Skip to content

chore(deps): bump the dependencies group across 1 directory with 19 updates#92

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/dependencies-aeb82f774a
Open

chore(deps): bump the dependencies group across 1 directory with 19 updates#92
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/dependencies-aeb82f774a

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 9, 2026 •
edited
Loading

Bumps the dependencies group with 8 updates in the / directory:

Package From To
cosmossdk.io/api 0.9.2 1.0.0
cosmossdk.io/client/v2 2.0.0-beta.7 2.11.0
github.com/bufbuild/buf 1.64.0 1.69.0
github.com/cosmos/ibc-go/v10 10.5.0 10.7.0
cosmossdk.io/x/tx 0.14.0 1.1.0
github.com/cosmos/evm 0.6.0 0.7.0
github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v10 10.1.0 10.6.0
google.golang.org/grpc/cmd/protoc-gen-go-grpc 1.6.0 1.6.2

Updates cosmossdk.io/api from 0.9.2 to 1.0.0

Release notes

Sourced from cosmossdk.io/api's releases.

Group v1.0.0 Release Notes

The Group module enables on-chain multisig and collective decision-making for any set of accounts. Groups are formed with weighted members and one or more configurable decision policies, then govern shared accounts through proposals. With enterprise-level support, it is ready for production deployments requiring flexible, auditable multi-party authorization.

🚀 Highlights

  • Weighted group membership: Create groups with an admin, weighted members, and attach decision policies that define how proposals pass. Admins can be a single address, a multisig, or a group policy account itself.
  • Full proposal lifecycle: Members submit proposals containing arbitrary SDK messages, vote (YES/NO/ABSTAIN/NO_WITH_VETO), and any account can trigger execution once accepted.
  • Flexible decision policies: Two built-in policies — threshold (absolute weighted vote count) and percentage (proportion of YES votes) — each with configurable voting and minimum execution periods. The DecisionPolicy interface supports custom extensions.

POA v1.0.0 Release Notes

The POA module provides an admin-managed validator set as a drop-in replacement for the staking, distribution, and slashing modules. Purpose-built for institutional deployments run by a known set of operators, it offers a streamlined validator lifecycle with no native token required. Fee distribution to validators and full governance compatibility are included out of the box.

🚀 Highlights

  • Admin-controlled validator lifecycle: A single, customizable admin account manages validator creation, power updates, and removal. This admin can be set to a multisig, governance, or a single address.
  • Proportional fee distribution: Transaction fees accumulate in the POA module account allocated to validators in proportion to their voting power. Validators withdraw their accumulated fees via MsgWithdrawFees at any time.
  • Governance integration: Proposal submission, deposits, and voting are gated to active validators. A custom vote-tallying function weights votes by validator power.

v0.54.3

What's Changed

Full Changelog: cosmos/cosmos-sdk@v0.54.2...v0.54.3

v0.54.2

Cosmos SDK v0.54.2 Release Notes

🚀 Highlights

Announcing Cosmos SDK v0.54

We are pleased to announce the release of Cosmos SDK v0.54! Cosmos SDK v0.54 is part of the 2026.1 release family. This release introduces order of magnitude improvements to network stability and throughput.

See the full v0.54 release notes for more details on what's included in this release.

Upgrading to this verison of the Cosmos SDK from any v0.50.x release will require a coordinated chain upgrade.

For more information on upgrading, please see our upgrade guide.

📝 Changelog

Check out the changelog for an exhaustive list of changes or compare changes from the last release.

v0.53.7

Cosmos SDK v0.53.7 Release Notes

... (truncated)

Changelog

Sourced from cosmossdk.io/api's changelog.

Changelog

UNRELEASED

Breaking Changes

  • (modules) #26421 Remove the x/protocolpool module and its API/proto surface from the SDK. Applications upgrading from v0.54 should include protocolpool in deleted store upgrades.

Features

  • (abci) #25620 Add support for new application side mempool ABCI methods.
  • (abci) #25969 Add support for new ABCI methods, InsertTx and ReapTxs.
  • (deps) #26388 Bump CometBFT version to v0.39.3.

... (truncated)

Commits
  • 2e909b3 chore: prep dependencies and create rc for log/v2 and api (#25888)
  • 49ba1ea feat(x/mint): Add max supply param (backport #19896) (#25599)
  • 028ba6c fix(mempool): add thread safety to NextSenderTx (#25869)
  • 11dae73 build(deps): Bump golang.org/x/crypto from 0.47.0 to 0.48.0 (#25884)
  • c6909d5 fix(blockstm): wake up suspended executors on cancel (#25793)
  • ae802a1 feat: blockstm check pre-state in transaction state transition (#25786)
  • 8c2f693 feat!: Override Events in EventManager (#25877)
  • 56b05ca build(deps): Bump webpack from 5.98.0 to 5.105.0 in /docs in the npm_and_yarn...
  • 3067281 feat(grpc): expose block_results through gRPC (#25850)
  • ae80efb fix(grpc): return actual earliest_store_height in node.Status endpoint (#25647)
  • Additional commits viewable in compare view

Updates cosmossdk.io/client/v2 from 2.0.0-beta.7 to 2.11.0

Release notes

Sourced from cosmossdk.io/client/v2's releases.

client/v2.11.0

What's Changed

client/v2.11.0 is the first non beta release of the client/v2 package.

See the CHANGELOG for a full list of changes across all beta versions.

log/v2.1.0

Features

  • #26007 Implement fanout logger when OpenTelemetry is configured.

log/v2.0.0

Features

  • #25778 Introduce log v2, adding contextual methods to Logger for trace correlation.

store/v2.0.0

API Breaking

  • #25470 Refactor store interfaces to support generic value types (object stores):
    • Replace BasicKVStore, KVStore, and Iterator interfaces/types with generic GBasicKVStore[V], GKVStore[V], and GIterator[V]. The old names are retained as type aliases (e.g. KVStore = GKVStore[[]byte]).
    • Remove Iterator as a direct alias to dbm.Iterator. It is now GIterator[[]byte], a distinct interface defined in the store package. Code that type-asserts to dbm.Iterator will break.
    • Remove CacheWrap() and CacheWrapWithTrace() method declarations from the CacheWrap interface. CacheWrap now embeds CacheWrapper to obtain CacheWrap().
    • Add GetObjKVStore(StoreKey) ObjKVStore to the MultiStore interface.
    • Add generic store variants across cachekv, gaskv, prefix, transient, and mem packages (GStore[V], NewGStore, NewObjStore).
  • #26037 Remove GetCommitStore and GetCommitKVStore from the CommitMultiStore interface. Remove top-level store.CommitStore and store.CommitKVStore type aliases from store/reexport.go.
  • #26060 Remove non-functional StoreMetrics. This metric interface never worked, so this simply removes dead code.
  • #26061 Remove tracing from store interfaces and implementations:
    • Remove SetTracer, SetTracingContext, and TracingEnabled from MultiStore interface.
    • Remove CacheWrapWithTrace from CacheWrapper interface.
    • Remove traceWriter and traceContext parameters from cachemulti.NewStore, cachemulti.NewFromKVStore, and cachemulti.NewFromParent.
    • Remove store/tracekv package entirely.
    • Remove TraceContext type store/types.

Features

  • #25470 Add object KV stores and refactor the base store to be generic across the value parameter:
    • Add object store types: ObjKVStore, ObjBasicKVStore, ObjIterator, ObjectStoreKey, StoreTypeObject.
    • Add generic store types: GBasicKVStore[V], GKVStore[V], GIterator[V].
    • Add cachemulti.NewFromParent constructor for lazy cache multistore construction from a parent store function.
  • #25647 Add EarliestVersion() int64 to the CommitMultiStore interface and GetEarliestVersion(db) helper.

Bug Fixes

  • #20425 Fix nil pointer panic when querying historical state where a new store does not exist.
  • #24583 Fix pruning height calculation to correctly handle in-flight snapshots. Adds SnapshotAnnouncer interface and AnnounceSnapshotHeight to track snapshots in progress and prevent premature pruning of their heights.
Commits

Updates cosmossdk.io/core from 0.11.3 to 1.1.0

Release notes

Sourced from cosmossdk.io/core's releases.

schema/v1.1.0

Breaking Changes

cosmossdk.io/schema was previously tagged as v1.0.0, but several stubs were included in this release which were unimplemented. v1.1.0 removes any unimplemented stubs and retracts v1.0.0 so that the schema v1 API is actually reflective of the codebase.

Group v1.0.0 Release Notes

The Group module enables on-chain multisig and collective decision-making for any set of accounts. Groups are formed with weighted members and one or more configurable decision policies, then govern shared accounts through proposals. With enterprise-level support, it is ready for production deployments requiring flexible, auditable multi-party authorization.

🚀 Highlights

  • Weighted group membership: Create groups with an admin, weighted members, and attach decision policies that define how proposals pass. Admins can be a single address, a multisig, or a group policy account itself.
  • Full proposal lifecycle: Members submit proposals containing arbitrary SDK messages, vote (YES/NO/ABSTAIN/NO_WITH_VETO), and any account can trigger execution once accepted.
  • Flexible decision policies: Two built-in policies — threshold (absolute weighted vote count) and percentage (proportion of YES votes) — each with configurable voting and minimum execution periods. The DecisionPolicy interface supports custom extensions.

POA v1.0.0 Release Notes

The POA module provides an admin-managed validator set as a drop-in replacement for the staking, distribution, and slashing modules. Purpose-built for institutional deployments run by a known set of operators, it offers a streamlined validator lifecycle with no native token required. Fee distribution to validators and full governance compatibility are included out of the box.

🚀 Highlights

  • Admin-controlled validator lifecycle: A single, customizable admin account manages validator creation, power updates, and removal. This admin can be set to a multisig, governance, or a single address.
  • Proportional fee distribution: Transaction fees accumulate in the POA module account allocated to validators in proportion to their voting power. Validators withdraw their accumulated fees via MsgWithdrawFees at any time.
  • Governance integration: Proposal submission, deposits, and voting are gated to active validators. A custom vote-tallying function weights votes by validator power.

v0.54.3

What's Changed

Full Changelog: cosmos/cosmos-sdk@v0.54.2...v0.54.3

v0.54.2

Cosmos SDK v0.54.2 Release Notes

🚀 Highlights

Announcing Cosmos SDK v0.54

We are pleased to announce the release of Cosmos SDK v0.54! Cosmos SDK v0.54 is part of the 2026.1 release family. This release introduces order of magnitude improvements to network stability and throughput.

See the full v0.54 release notes for more details on what's included in this release.

Upgrading to this verison of the Cosmos SDK from any v0.50.x release will require a coordinated chain upgrade.

For more information on upgrading, please see our upgrade guide.

📝 Changelog

... (truncated)

Changelog

Sourced from cosmossdk.io/core's changelog.

Changelog

UNRELEASED

Breaking Changes

  • (modules) #26421 Remove the x/protocolpool module and its API/proto surface from the SDK. Applications upgrading from v0.54 should include protocolpool in deleted store upgrades.

Features

  • (abci) #25620 Add support for new application side mempool ABCI methods.
  • (abci) #25969 Add support for new ABCI methods, InsertTx and ReapTxs.
  • (deps) #26388 Bump CometBFT version to v0.39.3.

... (truncated)

Commits
  • be5e3aa feat(log): extend logger options (#15956)
  • 851e9e8 docs: update roadmap for q2 (#15952)
  • 91278f6 refactor(x/authz)!: Use KVStoreService, context.Context and return errors ins...
  • 26faee9 refactor: bcrypt key derivation to aead (#509) (#15817)
  • 428e19f refactor(x/distribution)!: Use KVStoreService, context.Context and return err...
  • a6ea094 ci: skip fix registration for linting (#15965)
  • 00b78fa refactor(x/auth): v2 adaptable tx instead of double decode (#15910)
  • 1179285 feat(hubl): cache bech32 prefix (#15954)
  • 6a8251a build(deps): bump cometbft to v0.37.1 (#15955)
  • 6dfe735 refactor!: use KVStoreService and context.Context in x/bank (#15891)
  • Additional commits viewable in compare view

Updates github.com/bufbuild/buf from 1.64.0 to 1.69.0

Release notes

Sourced from github.com/bufbuild/buf's releases.

v1.69.0

  • Increase check plugin WASM memory limits to 1GiB.
  • Fix LSP stale diagnostics persisting after a file is closed or deleted.
  • Fix handling of unprefixed newlines in block comments.
  • Add LSP code lenses for buf.gen.yaml files: "Run buf generate" and "Check for plugin updates".
  • Add LSP warnings for lint.ignore and breaking.ignore paths in buf.yaml that do not match any file in the workspace.

v1.68.4

  • Fix duplicated extension tags across imports from compiler.

v1.68.3

  • Fix buf format error handling for edition 2024.

v1.68.2

  • Fix build failures for modules with a vendored descriptor.proto.
  • Fix LSP incorrectly reporting "edition '2024' not yet fully supported" errors.
  • Fix CEL compilation error messages in buf lint to use the structured error API instead of parsing cel-go's text output.
  • Add --debug-address flag to buf lsp serve to provide debug and profile support.

v1.68.1

  • Revert the use of the new compiler report format and properly ungate Editions 2024 features.
  • Fix absolute imports (leading-dot) marked unused in diagnostics.

v1.68.0

This release ports buf to our new Protobuf compiler, already used to power the Buf LSP. It uses a query-driven frontend and a new AST and intermediate representation, designed from the ground up to bring several improvements:

  • Better diagnostics. The new compiler produces rich, structured diagnostic reports with precise source locations. It also catches issues that protoc misses, such as duplicate repeated modifiers.
  • Editions 2024 support. Full support for Protobuf Editions 2024.
  • Faster and more memory efficient. Designed for large workspaces, the new compiler uses less memory and compiles faster than the previous implementation.

This is a seamless upgrade for buf users: no changes are required, the output has been automatically updated to a new, richer diagnostics report.

  • Use new compiler for build process and support Editions 2024 features.
  • Add LSP document links for buf.yaml deps, buf.gen.yaml remote plugins and input modules, buf.policy.yaml name and BSR plugins, and buf.lock dep names, making each a clickable link to its BSR page.
  • Add LSP code lenses for buf.yaml files to update all dependencies (buf.dep.updateAll) or check for available updates (buf.dep.checkUpdates).
  • Improve shell completions for buf flags with fixed value sets and file/directory arguments.
  • Add buf curl URL path shell completions (service and method names) via server reflection, --schema, or the local buf module.
  • Add support for Edition 2024 syntax to buf format.
  • Fix buf generate --clean deleting files from nested plugin output directories.

v1.67.0

  • Fix LSP not skipping buf.build/docs links for lint rules from check plugins and policies.
  • Fix buf dep graph --format json silently dropping dependencies when a dependency was already seen.
  • Add support for --rbs_out as a protoc_builtin plugin (requires protoc v34.0+).
  • Add relevant links from CEL LSP hover documentation to either <celbyexample.com> or <protovalidate.com>
  • Add OpenBSD and FreeBSD release binaries for amd64 and arm64.
  • Skip writing unchanged output files in buf generate to preserve modification times

... (truncated)

Changelog

Sourced from github.com/bufbuild/buf's changelog.

[v1.69.0] - 2026-04-29

  • Increase check plugin WASM memory limits to 1GiB.
  • Fix LSP stale diagnostics persisting after a file is closed or deleted.
  • Fix handling of unprefixed newlines in block comments.
  • Add LSP code lenses for buf.gen.yaml files: "Run buf generate" and "Check for plugin updates".
  • Add LSP warnings for lint.ignore and breaking.ignore paths in buf.yaml that do not match any file in the workspace.

[v1.68.4] - 2026-04-22

  • Fix duplicated extension tags across imports from compiler.

[v1.68.3] - 2026-04-20

  • Fix buf format error handling for edition 2024.

[v1.68.2] - 2026-04-17

  • Fix build failures for modules with a vendored descriptor.proto.
  • Fix LSP incorrectly reporting "edition '2024' not yet fully supported" errors.
  • Fix CEL compilation error messages in buf lint to use the structured error API instead of parsing cel-go's text output.
  • Add --debug-address flag to buf lsp serve to provide debug and profile support.

[v1.68.1] - 2026-04-14

  • Revert the use of the new compiler report format and properly ungate Editions 2024 features.
  • Fix absolute imports (leading-dot) marked unused in diagnostics.

[v1.68.0] - 2026-04-14

  • Use new compiler for build process and support Editions 2024 features.
  • Add LSP document links for buf.yaml deps, buf.gen.yaml remote plugins and input modules, buf.policy.yaml name and BSR plugins, and buf.lock dep names, making each a clickable link to its BSR page.
  • Add LSP code lenses for buf.yaml files to update all dependencies (buf.dep.updateAll) or check for available updates (buf.dep.checkUpdates).
  • Improve shell completions for buf flags with fixed value sets and file/directory arguments.
  • Add buf curl URL path shell completions (service and method names) via server reflection, --schema, or the local buf module.
  • Add support for Edition 2024 syntax to buf format.
  • Fix buf generate --clean deleting files from nested plugin output directories.

[v1.67.0] - 2026-04-01

  • Fix LSP not skipping buf.build/docs links for lint rules from check plugins and policies.
  • Fix buf dep graph --format json silently dropping dependencies when a dependency was already seen.
  • Add support for --rbs_out as a protoc_builtin plugin (requires protoc v34.0+).
  • Add relevant links from CEL LSP hover documentation to either <celbyexample.com> or <protovalidate.com>
  • Add OpenBSD and FreeBSD release binaries for amd64 and arm64.
  • Skip writing unchanged output files in buf generate to preserve modification times
  • Update buf beta registry plugin delete to prompt the user for deletion, matching the UX of the other deletion commands. Use --force to restore the old behavior.

... (truncated)

Commits
  • 88829eb Release v1.69.0 (#4521)
  • 4a92ff3 Upgrade protocompile to latest main (#4520)
  • 04ed9c9 Add YAML files to license header generation (#4518)
  • ddb8521 Upgrade protocompile to latest main (#4519)
  • 7e1e277 Propagate DuplicateProtoPathError as typed error from new compiler path (#4517)
  • f781a0e Reduce allocations in shake256.NewDigestForContent (#4505)
  • 5f4233e Add concurrency checks for CI workflows (#4516)
  • b10141d Add LSP code lenses for buf generate and checking for plugin updates (#4480)
  • 637ea97 Upgrade protocompile and update changelog (#4515)
  • d960fc0 Add LSP warning diagnostics for invalid buf.yaml ignore paths (#4498)
  • Additional commits viewable in compare view

Updates github.com/cometbft/cometbft from 0.38.21 to 0.39.0

Release notes

Sourced from github.com/cometbft/cometbft's releases.

v0.39.0

What's Changed

This release includes a number of performance improvements back ported from the v1.0.0 release, as well as the introduction of libp2p based networking as an alternative to cometp2p, and Adaptive Sync, which allows for consensus and blocksync to run along side each other.

See the full documentation on libp2p and Adaptive Sync for more details. For benchmark results of libp2p vs cometp2p, see the assets below.

See the CHANGELOG for this release.

v0.38.23

What's Changed

Full Changelog: cometbft/cometbft@v0.38.22...v0.38.23

v0.38.22

What's Changed

Full Changelog: cometbft/cometbft@v0.38.21...v0.38.22

Changelog

Sourced from github.com/cometbft/cometbft's changelog.

v0.39.0

April 10, 2026

BUG FIXES

  • [evidence] Add validation for Light Client Attack evidence ByzantineValidators (#5638)
  • [types] Fix buffer offset bug in ProposerPriorityHash that caused hash collisions when validator priorities differed (#5613)
  • [p2p] fix(privval): Ephemeral Port Exhaustion (#5433)
  • [blocksync] fix(blocksync): ExtendedCommit verification via next blocks LastCommit (#5629)
  • [p2p] fix(lp2p): enforce stream max size (#5647)
  • [metrics] fix(metrics)!: peer_send_queue_size (#5648)
  • [statesync] fix adaptive_sync and streamline stateSync logic (#5663)
  • [blocksync] Modify blocksync to use full commit verification instead of light (#5663)
  • [adaptivesync] Simplify loop, reuse blockExec.ValidateBlock (#5717)

IMPROVEMENTS

  • [consensus] perf(consensus): skip fsync for unsigned internal messages (block parts) (#5695)
  • [ci]: add lp2p testnet (#5643)
  • [mempool] feat!(p2p): introduce follower-mode. Improve lib-p2p integraap access
  • [types] Add validation for AuthorityParams.Authority field in consensus params, enforcing a maximum length of 256 characters (#5511)
  • [mempool] perf(mempool/cache): Optimize LRUTxCache.Remove to reduce lock contention and map access (#5244)
  • [e2e] add support for testing different keytypes, including BLS (#3513)
  • [crypto] Reduce BLS signature size to 48 bytes by increasing pubkey size to 192 bytes (#3624)
  • [p2p] feat(lp2p): make reactor queue configurable (#5662)
  • [cli] print lib-p2p peer id (#5667)
  • [p2p] Add warning when go-libp2p transport is enabled, conveying that the setting should only be activated if it can be enabled simultaneously for all validators and peer IDs have been predetermined and exchanged (#5692)
  • [p2p] feat(p2p): add adaptive sync for comet-p2p (#5705)

FEATURES

  • [p2p] feat(lp2p): implemented resource limiter (#5671)

... (truncated)

Commits

Updates github.com/cosmos/cosmos-sdk from 0.53.6 to 0.54.0

Release notes

Sourced from github.com/cosmos/cosmos-sdk's releases.

v0.53.7

Cosmos SDK v0.53.7 Release Notes

🚀 Highlights

This patch release includes minor functionality additions.

📝 Changelog

Check out the changelog for an exhaustive list of changes or compare changes from the last release.

Changelog

Sourced from github.com/cosmos/cosmos-sdk's changelog.

v0.54.0 - 2026-04-10

Breaking Changes

  • (x/consensus) #25607 Add AuthorityParams to consensus params. When set, the consensus params authority takes precedence over per-keeper authority for all module parameter updates. Keeper constructor signatures are unchanged.
  • (x/staking) #25724 Validate BondDenom in MsgUpdateParams to prevent setting non-existent or zero-supply denoms.
  • #25778 Update log to log v2.
  • #25546 Removed x/params:
    • Removes all legacySubspace arguments from Keeper and Module instantiation
  • #25090 Moved deprecated modules to ./contrib. These modules are still available but will no longer be actively maintained or supported in the Cosmos SDK Bug Bounty program.
    • x/group
    • x/nft
    • x/circuit
    • x/crisis
  • (crypto) #24414 Remove sr25519 support, since it was removed in CometBFT v1.x (see: CometBFT #3646).
  • (x/mint) #25599 Add max supply param.
  • (x/gov) #25615 Decouple x/gov from x/staking by making CalculateVoteResultsAndVotingPowerFn a required parameter to keeper.NewKeeper instead of StakingKeeper. BondedTokens has been renamed to ValidatorPower and TotalBondedTokens has been renamed to TotalValidatorPower to allow for multiple validator power representations.
  • (x/gov) #25617 AfterProposalSubmission hook now includes proposer address as a parameter.
  • (x/gov) #25616 DistrKeeper x/distribution is now optional. Genesis validation ensures distrKeeper is set if distribution module is used as proposal cancel destination.
  • (systemtests) [#25930]cosmos/cosmos-sdk#25930) Move systemtests into testutil and no longer under its own go.mod.
  • (baseapp) #26060 Remove BaseApp.SetStoreMetrics. The StoreMetrics interface never worked, so removing dead code.
  • (store) #26061 Remove store tracing API and all related plumbing:
    • Remove SetTracer, SetTracingContext, and TracingEnabled from MultiStore interface.
    • Remove CacheWrapWithTrace from CacheWrapper interface.
    • Remove BaseApp.SetCommitMultiStoreTracer and tracing context logic from BaseApp.cacheTxContext and FinalizeBlock.
    • Remove io.Writer parameter from servertypes.AppCreator and traceWriter io.Writer from servertypes.AppExporter.
    • Remove traceStore io.Writer parameter from simapp.NewSimApp and all enterprise simapp constructors.
    • Remove traceStore io.Writer from all testutil/simsx app factory signatures.
  • (store) #26042 We are now importing github.com/cosmos/cosmos-sdk/store/v2 as the store package instead of cosmossdk.io/store and all import paths have changed.
  • (baseapp) #26138 Default block gas meter to disabled. Adds checking to ensure block gas meter is not enabled while bstm parallel execution is configured and panics in these scenarios during parameter assignment.

Features

  • #25471 Full BLS 12-381 support enabled.
  • #24872 Support BLS 12-381 for cli init, gentx, collect-gentx
  • (crypto) #24919 add NewPubKeyFromBytes function to the secp256r1 package to create PubKey from bytes
  • (server) #24720 add verbose_log_level flag for configuring the log level when switching to verbose logging mode during sensitive operations (such as chain upgrades).
  • (crypto) #24861 add PubKeyFromCometTypeAndBytes helper function to convert from comet/v2 PubKeys to the cryptotypes.Pubkey interface.
  • (abci_utils) #25008 add the ability to assign a custom signer extraction adapter in DefaultProposalHandler.
  • (x/distribution) #25650 Add new gRPC query endpoints and CLI commands for DelegatorStartingInfo, ValidatorHistoricalRewards, and ValidatorCurrentRewards.
  • #25745 Add DiskIO telemetry via gopsutil.
  • (grpc) #25648 Add earliest_block_height and latest_block_height fields to GetSyncingResponse.
  • (collections/codec) #25614 (cosmos/cosmos-sdk#25827) Add TimeValue (ValueCodec[time.Time]) to collections/codec.
  • (enterprise/poa) #25838 Add the poa module under the enterprise directory.
  • (grpc) #25850 Add GetBlockResults and GetLatestBlockResults gRPC endpoints to expose CometBFT block results including finalize_block_events.

Improvements

  • (ci) Use softprops/action-gh-release for main-nightly instead of custom gh/git to avoid repository ruleset conflicts.

... (truncated)

Commits

Updates github.com/cosmos/ibc-go/v10 from 10.5.0 to 10.7.0

Release notes

Sourced from github.com/cosmos/ibc-go/v10's releases.

v10.7.0

Description

This small release improves IBC v2 reliability by tightening transfer validation and fixing channel v2 queries for packet commitments and acknowledgements that use binary store keys.

Migration Guide

No migration is required.

What's Changed

Full Diff: cosmos/ibc-go@v10.6.0...v10.7.0

v10.6.0

ibc-go v10.6.0 Release Notes

This release fixes a potential blockage of the IBC v2 packet life cycle, caused by incorrect handling of an error in the callbacks middleware.

Migration Guide

This version requires a coordinated upgrade as it contains a state breaking change.

What's Changed

Full Changelog: cosmos/ibc-go@v10.5.1...v10.6.0

v10.5.1

ibc-go v10.5.1 Release Notes

This release fixes a failure caused by non-UTF8 values being included in error/event emission. View the full changelog for more details.

Migration Guide

This version does not contain any state or API breaking changes.

What's Changed

Full Changelog: cosmos/ibc-go@v10.5.0...v10.5.1

Changelog

Sourced from github.com/cosmos/ibc-go/v10's changelog.

v10.7.0 - 2026-05-20

Improvements

  • (apps/transfer) #8948 Add extra validation to the v2 transfer module based on v1 validation. (backport of #8939)

Bug Fixes

  • (channel/v2) #8954 fix(channel/v2): parse binary store keys in PacketCommitments and PacketAcknowledgements queries (backport of #8778)

v10.6.0 - 2026-04-24

Bug Fixes

  • (apps/callbacks) #8916 OnTimeoutPacket blocked by UnmarshalPacketData error (backport of #8856)

v10.5.1 - 2026-04-09

Bug Fixes

  • (apps/transfer) #8879 Use packet sender and receiver strings in unauthorized errors to avoid non-UTF8 event/simulation failures. (backport of #8874)
Commits
  • 40c9dbe docs: fix typo in changelog (#8956)
  • 114e182 fix(channel/v2): parse binary store keys in PacketCommitments and PacketAckno...
  • a8c6068 imp(transfer): add extra validation to v2 module based on v1 validation (back...
  • 1e4d410 fix(callbacks/v2): OnTimeoutPacket blocked by UnmarshalPacketData error (back...
  • f84fb81 revert: "fix(callbacks/v2): OnTimeoutPacket blocked by UnmarshalPacketData er...
  • 84c5bad fix(callbacks/v2): OnTimeoutPacket blocked by UnmarshalPacketData error (back...
  • c990bce docs(changelog): added release date (#8894)
  • 7ff5431 chore(docs): removed docs in release branch (#8880)
  • b849842 fix(transfer): use packet sender and receiver string in unauthorized error (b...
  • eaecf8a chore: wireup ibcv2 router in the simapp (#8847)
  • Additional commits viewable in compare view

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.27.5 to...

Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 9, 2026
@dependabot dependabot Bot force-pushed the dependabot/go_modules/dependencies-aeb82f774a branch from 8af170b to 786ee03 Compare May 16, 2026 09:06
@dependabot
chore(deps): bump the dependencies group across 1 directory with 19 u…
7b9123f 
…pdates

Bumps the dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cosmossdk.io/api](https://github.com/cosmos/cosmos-sdk) | `0.9.2` | `1.0.0` |
| [cosmossdk.io/client/v2](https://github.com/cosmos/cosmos-sdk) | `2.0.0-beta.7` | `2.11.0` |
| [github.com/bufbuild/buf](https://github.com/bufbuild/buf) | `1.64.0` | `1.69.0` |
| [github.com/cosmos/ibc-go/v10](https://github.com/cosmos/ibc-go) | `10.5.0` | `10.7.0` |
| [cosmossdk.io/x/tx](https://github.com/cosmos/cosmos-sdk) | `0.14.0` | `1.1.0` |
| [github.com/cosmos/evm](https://github.com/cosmos/evm) | `0.6.0` | `0.7.0` |
| [github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v10](https://github.com/cosmos/ibc-apps) | `10.1.0` | `10.6.0` |
| [google.golang.org/grpc/cmd/protoc-gen-go-grpc](https://github.com/grpc/grpc-go) | `1.6.0` | `1.6.2` |



Updates `cosmossdk.io/api` from 0.9.2 to 1.0.0
- [Release notes](https://github.com/cosmos/cosmos-sdk/releases)
- [Changelog](https://github.com/cosmos/cosmos-sdk/blob/main/CHANGELOG.md)
- [Commits](cosmos/cosmos-sdk@api/v0.9.2...api/v1.0.0)

Updates `cosmossdk.io/client/v2` from 2.0.0-beta.7 to 2.11.0
- [Release notes](https://github.com/cosmos/cosmos-sdk/releases)
- [Changelog](https://github.com/cosmos/cosmos-sdk/blob/main/CHANGELOG.md)
- [Commits](cosmos/cosmos-sdk@client/v2.0.0-beta.7...client/v2.11.0)

Updates `cosmossdk.io/core` from 0.11.3 to 1.1.0
- [Release notes](https://github.com/cosmos/cosmos-sdk/releases)
- [Changelog](https://github.com/cosmos/cosmos-sdk/blob/main/CHANGELOG.md)
- [Commits](cosmos/cosmos-sdk@core/v0.11.3...log/v1.1.0)

Updates `github.com/bufbuild/buf` from 1.64.0 to 1.69.0
- [Release notes](https://github.com/bufbuild/buf/releases)
- [Changelog](https://github.com/bufbuild/buf/blob/main/CHANGELOG.md)
- [Commits](bufbuild/buf@v1.64.0...v1.69.0)

Updates `github.com/cometbft/cometbft` from 0.38.21 to 0.39.0
- [Release notes](https://github.com/cometbft/cometbft/releases)
- [Changelog](https://github.com/cometbft/cometbft/blob/main/CHANGELOG.md)
- [Commits](cometbft/cometbft@v0.38.21...v0.39.0)

Updates `github.com/cosmos/cosmos-sdk` from 0.53.6 to 0.54.0
- [Release notes](https://github.com/cosmos/cosmos-sdk/releases)
- [Changelog](https://github.com/cosmos/cosmos-sdk/blob/main/CHANGELOG.md)
- [Commits](cosmos/cosmos-sdk@v0.53.6...v0.54.0)

Updates `github.com/cosmos/ibc-go/v10` from 10.5.0 to 10.7.0
- [Release notes](https://github.com/cosmos/ibc-go/releases)
- [Changelog](https://github.com/cosmos/ibc-go/blob/main/CHANGELOG.md)
- [Commits](cosmos/ibc-go@v10.5.0...v10.7.0)

Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.27.5 to 2.28.0
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases)
- [Commits](grpc-ecosystem/grpc-gateway@v2.27.5...v2.28.0)

Updates `cosmossdk.io/collections` from 1.3.1 to 1.4.0
- [Release notes](https://github.com/cosmos/cosmos-sdk/releases)
- [Changelog](https://github.com/cosmos/cosmos-sdk/blob/main/CHANGELOG.md)
- [Commits](cosmos/cosmos-sdk@log/v1.3.1...log/v1.4.0)

Updates `cosmossdk.io/errors` from 1.0.2 to 1.1.0
- [Release notes](https://github.com/cosmos/cosmos-sdk/releases)
- [Changelog](https://github.com/cosmos/cosmos-sdk/blob/main/CHANGELOG.md)
- [Commits](cosmos/cosmos-sdk@store/v1.0.2...log/v1.1.0)

Updates `cosmossdk.io/x/tx` from 0.14.0 to 1.1.0
- [Release notes](https://github.com/cosmos/cosmos-sdk/releases)
- [Changelog](https://github.com/cosmos/cosmos-sdk/blob/main/CHANGELOG.md)
- [Commits](cosmos/cosmos-sdk@v0.14.0...log/v1.1.0)

Updates `github.com/cosmos/evm` from 0.6.0 to 0.7.0
- [Release notes](https://github.com/cosmos/evm/releases)
- [Changelog](https://github.com/cosmos/evm/blob/v0.7.0/CHANGELOG.md)
- [Commits](cosmos/evm@v0.6.0...v0.7.0)

Updates `github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v10` from 10.1.0 to 10.6.0
- [Release notes](https://github.com/cosmos/ibc-apps/releases)
- [Commits](cosmos/ibc-apps@modules/rate-limiting/v10.1.0...middleware/packet-forward-middleware/v10.6.0)

Updates `golang.org/x/crypto` from 0.49.0 to 0.50.0
- [Commits](golang/crypto@v0.49.0...v0.50.0)

Updates `golang.org/x/exp` from 0.0.0-20260112195511-716be5621a96 to 0.0.0-20260410095643-746e56fc9e2f
- [Commits](https://github.com/golang/exp/commits)

Updates `golang.org/x/tools` from 0.42.0 to 0.44.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.42.0...v0.44.0)

Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20260203192932-546029d2fa20 to 0.0.0-20260427160629-7cedc36a6bc4
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/grpc` from 1.79.3 to 1.80.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.79.3...v1.80.0)

Updates `google.golang.org/grpc/cmd/protoc-gen-go-grpc` from 1.6.0 to 1.6.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.6.0...cmd/protoc-gen-go-grpc/v1.6.2)

---
updated-dependencies:
- dependency-name: cosmossdk.io/api
  dependency-version: 1.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: cosmossdk.io/client/v2
  dependency-version: 2.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: cosmossdk.io/collections
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: cosmossdk.io/core
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: cosmossdk.io/errors
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: cosmossdk.io/x/tx
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: github.com/bufbuild/buf
  dependency-version: 1.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/cometbft/cometbft
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/cosmos/cosmos-sdk
  dependency-version: 0.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/cosmos/evm
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v10
  dependency-version: 10.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/cosmos/ibc-go/v10
  dependency-version: 10.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-version: 2.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: golang.org/x/crypto
  dependency-version: 0.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: golang.org/x/exp
  dependency-version: 0.0.0-20260410095643-746e56fc9e2f
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: golang.org/x/tools
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: google.golang.org/genproto/googleapis/api
  dependency-version: 0.0.0-20260427160629-7cedc36a6bc4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.80.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: google.golang.org/grpc/cmd/protoc-gen-go-grpc
  dependency-version: 1.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/dependencies-aeb82f774a branch from 786ee03 to 7b9123f Compare May 23, 2026 09:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants