chore(deps): bump the go_modules group across 1 directory with 10 updates #132

dependabot · 2025-02-04T15:18:39Z

Bumps the go_modules group with 7 updates in the / directory:

Package	From	To
cosmossdk.io/x/tx	`0.13.6`	`1.1.0`
github.com/cometbft/cometbft	`0.38.15`	`0.38.17`
github.com/cosmos/cosmos-sdk	`0.50.10`	`0.50.11`
github.com/consensys/gnark	`0.11.0`	`0.12.0`
github.com/ethereum/go-ethereum	`1.14.12`	`1.14.13`
github.com/docker/docker	`24.0.9+incompatible`	`25.0.6+incompatible`
github.com/hashicorp/go-getter	`1.7.4`	`1.7.5`

Updates cosmossdk.io/x/tx from 0.13.6 to 1.1.0

Release notes

Sourced from cosmossdk.io/x/tx's releases.

Cosmovisor v1.1.0

Release Notes

New execution model

With this release we are shifting to a new CLI design:

in the past, Cosmovisor was designed to act as a wrapper for a Cosmos App. An admin could link it and use it instead of the Cosmos App. When running it will pass all options and configuration parameters to the app. Hence the only way to configure the Cosmovisor was through environment variables.

now, we are moving to a more traditional model, where Cosmovisor has it's own command set and is a true supervisor.

New commands have been added:

run will start the Cosmos App and pass remaining arguments to the app (similar to npm run)

help will display Cosmovisor help

version will display both Cosmovisor and the associated app version.

The existing way of starting an app with Cosmovisor has been deprecated (cosmovisor [app params]) and will be removed in the future version. Please use cosmovisor run [app pararms] instead.

New Features

We added a new configuration option: DAEMON_BACKUP_DIR (as env variable). When set, Cosmovisor will create backup the app data backup in that directory (instead of using the app home directory) before running the update. See the README file for more details.

Bug Fixes

Fixed cosmovisor version output when installed using 'go install github.com/cosmos/cosmos-sdk/cosmovisor/cmd/[email protected]'.

Changelog

For more details, please see the CHANGELOG.

Cosmovisor v1.0.0 Release Notes

This is the first major release of Cosmovisor. It changes the way Cosmovisor is searching for an upgrade event from an app. Instead of scanning standard input and standard output logs, the Cosmovisor observes the $DAEMON_HOME/upgrade-info.json file, that is produced by the x/upgrade module. The upgrade-info.json files is created by the x/upgrade module and contains information from the on-chain upgrade Plan record. Using the file based approach solved many outstanding problems: freezing when logs are too long, race condition with the x/upgrade handler, and potential exploit (if a chain would allow to log an arbitrary message, then an attacker could produce a fake upgrade signal and halt a chain or instrument a download of modified, hacked binary when the auto download option is enabled).

Auto downloads

Cosmovisor v1.0 supports auto downloads based on the information in the data/upgrade-info.json. In the Cosmos SDK < v0.44, that file doesn't contain upgrade.Plan.Info, that is needed for doing auto download. Hence Cosmovisor v1.0 auto download won't work with Apps updating from v0.43 and earlier.

NOTE: we don't recommend using auto download functionality. It can lead to potential chain halt when the upgrade Plan contains a bad link or the resource with the binary will be temporarily unavailable. We are planning on adding a upgrade verification command which can potentially solve this issue.

Other updates

Changed default value of DAEMON_RESTART_AFTER_UPGRADE to true.

Added version command, which prints both the Cosmovisor and the associated app version.

Added help command, which prints the Cosmovisor help without passing it to the associated version. This is an exception, because normally, Cosmovisor passes all arguments to the associated app.

For more details, please see the CHANGELOG.

DB v1.0.0-beta.1

github.com/cosmos/cosmos-sdk/db (cosmos-sdk/db here an after) is a module in the Cosmos SDK repository. It is used in store/v2 instead of tendermint/tm-db which is now deprecated. cosmos-sdk/db extends the tendermint/tm-db interface. however, it only supports BaggerDB and RocksDB (the databases we tested, which provide snapshot functionality necessary for store/v2 and ADR-040 implementation).

... (truncated)

Changelog

Sourced from cosmossdk.io/x/tx's changelog.

Changelog

[Unreleased]

Every module contains its own CHANGELOG.md. Please refer to the module you are interested in.

Features

(baseapp) #20291 Simulate nested messages.

(client/keys) #21829 Add support for importing hex key using standard input.

(x/auth/ante) #23128 Allow custom verifyIsOnCurve when validate tx for public key like ethsecp256k1.

(x/auth/ante) #23283 Allow ed25519 transaction signatures.

... (truncated)

Commits

be5e3aa feat(log): extend logger options (#15956)
851e9e8 docs: update roadmap for q2 (#15952)
91278f6 refactor(x/authz)!: Use KVStoreService, context.Context and return errors ins...
26faee9 refactor: bcrypt key derivation to aead (#509) (#15817)
428e19f refactor(x/distribution)!: Use KVStoreService, context.Context and return err...
a6ea094 ci: skip fix registration for linting (#15965)
00b78fa refactor(x/auth): v2 adaptable tx instead of double decode (#15910)
1179285 feat(hubl): cache bech32 prefix (#15954)
6a8251a build(deps): bump cometbft to v0.37.1 (#15955)
6dfe735 refactor!: use KVStoreService and context.Context in x/bank (#15891)
Additional commits viewable in compare view

Updates github.com/cometbft/cometbft from 0.38.15 to 0.38.17

Release notes

Sourced from github.com/cometbft/cometbft's releases.

v0.38.17

See the CHANGELOG for this release.

v0.38.16

See the CHANGELOG for this release.

Changelog

Sourced from github.com/cometbft/cometbft's changelog.

v0.38.17

February 3, 2025

This release fixes two security issues (ASA-2025-001, ASA-2025-002). Users are encouraged to upgrade as soon as possible.

BUG FIXES

[blocksync] Ban peer if it reports height lower than what was previously reported (ASA-2025-001)

[types] Check that Part.Index equals Part.Proof.Index (ASA-2025-001)

DEPENDENCIES

[go/runtime] Bump minimum Go version to 1.22.11 (#4891)

v0.38.16

December 20 2024

This release:

fixes a bug that caused a node produce errors caused by the sending of next PEX requests too soon. As a consequence of this incorrect behavior a node would be marked as BAD.

Adds a proper description of ExtendedVoteInfo and VoteInfo in the spec.

BUG FIXES

[mocks] Mockery v2.49.0 broke the mocks. We had to add a .mockery.yaml to properly handle this change. (#4521)

Commits

d03254d chore: v0.38.17 release (#4909)
d8b51b4 build(deps): Bump google.golang.org/grpc from 1.69.4 to 1.70.0 (#4901)
415c0da Merge commit from fork
2cebfde Merge commit from fork
68f79b1 build(deps): Bump google.golang.org/protobuf from 1.36.3 to 1.36.4 (#4900)
4f70ba6 build(deps): bump Go version to 1.22.11 (#4891)
930813e build(deps): Bump docker/build-push-action from 6.12.0 to 6.13.0 (#4882)
c86f898 build(deps): Bump github.com/prometheus/common from 0.61.0 to 0.62.0 (#4865)
807bd18 build(deps): Bump github.com/go-git/go-git/v5 from 5.13.0 to 5.13.2 (#4861)
7d8440b build(deps): Bump golang.org/x/net from 0.33.0 to 0.34.0 (#4859)
Additional commits viewable in compare view

Updates github.com/cosmos/cosmos-sdk from 0.50.10 to 0.50.11

Release notes

Sourced from github.com/cosmos/cosmos-sdk's releases.

v0.50.11

Cosmos SDK v0.50.11 Release Notes

💬 Release Discussion

🚀 Highlights

We are back on schedule for our monthly v0.50.x patch releases. The last two months, next to ramping up on v0.52 and v2, we added a few bug fixes and (UX) improvements.

Notable changes:

Fix ABS-0043/ABS-0044.

New Linux-only backend that adds Linux kernel's keyctl support

Skip sims test when running dry on validators

📝 Changelog

Check out the changelog for an exhaustive list of changes, or compare changes from the last release.

Maintenance Policy

Cosmos SDK Olympus (v0.52) final release is approaching really soon. That means the Eden line (v0.50.x) will soon only be supported for bug fixes only, as per our release policy. Earlier versions are not maintained.

Note, that the next SDK release, v0.52, does not include x/params migration, when migrating from < v0.47, v0.50.x or v0.47.x, is a mandatory migration.

Start integrating with Cosmos SDK Eden (v0.52) and enjoy and the new features and performance improvements.

Changelog

Sourced from github.com/cosmos/cosmos-sdk's changelog.

v0.50.11 - 2024-12-16

Features

(crypto/keyring) #21653 New Linux-only backend that adds Linux kernel's keyctl support.

Improvements

(server) #21941 Regenerate addrbook.json for in place testnet.

Bug Fixes

Fix ABS-0043/ABS-0044 Limit recursion depth for unknown field detection and unpack any

(server) #22564 Fix fallback genesis path in server

(x/group) #22425 Proper address rendering in error

(sims) #21906 Skip sims test when running dry on validators

(cli) #21919 Query address-by-acc-num by account_id instead of id.

(x/group) #22229 Accept 1 and try in CLI for group proposal exec.

Commits

eb1a8e8 chore: prep v0.50.11 release notes (#22898)
ba7ac45 Merge commit from fork
679ca5e chore: edit changelog store (partial backport #22864) (#22884)
3b082b5 build(deps): Bump cosmossdk.io/x/tx from 0.13.6-0.20241003112805-ff8789a02871...
d62bcbd fix(x/tx): fix amino json drift from legacy spec (backport #21825) (#22088)
4a73a1e fix(client/v2/autocli): add CoinDec flag (backport #22817) (#22821)
96a3016 chore: prepare v0.50.11 (#22643)
43ac3df build(deps): Bump github.com/cosmos/iavl from 1.2.0 to 1.2.2 (#22662)
7bb2a3d build(deps): Bump github.com/cosmos/cosmos-db from 1.0.2 to 1.1.0 (#22638)
8210b50 fix(client/v2/autocli): prevent duplicate addition of customCommands (backpor...
Additional commits viewable in compare view

Updates github.com/consensys/gnark from 0.11.0 to 0.12.0

Release notes

Sourced from github.com/consensys/gnark's releases.

v0.12.0

NB! This release fixes security advisory GHSA-cph5-3pgr-c82g (OOM on specially crafted inputs).

What's Changed

chore: up gnark-crypto by @yelhousni in Consensys/gnark#1274

test: add scalar mul to stats by @yelhousni in Consensys/gnark#1275

feat: replace stats gob format with csv for easier diffs by @gbotrel in Consensys/gnark#1276

build: modify workflows for new CI slack bot by @gbotrel in Consensys/gnark#1277

docs: final audit report from LA by @ivokub in Consensys/gnark#1283

added sudoku example for prover and verifier by @2pir2 in Consensys/gnark#1282

feat constant 'randomness' - domain-size-independent vk by @Tabaie in Consensys/gnark#1269

chore: lint generated files by @ivokub in Consensys/gnark#1289

docs: update api doc following audit suggestions by @gbotrel in Consensys/gnark#1291

fix: fix slice init length by @cuishuang in Consensys/gnark#1288

fix: allow only v=0 or v=1 by @ivokub in Consensys/gnark#1293

chore: Pedersen verification key reference field by @ivokub in Consensys/gnark#1295

feat: update to latest gnark-crypto by @gbotrel in Consensys/gnark#1298

fix: expmod precompile if modulus is 1 by @ivokub in Consensys/gnark#1294

Feat: 4-dimensional fake GLV by @yelhousni in Consensys/gnark#1296

fix: sanitize groth16 verification key reading by @ivokub in Consensys/gnark#1307

docs: add input packing example by @ivokub in Consensys/gnark#1311

chore: Replace fmt.Printf calls with warning logs by @wwared in Consensys/gnark#1305

chore: fix some function names in comment by @wangjingcun in Consensys/gnark#1304

fix: initialize public committed by @ivokub in Consensys/gnark#1317

feat: direct multivariate polynomial evaluation in non-native by @ivokub in Consensys/gnark#1299

Feat/poseidon2 by @ThomasPiellard in Consensys/gnark#1300

final exponentiation: select optimisation by @shramee in Consensys/gnark#1328

perf: fast path operations for small non-native values by @ivokub in Consensys/gnark#1326

perf: BW6 pairing computation using non-native Eval by @ivokub in Consensys/gnark#1312

fix bn254 solidity template by @simplexity-ckcclc in Consensys/gnark#1324

perf: normalize the random linear combination in logderivarg by @kustosz in Consensys/gnark#1333

perf: using non-native Eval for curve arithmetic by @yelhousni in Consensys/gnark#1331

Pairing check optimisation by @shramee in Consensys/gnark#1335

feat: add ripemd160 hash function with permutation by @ivokub in Consensys/gnark#1120

doc: add audit report by @ivokub in Consensys/gnark#1342

docs: less verbose Apache 2 header, latest bavard by @gbotrel in Consensys/gnark#1344

fix: NNA quotient length computation edge cases by @ivokub in Consensys/gnark#1340

build(deps): bump golang.org/x/crypto from 0.26.0 to 0.31.0 by @dependabot in Consensys/gnark#1346

Perf: Pairing on BN254 using direct Fp12 extension and non-native Eval() by @yelhousni in Consensys/gnark#1339

feat(bls12-381): pairing using direct Fp12 + non-native Eval() by @yelhousni in Consensys/gnark#1349

Update ICICLE integration to use v3 ICICLE by @jeremyfelder in Consensys/gnark#1318

chore: remove duplicate nil-check by @ivokub in Consensys/gnark#1355

fix: avoid linking icicle dependent files when tag not provided by @ivokub in Consensys/gnark#1352

perf: G1/2 membership using Eval by @yelhousni in Consensys/gnark#1356

refactor: move poseidon2 to permutation package by @ivokub in Consensys/gnark#1353

fix: tinyfield generation with updated gnark-crypto by @ivokub in Consensys/gnark#1358

Feat: settable hasher for MiMC by @AlexandreBelling in Consensys/gnark#1345

optim: avoid div in millerLoopAndFinalExpResult by @shramee in Consensys/gnark#1363

fix: typos fixes by @ivokub in Consensys/gnark#1325

Change copyright year to 2025 by @Tabaie in Consensys/gnark#1383

... (truncated)

Changelog

Sourced from github.com/consensys/gnark's changelog.

[v0.12.0] - 2025-01-23

Build

modify workflows for new CI slack bot (#1277)

deps: bump golang.org/x/crypto from 0.26.0 to 0.31.0 (#1346)

Chore

use max builtin

go mod update

generate changelog

update citation

update hardcoded version

fix some struct names in comment (#1370)

fix typos (#1371)

fix error message (#1337)

use errors.New to replace fmt.Errorf with no parameters (#1338)

fix some problematic function names in comment (#1334)

fix some struct and interface names in comment (#1329)

remove duplicate nil-check (#1355)

fix some function names in comment (#1304)

Replace fmt.Printf calls with warning logs (#1305)

Pedersen verification key reference field (#1295)

lint generated files (#1289)

up gnark-crypto (#1274)

Doc

add audit report (#1342)

Docs

Change copyright year to 2025 (not autogenerated) (#1388)

less verbose Apache 2 header, latest bavard (#1344)

add input packing example (#1311)

update api doc following audit suggestions (#1291)

final audit report from LA (#1283)

Feat

settable hasher for MiMC (#1345)

4-dimensional fake GLV (#1296)

Feat

add ripemd160 hash function with permutation (#1120)

direct multivariate polynomial evaluation in non-native (#1299)

update to latest gnark-crypto

replace stats gob format with csv for easier diffs (#1276)

bls12-381: pairing using direct Fp12 + non-native Eval() (#1349)

Fix

stashed typo fixes for v0.12 (#1398)

add G2 membership check for constant points (#1397)

do not return unused sign (#1385)

typos in documentation files (#1369)

... (truncated)

Commits

eb18763 release: v0.12.0 (#1399)
ac1472a fix: stashed typo fixes for v0.12 (#1398)
5a846d1 fix: add G2 membership check for constant points (#1397)
52291fa perf: PairingCheck for BN254, BLS12-381, BLS12-377 and BW6-761 (#1365)
3a407c1 Feat/plonk memory optim (#1395)
cfa30d9 perf(bn254): include G2 membership check in ML (#1387)
dcd7cb3 docs: Change copyright year to 2025 (not autogenerated) (#1388)
a8eb033 perf(emulated): small perf on doubleAndAdd (#1386)
8b4dc2e fix: do not return unused sign (#1385)
48325c1 Faster ecdsa across all curves (#1384)
Additional commits viewable in compare view

Updates github.com/ethereum/go-ethereum from 1.14.12 to 1.14.13

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Schwarzschild (v1.14.13)

This is a security release, fixing a vulnerability (CVE-2025-24883).

Please update your nodes ASAP.

As with all our previous releases, you can find the:

Pre-built binaries for all platforms on our downloads page.

Docker images published under ethereum/client-go.

Ubuntu packages in our Launchpad PPA repository.

OSX packages in our Homebrew Tap repository.

Commits

eb00f16 version: release go-ethereum v1.14.13 stable
159fb1a crypto: add IsOnCurve check (#31100)
db93d49 build: retry PPA upload up to three times (#31099)
See full diff in compare view

Updates github.com/docker/docker from 24.0.9+incompatible to 25.0.6+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

v25.0.6

25.0.6

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

docker/cli, 25.0.6 milestone

moby/moby, 25.0.6 milestone

Deprecated and removed features, see Deprecated Features.

Changes to the Engine API, see API version history.

Security

This release contains a fix for CVE-2024-41110 / GHSA-v23v-6jw2-98fq that impacted setups using authorization plugins (AuthZ) for access control.

Bug fixes and enhancements

[25.0] remove erroneous platform from image config OCI descriptor in docker save output. moby/moby#47695

[25.0 backport] Fix a nil dereference when getting image history for images having layers without the Created value set. moby/moby#47759

[25.0 backport] apparmor: Allow confined runc to kill containers. moby/moby#47830

[25.0 backport] Fix an issue where rapidly promoting a Swarm node after another node was demoted could cause the promoted node to fail its promotion. moby/moby#47869

[25.0 backport] don't depend on containerd platform.Parse to return a typed error. moby/moby#47890

[25.0 backport] builder/mobyexporter: Add missing nil check moby/moby#47987

Packaging updates

Update AWS SDK Go v2 to v1.24.1 for AWS CloudWatch logging driver. moby/moby#47724

Update Go runtime to 1.21.12, which contains security fixes for CVE-2024-24791 moby/moby#48146

Update Containerd (static binaries only) to v1.7.20. moby/moby#48199

Full Changelog: moby/moby@v25.0.5...v25.0.6

v25.0.5

25.0.5

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

docker/cli, 25.0.5 milestone

moby/moby, 25.0.5 milestone

Deprecated and removed features, see Deprecated Features.

Changes to the Engine API, see API version history.

Security

This release contains a security fix for CVE-2024-29018, a potential data exfiltration from 'internal' networks via authoritative DNS servers.

Bug fixes and enhancements

CVE-2024-29018: Do not forward requests to external DNS servers for a container that is only connected to an 'internal' network. Previously, requests were forwarded if the host's DNS server was running on a loopback address, like systemd's 127.0.0.53. moby/moby#47589

plugin: fix mounting /etc/hosts when running in UserNS. moby/moby#47588

rootless: fix open /etc/docker/plugins: permission denied. moby/moby#47587

Fix multiple parallel docker build runs leaking disk space. moby/moby#47527

... (truncated)

Commits

b08a51f Merge pull request #48231 from austinvazquez/backport-vendor-otel-v0.46.1-to-...
d151b0f vendor: OTEL v0.46.1 / v1.21.0
c6ba9a5 Merge pull request #48225 from austinvazquez/backport-workflow-artifact-reten...
4673a3c Merge pull request #48227 from austinvazquez/backport-backport-branch-check-t...
30f8908 github/ci: Check if backport is opened against the expected branch
7454d6a ci: update workflow artifacts retention
65cc597 Merge commit from fork
b722836 Merge pull request #48199 from austinvazquez/update-containerd-binary-to-1.7.20
e8ecb9c update containerd binary to v1.7.20
e6cae1f update containerd binary to v1.7.19
Additional commits viewable in compare view

Updates github.com/golang/glog from 1.2.2 to 1.2.3

Release notes

Sourced from github.com/golang/glog's releases.

v1.2.3

What's Changed

glog: check that stderr is valid before using it by default by @chressie in golang/glog#72

glog: fix typo by @chressie in golang/glog#73

Full Changelog: golang/glog@v1.2.2...v1.2.3

Commits

04dbec0 glog: fix typo (#73)
459cf3b glog: check that stderr is valid before using it by default (#72)
See full diff in compare view

Updates github.com/hashicorp/go-getter from 1.7.4 to 1.7.5

Release notes

Sourced from github.com/hashicorp/go-getter's releases.

v1.7.5

What's Changed

Prevent Git Config Alteration on Git Update by @dduzgun-security in hashicorp/go-getter#497

New Contributors

@dduzgun-security made their first contribution in hashicorp/go-getter#497

Full Changelog: hashicorp/go-getter@v1.7.4...v1.7.5

Commits

5a63fd9 Merge pull request #497 from hashicorp/fix-git-update
5b7ec5f fetch tags on update and fix tests
9906874 recreate git config during update to prevent config alteration
See full diff in compare view

Updates golang.org/x/crypto from 0.28.0 to 0.32.0

Commits

8929309 go.mod: update golang.org/x dependencies
4a75ba5 all: make function and struct comments match the names
b4f1988 ssh: make the public key cache a 1-entry FIFO cache
7042ebc openpgp/clearsign: just use rand.Reader in tests
3e90321 go.mod: update golang.org/x dependencies
8c4e668 x509roots/fallback: update bundle
6018723 go.mod: update golang.org/x dependencies
71ed71b README: don't recommend go get
750a45f sha3: add MarshalBinary, AppendBinary, and UnmarshalBinary
36b1725 sha3: avoid trailing permutation
Additional commits viewable in compare view

Updates golang.org/x/net from 0.30.0 to 0.34.0

Commits

8da7ed1 go.mod: update golang.org/x dependencies
2124140 all: make function and struct comments match the names
e9d95ba http2: do not surface errors from a conn's idle timer expiring
c2be992 quic: remember which remote connection IDs have been retired
dfc720d go.mod: update golang.org/x dependencies
8e66b04 html: use strings.EqualFold instead of lowering ourselves
b935f7b html: avoid endless loop on error token
9af49ef route: remove unused sizeof* consts
6705db9 quic: clean up crypto streams when dropping packet protection keys
4ef7588 quic: handle ACK frame in packet which drops number space
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

…ates Bumps the go_modules group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [cosmossdk.io/x/tx](https://github.com/cosmos/cosmos-sdk) | `0.13.6` | `1.1.0` | | [github.com/cometbft/cometbft](https://github.com/cometbft/cometbft) | `0.38.15` | `0.38.17` | | [github.com/cosmos/cosmos-sdk](https://github.com/cosmos/cosmos-sdk) | `0.50.10` | `0.50.11` | | [github.com/consensys/gnark](https://github.com/consensys/gnark) | `0.11.0` | `0.12.0` | | [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum) | `1.14.12` | `1.14.13` | | [github.com/docker/docker](https://github.com/docker/docker) | `24.0.9+incompatible` | `25.0.6+incompatible` | | [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) | `1.7.4` | `1.7.5` | Updates `cosmossdk.io/x/tx` from 0.13.6 to 1.1.0 - [Release notes](https://github.com/cosmos/cosmos-sdk/releases) - [Changelog](https://github.com/cosmos/cosmos-sdk/blob/main/CHANGELOG.md) - [Commits](cosmos/cosmos-sdk@x/tx/v0.13.6...log/v1.1.0) Updates `github.com/cometbft/cometbft` from 0.38.15 to 0.38.17 - [Release notes](https://github.com/cometbft/cometbft/releases) - [Changelog](https://github.com/cometbft/cometbft/blob/v0.38.17/CHANGELOG.md) - [Commits](cometbft/cometbft@v0.38.15...v0.38.17) Updates `github.com/cosmos/cosmos-sdk` from 0.50.10 to 0.50.11 - [Release notes](https://github.com/cosmos/cosmos-sdk/releases) - [Changelog](https://github.com/cosmos/cosmos-sdk/blob/main/CHANGELOG.md) - [Commits](cosmos/cosmos-sdk@v0.50.10...v0.50.11) Updates `github.com/consensys/gnark` from 0.11.0 to 0.12.0 - [Release notes](https://github.com/consensys/gnark/releases) - [Changelog](https://github.com/Consensys/gnark/blob/master/CHANGELOG.md) - [Commits](Consensys/gnark@v0.11.0...v0.12.0) Updates `github.com/ethereum/go-ethereum` from 1.14.12 to 1.14.13 - [Release notes](https://github.com/ethereum/go-ethereum/releases) - [Commits](ethereum/go-ethereum@v1.14.12...v1.14.13) Updates `github.com/docker/docker` from 24.0.9+incompatible to 25.0.6+incompatible - [Release notes](https://github.com/docker/docker/releases) - [Commits](moby/moby@v24.0.9...v25.0.6) Updates `github.com/golang/glog` from 1.2.2 to 1.2.3 - [Release notes](https://github.com/golang/glog/releases) - [Commits](golang/glog@v1.2.2...v1.2.3) Updates `github.com/hashicorp/go-getter` from 1.7.4 to 1.7.5 - [Release notes](https://github.com/hashicorp/go-getter/releases) - [Changelog](https://github.com/hashicorp/go-getter/blob/main/.goreleaser.yml) - [Commits](hashicorp/go-getter@v1.7.4...v1.7.5) Updates `golang.org/x/crypto` from 0.28.0 to 0.32.0 - [Commits](golang/crypto@v0.28.0...v0.32.0) Updates `golang.org/x/net` from 0.30.0 to 0.34.0 - [Commits](golang/net@v0.30.0...v0.34.0) --- updated-dependencies: - dependency-name: cosmossdk.io/x/tx dependency-type: direct:production dependency-group: go_modules - dependency-name: github.com/cometbft/cometbft dependency-type: direct:production dependency-group: go_modules - dependency-name: github.com/cosmos/cosmos-sdk dependency-type: direct:production dependency-group: go_modules - dependency-name: github.com/consensys/gnark dependency-type: direct:production dependency-group: go_modules - dependency-name: github.com/ethereum/go-ethereum dependency-type: direct:production dependency-group: go_modules - dependency-name: github.com/docker/docker dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/golang/glog dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/hashicorp/go-getter dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-type: indirect dependency-group: go_modules ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Feb 4, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the go_modules group across 1 directory with 10 updates #132

chore(deps): bump the go_modules group across 1 directory with 10 updates #132

dependabot bot commented on behalf of github Feb 4, 2025

chore(deps): bump the go_modules group across 1 directory with 10 updates #132

Are you sure you want to change the base?

chore(deps): bump the go_modules group across 1 directory with 10 updates #132

Conversation

dependabot bot commented on behalf of github Feb 4, 2025

Cosmovisor v1.1.0

Release Notes

New execution model

New Features

Bug Fixes

Changelog

Cosmovisor v1.0.0 Release Notes

Auto downloads

Other updates

DB v1.0.0-beta.1

Changelog

[Unreleased]

Features

v0.38.17

v0.38.16

v0.38.17

BUG FIXES

DEPENDENCIES

v0.38.16

BUG FIXES

v0.50.11

Cosmos SDK v0.50.11 Release Notes

🚀 Highlights

📝 Changelog

Maintenance Policy

v0.50.11 - 2024-12-16

Features

Improvements

Bug Fixes

v0.12.0

What's Changed

[v0.12.0] - 2025-01-23

Build

Chore

Doc

Docs

Feat

Feat

Fix

Schwarzschild (v1.14.13)

v25.0.6

25.0.6

Security

Bug fixes and enhancements

Packaging updates

v25.0.5

25.0.5

Security

Bug fixes and enhancements

v1.2.3

What's Changed

v1.7.5

What's Changed

New Contributors