[gjermundgaraba]

Description

Since #1585, the relayer submits each relay batch to the chain's IBCMulticall, which calls the router in order. Three docs still said the batch goes through the router's own multicall:

• docs/2-how-ibc-works/5-relayer.md: "Submitting the transaction".
• docs/5-ibc-solidity-contracts/2-ics26-router.md: the note on the router's inherited multicall. The router still inherits it, but the IBC CLI relayer batches through IBCMulticall.
• docs/5-ibc-solidity-contracts/5-attestation-light-client.md: where the relayer puts updateClient first.

This is wording only. refgen.py all --check is clean.

closes: n/a (follow-up to #1585)

---

• Linked to GitHub issue with discussion and accepted design, OR link to spec that describes this work. (follow-up to feat(relayer): relay packets through IBCMulticall #1585)
• Include changelog entry when appropriate (e.g. chores should be omitted from changelog). (n/a: docs only)
• Wrote unit and e2e tests if relevant. (n/a: docs only)
• Updated documentation (docs/) if anything is changed.
• Added godoc comments if relevant. (n/a: no Go changes)
• Self-reviewed Files changed in the GitHub PR explorer.
• Provide a conventional commit message to follow the repository standards.

🤖 Generated with Claude Code

[github-actions]

Vulnerable dependencies

2 advisories across 2 libraries need attention, 2 accepted.

🚨 Needs attention

github.com/cosmos/evm

In use: v0.7.3 — reached from e2e

Advisory	CVE	Fixed in	Summary
GO-2025-3684	—	no fix yet	Cosmos EVM Allows Partial Precompile State Writes in github.com/cosmos/evm

Go standard library

In use: go1.26.9 — reached from cli, e2e, gen/go/solidity-abi

Advisory	CVE	Fixed in	Summary
GO-2026-6809	CVE-2026-111943	go1.26.10	Distrust compromised intermediate certificates in crypto/x509

Run make vulncheck for the call paths. Either upgrade the library, or add the
advisory to .govulncheck-ignore with a reason if no fix exists yet.

Accepted

Listed in .govulncheck-ignore with a reason.

github.com/pion/dtls/v2

In use: v2.2.12 — reached from cli

Advisory	CVE	Fixed in	Summary
GO-2026-4479	CVE-2026-26014	no fix yet	Usage of random nonce generation with AES GCM ciphers risks leaking the authentication key in github.com/pion/dtls

golang.org/x/crypto

In use: v0.57.0 — reached from cli, e2e

Advisory	CVE	Fixed in	Summary
GO-2026-5932	—	no fix yet	The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

_{From make vulncheck-json on this run: logs.}

[greptile-apps]

Confidence Score: 5/5

[Low impact] The documentation changes appear safe to merge.

Summary

Updates three documentation pages to describe relay batches going through IBCMulticall rather than the router’s own multicall.

• The relayer batch path now points to IBCMulticall.

_{Reviews (1) · Last reviewed commit: "docs: describe relay batches going throu..." · Reviewed by Greptile}