build(deps): Bump github.com/cometbft/cometbft from 0.37.5 to 0.37.8

[dependabot[bot]]

Bumps github.com/cometbft/cometbft from 0.37.5 to 0.37.8.

Release notes

Sourced from github.com/cometbft/cometbft's releases.

v0.37.8

See the CHANGELOG for this release.

v0.37.7

See the CHANGELOG for this release.

v0.37.6

See the CHANGELOG for this release.

Changelog

Sourced from github.com/cometbft/cometbft's changelog.

v0.37.8

July 1, 2024

This release reverts the API-breaking change to the Mempool interface introduced in the last patch release (v0.37.7) while still keeping the performance improvement added to the mempool. It also includes a minor fix to the RPC endpoints /tx and /tx_search.

BREAKING CHANGES

• [mempool] Revert adding the method PreUpdate() to the Mempool interface, recently introduced in the previous patch release (v0.37.7). Its logic is now moved into the Lock method. With this change, the Mempool interface is the same as in v0.37.6. (#3363)

BUG FIXES

• [rpc] Fix nil pointer error in /tx and /tx_search when block is absent (#3352)

v0.37.7

June 27, 2024

This release is centered around two topics: mempool and performance improvements. The mempool will stop accepting new transactions if the node can't keep up with rechecking the number of transactions already in the mempool. It also contains a few bug fixes.

BREAKING CHANGES

• [mempool] Add to the Mempool interface a new method PreUpdate(). This method should be called before acquiring the mempool lock, to signal that a new update is coming. Also add to ErrMempoolIsFull a new field RecheckFull. (#3314)

BUG FIXES

• [blockstore] Fix invalid blocks received in blocksync mode, added banning peer option (#ASA-2024-008)
• [consensus] Fix a race condition in the consensus timeout ticker. Race is caused by two timeouts being scheduled at the same time. (#3092)

IMPROVEMENTS

• [event-bus] Remove the debug logs in PublishEventTx, which were noticed production slowdowns. (#2911)
• [state/execution] Cache the block hash computation inside of the Block Type, so we only compute it once. (#2924)
• [consensus/state] Remove a redundant VerifyBlock call in FinalizeCommit (#2928)

... (truncated)

Commits

• f71918b Release/v0.37.8 (#3385)
• 770f8cc build(deps): Bump docker/build-push-action from 6.1.0 to 6.2.0 (#3380)
• 802e87f refactor(mempool)!: remove PreUpdate from Mempool interface and move its logi...
• 04589a3 fix(rpc): fix nil pointer error in /tx and /tx_search (backport #3355) (#...
• 0353f3f Release/v0.37.7 (#3351)
• 07866e1 Merge pull request from GHSA-hg58-rf2h-6rr7
• cd1a511 Formatted changelog
• 27c6721 blocksync pool peer ban test
• 751e818 fix(mempool)!: stop accepting TXs in the mempool if we can't keep up with reC...
• 1a4f00d build(deps): Bump bufbuild/buf-setup-action from 1.33.0 to 1.34.0 (#3322)
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

| Dependency Name | Ignore Conditions | | --- | --- | | github.com/cometbft/cometbft | [>= 0.38.a, < 0.39] |

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)