Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 1, 2025

Bumps github.com/CosmWasm/wasmvm/v2 from 2.2.2 to 2.2.4.

Release notes

Sourced from github.com/CosmWasm/wasmvm/v2's releases.

v2.2.4

  • Error message improvement when the VM panics
  • Addition of new functions to estimate JSON size without serializing.
  • Updated minimum Go version to 1.22

Not consensus-breaking

v2.2.3

Fixes CWA-2025-003.

Consensus-breaking

Commits
  • 45efbe5 [skip ci] Built release libraries
  • 67b6dc7 Set libwasmvm version to 2.2.4
  • 66234c1 [skip ci] Built release libraries
  • 3bfac0d Merge pull request #660 from CosmWasm/mergify/bp/release/2.2/pr-635
  • 683b570 [skip ci] Built release libraries
  • 411ce3d Adapt code to linter rule
  • c353f07 Add doc comments to ExpectedJSONSize
  • dd27921 Fix handling of \b, \f, \n, \r, \t
  • bd90e0f Add ExpectedJSONSize
  • 17bc1a6 Merge pull request #661 from CosmWasm/mergify/bp/release/2.2/pr-637
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/CosmWasm/wasmvm/v2](https://github.com/CosmWasm/wasmvm) from 2.2.2 to 2.2.4.
- [Release notes](https://github.com/CosmWasm/wasmvm/releases)
- [Changelog](https://github.com/CosmWasm/wasmvm/blob/main/CHANGELOG.md)
- [Commits](CosmWasm/wasmvm@v2.2.2...v2.2.4)

---
updated-dependencies:
- dependency-name: github.com/CosmWasm/wasmvm/v2
  dependency-version: 2.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 1, 2025
@dependabot dependabot bot changed the base branch from release/v0.54.3 to release/v0.60.0 July 11, 2025 13:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants