Missed the v0.47.0 announcement? Read it here.
For this third patch release of the v0.47.x line, some of the notable changes include:
The barberry security vulnerability is resolved. All chains using Cosmos SDK v0.47.0-v0.47.2 are advised to upgrade to v0.47.3immediately. A chain is not affected by the vulnerability as soon as 33%+1 of the voting power has upgraded. A chain is safe from halting as soon as 66%+1 of the voting power has upgraded. Coordinate with your validators to upgrade as soon as possible. The upgrade can be applied as a rolling upgrade across the validators or as a coordinated upgrade. Networks should decide which option gets them upgraded quicker.
(sims) #16656 Add custom max gas for block for sim config with unlimited as default.
Improvements
(cli) #16856 Improve simd prune UX by using the app default home directory and set pruning method as first variable argument (defaults to default). pruning.PruningCmd rest unchanged for API compability, use pruning.Cmd instead.
(testutil) #16704 Make app config configurator for testing configurable with external modules.
(baseapp) #16290 Add circuit breaker setter in baseapp.
(x/group) #16191 Add EventProposalPruned event to group module whenever a proposal is pruned.
(tx) #15992 Add WithExtensionOptions in tx Factory to allow SetExtensionOptions with given extension options.
Improvements
(baseapp) #16407 Make DefaultProposalHandler.ProcessProposalHandler return a ProcessProposal NoOp when using none or a NoOp mempool.
(deps) #16083 Bumps proto-builder image to 0.13.0.
(client) #16075 Partly revert #15953 and factory.Prepare now does nothing in offline mode.
(server) #15984 Use cosmossdk.io/log package for logging instead of CometBFT logger. NOTE: v0.45 and v0.46 were not using CometBFT logger either. This keeps the same underlying logger (zerolog) as in v0.45.x+ and v0.46.x+ but now properly supporting filtered logging.
(gov) #15979 Improve gov error message when failing to convert v1 proposal to v1beta1.
(store) #16067 Add local snapshots management commands.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps github.com/cosmos/cosmos-sdk from 0.45.9 to 0.47.4.
Release notes
Sourced from github.com/cosmos/cosmos-sdk's releases.
... (truncated)
Changelog
Sourced from github.com/cosmos/cosmos-sdk's changelog.
... (truncated)
Commits
3b509c1
chore: prepare v0.47.4 (#16880)ede074f
docs: change bank multi-send command description (backport #16950) (#17018)f922661
docs(group): fix typo in README.md (backport #17009) (#17011)f7b6886
fix: query tx events with>=
and<=
operators (backport #16994) (#16996)031162f
build(deps): Bump cosmossdk.io/errors from 1.0.0-beta.7 to 1.0.0 (#16941)af65372
docs: Clarify gov docs (backport #16917) (#16925)9f23c6e
docs: describex/gov
usage on Cosmos Hub (backport #16910) (#16912)54db420
fix(cli): improveprune
command ux (backport #16856) (#16875)1ee99c0
fix: properly use--trace
flag (backport #16827) (#16831)398214f
fix(x/slashing): Emit slashing event with the correct reason in SlashWithInfr...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)