable (backport #2021) #2030)
feat(rpc): Use default port for HTTP(S) URLs when there is no explicit port (backport feat(rpc): Use default port for HTTP(S) URLs when there is no explicit port #1903) (feat(rpc): Use default port for HTTP(S) URLs when there is no explicit port (backport #1903) #2053)
misc(go.mod): remove unused peg dependency (backport misc(go.mod): remove unused peg dependency #2044) (misc(go.mod): remove unused peg dependency (backport #2044) #2055)
Merge pull request from GHSA-qr8r-m495-7hc4
docs(guides): add missing import (backport docs(guides): add missing import #2070) (docs(guides): add missing import (backport #2070) #2076)
deps(localnode): bump alpine version (backport deps(localnode): bump alpine version #2077) (deps(localnode): bump alpine version (backport #2077) #2080)
misc(Makefile): add help target to display the help msg (backport misc(Makefile): add help target to display the help msg #2074) (misc(Makefile): add help target to display the help msg (backport #2074) #2082)
Manual backport of e2e: test vote extension activation via InitChain and FinalizeBlock #2066 to v0.38.x (Manual backport of #2066 to v0.38.x #2067)
Fix SaveBlockStoreState signature on v0.38.x (Fix SaveBlockStoreState signature on v0.38.x #2086)
Release v0.38.4 (Release v0.38.4 #2088)
consensus: Add chain_size_bytes metric (backport consensus: Add chain_size_bytes metric #2093) (consensus: Add chain_size_bytes metric (backport #2093) #2096)
fix: [manual backport] ValidateUpdate: allow no-change updates regardless of current height (fix: [manual backport] ValidateUpdate: allow no-change updates regardless of current height #2117)
Release v0.38.5 (Release v0.38.5 #2118)
perf(internal/blocksync): avoid double-calling types.BlockFromProto (backport perf(internal/blocksync): avoid double-calling types.BlockFromProto #2016) (perf(internal/blocksync): avoid double-calling types.BlockFromProto (backport #2016) #2145)
build(deps): Bump styfle/cancel-workflow-action from 0.12.0 to 0.12.1 (build(deps): Bump styfle/cancel-workflow-action from 0.12.0 to 0.12.1 #2180)
build(deps): Bump bufbuild/buf-setup-action from 1.28.1 to 1.29.0 (build(deps): Bump bufbuild/buf-setup-action from 1.28.1 to 1.29.0 #2179)
build(deps): Bump slackapi/slack-github-action from 1.24.0 to 1.25.0 (build(deps): Bump slackapi/slack-github-action from 1.24.0 to 1.25.0 #2177)
fix(privval): retry accepting a connection on errors (backport fix(privval): retry accepting a connection on errors #2047) (fix(privval): retry accepting a connection on errors (backport #2047) #2196)
feat(consensus): additional sanity checks for the size of proposed blocks (backport feat(consensus): additional sanity checks for the size of proposed blocks #1408) (feat(consensus): additional sanity checks for the size of proposed blocks (backport #1408) #2139)
build(deps): Bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (backport build(deps): Bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 #2253) (build(deps): Bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (backport #2253) #2255)
refactor(examples): small changes to kvstore app (backport refactor(examples): small changes to kvstore app #2267) (refactor(examples): small changes to kvstore app (backport #2267) #2270)
build(deps): Bump golangci/golangci-lint-action from 3 to 4 (build(deps): Bump golangci/golangci-lint-action from 3 to 4 #2302)
chore(docs): alter the section about the effects of timeout_commit (backport chore(docs): alter the section about the effects of timeout_commit #1892) (chore(docs): alter the section about the effects of timeout_commit (backport #1892) #2313)
docs: images not rendering properly in docs (backport docs: images not rendering properly in docs #2331) (docs: images not rendering properly in docs (backport #2331) #2338)
docs: Fix references about DeliverTx (backport docs: Fix references about DeliverTx #2330) (docs: Fix references about DeliverTx (backport #2330) #2342)
disable revive (disable revive #2349)
e2e: Add load_max_txs option to manifest (backport e2e: Add load_max_txs option to manifest #2094) (e2e: Add load_max_txs option to manifest (backport #2094) #2334)
mempool: export errors (backport mempool: export errors #1427) (mempool: export errors (backport #1427) #2277)
feat(e2e): Option to set max block size in bytes at genesis (backport feat(e2e): Option to set max block size in bytes at genesis #2362) (feat(e2e): Option to set max block size in bytes at genesis (backport #2362) #2375)
fix(docker-compose): fix subnet (backport fix(docker-compose): fix subnet #2383) (fix(docker-compose): fix subnet (backport #2383) #2391)
docs(tutorials/install): add From Go package (backport docs(tutorials/install): add From Go package #2414) (docs(tutorials/install): add From Go package (backport #2414) #2437)
refactor(consensus): print err from SignAndCheckVote (backport refactor(consensus): print err from SignAndCheckVote #2346) (refactor(consensus): print err from SignAndCheckVote (backport #2346) #2441)
fix(jsonrpc): enable HTTP basic auth in WS client (backport fix(jsonrpc): enable HTTP basic auth in WS client #2434) (fix(jsonrpc): enable HTTP basic auth in WS client (backport #2434) #2451)
fix: Rollback: wrong modification of state.LastHeightValidatorsChanged while rollback at a special height (backport fix: Rollback: wrong modification of state.LastHeightValidatorsChanged while rollback at a special height #2136) (fix: Rollback: wrong modification of state.LastHeightValidatorsChanged while rollback at a special height (backport #2136) #2457)
docs(changelog): add missing entry for fix: Rollback: wrong modification of state.LastHeightValidatorsChanged while rollback at a special height #2136 (backport docs(changelog): add missing entry for #2136 #2459) (docs(changelog): add missing entry for #2136 (backport #2459) #2464)
ci: check metrics generation in CI checks (backport ci: check metrics generation in CI checks #2483) (ci: check metrics generation in CI checks (backport #2483) #2485)
build(deps): Bump docker/setup-buildx-action from 3.0.0 to 3.1.0 (build(deps): Bump docker/setup-buildx-action from 3.0.0 to 3.1.0 #2509)
spec(abci): fixes the spec to inform about the presence of invalid extensions in last_commit (backport spec(abci): fixes the spec to inform about the presence of invalid extensions in last_commit #2423) (spec(abci): updates the spec to inform about the presence of invalid extensions in last_commit (backport #2423) #2525)
build(deps): Bump bufbuild/buf-setup-action from 1.29.0 to 1.30.0 (build(deps): Bump bufbuild/buf-setup-action from 1.29.0 to 1.30.0 #2566)
build(deps): Bump docker/build-push-action from 5.1.0 to 5.2.0 (build(deps): Bump docker/build-push-action from 5.1.0 to 5.2.0 #2567)
feat(blocksync): set the max number of (concurrently) downloaded blocks (backport feat(blocksync)!: set the max number of (concurrently) downloaded blocks to {peersCount * 20} #2467) (feat(blocksync): set the max number of (concurrently) downloaded blocks (backport #2467) #2515)
feat(blocksync): sort peers by download rate & multiple requests for closer blocks (backport feat(blocksync): sort peers by download rate & multiple requests for closer blocks #2475) (feat(blocksync): sort peers by download rate & multiple requests for closer blocks (backport #2475) #2576)
fix(blocksync): use timer instead of time.After (backport fix(blocksync): use timer instead of time.After #2584) (fix(blocksync): use timer instead of time.After (backport #2584) #2587)
Release v0.38.6 (Release v0.38.6 #2592)
docs: format error in ABCI++ specs under commit and listsnapshots section (backport docs: format error in ABCI++ specs under commit and listsnapshots section #2536) (docs: format error in ABCI++ specs under commit and listsnapshots section (backport #2536) #2603)
build(deps): Bump docker/login-action from 3.0.0 to 3.1.0 (build(deps): Bump docker/login-action from 3.0.0 to 3.1.0 #2628)
build(deps): Bump docker/setup-buildx-action from 3.1.0 to 3.2.0 (build(deps): Bump docker/setup-buildx-action from 3.1.0 to 3.2.0 #2629)
build(deps): Bump docker/build-push-action from 5.2.0 to 5.3.0 (build(deps): Bump docker/build-push-action from 5.2.0 to 5.3.0 #2630)
spec: added missing hyperlink and some clean-up on ABCI spec (spec: added missing hyperlink and some clean-up on ABCI spec #2680)
spec: Add additional information about validator ordering (total power) (backport spec: Add additional information about validator ordering (total power) #2715) (spec: Add additional information about validator ordering (total power) (backport #2715) #2724)
build(deps): Bump bufbuild/buf-setup-action from 1.30.0 to 1.30.1 (build(deps): Bump bufbuild/buf-setup-action from 1.30.0 to 1.30.1 #2738)
update golang.org/x/net from v0.20.0 to v0.23.0 (update golang.org/x/net from v0.20.0 to v0.23.0 #2781)
fix(bits): prevent BitArray.UnmarshalJSON from crashing on 0 bits in the JSON (backport fix(bits): prevent BitArray.UnmarshalJSON from crashing on 0 bits in the JSON #2774) (fix(bits): prevent BitArray.UnmarshalJSON from crashing on 0 bits in the JSON (backport #2774) #2778)
refactor(rpc): miss stop PingPongLatencyTimer (backport refactor(rpc): miss stop PingPongLatencyTimer #2792) (refactor(rpc): miss stop PingPongLatencyTimer (backport #2792) #2795)
fix: BootstrapState use custom genesis doc provider (backport: fix: BootstrapState use custom genesis doc provider #2791) (fix: BootstrapState use custom genesis doc provider (backport: #2791) #2793)
build(deps): Bump docker/setup-buildx-action from 3.2.0 to 3.3.0 (build(deps): Bump docker/setup-buildx-action from 3.2.0 to 3.3.0 #2808)
refactor(rpc): allocate PingPongLatencyTimer on start (backport refactor(rpc): allocate PingPongLatencyTimer on start #2804) (refactor(rpc): allocate PingPongLatencyTimer on start (backport #2804) #2813)
chore: fix filenames and format in changelog unclog files (backport chore: fix filenames and format in changelog unclog files #2827) (chore: fix filenames and format in changelog unclog files (backport #2827) #2836)
build(deps): Bump slackapi/slack-github-action from 1.25.0 to 1.26.0 (build(deps): Bump slackapi/slack-github-action from 1.25.0 to 1.26.0 #2861)
perf(libs/json): Lower heap overhead of JSON encoding (backport perf(libs/json): Lower heap overhead of JSON encoding #2846) (perf(libs/json): Lower heap overhead of JSON encoding (backport #2846) #2875)
perf(txindex): Lower allocation overhead of txIndex matchRange (backport perf(txindex): Lower allocation overhead of txIndex matchRange #2839) (perf(txindex): Lower allocation overhead of txIndex matchRange (backport #2839) #2883)
perf(internal/bits): Significantly speedup bitArray.PickRandom (backport perf(internal/bits): Significantly speedup bitArray.PickRandom #2841) (perf(internal/bits): Significantly speedup bitArray.PickRandom (backport #2841) #2886)
fix(bits): handle last element in PickRandom (backport fix(bits): handle last element in PickRandom #2899) (fix(bits): handle last element in PickRandom (backport #2899) #2901)
fix(mempool): panic when the app returns error on CheckTx request (backport fix(mempool): panic when the app returns error on CheckTx request #2894) (fix(mempool): panic when the app returns error on CheckTx request (backport #2894) #2904)
v0.38.7 (v0.38.7 #2908)
build(deps): Bump bufbuild/buf-setup-action from 1.30.1 to 1.31.0 (build(deps): Bump bufbuild/buf-setup-action from 1.30.1 to 1.31.0 #2920)
build(deps): Bump golangci/golangci-lint-action from 4 to 5 (build(deps): Bump golangci/golangci-lint-action from 4 to 5 #2919)
perf(state): Cache the block hash (backport perf(state): Cache the block hash #2924) (perf(state): Cache the block hash (backport #2924) #2931)
perf(event bus): Remove expensive Logger debug call in PublishEventTx (backport perf(event bus): Remove expensive Logger debug call in PublishEventTx #2911) (perf(event bus): Remove expensive Logger debug call in PublishEventTx (backport #2911) #2936)
spec(abci): slight improvements to ABCI spec (@Angrav's feedback from Anoma) (backport spec(abci): slight improvements to ABCI spec (@angrav's feedback from Anoma) #2929) (spec(abci): slight improvements to ABCI spec (@angrav's feedback from Anoma) (backport #2929) #2941)
perf(internal/blocksync): do not ValidateBlock twice (backport perf(internal/blocksync): do not ValidateBlock twice #2026) (perf(internal/blocksync): do not ValidateBlock twice (backport #2026) #2188)
perf(consensus/state): Change finalizeCommit to use applyVerifiedBlock (backport perf(consensus/state): Change finalizeCommit to use applyVerifiedBlock #2928) (perf(consensus/state): Change finalizeCommit to use applyVerifiedBlock (backport #2928) #2944)
perf(p2p/channel): Speedup NewDelimitedWriter (backport perf(p2p/channel): Speedup NewDelimitedWriter #2949) (perf(p2p/channel): Speedup NewDelimitedWriter (backport #2949) #2968)
perf(p2p): Remove unnecessary atomic read (backport perf(p2p): Remove unnecessary atomic read #2950) (perf(p2p): Remove unnecessary atomic read (backport #2950) #2971)
perf(p2p/conn): Remove a minint call that was appearing in write packet delays (backport perf(p2p/conn): Remove a minint call that was appearing in write packet delays #2952) (perf(p2p/conn): Remove a minint call that was appearing in write packet delays (backport #2952) #2974)
refactor(p2p/connection): Slight refactor to sendManyPackets that helps highlight performance improvements (backport refactor(p2p/connection): Slight refactor to sendManyPackets that helps highlight performance improvements #2953) (refactor(p2p/connection): Slight refactor to sendManyPackets that helps highlight performance improvements (backport #2953) #2977)
perf(internal/bits): Speedup extended commit.BitArray() (backport perf(internal/bits): Speedup extended commit.BitArray() #2959) (perf(internal/bits): Speedup extended commit.BitArray() (backport #2959) #2982)
perf(p2p/connection): Lower wasted re-allocations in sendRoutine (backport perf(p2p/connection): Lower wasted re-allocations in sendRoutine #2986) (perf(p2p/connection): Lower wasted re-allocations in sendRoutine (backport #2986) #2994)
perf(consensus/blockstore): Remove validate basic call from LoadBlockMeta (backport perf(consensus/blockstore): Remove validate basic call from LoadBlockMeta #2964) (perf(consensus/blockstore): Remove validate basic call from LoadBlockMeta (backport #2964) #2997)
feat: add a configurable maximum batch size for RPC requests (backport feat: add a configurable maximum batch size for RPC requests #2939) (feat: add a configurable maximum batch size for RPC requests (backport #2939) #2980)
fix: remove comment about default value (jsonrpc: add a batch size limit for RPC requests #2867) (backport fix: remove comment about default value (#2867) #3000) (fix: remove comment about default value (#2867) (backport #3000) #3013)
perf: Micro optimization to save one allocation per packet (backport perf: Micro optimization to save one allocation per packet #3018) (perf: Micro optimization to save one allocation per packet (backport #3018) #3022)
perf: Minor speedup to consenus metrics MarkLateVote (backport perf: Minor speedup to consenus metrics MarkLateVote #3017) (perf: Minor speedup to consenus metrics MarkLateVote (backport #3017) #3025)
fix(mempool): Fix data race when rechecking with async ABCI client (backport fix(mempool): Fix data race when rechecking with async ABCI client #2268) (fix(mempool): Fix data race when rechecking with async ABCI client (backport #2268) #3020)
docs: disambiguate protocol version (backport docs: disambiguate protocol version #3034) (docs: disambiguate protocol version (backport #3034) #3040)
build(deps): Bump golangci/golangci-lint-action from 5 to 6 (build(deps): Bump golangci/golangci-lint-action from 5 to 6 #3068)
perf(blockstore): Add LRU caches to blockstore operations used in consensus (backport perf(blockstore): Add LRU caches to blockstore operations used in consensus #3003) (perf(blockstore): Add LRU caches to blockstore operations used in consensus (backport #3003) #3082)
build(deps): Bump bufbuild/buf-setup-action from 1.31.0 to 1.32.0 (build(deps): Bump bufbuild/buf-setup-action from 1.31.0 to 1.32.0 #3097)
fix: TimeoutTicker returns wrong value/timeout pair when timeouts are scheduled at ~approximately the same time (backport fix: TimeoutTicker returns wrong value/timeout pair when timeouts are scheduled at ~approximately the same time #3092) (fix: TimeoutTicker returns wrong value/timeout pair when timeouts are scheduled at ~approximately the same time (backport #3092) #3106)
build(deps): Bump bufbuild/buf-setup-action from 1.32.0 to 1.32.1 (build(deps): Bump bufbuild/buf-setup-action from 1.32.0 to 1.32.1 #3126)
fix: docs: default db provider moved from node to config (backport fix: docs: default db provider moved from node to config #1588) (fix: docs: default db provider moved from node to config (backport #1588) #3132)
build(deps): Bump bufbuild/buf-setup-action from 1.32.1 to 1.32.2 (build(deps): Bump bufbuild/buf-setup-action from 1.32.1 to 1.32.2 #3165)
build(deps): Bump docker/login-action from 3.1.0 to 3.2.0 (build(deps): Bump docker/login-action from 3.1.0 to 3.2.0 #3166)
chore: update cosmosnetwork discord url (backport chore: update cosmosnetwork discord url #3153) (chore: update cosmosnetwork discord url (backport #3153) #3176)
build(deps): Bump goreleaser/goreleaser-action from 5 to 6 (build(deps): Bump goreleaser/goreleaser-action from 5 to 6 #3213)
fix(e2e): reproduction an fixing of missing evidence in e2e nightlies (backport fix(e2e): reproduction an fixing of missing evidence in e2e nightlies #3234) (fix(e2e): reproduction an fixing of missing evidence in e2e nightlies (backport #3234) #3240)
build(deps): Bump bufbuild/buf-setup-action from 1.32.2 to 1.33.0 (build(deps): Bump bufbuild/buf-setup-action from 1.32.2 to 1.33.0 #3272)
build(deps): Bump docker/build-push-action from 5.3.0 to 6.0.0 (build(deps): Bump docker/build-push-action from 5.3.0 to 6.0.0 #3289)
fix(types): DO NOT batch verify if vals keys (backport fix(types): DO NOT batch verify if vals keys #3196) (fix(types): DO NOT batch verify if vals keys (backport #3196) #3308)
fix(mempool): wrong request type when rechecking (fix(mempool): wrong request type when rechecking #3264)
build(deps): Bump bufbuild/buf-setup-action from 1.33.0 to 1.34.0 (build(deps): Bump bufbuild/buf-setup-action from 1.33.0 to 1.34.0 #3324)
build(deps): Bump docker/build-push-action from 6.0.0 to 6.1.0 (build(deps): Bump docker/build-push-action from 6.0.0 to 6.1.0 #3326)
fix(mempool)!: stop accepting TXs in the mempool if we can't keep up with reCheckTX (backport fix(mempool)!: stop accepting TXs in the mempool if we can't keep up with reCheckTX #3314) (fix(mempool)!: stop accepting TXs in the mempool if we can't keep up with reCheckTX (backport #3314) #3337)
chore(types): add test for ValidatorSet#AllKeysHaveSameType (backport chore(types): add test for ValidatorSet#AllKeysHaveSameType #3310) (chore(types): add test for ValidatorSet#AllKeysHaveSameType (backport #3310) #3345)
Added tests to check extendedCommit with different vote extension settings
Tests redone with a byzantine reactor sending wrong blocks
Refactor test
also check if extendedcommit was sent when VoteExtensions are disabled on the network
added unclog entry
ABC-0013 fix and broken test
blocksync pool ban test
Update blocksync/reactor_test.go
Simplified blocksync malicious node test, fix nil pointer error
Test assertions have more detail
Update blocksync/pool_test.go
Update blocksync/pool_test.go
Update blocksync/pool_test.go
Remove one thread to make test more compact
Removed defers from test
Readded good peer to test
Update blocksync/pool_test.go
Release/v0.38.8 (Release/v0.38.8 #3350)
fix(rpc): fix nil pointer error in /tx and /tx_search (backport fix(rpc): fix nil pointer error in /tx and /tx_search #3355) (fix(rpc): fix nil pointer error in /tx and /tx_search (backport #3355) #3357)
refactor(mempool)!: remove PreUpdate from Mempool interface and move its logic to Lock (refactor(mempool)!: remove PreUpdate from Mempool interface and move its logic to Lock #3361)
build(deps): Bump docker/build-push-action from 6.1.0 to 6.2.0 (build(deps): Bump docker/build-push-action from 6.1.0 to 6.2.0 #3381)
Release/v0.38.9 (Release/v0.38.9 #3387)
docs(rpc): update /abci_info return parameters (backport docs(rpc): update /abci_info return parameters #3359) (docs(rpc): update /abci_info return parameters (backport #3359) #3392)
fix(p2p/pex): respect MaxNumOutboundPeers limit while dialing peers provided by a seed node (backport fix(p2p/pex): respect MaxNumOutboundPeers limit while dialing peers provided by a seed node #3360) (fix(p2p/pex): respect MaxNumOutboundPeers limit while dialing peers provided by a seed node (backport #3360) #3396)
docs: remove not existing key from block search query (backport docs: remove not existing key from block search query #3399) (docs: remove not existing key from block search query (backport #3399) #3409)
perf(p2p): Only update send monitor once per batch packet msg send (backport perf(p2p): Only update send monitor once per batch packet msg send #3382) (perf(p2p): Only update send monitor once per batch packet msg send (backport #3382) #3417)
fix(blocksync): don't block in blocksync if our voting power is blocking the chain (backport fix(blocksync)!: don't block in blocksync if our voting power is blocking the chain #3406) (fix(blocksync): don't block in blocksync if our voting power is blocking the chain (backport #3406) #3421)
perf(p2p/conn): Remove unneeded global pool buffers in secret connection (backport perf(p2p/conn): Remove unneeded global pool buffers in secret connection #3403) (perf(p2p/conn): Remove unneeded global pool buffers in secret connection (backport #3403) #3418)
build(deps): Bump docker/setup-buildx-action from 3.3.0 to 3.4.0 (build(deps): Bump docker/setup-buildx-action from 3.3.0 to 3.4.0 #3439)
build(deps): Bump docker/build-push-action from 6.2.0 to 6.3.0 (build(deps): Bump docker/build-push-action from 6.2.0 to 6.3.0 #3440)
changelog: moving entry (fix(p2p/pex): respect MaxNumOutboundPeers limit while dialing peers provided by a seed node (backport #3360) #3396) to right location (changelog: moving entry (#3396) to right location #3457)
feat(libs/pubsub): allow dash symbol in event type/attribute (backport feat(libs/pubsub): allow dash symbol in event type/attribute #3456) (feat(libs/pubsub): allow dash symbol in event type/attribute (backport #3456) #3461)
fix: invalid txs_results returned for legacy ABCI responses (backport fix: invalid txs_results returned for legacy ABCI responses #3031) (fix: invalid txs_results returned for legacy ABCI responses (backport #3031) #3435)
doc(changelog): move recent HackerOne changelogs to 'bug fixes' (doc(changelog): move recent HackerOne changelogs to 'bug fixes' #3479)
feat: do not start indexer service (back port: feat: do not start indexer service #3331) (feat: do not start indexer service (back port: #3331) #3496)
chore: release v0.38.10 (chore: release v0.38.10 #3515)
build(deps): Bump docker/build-push-action from 6.3.0 to 6.4.1 (build(deps): Bump docker/build-push-action from 6.3.0 to 6.4.1 #3538)
fix(types): Add missing JSON tags to DuplicateVoteEvidence and LightClientAttackEvidence types (backport fix(types): Add missing JSON tags to DuplicateVoteEvidence and LightClientAttackEvidence types #3543) (fix(types): Add missing JSON tags to DuplicateVoteEvidence and LightClientAttackEvidence types (backport #3543) #3549)
fix(ci): run make all error 'No rule to make target 'check'' (backport fix(ci): run make all error 'No rule to make target 'check'' #3530) (fix(ci): run make all error 'No rule to make target 'check'' (backport #3530) #3559)
fix(indexer): Ineffective or missing break statements in kv package. (backport fix(indexer): Ineffective or missing break statements in kv package. #3557) (fix(indexer): Ineffective or missing break statements in kv package. (backport #3557) #3563)
build(deps): Bump bufbuild/buf-setup-action from 1.34.0 to 1.35.1 (build(deps): Bump bufbuild/buf-setup-action from 1.34.0 to 1.35.1 #3587)
build(deps): Bump docker/build-push-action from 6.4.1 to 6.5.0 (build(deps): Bump docker/build-push-action from 6.4.1 to 6.5.0 #3586)
build(deps): Bump docker/login-action from 3.2.0 to 3.3.0 (build(deps): Bump docker/login-action from 3.2.0 to 3.3.0 #3585)
build(deps): Bump docker/setup-buildx-action from 3.4.0 to 3.5.0 (build(deps): Bump docker/setup-buildx-action from 3.4.0 to 3.5.0 #3584)
build(deps): Bump docker/setup-buildx-action from 3.5.0 to 3.6.1 (build(deps): Bump docker/setup-buildx-action from 3.5.0 to 3.6.1 #3610)
fix(e2e): replace docker-compose w/ docker compose (backport fix(e2e): replace docker-compose w/ docker compose #3614) (fix(e2e): replace docker-compose w/ docker compose (backport #3614) #3616)
feat(mempool): add error ErrRecheckFull (backport feat(mempool): add error ErrRecheckFull #3654) (feat(mempool): add error ErrRecheckFull (backport #3654) #3656)
fix(types): Only require extension signature if extensions are enabled (fix(types): Only require extension signature if extensions are enabled #3565)
build(deps): Bump bufbuild/buf-setup-action from 1.35.1 to 1.36.0 (build(deps): Bump bufbuild/buf-setup-action from 1.35.1 to 1.36.0 #3675)
build(deps): Bump docker/build-push-action from 6.5.0 to 6.6.1 (build(deps): Bump docker/build-push-action from 6.5.0 to 6.6.1 #3676)
v0.38.11 (v0.38.11 #3684)
revert(types): Revert fix(types): Add missing JSON tags to DuplicateVoteEvidence and LightClientAttackEvidence types #3543 (backport fix(types): Add missing JSON tags to DuplicateVoteEvidence and LightClientAttackEvidence types (backport #3543) #3549) (revert(types): Revert #3543 (backport #3549) #3705)
build(deps): Bump docker/build-push-action from 6.6.1 to 6.7.0 (build(deps): Bump docker/build-push-action from 6.6.1 to 6.7.0 #3750)
build(deps): Bump bufbuild/buf-setup-action from 1.36.0 to 1.37.0 (build(deps): Bump bufbuild/buf-setup-action from 1.36.0 to 1.37.0 #3749)
build(deps): Bump github.com/btcsuite/btcd/btcutil from 1.1.3 to 1.1.6 (build(deps): Bump github.com/btcsuite/btcd/btcutil from 1.1.3 to 1.1.6 #3780)
build(deps): Bump golang.org/x/crypto from 0.21.0 to 0.26.0 (build(deps): Bump golang.org/x/crypto from 0.21.0 to 0.26.0 #3803)
build(deps): Bump github.com/gorilla/websocket from 1.5.0 to 1.5.3 (build(deps): Bump github.com/gorilla/websocket from 1.5.0 to 1.5.3 #3797)
build(crypto/secp256k1): Update btcec/v2 to v2.3.4 (backport build(crypto/secp256k1): Update btcec/v2 to v2.3.4 #3728) (build(crypto/secp256k1): Update btcec/v2 to v2.3.4 (backport #3728) #3758)
build(deps): Bump github.com/google/uuid from 1.4.0 to 1.6.0 (build(deps): Bump github.com/google/uuid from 1.4.0 to 1.6.0 #3801)
build(deps): Bump github.com/spf13/cobra from 1.8.0 to 1.8.1 (build(deps): Bump github.com/spf13/cobra from 1.8.0 to 1.8.1 #3795)
build(deps): Bump github.com/spf13/viper from 1.18.1 to 1.19.0 (build(deps): Bump github.com/spf13/viper from 1.18.1 to 1.19.0 #3772)
build(deps): Bump github.com/golang/protobuf from 1.5.3 to 1.5.4 (build(deps): Bump github.com/golang/protobuf from 1.5.3 to 1.5.4 #3783)
build(deps): Bump github.com/cometbft/cometbft-db from 0.7.0 to 0.11.0 (build(deps): Bump github.com/cometbft/cometbft-db from 0.7.0 to 0.11.0 #3786)
build(deps): Bump github.com/prometheus/common from 0.42.0 to 0.55.0 (build(deps): Bump github.com/prometheus/common from 0.42.0 to 0.55.0 #3790)
build(deps): Bump github.com/prometheus/client_golang from 1.14.0 to 1.20.1 (build(deps): Bump github.com/prometheus/client_golang from 1.14.0 to 1.20.1 #3793)
feat(e2e): Allow setting log_level in manifest (backport feat(e2e): Allow setting log_level in manifest #3819) (feat(e2e): Allow setting log_level in manifest (backport #3819) #3824)
feat(e2e): add log_format to e2e manifest (backport feat(e2e): add log_format to e2e manifest #3838) (feat(e2e): add log_format to e2e manifest (backport #3838) #3842)
build(deps): Bump bufbuild/buf-setup-action from 1.37.0 to 1.38.0 (build(deps): Bump bufbuild/buf-setup-action from 1.37.0 to 1.38.0 #3853)
mempool: Fix the benchmarks (backport mempool: Fix the benchmarks #934) (mempool: Fix the benchmarks (backport #934) #3893)
fix(privval): CV ignore duplicate privval listen when connected (backport fix(privval): CV ignore duplicate privval listen when connected #3830) (fix(privval): CV ignore duplicate privval listen when connected (backport #3830) #3896)
build(deps): Bump golang.org/x/net from 0.26.0 to 0.28.0 (build(deps): Bump golang.org/x/net from 0.26.0 to 0.28.0 #3905)
build(deps): Bump github.com/Masterminds/semver/v3 from 3.2.0 to 3.3.0 (build(deps): Bump github.com/Masterminds/semver/v3 from 3.2.0 to 3.3.0 #3906)
build(deps): Bump github.com/rs/cors from 1.8.3 to 1.11.1 (build(deps): Bump github.com/rs/cors from 1.8.3 to 1.11.1 #3907)
test(mempool): Add two Update benchmarks (backport test(mempool): Add two Update benchmarks #3873) (test(mempool): Add two Update benchmarks (backport #3873) #3892)
build(deps): Bump github.com/BurntSushi/toml from 1.2.1 to 1.4.0 (build(deps): Bump github.com/BurntSushi/toml from 1.2.1 to 1.4.0 #3908)
build(deps): Bump github.com/cosmos/gogoproto from 1.4.11 to 1.7.0 (build(deps): Bump github.com/cosmos/gogoproto from 1.4.11 to 1.7.0 #3912)
Merge commit from fork
v0.38.12 (v0.38.12 #3982)
build(deps): Bump github.com/minio/highwayhash from 1.0.2 to 1.0.3 (build(deps): Bump github.com/minio/highwayhash from 1.0.2 to 1.0.3 #3914)
build(deps): Bump github.com/prometheus/common from 0.55.0 to 0.57.0 (build(deps): Bump github.com/prometheus/common from 0.55.0 to 0.57.0 #3911)
build(deps): Bump bufbuild/buf-setup-action from 1.38.0 to 1.39.0 (build(deps): Bump bufbuild/buf-setup-action from 1.38.0 to 1.39.0 #3938)
build(deps): Bump slackapi/slack-github-action from 1.26.0 to 1.27.0 (build(deps): Bump slackapi/slack-github-action from 1.26.0 to 1.27.0 #3939)
build(deps): Bump bufbuild/buf-setup-action from 1.39.0 to 1.40.1 (build(deps): Bump bufbuild/buf-setup-action from 1.39.0 to 1.40.1 #4024)
chore: Bump go toolchain to 1.22.7 on v0.38.x (chore: Bump go toolchain to 1.22.7 on v0.38.x #4065)
feat(mempool/metrics): Add new evicted_txs metric and call unused rejected_txs (backport feat(mempool/metrics): Add new evicted_txs metric and call unused rejected_txs #4019) (feat(mempool/metrics): Add new evicted_txs metric and call unused rejected_txs (backport #4019) #4052)
build(deps): Bump Go to 1.22 (backport build(deps): Update cometbft-db to v0.9.5 #4059) (build(deps): Bump Go to 1.22 (backport #4059) #4073)
misc(tools)!: remove tools package (backport misc(tools)!: remove tools package #2046) (misc(tools)!: remove tools package (backport #2046) #2073)
build(deps): Bump gonum.org/v1/gonum from 0.12.0 to 0.15.1 (build(deps): Bump gonum.org/v1/gonum from 0.12.0 to 0.15.1 #3910)
build(deps): Bump bufbuild/buf-setup-action from 1.40.1 to 1.41.0 (build(deps): Bump bufbuild/buf-setup-action from 1.40.1 to 1.41.0 #4096)
fix(mempool): change "mempool is full" log level to debug (backport fix(mempool): change "mempool is full" log level to debug #4123) (fix(mempool): change "mempool is full" log level to debug (backport #4123) #4145)
build(deps): Bump bufbuild/buf-setup-action from 1.41.0 to 1.42.0 (build(deps): Bump bufbuild/buf-setup-action from 1.41.0 to 1.42.0 #4160)
build(deps): Bump docker/build-push-action from 6.7.0 to 6.8.0 (build(deps): Bump docker/build-push-action from 6.7.0 to 6.8.0 #4194)
build(deps): Bump github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0 (build(deps): Bump github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0 #4207)
build(deps): Bump github.com/sasha-s/go-deadlock from 0.3.1 to 0.3.5 (build(deps): Bump github.com/sasha-s/go-deadlock from 0.3.1 to 0.3.5 #4205)
build(deps): Bump github.com/lib/pq from 1.10.7 to 1.10.9 (build(deps): Bump github.com/lib/pq from 1.10.7 to 1.10.9 #4200)
build(deps): Bump github.com/prometheus/common from 0.57.0 to 0.59.1 (build(deps): Bump github.com/prometheus/common from 0.57.0 to 0.59.1 #4204)
build(deps): Bump github.com/adlio/schema from 1.3.3 to 1.3.6 (build(deps): Bump github.com/adlio/schema from 1.3.3 to 1.3.6 #4208)
build(deps): Bump github.com/go-kit/kit from 0.12.0 to 0.13.0 (build(deps): Bump github.com/go-kit/kit from 0.12.0 to 0.13.0 #4206)
build(deps): Bump github.com/prometheus/client_golang from 1.20.1 to 1.20.4 (build(deps): Bump github.com/prometheus/client_golang from 1.20.1 to 1.20.4 #4203)
build(deps): Bump google.golang.org/grpc from 1.66.1 to 1.67.0 (build(deps): Bump google.golang.org/grpc from 1.66.1 to 1.67.0 #4202)
build(deps): Bump bufbuild/buf-setup-action from 1.42.0 to 1.44.0 (build(deps): Bump bufbuild/buf-setup-action from 1.42.0 to 1.44.0 #4265)
build(deps): Bump docker/build-push-action from 6.8.0 to 6.9.0 (build(deps): Bump docker/build-push-action from 6.8.0 to 6.9.0 #4266)
build(deps): Bump docker/setup-buildx-action from 3.6.1 to 3.7.1 (build(deps): Bump docker/setup-buildx-action from 3.6.1 to 3.7.1 #4264)
build(deps): Bump bufbuild/buf-setup-action from 1.44.0 to 1.45.0 (build(deps): Bump bufbuild/buf-setup-action from 1.44.0 to 1.45.0 #4288)
use the latest cometbft-db

PR checklist

Tests written/updated
Changelog entry added in .changelog (we use unclog to manage our changelog)
Updated relevant documentation (docs/ or spec/) and code comments

* docs: various improvements (cometbft#1603) * docs: fix Query return parameters * docs: fix the number of ABCI connections ABCI creates 4 connections, not 3 * docs: bump cleveldb version 1.20 is 6 years old! 1.23 was released on Feb 24, 2021 * docs: remove check from PrepareProposal This check only confuses readers. PrepareProposal returns `proposal.Txs` (original list), not `txs`. Thus for loop is essentially noop and can be removed. Even if we modify PrepareProposal to return txs, it confuses application devs since CometBFT respects the limit when creating a proposal! Therefore, application devs should only check the limit when modifying the transactions, which is not the case here. * docs: minor highlighting * docs: fix syntax error missing comma * docs: fix gogoproto@v1.4.6/proto/merge.go:123:28: type error go: go1.21.3 darwin/amd64 cometbft: v0.38.0 ``` ../../../go/pkg/mod/github.com/cosmos/gogoproto@v1.4.6/proto/merge.go:123:28: type func(x *descriptorpb.FileDescriptorProto, y *descriptorpb.FileDescriptorProto) bool of func(x, y *descriptorpb.FileDescriptorProto) bool {…} does not match inferred type func(a *descriptorpb.FileDescriptorProto, b *descriptorpb.FileDescriptorProto) int for func(a E, b E) int ``` * docs: add missing double quote * docs: make the same changes in go guide - add a note about gogoproto - simplify PrepareProposal - add missing double quote * docs: remove XXX will create a separate PR updating gogoproto for v0.38 * Revert "docs: remove XXX" This reverts commit a4a1a04. (cherry picked from commit a05b73e) # Conflicts: # docs/guides/go-built-in.md * fix merge conflict --------- Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com>

* Build changelog for v0.38.1 release Signed-off-by: Thane Thomson <connect@thanethomson.com> * version: Bump to v0.38.1 Signed-off-by: Thane Thomson <connect@thanethomson.com> --------- Signed-off-by: Thane Thomson <connect@thanethomson.com>

…t#1647) Signed-off-by: Thane Thomson <connect@thanethomson.com>

* proto: Update README Signed-off-by: Thane Thomson <connect@thanethomson.com> * Add versions to table for clarity Signed-off-by: Thane Thomson <connect@thanethomson.com> --------- Signed-off-by: Thane Thomson <connect@thanethomson.com> (cherry picked from commit ee99bf5) Co-authored-by: Thane Thomson <connect@thanethomson.com>

…bft#1660) Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 5.0.0 to 5.1.0. - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@v5.0.0...v5.1.0) --- updated-dependencies: - dependency-name: docker/build-push-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…metbft#1661) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.28.0 to 1.28.1. - [Release notes](https://github.com/bufbuild/buf-setup-action/releases) - [Commits](bufbuild/buf-setup-action@v1.28.0...v1.28.1) --- updated-dependencies: - dependency-name: bufbuild/buf-setup-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…ometbft#1414) (cometbft#1668) As part of porting the cosmos-sdk simulator to running on top of its testutil/network runner, we need a way to simulate adversarial network connections between validators. This change adds the existing fuzzing configuration of P2PConfig to MConnConfig and uses it to conditionally create an unreliable connection in MultiplexTransport. Co-authored-by: Elias Naur <mail@eliasnaur.com> Co-authored-by: Sergio Mena <sergio@informal.systems> (cherry picked from commit 245185a) Co-authored-by: Elias Naur <103319121+elias-orijtech@users.noreply.github.com>

* mempool: add `nop` mempool (cometbft#1643) * add `nop` mempool See [ADR-111](cometbft#1585) * implement NopMempool and NopMempoolReactor modify node.go logic I had to add NopMempoolReactor to pass it to RPC in order not to change it. * check config instead of asserting for nil * start writing docs * add changelog * move changelog * expand docs * remove unused func arguments * add simple test * make linter happy again * doc fixes Co-authored-by: Sergio Mena <sergio@informal.systems> * rename mempoolReactor to waitSyncP2PReactor * improve changelog message * allow empty string for backwards compatibility cometbft#1643 (comment) * make ErrNotAllowed private * mention `create_empty_blocks` in toml https://github.com/cometbft/cometbft/pull/1643/files#r1400434715 * return nil instead of closed channel https://github.com/cometbft/cometbft/pull/1643/files#r1400252575 The reader will block forever, which is exactly what we need. * grammar fixes Co-authored-by: lasaro <lasaro@informal.systems> * update changelog entry * adapt ADR to implementation * remove old ToC entry --------- Co-authored-by: Andy Nogueira <me@andynogueira.dev> Co-authored-by: Sergio Mena <sergio@informal.systems> Co-authored-by: lasaro <lasaro@informal.systems> (cherry picked from commit bc83503) # Conflicts: # config/config.go # config/toml.go # docs/architecture/README.md # docs/architecture/adr-111-nop-mempool.md # docs/core/configuration.md # node/node.go # node/setup.go * fix merge conflicts * add a missing ToC entry --------- Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com>

…ometbft#1685) * docs: various small improvements (part 2) (cometbft#1683) * docs: fix the number of connections CometBFT opens to the ABCI app * docs: fix link formatting * docs: make it explicit that default is TCP for ABCI * docs: replace 'supermajority' with 2/3+ 2/3+ is easier to understand. also this is the first time the reader is seeing the word 'supermajority', which might be confusing without the defition. The defition for supermajority is absent (maybe it's in the spec though) * add a link to jq * suggestions from Lasaro (cherry picked from commit 96abada) # Conflicts: # docs/app-dev/indexing-transactions.md # docs/core/block-structure.md * fixes after merge --------- Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com>

…ometbft#1688) * Do not block indefinitely on the semaphore (cometbft#1654) * Do not block indefinitely on the semaphore * Cancel the context, irrespective of the flow followed * Makes the code more readable * Improving comment * make linter happy * Updating comments to match * Commenting out `select` and leaving it as TODO for when Contexts are more widely used * Cleaned up comments (cherry picked from commit 2679498) # Conflicts: # test/e2e/pkg/manifest.go * fixes conflict --------- Co-authored-by: lasaro <lasaro@informal.systems>

* Add changelog entry * unclog release * unclog build * version: Bump version to v0.38.2 * unclog build

…etbft#1721) * types: validate Validator#Address field (cometbft#1715) * types: validate Validator#Address field * fix TestProposerSelection3 * add a changelog entry * fix two more tests * Update .changelog/unreleased/improvements/1715-validate-validator-address Co-authored-by: Thane Thomson <connect@thanethomson.com> --------- Co-authored-by: Thane Thomson <connect@thanethomson.com> (cherry picked from commit 63fe7bf) # Conflicts: # state/store_test.go # store/store_test.go * fix conflicts --------- Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com>

…t#1730) (cometbft#1745) * fix: increase abci socket message size limit to 2GB (cometbft#1730) * fix: increase abci socket message size to 2GB * fix: added .changelog * Update .changelog/unreleased/improvements/1730-increase-abci-socket-message-size-limit Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com> * fix: use MaxInt32 as message size for 32-bit systems * Update .changelog/unreleased/improvements/1730-increase-abci-socket-message-size-limit --------- Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com> Co-authored-by: Thane Thomson <connect@thanethomson.com> (cherry picked from commit 092b918) * Rename 1730-increase-abci-socket-message-size-limit to 1730-increase-abci-socket-message-size-limit.md --------- Co-authored-by: Troy Kessler <43882936+troykessler@users.noreply.github.com> Co-authored-by: Thane Thomson <connect@thanethomson.com>

* fix: The calculation method of tx size returned by calling proxyapp should be consistent with that of mempool * Revert CHANGELOG.md entries should go into .changelog --------- Co-authored-by: lasaro <lasaro@informal.systems> Co-authored-by: lasaro <lasaro@gmail.com> (cherry picked from commit eb5d9ce) Co-authored-by: leven <112051166+lx-xiang@users.noreply.github.com>

…1759) * Add test missing in cometbft#1687 (cometbft#1712) * Experimenting the fix from lx-xiang * Fixes name in the example * Reverts fix, so it is merged from the proper branch. * Adds a test that fails because the validate is wrong and accepts a block that is larger than it should. * Add changelog for the original PR * Update internal/state/execution_test.go (cherry picked from commit ce0215c) # Conflicts: # abci/example/kvstore/kvstore.go * Solve conflict in the backport --------- Co-authored-by: lasaro <lasaro@informal.systems>

* perf(state): batch save `State` (cometbft#1735) * done stateDB writes batching * remove forgotten debug print * remove forgotten comments * format code * add a changelog entry * fix changelog --------- Co-authored-by: werty144 <anton-paramonov2000@yandex.ru> (cherry picked from commit 76b1cce) * remove duplicate changelog entry --------- Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com>

* Update CODE_OF_CONDUCT.md Updated the contact email to an `informal.systems` one, and some nits. * Update CODE_OF_CONDUCT.md Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com> --------- Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com> (cherry picked from commit bde1111) Co-authored-by: Adi Seredinschi <adizere@gmail.com>

…ns (backport cometbft#1756) (cometbft#1773) * [e2e] Fixes prepareProposal not to return oversized set of transactions (cometbft#1756) * Fixes prepareProposal not to return oversized set of transactions * Update test/e2e/app/app.go * Fix linting error * add changelog entry * Avoid marshalling the tx twice * removing unneeded changelog (cherry picked from commit 0bf3f0a) # Conflicts: # test/e2e/app/app.go * Resolves conflict --------- Co-authored-by: lasaro <lasaro@informal.systems>

* batching in store * save only small blocks as 1 batch * add changelog * extract const * Update .changelog/unreleased/improvements/1755-batch-save-block.md Co-authored-by: Thane Thomson <connect@thanethomson.com> * simplify code * no need to panic on closing batch --------- Co-authored-by: werty144 <anton-paramonov2000@yandex.ru> Co-authored-by: Thane Thomson <connect@thanethomson.com> (cherry picked from commit 30c9cde) Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com>

* chore(docs): small improvements (cometbft#1781) * docs: remove "Run" section from install The "Quick Start" guide does a much better job explaining what is happening, and readers should follow that guide instead. * docs: move "CometBFT Quality Assurance" down No reason to have “CometBFT Quality Assurance” as a second item. The target audience for that document is probably security researchers - not the primary audience. * docs: remove cmdKVStore func in favor of link I can’t see a single reason why users need to see the source code of that function in order to progress with the abci-cli tool. Also the link should point to kvstore app, not abci-cli tool! * docs: swap abci-cli and getting-started items https://docs.cometbft.com/v0.38/app-dev/getting-started#first-cometbft-app should go before https://docs.cometbft.com/v0.38/app-dev/abci-cli because the latter is used to test ABCI applications. And by this point, the reader doesn’t have an app to test. * docs: remove "Committing a Block" from validators page not clear what’s the reason of explaining consensus details in the validators section. If a validator wants to get familiar with consensus, shouldn’t it go to consensus spec / page? * docs: make it clear who curates the validator set “Validators are expected to be online, and the set of validators is permissioned/curated by some external process.” This sentence is confusing to me. The set is curated by the ABCI application. * docs: replace EndBlock with FinalizeBlock * docs: add Bash script to compile persistent peers string Getting an ID from every machine is tedious and can be streamlined with a script, which, given IPs, collects IDs and outputs the command to run CometBFT. (cherry picked from commit 9020ce2) # Conflicts: # docs/app-dev/abci-cli.md # docs/core/validators.md # docs/data-companion/README.md * fix conflicts * correct number for qa item --------- Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com>

Bumps [actions/setup-go](https://github.com/actions/setup-go) from 4 to 5. - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@v4...v5) --- updated-dependencies: - dependency-name: actions/setup-go dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [actions/stale](https://github.com/actions/stale) from 8 to 9. - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](actions/stale@v8...v9) --- updated-dependencies: - dependency-name: actions/stale dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

… signatures (backport cometbft#1750) (cometbft#1800) * `VerifyCommitLight` and `VerifyCommitLightTrusting` _never_ check all signatures (cometbft#1750) * [e2e] Repro evidence bug: not checking all signatures * _Only_ callsites in the light client should be skipping verification of commit signatures * Address PR comments * Rename UT --------- Co-authored-by: Jasmina Malicevic <jasmina.dustinac@gmail.com> (cherry picked from commit b70c4ab) # Conflicts: # types/validation_test.go * Revert "`VerifyCommitLight` and `VerifyCommitLightTrusting` _never_ check all signatures (cometbft#1750)" This reverts commit c14ff96. * `VerifyCommitLight` and `VerifyCommitLightTrusting` _never_ check all signatures (cometbft#1750) * [e2e] Repro evidence bug: not checking all signatures * _Only_ callsites in the light client should be skipping verification of commit signatures * Address PR comments * Rename UT --------- Co-authored-by: Jasmina Malicevic <jasmina.dustinac@gmail.com> --------- Co-authored-by: Sergio Mena <sergio@informal.systems> Co-authored-by: Jasmina Malicevic <jasmina.dustinac@gmail.com>

…etbft#1804) (cometbft#1813) * chore(spec): specify which fields must be deterministic (cometbft#1804) * spec: specify which fields must be deterministic Closes cometbft#1622 * proto: add comment to `events` field * spec: align spec for CheckTx Response with implementation * change No to N/A in methods not involved in SMR * change No to N/A in Info method as well * same for snapshot (cherry picked from commit 7c6951f) # Conflicts: # proto/cometbft/abci/v1/types.proto # spec/abci/abci++_basic_concepts.md # spec/abci/abci++_methods.md * fix conflicts --------- Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com>

(cherry picked from commit 437391a) Co-authored-by: Sergio Mena <sergio@informal.systems>

…etbft#1808) (cometbft#1817) (cherry picked from commit 149ac1e) Co-authored-by: Sergio Mena <sergio@informal.systems>

…ft#1798) (cometbft#1832) * chore(docs): explain the effect of `timeout_propose` (cometbft#1798) * docs: explain the effect of `timeout_propose` on the proposer selection process. Closes cometbft#1586 * fix example Co-authored-by: Hernán Vanzetto <15466498+hvanz@users.noreply.github.com> * small improvement cometbft#1798 (comment) * fix typo --------- Co-authored-by: Hernán Vanzetto <15466498+hvanz@users.noreply.github.com> (cherry picked from commit 61d508e) # Conflicts: # docs/core/configuration.md # test/e2e/pkg/infra/digitalocean/digitalocean.go * fix conflicts --------- Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com>

* Backport changelog for cometbft#896 * cometbft#896 was committed before , so moving it to the right release

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3 to 4. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v3...v4) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…ft#1863) * Updates go crypto package to v0.17.0 (cometbft#1859) (cherry picked from commit fd87fda) # Conflicts: # go.mod # go.sum * Solving conflict --------- Co-authored-by: lasaro <lasaro@informal.systems>

…metbft#4024) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.39.0 to 1.40.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bufbuild/buf-setup-action/releases">bufbuild/buf-setup-action's releases</a>.</em></p> <blockquote> <h2>v1.40.1</h2> <p>Release v1.40.1</p> <h2>v1.40.0</h2> <p>Release v1.40.0</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/2dbfb63c8b0cc4f1707ba5dd23017e998a25b2f0"><code>2dbfb63</code></a> Release v1.40.1 (<a href="https://redirect.github.com/bufbuild/buf-setup-action/issues/223">#223</a>)</li> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/51c53201f0da34af376e0b998c889ebb2813d479"><code>51c5320</code></a> Release v1.40.0 (<a href="https://redirect.github.com/bufbuild/buf-setup-action/issues/222">#222</a>)</li> <li>See full diff in <a href="https://github.com/bufbuild/buf-setup-action/compare/v1.39.0...v1.40.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bufbuild/buf-setup-action&package-manager=github_actions&previous-version=1.39.0&new-version=1.40.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…rejected_txs` (backport cometbft#4019) (cometbft#4052) #### PR checklist - [ ] Tests written/updated - [x] Changelog entry added in `.changelog` (we use [unclog](https://github.com/informalsystems/unclog) to manage our changelog) - [X] Updated relevant documentation (`docs/` or `spec/`) and code comments <hr>This is an automatic backport of pull request cometbft#4019 done by [Mergify](https://mergify.com). --------- Co-authored-by: Hernán Vanzetto <15466498+hvanz@users.noreply.github.com> Co-authored-by: hvanz <hernan.vanzetto@gmail.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>

### Context We are updating CometBFT dependencies to fix new CVE vulnerabilities. Cometbft-db v0.9.5 updates its Go version to 1.22 and updates some of its dependencies vulnerable to CVEs. See its [CHANGELOG](https://github.com/cometbft/cometbft-db/blob/v0.9.x/CHANGELOG.md#v095) ### This Change This PR updates cometbft-db to v0.9.5. --- #### PR checklist ~- [ ] Tests written/updated~ - [ ] Changelog entry added in `.changelog` (we use [unclog](https://github.com/informalsystems/unclog) to manage our changelog) ~- [ ] Updated relevant documentation (`docs/` or `spec/`) and code comments~ <hr>This is an automatic backport of pull request cometbft#4059 done by [Mergify](https://mergify.com).<hr>This is an automatic backport of pull request cometbft#4072 done by [Mergify](https://mergify.com). --------- Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com>

…ft#2073) This is an automatic backport of pull request cometbft#2046 done by [Mergify](https://mergify.com). Cherry-pick of 2bbb5c1 has failed: ``` On branch mergify/bp/v0.38.x/pr-2046 Your branch is up to date with 'origin/v0.38.x'. You are currently cherry-picking commit 2bbb5c1. (fix conflicts and run "git cherry-pick --continue") (use "git cherry-pick --skip" to skip this patch) (use "git cherry-pick --abort" to cancel the cherry-pick operation) Changes to be committed: modified: scripts/mockery_generate.sh deleted: tools/proto/Dockerfile deleted: tools/tools.go modified: types/params.go Unmerged paths: (use "git add/rm <file>..." as appropriate to mark resolution) both modified: go.mod both modified: go.sum deleted by them: tools/README.md ``` To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/github/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally --- <details> <summary>Mergify commands and options</summary> <br /> More conditions and actions can be found in the [documentation](https://docs.mergify.com/). You can also trigger Mergify actions by commenting on this pull request: - `@Mergifyio refresh` will re-evaluate the rules - `@Mergifyio rebase` will rebase this PR on its base branch - `@Mergifyio update` will merge the base branch into this PR - `@Mergifyio backport <destination>` will backport this PR on `<destination>` branch Additionally, on Mergify [dashboard](https://dashboard.mergify.com) you can: - look at your merge queues - generate the Mergify configuration with the config editor. Finally, you can contact us on https://mergify.com </details> --------- Co-authored-by: Jacob Gadikian <jacobgadikian@gmail.com> Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com>

…3910) Bumps [gonum.org/v1/gonum](https://github.com/gonum/gonum) from 0.12.0 to 0.15.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/gonum/gonum/releases">gonum.org/v1/gonum's releases</a>.</em></p> <blockquote> <h2>v0.15.1</h2> <p>Release v0.15.1 is a bug fix release in the v0.15 branch.</p> <p>Fixes since v0.15.0:</p> <p>b6147192 stat/distuv: correct Gamma Mode() and LogProb(0)/Prob(0) for alpha <= 1 5bc3fec2 mat: fix dst matrix shape check in QR.RTo 354eb431 mat: calculate Q elements lazily when calling QR.At</p> <h2>v0.15.0</h2> <p>Release v0.15.0 is a minor release in the v0.15 branch.</p> <p>Bug fixes/improvements since v0.14.0:</p> <p>269815f0 spatial/curve: new package to constuct 2-, 3- and 4-D Hilbert curves b27ae13f lapack/gonum: add Dptcon 55edfc1d lapack/testlapack: add dlanst 3462e90a lapack/gonum: add Dptsv 44d84c93 lapack/gonum: add Dpttrs c4e3bfbe lapack/gonum: add Dpttrf fa306f21 lapack/gonum: handle NaN and Inf input to Dgecon db43f45c graph/path: do not keep duplicate paths in YenKShortestPaths 5e05b179 lapack/gonum: fix accumulation in Dlassq 606793d4 stat/distmv: add EigenSym interface ff24a548 stat/distmv: add special case in NormalRandCov for mat.EigenSym 83fd3a6d mat: add RawValues and RawQ to EigenSym 999e48d0 mat: make EigenSym satisfy Matrix 71ca02b7 mat: delegate to SolveTo method in *Dense.Solve f560d5cb stat/distmv: add NormalRandCov b2722176 mat: make LQ satisfy Matrix 78bc3a48 mat: add VecDense.Permute 6e2f5c58 lapack/gonum: require exact length of tau in QR routines bd767ae5 mat: don't panic in Dims on zero Cholesky types 45b74210 mat: make QR satisfy Matrix aef3c5f3 mat: make LU satisfy Matrix 2d1137f1 mat: add LU.RowPivots and deprecate LU.Pivot ef75f4dd mat: return U and ColumnPivots from PivotedCholesky 5f74663e mat: add Dense.PermuteRows and PermuteCols ff3e3209 lapack/lapack64: add Geqp3 and clean up docs 7df15c33 lapack/gonum: clean up Dgghrd and its test f0a57a45 lapack/gonum: add Dgghrd and its test 7bed099d lapack/gonum: clean up Dlanhs and its test aa92aa08 spatial/kdtree: update value in place in NKeeper.Keep</p> <h2>v0.14.0</h2> <p>Release v0.14.0 is a minor release in the v0.14 branch.</p> <p>API breaking changes:</p> <p>9e7bb936 graph/path: allow cost-based Yen shortest path calculation</p>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/gonum/gonum/commit/bdcda9a453049449163d160b98285b64ec8093a1"><code>bdcda9a</code></a> graph: use slices package for sorting and reversing slices</li> <li><a href="https://github.com/gonum/gonum/commit/a9b228ed6bdcfafd52ce8ba413595310823a0004"><code>a9b228e</code></a> A+C: add Tristan Nicholls</li> <li><a href="https://github.com/gonum/gonum/commit/1f29d7b1d1724243c9f4a156cb1e16c9cbb15de1"><code>1f29d7b</code></a> mat: calculate Q elements lazily when calling QR.At</li> <li><a href="https://github.com/gonum/gonum/commit/f1a62e187e273b2d99f9c2a04fa8931df9c22947"><code>f1a62e1</code></a> mat: fix dst matrix shape check in QR.RTo</li> <li><a href="https://github.com/gonum/gonum/commit/4cb1c6f4a863dd4bde148d9b8736b7d69af4b75b"><code>4cb1c6f</code></a> ci,mod: update to go1.23</li> <li><a href="https://github.com/gonum/gonum/commit/0c62273e338b91cd9578ed93572c693ba55e1eaa"><code>0c62273</code></a> A+C: add Dirk Müller</li> <li><a href="https://github.com/gonum/gonum/commit/0efa2841bf9d1f6ad3b4f5638089c8d6cc72f51e"><code>0efa284</code></a> A+C: add Tom Payne</li> <li><a href="https://github.com/gonum/gonum/commit/f48364e31d40fb9c3b6de7b7d20223edd6d49779"><code>f48364e</code></a> interp: increase speed of findSegment</li> <li><a href="https://github.com/gonum/gonum/commit/1dd194f95b64cda4727b9548bcd2471b4372c7c8"><code>1dd194f</code></a> stat/distuv: correct Gamma Mode doc comment</li> <li><a href="https://github.com/gonum/gonum/commit/35bb474ac513c77971be8e1e9ab2bd1eaca07c79"><code>35bb474</code></a> stat/distuv: correct Gamma Mode() and LogProb(0)/Prob(0) for alpha <= 1</li> <li>Additional commits viewable in <a href="https://github.com/gonum/gonum/compare/v0.12.0...v0.15.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gonum.org/v1/gonum&package-manager=go_modules&previous-version=0.12.0&new-version=0.15.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…metbft#4096) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.40.1 to 1.41.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bufbuild/buf-setup-action/releases">bufbuild/buf-setup-action's releases</a>.</em></p> <blockquote> <h2>v1.41.0</h2> <p>Release v1.41.0</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/2881ede27923557cb71f4ddc8954905c2639d1fb"><code>2881ede</code></a> Release v1.41.0 (<a href="https://redirect.github.com/bufbuild/buf-setup-action/issues/224">#224</a>)</li> <li>See full diff in <a href="https://github.com/bufbuild/buf-setup-action/compare/v1.40.1...v1.41.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bufbuild/buf-setup-action&package-manager=github_actions&previous-version=1.40.1&new-version=1.41.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…ometbft#4123) (cometbft#4145) it happens in benchmark or production when traffic is high, the log frequency is very high because it's triggered by p2p tx propagation message. Solution: - change it to debug level <hr>This is an automatic backport of pull request cometbft#4123 done by [Mergify](https://mergify.com). --------- Co-authored-by: yihuang <yi.codeplayer@gmail.com> Co-authored-by: Andy Nogueira <me@andynogueira.dev>

…metbft#4160) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.41.0 to 1.42.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bufbuild/buf-setup-action/releases">bufbuild/buf-setup-action's releases</a>.</em></p> <blockquote> <h2>v1.42.0</h2> <p>Release v1.42.0</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/a8b4a18369a5feb07d4bf9cb2b24f81d105d7bab"><code>a8b4a18</code></a> Release v1.42.0 (<a href="https://redirect.github.com/bufbuild/buf-setup-action/issues/225">#225</a>)</li> <li>See full diff in <a href="https://github.com/bufbuild/buf-setup-action/compare/v1.41.0...v1.42.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bufbuild/buf-setup-action&package-manager=github_actions&previous-version=1.41.0&new-version=1.42.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…bft#4194) Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.7.0 to 6.8.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/build-push-action/releases">docker/build-push-action's releases</a>.</em></p> <blockquote> <h2>v6.8.0</h2> <ul> <li>Bump <code>@docker/actions-toolkit</code> from 0.37.1 to 0.38.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1230">docker/build-push-action#1230</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push-action/compare/v6.7.0...v6.8.0">https://github.com/docker/build-push-action/compare/v6.7.0...v6.8.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/build-push-action/commit/32945a339266b759abcbdc89316275140b0fc960"><code>32945a3</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/1230">#1230</a> from docker/dependabot/npm_and_yarn/docker/actions-t...</li> <li><a href="https://github.com/docker/build-push-action/commit/e0fe9cf0f26132beab7b62929bd647eef9e7df31"><code>e0fe9cf</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/build-push-action/commit/8f1ff6bf9a836299c21b10f942be49efb52a832c"><code>8f1ff6b</code></a> chore(deps): Bump <code>@docker/actions-toolkit</code> from 0.37.1 to 0.38.0</li> <li>See full diff in <a href="https://github.com/docker/build-push-action/compare/v6.7.0...v6.8.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/build-push-action&package-manager=github_actions&previous-version=6.7.0&new-version=6.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…ometbft#4205) Bumps [github.com/sasha-s/go-deadlock](https://github.com/sasha-s/go-deadlock) from 0.3.1 to 0.3.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sasha-s/go-deadlock/releases">github.com/sasha-s/go-deadlock's releases</a>.</em></p> <blockquote> <h2>v0.3.3</h2> <h2>What's Changed</h2> <ul> <li>Add missing sync.NewCond wrapper by <a href="https://github.com/ncw"><code>@ncw</code></a> in <a href="https://redirect.github.com/sasha-s/go-deadlock/pull/22">sasha-s/go-deadlock#22</a></li> <li>fixed the comment of Opts.DeadlockTimeout in deadlock.go by <a href="https://github.com/h3n4l"><code>@h3n4l</code></a> in <a href="https://redirect.github.com/sasha-s/go-deadlock/pull/23">sasha-s/go-deadlock#23</a></li> <li>deadlock: Add TryLock wrappers by <a href="https://github.com/jrajahalme"><code>@jrajahalme</code></a> in <a href="https://redirect.github.com/sasha-s/go-deadlock/pull/30">sasha-s/go-deadlock#30</a></li> <li>Reuse timers with sync.Pool by <a href="https://github.com/millfort"><code>@millfort</code></a> in <a href="https://redirect.github.com/sasha-s/go-deadlock/pull/31">sasha-s/go-deadlock#31</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/ncw"><code>@ncw</code></a> made their first contribution in <a href="https://redirect.github.com/sasha-s/go-deadlock/pull/22">sasha-s/go-deadlock#22</a></li> <li><a href="https://github.com/h3n4l"><code>@h3n4l</code></a> made their first contribution in <a href="https://redirect.github.com/sasha-s/go-deadlock/pull/23">sasha-s/go-deadlock#23</a></li> <li><a href="https://github.com/jrajahalme"><code>@jrajahalme</code></a> made their first contribution in <a href="https://redirect.github.com/sasha-s/go-deadlock/pull/30">sasha-s/go-deadlock#30</a></li> <li><a href="https://github.com/millfort"><code>@millfort</code></a> made their first contribution in <a href="https://redirect.github.com/sasha-s/go-deadlock/pull/31">sasha-s/go-deadlock#31</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sasha-s/go-deadlock/compare/v0.3.1...v0.3.3">https://github.com/sasha-s/go-deadlock/compare/v0.3.1...v0.3.3</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sasha-s/go-deadlock/commit/464d34347a399b840a4f963cc96dfc993ccf8c62"><code>464d343</code></a> update github workflows to test on go 1.23</li> <li><a href="https://github.com/sasha-s/go-deadlock/commit/564b73de7bb88918c298624d530f83efcec20cbf"><code>564b73d</code></a> update goid</li> <li><a href="https://github.com/sasha-s/go-deadlock/commit/ed6f7f6d979ce0a3df1ba7683c7735373a9a97c7"><code>ed6f7f6</code></a> Reuse timers with sync.Pool (<a href="https://redirect.github.com/sasha-s/go-deadlock/issues/31">#31</a>)</li> <li><a href="https://github.com/sasha-s/go-deadlock/commit/20e556a2e9adcf7184892aeb8d5f254293e505d7"><code>20e556a</code></a> deadlock: Add TryLock wrappers (<a href="https://redirect.github.com/sasha-s/go-deadlock/issues/30">#30</a>)</li> <li><a href="https://github.com/sasha-s/go-deadlock/commit/5afde13977e624ab3bd64e5801f75f9e8eb1f41b"><code>5afde13</code></a> fixed the comment of Opts.DeadlockTimeout in deadlock.go (<a href="https://redirect.github.com/sasha-s/go-deadlock/issues/23">#23</a>)</li> <li><a href="https://github.com/sasha-s/go-deadlock/commit/f58e13930c01bb88ec001b9eddffa3c2afcadbeb"><code>f58e139</code></a> Add missing sync.NewCond wrapper (<a href="https://redirect.github.com/sasha-s/go-deadlock/issues/22">#22</a>)</li> <li><a href="https://github.com/sasha-s/go-deadlock/commit/4a6d8f385ee1559eaf7147969730022208b3506f"><code>4a6d8f3</code></a> Create go.yml</li> <li><a href="https://github.com/sasha-s/go-deadlock/commit/e8cdaa485d8bad7743135de6082a4332c83592c4"><code>e8cdaa4</code></a> update go versions in CI</li> <li><a href="https://github.com/sasha-s/go-deadlock/commit/1182f7860fd571d1092e0483285e995aff8a0a70"><code>1182f78</code></a> Update Readme.md</li> <li><a href="https://github.com/sasha-s/go-deadlock/commit/82c26c5c235b3c675d9ddfda5792ab33a1f171f8"><code>82c26c5</code></a> migrate to travis-ci.com</li> <li>See full diff in <a href="https://github.com/sasha-s/go-deadlock/compare/v0.3.1...v0.3.5">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sasha-s/go-deadlock&package-manager=go_modules&previous-version=0.3.1&new-version=0.3.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>

) Bumps [github.com/lib/pq](https://github.com/lib/pq) from 1.10.7 to 1.10.9. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/lib/pq/releases">github.com/lib/pq's releases</a>.</em></p> <blockquote> <h2>v1.10.9</h2> <ul> <li>Fixes backwards incompat bug with 1.13.</li> <li>Fixes pgpass issue</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/lib/pq/commit/2a217b94f5ccd3de31aec4152a541b9ff64bed05"><code>2a217b9</code></a> add version check for go 1.15 (<a href="https://redirect.github.com/lib/pq/issues/1123">#1123</a>)</li> <li><a href="https://github.com/lib/pq/commit/d8d93a38df0048951ff15830d793024f890f6c3c"><code>d8d93a3</code></a> fix handle pgpass (<a href="https://redirect.github.com/lib/pq/issues/1120">#1120</a>)</li> <li><a href="https://github.com/lib/pq/commit/c10fcfec9389c2e257cf50b7e6d218dde1d062f4"><code>c10fcfe</code></a> remove stray debugging code</li> <li><a href="https://github.com/lib/pq/commit/96e73eb9aa7ba849b24eae15477456d8bbb1c9b7"><code>96e73eb</code></a> conn: Implement driver.Validator, SessionResetter for cancelation</li> <li><a href="https://github.com/lib/pq/commit/922c00e176fb3960d912dc2c7f67ea2cf18d27b0"><code>922c00e</code></a> Update codeql-analysis.yml</li> <li><a href="https://github.com/lib/pq/commit/a2a317360bd33f51c5804bde348c35a65f5644b1"><code>a2a3173</code></a> Update test.yml</li> <li><a href="https://github.com/lib/pq/commit/3a6282fb835a9901f95a9ba9c3b21e16afed61f3"><code>3a6282f</code></a> Reduced the complexity of handlePgpass (<a href="https://redirect.github.com/lib/pq/issues/1101">#1101</a>)</li> <li><a href="https://github.com/lib/pq/commit/133ac67c2960135f7e0823cb7ba858101ba3d87f"><code>133ac67</code></a> Improved the performance of CopyIn and CopyInSchema and added BufferQuoteIden...</li> <li>See full diff in <a href="https://github.com/lib/pq/compare/v1.10.7...v1.10.9">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/lib/pq&package-manager=go_modules&previous-version=1.10.7&new-version=1.10.9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>

…ometbft#4204) Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.57.0 to 0.59.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/prometheus/common/releases">github.com/prometheus/common's releases</a>.</em></p> <blockquote> <h2>v0.59.1</h2> <h2>What's Changed</h2> <ul> <li>fix(utf8): Fix multiple metric name inside braces validation by <a href="https://github.com/fedetorres93"><code>@fedetorres93</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/691">prometheus/common#691</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/common/compare/v0.59.0...v0.59.1">https://github.com/prometheus/common/compare/v0.59.0...v0.59.1</a></p> <h2>v0.59.0</h2> <h2>What's Changed</h2> <ul> <li>expfmt: Add WithEscapingScheme to help construct Formats by <a href="https://github.com/ywwg"><code>@ywwg</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/688">prometheus/common#688</a></li> <li>Change the default escape method to UnderscoreEscaping by <a href="https://github.com/ywwg"><code>@ywwg</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/690">prometheus/common#690</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/common/compare/v0.58.0...v0.59.0">https://github.com/prometheus/common/compare/v0.58.0...v0.59.0</a></p> <h2>v0.58.0</h2> <h2>What's Changed</h2> <ul> <li>docs: mention new promslog package in package list in README by <a href="https://github.com/tjhop"><code>@tjhop</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/683">prometheus/common#683</a></li> <li>Bump golang.org/x/oauth2 from 0.21.0 to 0.22.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/684">prometheus/common#684</a></li> <li>Bump golang.org/x/net from 0.27.0 to 0.28.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/685">prometheus/common#685</a></li> <li>Remove secret file existence check in Validate for headers by <a href="https://github.com/roidelapluie"><code>@roidelapluie</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/687">prometheus/common#687</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/common/compare/v0.57.0...v0.58.0">https://github.com/prometheus/common/compare/v0.57.0...v0.58.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/prometheus/common/commit/be8a747a1cf9f34dd301ff4e9f8527262e66c153"><code>be8a747</code></a> fix(utf8): Fix multiple metric name inside braces validation (<a href="https://redirect.github.com/prometheus/common/issues/691">#691</a>)</li> <li><a href="https://github.com/prometheus/common/commit/bf4843e30aed46215093a79e381b07ba8df96e0a"><code>bf4843e</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/common/issues/690">#690</a> from ywwg/owilliams/default-escaping</li> <li><a href="https://github.com/prometheus/common/commit/01da22614fd688ce9040f3c72169b09b8104eec1"><code>01da226</code></a> Change the default escape method to UnderscoreEscaping</li> <li><a href="https://github.com/prometheus/common/commit/4f8e8f4cacf11e4d69d587e30d99ae7d88cc0878"><code>4f8e8f4</code></a> expfmt: Add WithEscapingScheme to help construct Formats (<a href="https://redirect.github.com/prometheus/common/issues/688">#688</a>)</li> <li><a href="https://github.com/prometheus/common/commit/b1880d0dabb633dbf29b999c6a046637efb602fe"><code>b1880d0</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/common/issues/687">#687</a> from roidelapluie/checkheader</li> <li><a href="https://github.com/prometheus/common/commit/334963d1a28ee07975f6777cf65539ecddb89ae0"><code>334963d</code></a> Change the logic for SetDirectory</li> <li><a href="https://github.com/prometheus/common/commit/d64a7472ab6d74cc6b7984cd36f0c5c6129b7a68"><code>d64a747</code></a> Remove secret file existence check in Validate for headers</li> <li><a href="https://github.com/prometheus/common/commit/06c24259364465e6a0728c58dd1f1c99cc07fc3d"><code>06c2425</code></a> Bump golang.org/x/net from 0.27.0 to 0.28.0 (<a href="https://redirect.github.com/prometheus/common/issues/685">#685</a>)</li> <li><a href="https://github.com/prometheus/common/commit/4606c0a4f9447038e704e4d928b1d0e587e81e63"><code>4606c0a</code></a> Bump golang.org/x/oauth2 from 0.21.0 to 0.22.0 (<a href="https://redirect.github.com/prometheus/common/issues/684">#684</a>)</li> <li><a href="https://github.com/prometheus/common/commit/d98411bbf37c7f936cef6d32a6ca965588521b4d"><code>d98411b</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/common/issues/683">#683</a> from tjhop/docs/promslog-README</li> <li>Additional commits viewable in <a href="https://github.com/prometheus/common/compare/v0.57.0...v0.59.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/prometheus/common&package-manager=go_modules&previous-version=0.57.0&new-version=0.59.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>

…ft#4208) Bumps [github.com/adlio/schema](https://github.com/adlio/schema) from 1.3.3 to 1.3.6. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/adlio/schema/releases">github.com/adlio/schema's releases</a>.</em></p> <blockquote> <h2>v1.3.6</h2> <h2>What's Changed</h2> <ul> <li>Bump golang.org/x/net from 0.10.0 to 0.23.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/adlio/schema/pull/30">adlio/schema#30</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/adlio/schema/compare/v1.3.5...v1.3.6">https://github.com/adlio/schema/compare/v1.3.5...v1.3.6</a></p> <h2>v1.3.5</h2> <h2>What's Changed</h2> <ul> <li>Fix embedded migrations example by <a href="https://github.com/kalafut"><code>@kalafut</code></a> in <a href="https://redirect.github.com/adlio/schema/pull/24">adlio/schema#24</a></li> <li>Bump golang.org/x/crypto from 0.1.0 to 0.17.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/adlio/schema/pull/27">adlio/schema#27</a></li> <li>Bump github.com/docker/docker from 20.10.24+incompatible to 24.0.7+incompatible by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/adlio/schema/pull/26">adlio/schema#26</a></li> <li>Bump github.com/opencontainers/runc from 1.1.5 to 1.1.12 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/adlio/schema/pull/28">adlio/schema#28</a></li> <li>Bump github.com/docker/docker from 24.0.7+incompatible to 24.0.9+incompatible by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/adlio/schema/pull/29">adlio/schema#29</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/adlio/schema/compare/v1.3.4...v1.3.5">https://github.com/adlio/schema/compare/v1.3.4...v1.3.5</a></p> <h2>v1.3.4</h2> <h2>What's Changed</h2> <ul> <li>Bump golang.org/x/net from 0.0.0-20220617184016-355a448f1bc9 to 0.7.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/adlio/schema/pull/18">adlio/schema#18</a></li> <li>Update golangci-lint by <a href="https://github.com/adlio"><code>@adlio</code></a> in <a href="https://redirect.github.com/adlio/schema/pull/22">adlio/schema#22</a></li> <li>Bump golang.org/x/crypto from 0.0.0-20201016220609-9e8e0b390897 to 0.1.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/adlio/schema/pull/19">adlio/schema#19</a></li> <li>Bump github.com/docker/docker from 20.10.17+incompatible to 20.10.24+incompatible by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/adlio/schema/pull/21">adlio/schema#21</a></li> <li>Bump github.com/opencontainers/runc from 1.1.3 to 1.1.5 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/adlio/schema/pull/20">adlio/schema#20</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/adlio/schema/compare/v1.3.3...v1.3.4">https://github.com/adlio/schema/compare/v1.3.3...v1.3.4</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/adlio/schema/commit/3dd37bbbdaec4b0a8e864122ffc5941d79dd37a0"><code>3dd37bb</code></a> Merge pull request <a href="https://redirect.github.com/adlio/schema/issues/30">#30</a> from adlio/dependabot/go_modules/golang.org/x/net-0.23.0</li> <li><a href="https://github.com/adlio/schema/commit/898b2da7fa18496ac02ff8c7cc4a6ad1089e4040"><code>898b2da</code></a> Bump golang.org/x/net from 0.10.0 to 0.23.0</li> <li><a href="https://github.com/adlio/schema/commit/3d4bda6646decc46eb5e70806d6ef0aa446f6271"><code>3d4bda6</code></a> Merge pull request <a href="https://redirect.github.com/adlio/schema/issues/29">#29</a> from adlio/dependabot/go_modules/github.com/docker/doc...</li> <li><a href="https://github.com/adlio/schema/commit/6cab430cf151260ed7fd86a8a81ea3454b1f2830"><code>6cab430</code></a> Merge pull request <a href="https://redirect.github.com/adlio/schema/issues/28">#28</a> from adlio/dependabot/go_modules/github.com/opencontai...</li> <li><a href="https://github.com/adlio/schema/commit/60e7bc511525c50d2da6453b7613f6b466edc6f7"><code>60e7bc5</code></a> Bump github.com/docker/docker</li> <li><a href="https://github.com/adlio/schema/commit/1084587924d92a067d1d94f9e958b9865b307ac2"><code>1084587</code></a> Bump github.com/opencontainers/runc from 1.1.5 to 1.1.12</li> <li><a href="https://github.com/adlio/schema/commit/1b012c934c70723f04025310c1607683f9d95a1c"><code>1b012c9</code></a> Merge pull request <a href="https://redirect.github.com/adlio/schema/issues/26">#26</a> from adlio/dependabot/go_modules/github.com/docker/doc...</li> <li><a href="https://github.com/adlio/schema/commit/2330eec246224f782e2f6997b544839445ab0576"><code>2330eec</code></a> Merge pull request <a href="https://redirect.github.com/adlio/schema/issues/27">#27</a> from adlio/dependabot/go_modules/golang.org/x/crypto-0...</li> <li><a href="https://github.com/adlio/schema/commit/99d0e6c6c17eaf98330aa592b0f51aa7acb807be"><code>99d0e6c</code></a> Adjust CircleCI config</li> <li><a href="https://github.com/adlio/schema/commit/64f56765a6101f32541967f7360b4c58a61c68ce"><code>64f5676</code></a> Bump golang.org/x/crypto from 0.1.0 to 0.17.0</li> <li>Additional commits viewable in <a href="https://github.com/adlio/schema/compare/v1.3.3...v1.3.6">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/adlio/schema&package-manager=go_modules&previous-version=1.3.3&new-version=1.3.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>

…1.20.4 (cometbft#4203) Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.20.1 to 1.20.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/prometheus/client_golang/releases">github.com/prometheus/client_golang's releases</a>.</em></p> <blockquote> <h2>v1.20.4</h2> <ul> <li>[BUGFIX] histograms: Fix a possible data race when appending exemplars vs metrics gather. <a href="https://redirect.github.com/prometheus/client_golang/issues/1623">#1623</a></li> </ul> <h2>v1.20.3</h2> <ul> <li>[BUGFIX] histograms: Fix possible data race when appending exemplars. <a href="https://redirect.github.com/prometheus/client_golang/issues/1608">#1608</a></li> </ul> <h2>v1.20.2</h2> <ul> <li>[BUGFIX] promhttp: Unset Content-Encoding header when data is uncompressed. <a href="https://redirect.github.com/prometheus/client_golang/issues/1596">#1596</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md">github.com/prometheus/client_golang's changelog</a>.</em></p> <blockquote> <h2>Unreleased</h2> <ul> <li>[BUGFIX] histograms: Fix possible data race when appending exemplars vs metrics gather. <a href="https://redirect.github.com/prometheus/client_golang/issues/1623">#1623</a></li> </ul> <h2>1.20.3 / 2024-09-05</h2> <ul> <li>[BUGFIX] histograms: Fix possible data race when appending exemplars. <a href="https://redirect.github.com/prometheus/client_golang/issues/1608">#1608</a></li> </ul> <h2>1.20.2 / 2024-08-23</h2> <ul> <li>[BUGFIX] promhttp: Unset Content-Encoding header when data is uncompressed. <a href="https://redirect.github.com/prometheus/client_golang/issues/1596">#1596</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/prometheus/client_golang/commit/05fcde9fe4eb93d3fb7b56ebe51acf80536f0583"><code>05fcde9</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/client_golang/issues/1623">#1623</a> from krajorama/data-race-in-histogram-write</li> <li><a href="https://github.com/prometheus/client_golang/commit/209f4c041ed1764866f44dd053a8d94aa051c610"><code>209f4c0</code></a> Add changelog</li> <li><a href="https://github.com/prometheus/client_golang/commit/1e398ccb1259d20836e3003885bdd949cb21e635"><code>1e398cc</code></a> native histogram: Fix race between Write and addExemplar</li> <li><a href="https://github.com/prometheus/client_golang/commit/ef2f87ea986252194ea960187b20b409180044dd"><code>ef2f87e</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/client_golang/issues/1620">#1620</a> from prometheus/arthursens/prepare-1.20.3</li> <li><a href="https://github.com/prometheus/client_golang/commit/937ac63d3d2dda83847f4ca842d62edabce4e743"><code>937ac63</code></a> Add changelog entry for 1.20.3</li> <li><a href="https://github.com/prometheus/client_golang/commit/6e9914db5af255f5def17d54a7ca9c531771f4ca"><code>6e9914d</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/client_golang/issues/1608">#1608</a> from krajorama/index-out-of-range-native-histogram-e...</li> <li><a href="https://github.com/prometheus/client_golang/commit/d6b8c8925bd16626cf168e642eb70724b17a0d61"><code>d6b8c89</code></a> Update comments with more explanations</li> <li><a href="https://github.com/prometheus/client_golang/commit/504566f07c680f68743c3a5d239dede48538c7ec"><code>504566f</code></a> Use simplified solution from <a href="https://redirect.github.com/prometheus/client_golang/issues/1609">#1609</a> for the data race</li> <li><a href="https://github.com/prometheus/client_golang/commit/dc8e9a4d8a4c7c64d5ae2c9d29a91bb1407d549b"><code>dc8e9a4</code></a> fix: native histogram: Simplify and fix addExemplar</li> <li><a href="https://github.com/prometheus/client_golang/commit/dc819ceb1b0f906f1ab124f7492693970733a54d"><code>dc819ce</code></a> Use a trivial solution to <a href="https://redirect.github.com/prometheus/client_golang/issues/1605">#1605</a></li> <li>Additional commits viewable in <a href="https://github.com/prometheus/client_golang/compare/v1.20.1...v1.20.4">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/prometheus/client_golang&package-manager=go_modules&previous-version=1.20.1&new-version=1.20.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>

…bft#4202) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.66.1 to 1.67.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/grpc/grpc-go/releases">google.golang.org/grpc's releases</a>.</em></p> <blockquote> <h2>Release 1.67.0</h2> <h1>Bug Fixes</h1> <ul> <li>ringhash: when used with multiple EDS priorities, fix bug that could prevent a higher priority from recovering from transient failure. (<a href="https://redirect.github.com/grpc/grpc-go/issues/7364">#7364</a>) <ul> <li>Special Thanks: <a href="https://github.com/atollena"><code>@atollena</code></a></li> </ul> </li> </ul> <h1>Behavior Changes</h1> <ul> <li>In accordance with <a href="https://tools.ietf.org/html/rfc7540#section-3.3">RFC 7540</a>, clients and servers will now reject TLS connections that don't support ALPN. This can be disabled by setting the environment variable <code>GRPC_ENFORCE_ALPN_ENABLED</code> to <code>false</code> (case insensitive). Please file a bug if you encounter any issues with this behavior. The environment variable to revert this behavior will be removed in an upcoming release. (<a href="https://redirect.github.com/grpc/grpc-go/issues/7535">#7535</a>)</li> </ul> <h2>Release 1.66.2</h2> <h1>Dependencies</h1> <ul> <li>Remove unintentional dependency on the <code>testing</code> package (<a href="https://redirect.github.com/grpc/grpc-go/issues/7579">#7579</a>)</li> <li>Remove unintentional dependency on the <code>flate</code> package (<a href="https://redirect.github.com/grpc/grpc-go/issues/7595">#7595</a>) <ul> <li>Special Thanks: <a href="https://github.com/ash2k"><code>@ash2k</code></a></li> </ul> </li> </ul> <h1>Bug Fixes</h1> <ul> <li>client: fix a bug that prevented memory reuse after handling unary RPCs (<a href="https://redirect.github.com/grpc/grpc-go/issues/7571">#7571</a>) <ul> <li>Special Thanks: <a href="https://github.com/coxley"><code>@coxley</code></a></li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/grpc/grpc-go/commit/6f50403edb0c2db1bb557168cf4e6f87ea2efdb5"><code>6f50403</code></a> Change version to 1.67.0 (<a href="https://redirect.github.com/grpc/grpc-go/issues/7604">#7604</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/3c3a0257a33b59b0d0a072696775b53392c7d8ae"><code>3c3a025</code></a> mem: replace flate.Reader reference (<a href="https://redirect.github.com/grpc/grpc-go/issues/7595">#7595</a>) (<a href="https://redirect.github.com/grpc/grpc-go/issues/7637">#7637</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/3ffb98b2c93a9a633f7415893c40946e2a6a6e89"><code>3ffb98b</code></a> .*: fix revive lints <code>redefines-builtin-id</code> (<a href="https://redirect.github.com/grpc/grpc-go/issues/7552">#7552</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/56660492e4a669c8c0f02bd7f31ad31a3ef59883"><code>5666049</code></a> vet: enforce revive linter (<a href="https://redirect.github.com/grpc/grpc-go/issues/7589">#7589</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/c6ad07fa041eea78cd6757a51f252dd407105452"><code>c6ad07f</code></a> protoc: regenerate protos (<a href="https://redirect.github.com/grpc/grpc-go/issues/7590">#7590</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/70f19eecd168b0ea1f15e991170576bf36f74b40"><code>70f19ee</code></a> credentials/tls: default GRPC_ENFORCE_ALPN_ENABLED to true (<a href="https://redirect.github.com/grpc/grpc-go/issues/7535">#7535</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/92111dc36694c570dc873b9a5a461ef953ea2b54"><code>92111dc</code></a> xds: keep ads flow control local to xdsclient/transport package (<a href="https://redirect.github.com/grpc/grpc-go/issues/7578">#7578</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/535bdce10d2c1127e526e986b04b38995fe84712"><code>535bdce</code></a> estats: remove dependency on testing package (<a href="https://redirect.github.com/grpc/grpc-go/issues/7579">#7579</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/0f03c747b13b41c3601ee835f1f8bf0f457b3fd2"><code>0f03c74</code></a> .*: fix revive lint issues <code>unused-parameter</code> (<a href="https://redirect.github.com/grpc/grpc-go/issues/7580">#7580</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/6147c81cd047f0237c9bfa553fb61ce74bfa37aa"><code>6147c81</code></a> stats/opentelemetry: Optimize slice allocations (<a href="https://redirect.github.com/grpc/grpc-go/issues/7525">#7525</a>)</li> <li>Additional commits viewable in <a href="https://github.com/grpc/grpc-go/compare/v1.66.1...v1.67.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=google.golang.org/grpc&package-manager=go_modules&previous-version=1.66.1&new-version=1.67.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>

…metbft#4265) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.42.0 to 1.44.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bufbuild/buf-setup-action/releases">bufbuild/buf-setup-action's releases</a>.</em></p> <blockquote> <h2>v1.44.0</h2> <p>Release v1.44.0</p> <h2>v1.43.0</h2> <p>Release v1.43.0</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/e7628ee2d941d14dc87d468ed93bdb35c2f7bfea"><code>e7628ee</code></a> Release v1.44.0 (<a href="https://redirect.github.com/bufbuild/buf-setup-action/issues/227">#227</a>)</li> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/62ee92603c244ad0da98bab36a834a999a5329e6"><code>62ee926</code></a> Release v1.43.0 (<a href="https://redirect.github.com/bufbuild/buf-setup-action/issues/226">#226</a>)</li> <li>See full diff in <a href="https://github.com/bufbuild/buf-setup-action/compare/v1.42.0...v1.44.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bufbuild/buf-setup-action&package-manager=github_actions&previous-version=1.42.0&new-version=1.44.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…bft#4266) Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.8.0 to 6.9.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/build-push-action/releases">docker/build-push-action's releases</a>.</em></p> <blockquote> <h2>v6.9.0</h2> <ul> <li>Bump <code>@docker/actions-toolkit</code> from 0.38.0 to 0.39.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1234">docker/build-push-action#1234</a></li> <li>Bump path-to-regexp from 6.2.2 to 6.3.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1232">docker/build-push-action#1232</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push-action/compare/v6.8.0...v6.9.0">https://github.com/docker/build-push-action/compare/v6.8.0...v6.9.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/build-push-action/commit/4f58ea79222b3b9dc2c8bbdd6debcef730109a75"><code>4f58ea7</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/1234">#1234</a> from docker/dependabot/npm_and_yarn/docker/actions-t...</li> <li><a href="https://github.com/docker/build-push-action/commit/49b5ea61c60477d214908bb6e23ce05c074ef04e"><code>49b5ea6</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/build-push-action/commit/13c9fddd72db0ce3cd9d87eb53e0480d2a32a77b"><code>13c9fdd</code></a> chore(deps): Bump <code>@docker/actions-toolkit</code> from 0.38.0 to 0.39.0</li> <li><a href="https://github.com/docker/build-push-action/commit/e44afff3590e1d4f93b6adc72376512edb012a7c"><code>e44afff</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/1232">#1232</a> from docker/dependabot/npm_and_yarn/path-to-regexp-6...</li> <li><a href="https://github.com/docker/build-push-action/commit/67ebad331f4ca45e39184b280dbacb11eb3beae0"><code>67ebad3</code></a> chore(deps): Bump path-to-regexp from 6.2.2 to 6.3.0</li> <li>See full diff in <a href="https://github.com/docker/build-push-action/compare/v6.8.0...v6.9.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/build-push-action&package-manager=github_actions&previous-version=6.8.0&new-version=6.9.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Hernán Vanzetto <15466498+hvanz@users.noreply.github.com>

…etbft#4264) Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.6.1 to 3.7.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/setup-buildx-action/releases">docker/setup-buildx-action's releases</a>.</em></p> <blockquote> <h2>v3.7.1</h2> <ul> <li>Switch back to <code>uuid</code> package by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/369">docker/setup-buildx-action#369</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/setup-buildx-action/compare/v3.7.0...v3.7.1">https://github.com/docker/setup-buildx-action/compare/v3.7.0...v3.7.1</a></p> <h2>v3.7.0</h2> <ul> <li>Always set <code>buildkitd-flags</code> if opt-in by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/363">docker/setup-buildx-action#363</a></li> <li>Remove <code>uuid</code> package and switch to <code>crypto</code> by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/366">docker/setup-buildx-action#366</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.35.0 to 0.39.0 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/362">docker/setup-buildx-action#362</a></li> <li>Bump path-to-regexp from 6.2.2 to 6.3.0 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/354">docker/setup-buildx-action#354</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/setup-buildx-action/compare/v3.6.1...v3.7.0">https://github.com/docker/setup-buildx-action/compare/v3.6.1...v3.7.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/setup-buildx-action/commit/c47758b77c9736f4b2ef4073d4d51994fabfe349"><code>c47758b</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-buildx-action/issues/369">#369</a> from crazy-max/revert-crypto</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/8fea3825134d99989287350b6429e3e86fa5d320"><code>8fea382</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/2874e980e877332a8fe575054d8c083109b8fede"><code>2874e98</code></a> switch back to uuid package</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/8026d2bc3645ea78b0d2544766a1225eb5691f89"><code>8026d2b</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-buildx-action/issues/362">#362</a> from docker/dependabot/npm_and_yarn/docker/actions-to...</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/e51aab53e9e6264bc11f62da6fbc352686b2147f"><code>e51aab5</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/fd7390e14dc77aa9df3fbc8a021cf91ac9fe7aa5"><code>fd7390e</code></a> build(deps): bump <code>@docker/actions-toolkit</code> from 0.35.0 to 0.39.0</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/910a3040053b5bd9636a487f0054cfe150829ae7"><code>910a304</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-buildx-action/issues/366">#366</a> from crazy-max/remove-uuid</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/3623ee443e01d4daf9e9107d28e162a058c52ca8"><code>3623ee4</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/e0e5ecf670bf33d756abc55962778de1286f70e1"><code>e0e5ecf</code></a> remove uuid package and switch to crypto</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/5334dd0cdd27e0ac92d6c98d35f3398fcc13195f"><code>5334dd0</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-buildx-action/issues/363">#363</a> from crazy-max/set-buildkitd-flags-optin</li> <li>Additional commits viewable in <a href="https://github.com/docker/setup-buildx-action/compare/v3.6.1...v3.7.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/setup-buildx-action&package-manager=github_actions&previous-version=3.6.1&new-version=3.7.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>

…metbft#4288) Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

faddat · 2024-10-15T07:44:24Z

sorry, this is a very bad PR!

mergify · 2024-10-15T07:45:45Z

⚠️ The sha of the head commit of this PR conflicts with #4297. Mergify cannot evaluate rules on this PR. ⚠️

mergify bot and others added 30 commits November 17, 2023 12:59

Release v0.38.1 (cometbft#1639)

9e1f2f0

* Build changelog for v0.38.1 release Signed-off-by: Thane Thomson <connect@thanethomson.com> * version: Bump to v0.38.1 Signed-off-by: Thane Thomson <connect@thanethomson.com> --------- Signed-off-by: Thane Thomson <connect@thanethomson.com>

proto: Prepare for publishing v0.38.x protos to Buf registry (cometbf…

1ebfc97

…t#1647) Signed-off-by: Thane Thomson <connect@thanethomson.com>

Release v0.38.2 (cometbft#1700)

2aacfbe

* Add changelog entry * unclog release * unclog build * version: Bump version to v0.38.2 * unclog build

Add changelog for cometbft#1749 (cometbft#1807) (cometbft#1819)

48db7c8

(cherry picked from commit 437391a) Co-authored-by: Sergio Mena <sergio@informal.systems>

Small improvements in cometbft#1806 not present in cometbft#1750 (com…

1575d38

…etbft#1808) (cometbft#1817) (cherry picked from commit 149ac1e) Co-authored-by: Sergio Mena <sergio@informal.systems>

Backport changelog for PR cometbft#896 to v0.38.x (cometbft#1835)

c0cb233

* Backport changelog for cometbft#896 * cometbft#896 was committed before , so moving it to the right release

Updates go crypto package to v0.17.0 (backport cometbft#1859) (cometb…

41e60e1

…ft#1863) * Updates go crypto package to v0.17.0 (cometbft#1859) (cherry picked from commit fd87fda) # Conflicts: # go.mod # go.sum * Solving conflict --------- Co-authored-by: lasaro <lasaro@informal.systems>

dependabot bot and others added 23 commits September 9, 2024 05:00

chore: Bump go toolchain to 1.22.7 on v0.38.x (cometbft#4065)

0b065ca

build(deps): Bump bufbuild/buf-setup-action from 1.44.0 to 1.45.0 (co…

53dcd9b

…metbft#4288) Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

use the latest cometbft-db

c792fdf

faddat requested review from a team as code owners October 15, 2024 07:39

faddat mentioned this pull request Oct 15, 2024

incompatiblity: tx_search is reset to a single entry when using goleveldb with cometbft v0.38.x #4295

Closed

faddat closed this Oct 15, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: use latest cometbft-db in v0.38.x #4296

chore: use latest cometbft-db in v0.38.x #4296

faddat commented Oct 15, 2024

faddat commented Oct 15, 2024

mergify bot commented Oct 15, 2024

chore: use latest cometbft-db in v0.38.x #4296

chore: use latest cometbft-db in v0.38.x #4296

Conversation

faddat commented Oct 15, 2024

PR checklist

faddat commented Oct 15, 2024

mergify bot commented Oct 15, 2024