Skip to content

chore(deps): bump the go_modules group across 2 directories with 15 updates#1

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go_modules-7d3a12c50c
Open

chore(deps): bump the go_modules group across 2 directories with 15 updates#1
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go_modules-7d3a12c50c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 10, 2026

Copy link
Copy Markdown

Bumps the go_modules group with 6 updates in the / directory:

Package From To
cosmossdk.io/math 1.2.0 1.4.0
github.com/cometbft/cometbft 0.38.5 0.38.21
github.com/cosmos/cosmos-sdk 0.50.4 0.50.14
filippo.io/edwards25519 1.0.0 1.1.1
github.com/dvsekhvalnov/jose2go 1.6.0 1.7.0
github.com/hashicorp/go-getter 1.7.3 1.8.6

Bumps the go_modules group with 7 updates in the /tests/e2e directory:

Package From To
cosmossdk.io/math 1.2.0 1.4.0
github.com/cometbft/cometbft 0.38.5 0.38.21
filippo.io/edwards25519 1.0.0 1.1.1
github.com/dvsekhvalnov/jose2go 1.6.0 1.7.0
github.com/hashicorp/go-getter 1.7.3 1.8.6
github.com/cosmos/ibc-go/v8 8.0.0-rc.0 8.7.0
github.com/ethereum/go-ethereum 1.12.1 1.17.0

Updates cosmossdk.io/math from 1.2.0 to 1.4.0

Commits

Updates github.com/cometbft/cometbft from 0.38.5 to 0.38.21

Release notes

Sourced from github.com/cometbft/cometbft's releases.

v0.38.21

What's Changed

Full Changelog: cometbft/cometbft@v0.38.20...v0.38.21

v0.38.20

What's Changed

Full Changelog: cometbft/cometbft@v0.38.19...v0.38.20

v0.38.19

This is a security patch release to the CometBFT v0.38.x family that fixes GHSA-hrhf-2vcr-ghch

What's Changed

Full Changelog: cometbft/cometbft@v0.38.18...v0.38.19

v0.38.18

What's Changed

... (truncated)

Changelog

Sourced from github.com/cometbft/cometbft's changelog.

v0.38.21

January 23, 2026

IMPROVEMENTS

  • [statesync] Add configurable max-snapshot-chunks parameter to validate max amount of chunks in a SnapshotResponse. (#5549)

v0.38.20

December 12, 2025

v0.38.19

October 14, 2025

This release fixes two security issues, including (ASA-2025-003). Users are encouraged to upgrade as soon as possible.

Additionally included is a bug fix to properly prune extended commits (with vote extensions).

BUG-FIXES

  • [consensus] Reject oversized proposals (#5324)
  • [store] Prune extended commits properly (5275)
  • [bits] Validate BitArray mismatched Bits and Elems length (ASA-2025-003)

v0.38.18

July 3, 2025

Adds precommit metrics and reindex CLI command.

IMPROVEMENTS

  • Adds metrics that emit precommit data; precommit quorum delay from proposal, and precommit vote count and stake weight within timeout commit period. (#5251)

v0.38.17

February 3, 2025

This release fixes two security issues (ASA-2025-001, ASA-2025-002). Users are encouraged to upgrade as soon as possible.

... (truncated)

Commits

Updates github.com/cosmos/cosmos-sdk from 0.50.4 to 0.50.14

Release notes

Sourced from github.com/cosmos/cosmos-sdk's releases.

v0.50.14

Cosmos SDK v0.50.14 Release Notes

🚀 Highlights

This patch release fixes GHSA-p22h-3m2v-cmgh. It resolves a x/distribution module issue that can halt chains when the historical rewards pool overflows. Chains using the x/distribution module are affected by this issue.

We recommended upgrading to this patch release as soon as possible.

This patch is state-breaking; chains must perform a coordinated upgrade. This patch cannot be applied in a rolling upgrade.

📝 Changelog

Check out the changelog for an exhaustive list of changes or compare changes from the last release.

v0.50.13

Cosmos SDK v0.50.13 Release Notes

💬 Release Discussion

🚀 Highlights

This patch release fixes GHSA-47ww-ff84-4jrg. It resolves a x/group module issue that can halt chains when there is invalid state in the endblocker. Only users of the x/group module are affected by this issue.

We recommended to upgrade to this patch release as soon as possible.

This patch is not state-breaking, so chains can upgrade in a rolling manner. This does not have to be a coordinated upgrade. However, validators should upgrade as soon as possible when the release is made available. If the vulnerability is exploited before 2/3 is patched, the chain will halt.

📝 Changelog

Check out the changelog for an exhaustive list of changes or compare changes from last release.

v0.50.12

Cosmos SDK v0.50.12 Release Notes

💬 Release Discussion

🚀 Highlights

This patch release fixes GHSA-x5vx-95h7-rv4p. It resolves a x/group module issue that can halt chain when handling a malicious proposal. Only users of the x/group module are affected by this issue.

We recommended to upgrade to this patch release as soon as possible. When upgrading from <= v0.50.11, please use a chain upgrade to ensure that 2/3 of the validator power upgrade to v0.50.12.

... (truncated)

Changelog

Sourced from github.com/cosmos/cosmos-sdk's changelog.

v0.50.14 - 2025-07-08

Bug Fixes

v0.50.13 - 2025-03-12

Bug Fixes

v0.50.12 - 2025-02-20

Bug Fixes

v0.50.11 - 2024-12-16

Features

  • (crypto/keyring) #21653 New Linux-only backend that adds Linux kernel's keyctl support.

Improvements

  • (server) #21941 Regenerate addrbook.json for in place testnet.

Bug Fixes

  • Fix ABS-0043/ABS-0044 Limit recursion depth for unknown field detection and unpack any
  • (server) #22564 Fix fallback genesis path in server
  • (x/group) #22425 Proper address rendering in error
  • (sims) #21906 Skip sims test when running dry on validators
  • (cli) #21919 Query address-by-acc-num by account_id instead of id.
  • (x/group) #22229 Accept 1 and try in CLI for group proposal exec.

v0.50.10 - 2024-09-20

Features

  • (cli) #20779 Added module-hash-by-height command to query and retrieve module hashes at a specified blockchain height, enhancing debugging capabilities.
  • (cli) #21372 Added a bulk-add-genesis-account genesis command to add many genesis accounts at once.
  • (types/collections) #21724 Added LegacyDec collection value.

Improvements

  • (x/bank) #21460 Added Sender attribute in MsgMultiSend event.

... (truncated)

Commits
  • f2e6295 Merge commit from fork
  • 7b9d2ff Merge commit from fork
  • 9816440 Merge commit from fork
  • 158f146 chore: remove unused orm module (backport #23633) (#23637)
  • effb71f docs: correct explanation on how to set custom signer via depinject (backport...
  • b9db4d2 docs(keyring): add keyctl docs (backport #23563) (#23566)
  • 5f08d21 feat(client/v2): add map support (backport #23544) (#23554)
  • f1b139d feat(x/tx): add an option to encode maps using amino json (backport #23539) (...
  • 9d3c384 build(deps): Bump github.com/cosmos/ledger-cosmos-go from 0.13.3 to 0.14.0 (#...
  • f465587 build(deps): Bump github.com/cosmos/cosmos-db from 1.1.0 to 1.1.1 (#23030)
  • Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.62.1 to 1.70.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.70.0

Behavior Changes

  • client: reject service configs containing an invalid retryPolicy in accordance with gRFCs A21 and A6. (#7905)
    • Note that this is a potential breaking change for some users using an invalid configuration, but continuing to allow this behavior would violate our cross-language compatibility requirements.

New Features

  • xdsclient: fallback to a secondary management server (if specified in the bootstrap configuration) when the primary is down is enabled by default. Can be disabled by setting the environment variable GRPC_EXPERIMENTAL_XDS_FALLBACK to false. (#7949)
  • experimental/credentials: experimental transport credentials are added which don't enforce ALPN. (#7980)
    • These credentials will be removed in an upcoming grpc-go release. Users must not rely on these credentials directly. Instead, they should either vendor a specific version of gRPC or copy the relevant credentials into their own codebase if absolutely necessary.

Bug Fixes

  • xds: fix a possible deadlock that happens when both the client application and the xDS management server (responsible for configuring the client) are using the xds:/// scheme in their target URIs. (#8011)

Performance

  • server: for unary requests, free raw request message data as soon as parsing is finished instead of waiting until the method handler returns. (#7998)

Documentation

  • examples/features/gracefulstop: add example to demonstrate server graceful stop. (#7865)

Release 1.69.4

Bug Fixes

  • rbac: fix support for :path header matchers, which would previously never successfully match (#7965).

Documentation

  • examples/features/csm_observability: update example client and server to use the helloworld service instead of echo service (#7945).

Release 1.69.3 was accidentally tagged on the master branch and will be deleted. Please update to 1.69.4 instead.

Release 1.69.2

Bug Fixes

  • stats/experimental: add type aliases for symbols (Metrics/etc) that were moved to the stats package (#7929).
  • client: set user-agent string to the correct version.

Release 1.69.0

Known Issues

  • The recently added grpc.NewClient function is incompatible with forward proxies, because it resolves the target hostname on the client instead of passing the hostname to the proxy. A fix is expected to be a part of grpc-go v1.70. (#7556)

New Features

  • stats/opentelemetry: Introduce new APIs to enable OpenTelemetry instrumentation for metrics on servers and clients (#7874)
  • xdsclient: add support to fallback to lower priority servers when higher priority ones are down (#7701)
  • dns: Add support for link local IPv6 addresses (#7889)
  • The new experimental pickfirst LB policy (disabled by default) supports Happy Eyeballs, interleaving IPv4 and IPv6 address as described in RFC-8305 section 4, to attempt connections to multiple backends concurrently. The experimental pickfirst policy can be enabled by setting the environment variable GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST to true. (#7725, #7742)

... (truncated)

Commits
  • 98a0092 Change version to 1.70.0 (#7984)
  • bf380de Cherrypick #7998, #8011, #8010 into 1.70.x (#8028)
  • 54b3eb9 experimental/credentials: Add credentials that don't enforce ALPN (#7980) (#8...
  • 62b9185 clustetresolver: Copy endpoints.Addresses slice from DNS updates to avoid dat...
  • 724f450 examples/features/csm_observability: use helloworld client and server instead...
  • e8d5feb rbac: add method name to :path in headers (#7965)
  • e912015 cleanup: Fix usages of non-constant format strings (#7959)
  • 681334a cleanup: replace dial with newclient (#7943)
  • 063d352 internal/resolver: introduce a new resolver to handle target URI and proxy ad...
  • 10c7e13 outlierdetection: Support health listener for ejection updates (#7908)
  • Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.32.0 to 1.36.5

Updates filippo.io/edwards25519 from 1.0.0 to 1.1.1

Commits
  • d1c650a extra: initialize receiver in MultiScalarMult
  • 325f520 all: update Go version
  • c0501e4 all: drop old +build lines
  • 23384ff all: use the indefinite article an in comments
  • 16197b4 crypto/internal/edwards25519: shorten quick.Check tests in short mode
  • 6387a56 all: fix misuses of "a" vs "an"
  • c901e5e crypto/internal/edwards25519: reduce Point size by reordering fields
  • daffb31 all: fix problematic comments
  • 5caf132 all: give nested modules fully-qualified names
  • 4bafd0b edwards25519: gofmt scalar_fiat.go
  • Additional commits viewable in compare view

Updates github.com/dvsekhvalnov/jose2go from 1.6.0 to 1.7.0

Commits

Updates github.com/golang/glog from 1.2.0 to 1.2.3

Release notes

Sourced from github.com/golang/glog's releases.

v1.2.3

What's Changed

Full Changelog: golang/glog@v1.2.2...v1.2.3

v1.2.2

What's Changed

Full Changelog: golang/glog@v1.2.1...v1.2.2

v1.2.1

What's Changed

Full Changelog: golang/glog@v1.2.0...v1.2.1

Commits

Updates github.com/hashicorp/go-getter from 1.7.3 to 1.8.6

Release notes

Sourced from github.com/hashicorp/go-getter's releases.

v1.8.6

No release notes provided.

v1.8.5

What's Changed

NOTES:

Binary Distribution Update: To streamline our release process and align with other HashiCorp tools, all release binaries will now be published exclusively to the official HashiCorp release site. We will no longer attach release assets to GitHub Releases.

New Contributors

Full Changelog: hashicorp/go-getter@v1.8.4...v1.8.5

v1.8.4

What's Changed

... (truncated)

Commits
  • d23bff4 Merge pull request #608 from hashicorp/dependabot/go_modules/go-security-9c51...
  • 2c4aba8 Merge pull request #613 from hashicorp/pull/v1.8.6
  • fe61ed9 Merge pull request #611 from hashicorp/SECVULN-41053
  • d533656 Merge pull request #606 from hashicorp/pull/CRT
  • 388f23d Additional test for local branch and head
  • b7ceaa5 harden checkout ref handling and added regression tests
  • 769cc14 Release version bump up
  • 6086a6a Review Comments Addressed
  • e02063c Revert "SECVULN Fix for git checkout argument injection enables arbitrary fil...
  • c93084d [chore] : Bump google.golang.org/grpc
  • Additional commits viewable in compare view

Updates github.com/ulikunitz/xz from 0.5.11 to 0.5.15

Commits

Updates golang.org/x/crypto from 0.19.0 to 0.49.0

Commits
  • 982eaa6 go.mod: update golang.org/x dependencies
  • 159944f ssh,acme: clean up tautological/impossible nil conditions
  • a408498 acme: only require prompt if server has terms of service
  • cab0f71 all: upgrade go directive to at least 1.25.0 [generated]
  • 2f26647 x509roots/fallback: update bundle
  • e08b067 go.mod: update golang.org/x dependencies
  • 7d0074c scrypt: fix panic on parameters <= 0
  • 506e022 go.mod: update golang.org/x dependencies
  • 7dacc38 chacha20poly1305: error out in fips140=only mode
  • 19acf81 go.mod: update golang.org/x dependencies
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.21.0 to 0.52.0

Commits
  • 316e20c go.mod: update golang.org/x dependencies
  • 9767a42 internal/http3: add support for plugging into net/http
  • 4a81284 http2: update docs to disrecommend this package
  • dec6603 dns/dnsmessage: reject too large of names early during unpack
  • 8afa12f http2: deprecate write schedulers
  • 38019a2 http2: add missing copyright header to export_test.go
  • 039b87f internal/http3: return error when Write is used after status 304 is set
  • 6267c6c internal/http3: add HTTP 103 Early Hints support to ClientConn
  • 591bdf3 internal/http3: add HTTP 103 Early Hints support to Server
  • 1faa6d8 internal/http3: avoid potential race when aborting RoundTrip
  • Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.16.0 to 0.36.0

Commits
  • 4d954e6 all: upgrade go directive to at least 1.25.0 [generated]
  • 89ff2e1 google: add safer credentials JSON loading options.
  • acc3815 endpoints: fix %q verb use with wrong type
  • f28b0b5 all: fix some comments
  • fd15e0f x/oauth2: populate RetrieveError from DeviceAuth
  • 792c877 oauth2: use strings.Builder instead of bytes.Buffer
  • 014cf77 all: upgrade go directive to at least 1.24.0 [generated]
  • 3c76ce5 endpoints: correct Naver OAuth2 endpoint URLs
  • cf14319 oauth2: fix expiration time window check
  • 32d34ef internal: include clientID in auth style cache key
  • Additional commits viewable in compare view

Updates cosmossdk.io/math from 1.2.0 to 1.4.0

Commits

Updates github.com/cometbft/cometbft from 0.38.5 to 0.38.21

Release notes

Sourced from github.com/cometbft/cometbft's releases.

v0.38.21

What's Changed

Full Changelog: cometbft/cometbft@v0.38.20...v0.38.21

v0.38.20

What's Changed

Full Changelog: cometbft/cometbft@v0.38.19...v0.38.20

v0.38.19

This is a security patch release to the CometBFT v0.38.x family that fixes GHSA-hrhf-2vcr-ghch

What's Changed

@dependabot
chore(deps): bump the go_modules group across 2 directories with 15 u…
b9d5161 
…pdates

Bumps the go_modules group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cosmossdk.io/math](https://github.com/cosmos/cosmos-sdk) | `1.2.0` | `1.4.0` |
| [github.com/cometbft/cometbft](https://github.com/cometbft/cometbft) | `0.38.5` | `0.38.21` |
| [github.com/cosmos/cosmos-sdk](https://github.com/cosmos/cosmos-sdk) | `0.50.4` | `0.50.14` |
| [filippo.io/edwards25519](https://github.com/FiloSottile/edwards25519) | `1.0.0` | `1.1.1` |
| [github.com/dvsekhvalnov/jose2go](https://github.com/dvsekhvalnov/jose2go) | `1.6.0` | `1.7.0` |
| [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) | `1.7.3` | `1.8.6` |

Bumps the go_modules group with 7 updates in the /tests/e2e directory:

| Package | From | To |
| --- | --- | --- |
| [cosmossdk.io/math](https://github.com/cosmos/cosmos-sdk) | `1.2.0` | `1.4.0` |
| [github.com/cometbft/cometbft](https://github.com/cometbft/cometbft) | `0.38.5` | `0.38.21` |
| [filippo.io/edwards25519](https://github.com/FiloSottile/edwards25519) | `1.0.0` | `1.1.1` |
| [github.com/dvsekhvalnov/jose2go](https://github.com/dvsekhvalnov/jose2go) | `1.6.0` | `1.7.0` |
| [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) | `1.7.3` | `1.8.6` |
| [github.com/cosmos/ibc-go/v8](https://github.com/cosmos/ibc-go) | `8.0.0-rc.0` | `8.7.0` |
| [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum) | `1.12.1` | `1.17.0` |



Updates `cosmossdk.io/math` from 1.2.0 to 1.4.0
- [Release notes](https://github.com/cosmos/cosmos-sdk/releases)
- [Changelog](https://github.com/cosmos/cosmos-sdk/blob/main/CHANGELOG.md)
- [Commits](cosmos/cosmos-sdk@log/v1.2.0...log/v1.4.0)

Updates `github.com/cometbft/cometbft` from 0.38.5 to 0.38.21
- [Release notes](https://github.com/cometbft/cometbft/releases)
- [Changelog](https://github.com/cometbft/cometbft/blob/main/CHANGELOG.md)
- [Commits](cometbft/cometbft@v0.38.5...v0.38.21)

Updates `github.com/cosmos/cosmos-sdk` from 0.50.4 to 0.50.14
- [Release notes](https://github.com/cosmos/cosmos-sdk/releases)
- [Changelog](https://github.com/cosmos/cosmos-sdk/blob/v0.50.14/CHANGELOG.md)
- [Commits](cosmos/cosmos-sdk@v0.50.4...v0.50.14)

Updates `google.golang.org/grpc` from 1.62.1 to 1.70.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.62.1...v1.70.0)

Updates `google.golang.org/protobuf` from 1.32.0 to 1.36.5

Updates `filippo.io/edwards25519` from 1.0.0 to 1.1.1
- [Commits](FiloSottile/edwards25519@v1.0.0...v1.1.1)

Updates `github.com/dvsekhvalnov/jose2go` from 1.6.0 to 1.7.0
- [Commits](dvsekhvalnov/jose2go@v1.6.0...v1.7.0)

Updates `github.com/golang/glog` from 1.2.0 to 1.2.3
- [Release notes](https://github.com/golang/glog/releases)
- [Commits](golang/glog@v1.2.0...v1.2.3)

Updates `github.com/hashicorp/go-getter` from 1.7.3 to 1.8.6
- [Release notes](https://github.com/hashicorp/go-getter/releases)
- [Commits](hashicorp/go-getter@v1.7.3...v1.8.6)

Updates `github.com/ulikunitz/xz` from 0.5.11 to 0.5.15
- [Commits](ulikunitz/xz@v0.5.11...v0.5.15)

Updates `golang.org/x/crypto` from 0.19.0 to 0.49.0
- [Commits](golang/crypto@v0.19.0...v0.49.0)

Updates `golang.org/x/net` from 0.21.0 to 0.52.0
- [Commits](golang/net@v0.21.0...v0.52.0)

Updates `golang.org/x/oauth2` from 0.16.0 to 0.36.0
- [Commits](golang/oauth2@v0.16.0...v0.36.0)

Updates `cosmossdk.io/math` from 1.2.0 to 1.4.0
- [Release notes](https://github.com/cosmos/cosmos-sdk/releases)
- [Changelog](https://github.com/cosmos/cosmos-sdk/blob/main/CHANGELOG.md)
- [Commits](cosmos/cosmos-sdk@log/v1.2.0...log/v1.4.0)

Updates `github.com/cometbft/cometbft` from 0.38.5 to 0.38.21
- [Release notes](https://github.com/cometbft/cometbft/releases)
- [Changelog](https://github.com/cometbft/cometbft/blob/main/CHANGELOG.md)
- [Commits](cometbft/cometbft@v0.38.5...v0.38.21)

Updates `github.com/cosmos/cosmos-sdk` from 0.50.2 to 0.50.4
- [Release notes](https://github.com/cosmos/cosmos-sdk/releases)
- [Changelog](https://github.com/cosmos/cosmos-sdk/blob/v0.50.14/CHANGELOG.md)
- [Commits](cosmos/cosmos-sdk@v0.50.4...v0.50.14)

Updates `google.golang.org/grpc` from 1.60.1 to 1.70.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.62.1...v1.70.0)

Updates `google.golang.org/protobuf` from 1.32.0 to 1.36.5

Updates `filippo.io/edwards25519` from 1.0.0 to 1.1.1
- [Commits](FiloSottile/edwards25519@v1.0.0...v1.1.1)

Updates `github.com/dvsekhvalnov/jose2go` from 1.6.0 to 1.7.0
- [Commits](dvsekhvalnov/jose2go@v1.6.0...v1.7.0)

Updates `github.com/golang/glog` from 1.2.0 to 1.2.3
- [Release notes](https://github.com/golang/glog/releases)
- [Commits](golang/glog@v1.2.0...v1.2.3)

Updates `github.com/hashicorp/go-getter` from 1.7.3 to 1.8.6
- [Release notes](https://github.com/hashicorp/go-getter/releases)
- [Commits](hashicorp/go-getter@v1.7.3...v1.8.6)

Updates `github.com/ulikunitz/xz` from 0.5.11 to 0.5.15
- [Commits](ulikunitz/xz@v0.5.11...v0.5.15)

Updates `golang.org/x/crypto` from 0.18.0 to 0.49.0
- [Commits](golang/crypto@v0.19.0...v0.49.0)

Updates `golang.org/x/net` from 0.20.0 to 0.52.0
- [Commits](golang/net@v0.21.0...v0.52.0)

Updates `golang.org/x/oauth2` from 0.15.0 to 0.36.0
- [Commits](golang/oauth2@v0.16.0...v0.36.0)

Updates `github.com/cosmos/ibc-go/v8` from 8.0.0-rc.0 to 8.7.0
- [Release notes](https://github.com/cosmos/ibc-go/releases)
- [Changelog](https://github.com/cosmos/ibc-go/blob/v8.7.0/CHANGELOG.md)
- [Commits](cosmos/ibc-go@v8.0.0-rc.0...v8.7.0)

Updates `github.com/ethereum/go-ethereum` from 1.12.1 to 1.17.0
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.12.1...v1.17.0)

---
updated-dependencies:
- dependency-name: cosmossdk.io/math
  dependency-version: 1.4.0
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/cometbft/cometbft
  dependency-version: 0.38.21
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/cosmos/cosmos-sdk
  dependency-version: 0.50.14
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.70.0
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.5
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: filippo.io/edwards25519
  dependency-version: 1.1.1
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/dvsekhvalnov/jose2go
  dependency-version: 1.7.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/golang/glog
  dependency-version: 1.2.3
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/hashicorp/go-getter
  dependency-version: 1.8.6
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/ulikunitz/xz
  dependency-version: 0.5.15
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.49.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.52.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.36.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: cosmossdk.io/math
  dependency-version: 1.4.0
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/cometbft/cometbft
  dependency-version: 0.38.21
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/cosmos/cosmos-sdk
  dependency-version: 0.50.4
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.70.0
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.5
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: filippo.io/edwards25519
  dependency-version: 1.1.1
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/dvsekhvalnov/jose2go
  dependency-version: 1.7.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/golang/glog
  dependency-version: 1.2.3
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/hashicorp/go-getter
  dependency-version: 1.8.6
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/ulikunitz/xz
  dependency-version: 0.5.15
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.49.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.52.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.36.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/cosmos/ibc-go/v8
  dependency-version: 8.7.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.0
  dependency-type: indirect
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels May 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants