For this month patch release of the v0.50.x line, a few improvements were added to the SDK and some bugs were fixed.
Notably, we added and fixed the following:
Add extra checks in x/consensus MsgUpdateParams to prevent footguns when updating the consensus parameters.
Forgetting a field in a x/consensus parameter change gov proposal could lead to a chain halt.
The fix is in theory consensus breaking, but in practice, it is only a footgun prevention (the path only triggers if the proposal was executed and was invalid). Please ensure that all validators are on v0.50.7 before the execution of a x/consensus params update proposal.
Remove txs from the mempool when they fail in RecheckTX
π Changelog
Check out the changelog for an exhaustive list of changes, or compare changes from the last release.
Refer to the upgrading guide when migrating from v0.47.x to v0.50.1.
Note, that the next SDK release, v0.51, will not include x/params migration, when migrating from < v0.47, v0.50.x or v0.47.x, is a mandatory migration.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps github.com/cosmos/cosmos-sdk from 0.50.6 to 0.50.7.
Release notes
Sourced from github.com/cosmos/cosmos-sdk's releases.
Changelog
Sourced from github.com/cosmos/cosmos-sdk's changelog.
Commits
62212df
chore: prepare v0.50.7 (#20475)9313b0f
chore(x/upgrade): bump vulnerablego-getter
library (#20530)9cfb349
docs: add docs on permissions (backport #20526) (#20527)d180df8
fix(x/consensus): harden consensus params proposal (#20381)443f153
docs: update link contents (backport #20437) (#20462)5545d45
docs: fix note blocks display failure (backport #20457) (#20459)2ca9873
docs: update diagram to be shown properly (backport #20454) (#20460)b99ca2c
fix: correctly assignexecModeSimulate
to context forsimulateTx
(backpor...83747c5
feat(client): overwrite client context instead of setting new one (backport #...08fdfec
feat(client): add consensus address for debug cmd (backport #20328) (#20366)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show