Bump chia-bls from 0.38.2 to 0.45.0

[dependabot]

Bumps chia-bls from 0.38.2 to 0.45.0.

Release notes

Sourced from chia-bls's releases.

0.45.0

What's Changed

• [CHIA-4213] don't print secret keys, as a precaution to not leak it by @​arvidn in Chia-Network/chia_rs#1453
• Update Managed Files by @​ChiaAutomation in Chia-Network/chia_rs#1448
• optimize additions_and_removals() by @​arvidn in Chia-Network/chia_rs#1458
• Validation err transition by @​arvidn in Chia-Network/chia_rs#1457
• add feature to the python bindings to truncate a member vector, by name by @​arvidn in Chia-Network/chia_rs#1459
• bump version to 0.45.0 by @​arvidn in Chia-Network/chia_rs#1462

Full Changelog: Chia-Network/chia_rs@0.44.0...0.45.0

0.44.0

What's Changed

• Expose generator_interned_weight() to Python by @​richardkiss in Chia-Network/chia_rs#1435
• add testnet to ConsensusConstants by @​arvidn in Chia-Network/chia_rs#1449
• bump version to 0.44.0 by @​arvidn in Chia-Network/chia_rs#1450

Full Changelog: Chia-Network/chia_rs@0.43.0...0.44.0

0.43.0

What's Changed

• remove map_pyerr_w_ptr by @​arvidn in Chia-Network/chia_rs#1427
• fix error in crates/chia-protocol/Cargo.toml by @​arvidn in Chia-Network/chia_rs#1428
• bump chia-pos2 dependency to 0.4.2 by @​arvidn in Chia-Network/chia_rs#1417
• improve error reporting in python by @​arvidn in Chia-Network/chia_rs#1430
• fix mypy issue by @​arvidn in Chia-Network/chia_rs#1433
• Remove (largely) unused NodePtr from ValidationError by @​arvidn in Chia-Network/chia_rs#1432
• update chia-pos2 to the latest version, 0.6.0 by @​arvidn in Chia-Network/chia_rs#1441
• make the ValidationErr closer to a proper rust error type by @​arvidn in Chia-Network/chia_rs#1445
• bump version to 0.43.0 by @​arvidn in Chia-Network/chia_rs#1446

Full Changelog: Chia-Network/chia_rs@0.42.1...0.43.0

0.42.1

What's Changed

• fixup benchmark-conditions-cost by @​arvidn in Chia-Network/chia_rs#1407
• fix stubtest for mypy 1.20: clean up unused allowlist entries by @​richardkiss in Chia-Network/chia_rs#1415
• Fix NFT metadata parsing for invalid keys by @​Rigidity in Chia-Network/chia_rs#1310
• [CHIA-3854] Alternative: pure storage cost model (12000/0) for generator identity HF by @​richardkiss in Chia-Network/chia_rs#1377
• Check time lock by @​arvidn in Chia-Network/chia_rs#1422
• bump clvmr to 0.17.7 by @​arvidn in Chia-Network/chia_rs#1425
• bump version to 0.42.1 by @​arvidn in Chia-Network/chia_rs#1426

Full Changelog: Chia-Network/chia_rs@0.42.0...0.42.1

0.42.0

... (truncated)

Commits

• de5c8b3 Merge pull request #1462 from Chia-Network/bump-0.45.0
• 836c123 bump version to 0.45.0
• f11f825 Merge pull request #1459 from Chia-Network/truncate-lists
• 5c1bfe3 Merge pull request #1457 from Chia-Network/validation-err-transition
• dee71db add feature to the python bindings to truncate a member vector, by name
• 90cb23e Merge pull request #1458 from Chia-Network/optimize-add-remove
• 7865ac9 optimize additions_and_removals()
• dc18435 make check_time_locks() use ValidationErr instead of ErrorCode directly
• 030a07e update conditions.rs use of atom() and sanitize_uint()
• f47a1eb use ValidationErr instead of naked ErrorCode. This is a step towards merging ...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Note

Medium Risk
BLS is on the cryptographic verification path for clvmr, so a multi-minor upstream bump warrants regression testing even though this PR only changes manifests.

Overview
Bumps the workspace chia-bls dependency from 0.38.2 to 0.45.0 in Cargo.toml and refreshes Cargo.lock.

The lockfile pulls in matching 0.45.0 chia-traits, chia_streamable_macro, and a second chia-sha2 crate (0.45.0 for the BLS stack) while clvmr / clvm-fuzzing still resolve chia-sha2 0.38.2 for direct use. chia-bls’s dependency graph also standardizes on thiserror 2.x, dropping the old 1.0.69 entries from the lockfile.

No Rust source changes—only dependency versions.

^{Reviewed by Cursor Bugbot for commit 7ff453b. Bugbot is set up for automated code reviews on this repo. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/​chia-sha2@​0.45.0
	cargo/​chia-bls@​0.38.2 ⏵ 0.45.0

View full report

[coveralls-official]

Coverage Report for CI Build 28428601509

Coverage remained the same at 88.119%

Details

• Coverage remained the same as the base build.
• Patch coverage: No coverable lines changed in this PR.
• No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.

---

Coverage Stats

Relevant Lines:	9393
Covered Lines:	8277
Line Coverage:	88.12%
Coverage Strength:	21793193.51 hits per line

---

💛 - Coveralls