fix(deps): update module github.com/cosmos/cosmos-sdk to v0.55.0 - #9
Open
p2p-renovate[bot] wants to merge 1 commit into
Open
fix(deps): update module github.com/cosmos/cosmos-sdk to v0.55.0#9p2p-renovate[bot] wants to merge 1 commit into
p2p-renovate[bot] wants to merge 1 commit into
Conversation
p2p-renovate
Bot
force-pushed
the
renovate/github.com-cosmos-cosmos-sdk-0.x
branch
from
July 31, 2026 13:38
8cd38d0 to
a22e018
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v0.34.4-0.20200530180557-ba70f4d4dc2e→v0.55.0Release Notes
cosmos/cosmos-sdk (github.com/cosmos/cosmos-sdk)
v0.55.0Compare Source
Breaking Changes
InsertWithOptionto theMempoolinterface (carries the ante-reportedGasWanted) and changes theSelectBycallback to receive amempool.Txwrapper that exposes the stored value.SIGN_MODE_TEXTUALand all associated implementation (x/tx/signing/textual,x/auth/tx/textual.go,TextualCoinMetadataQueryFn). The proto enum value is reserved to prevent future reuse. ADR-050 is marked archived.x/protocolpoolmodule and its API/proto surface from the SDK. Applications upgrading from v0.54 should includeprotocolpoolin deleted store upgrades.Features
InsertTxandReapTxs.block-executor,block-stm-workersandblock-stm-pre-estimate.hd.MlDsa65Typeconstant.Has()reads to reduce false conflicts.key_rotation_feetox/stakingparams and register associated 5->6 migration.MsgRotateConsPubKeyinto cli and add a happy path system test.--algo ml_dsa_65), transaction signing/verification, and an ante-handler signature-verification gas cost (Params.SigVerifyCostMlDsa65).MsgRotateConsPubKeyfor POA validator consensus key rotation (operator self-service plus admin override).WithMlDsa65Support()module option, raisingMaxPubKeyLengthto accommodate the larger keys.secp256k1ethvalidator consensus key type.Improvements
query-gas-limit = 0(the default) is unbounded and exposes public RPC nodes to DoS via expensive queries.authorityfield on consensus params and removal of stale module-config definitions.-race-mode regression test (TestABCI_Race_GRPC_Query_During_Commit) covering concurrentBaseApp.QueryandFinalizeBlock/Commit. Pins down the state-management mutex work added in #24655 and follow-ups so the data race reported against v0.50.x cannot regress silently.ConfigOptions.AminoJSONEncoderso applications can configure a customaminojson.Encoder(e.g. custom field encodings) for theSIGN_MODE_LEGACY_AMINO_JSONhandler without replicating the SDK'sHandlerMapconstruction.ExecuteBlockinputs (block size, store index mapping, and estimates) at the exported entry point so invalid input returns a descriptive error instead of an opaque "index out of range" panic.rotate_cons_pubkeyandapply_cons_pubkey_rotationevents during key rotation.Bug Fixes
google.protobuf.Anyrecursion depth cap in unknown-field validation from 10,000 to 64, reducing CPU-amplification DoS risk from deeply nestedAnywrappers. No legitimate message nestsAnyanywhere near that deep.PageRequestoffset andcount_totalin theAllowancesandAllowancesByGrantergRPC queries, which previously collected grants inside the pagination predicate and so returned offset-skipped and beyond-limit results.BeginBlockercall to 200, matchingx/feegrant's existing pattern, so a block where many grants expire at once can't cause unbounded work.snapshot dumpcommand where chunk files were deferred-closed inside the loop, keeping every chunk's handle open until the command returned (follow-up to #25811).ConsumeMultisignatureVerificationGasandVerifyMultisignatureso a multisig signature with a bit array larger than the key set, or with more set bits than supplied signatures, returns an error instead of panicking with index out of range.Begin/EndBlockers. user msg initiated paths still returnErrUnauthorizedwhen withdrawing to blocked addresses.proposal_messagesevent attribute emitted bySubmitProposal.MsgBeginRedelegatefailure when redelegating all shares from an unbonded source validator that is removed after unbonding.InterfaceRegistrywhenConfigOptions.SigningOptionsis unset so thatCustomGetSignersregistered viaNewInterfaceRegistryWithOptionsare honored byNewTxConfig/NewTxConfigWithOptions.MsgCreateValidatorfrom creating validators with cons addrs locked by key rotations.0x02/0x03) when unmarshaling asecp256k1.PubKey, rejecting malformed compressed keys that previously passed the length-only check.GetSigningTxDatafor multisigModeInfowith a nilMultior nilBitarray.GetSigningTxDatawhen aSignerInfohas a nilPublicKey.SignerInfosandSignaturescounts disagree inGetSignaturesV2, or a multisig'sModeInfosand sub-signature counts disagree inModeInfoAndSigToSignatureData.STMRunner.Run.key_rotation_feedenom to equalbond_denominParams.Validateand derive the default fee denom from the configured bond denom.Deprecated
v0.54.4Compare Source
This release contains important security fixes. We recommend all chains upgrade to this patch release as soon as possible using a coordinated upgrade.
This release is state breaking.
What's Changed
Full Changelog: cosmos/cosmos-sdk@v0.54.3...v0.54.4
v0.54.3Compare Source
What's Changed
Full Changelog: cosmos/cosmos-sdk@v0.54.2...v0.54.3
v0.54.2Compare Source
This patch release contains only minor dependency bumps.
v0.54.1Compare Source
Improvements
GetBlockWithTxsinstead of 100.v0.54.0Compare Source
Breaking Changes
AuthorityParamsto consensus params. When set, the consensus params authority takes precedence over per-keeper authority for all module parameter updates. Keeper constructor signatures are unchanged.BondDenominMsgUpdateParamsto prevent setting non-existent or zero-supply denoms.logto log v2.x/params:legacySubspacearguments from Keeper and Module instantiation./contrib. These modules are still available but will no longer be actively maintained or supported in the Cosmos SDK Bug Bounty program.x/groupx/nftx/circuitx/crisisx/govfromx/stakingby makingCalculateVoteResultsAndVotingPowerFna required parameter tokeeper.NewKeeperinstead ofStakingKeeper.BondedTokenshas been renamed toValidatorPowerandTotalBondedTokenshas been renamed toTotalValidatorPowerto allow for multiple validator power representations.AfterProposalSubmissionhook now includes proposer address as a parameter.DistrKeeperx/distributionis now optional. Genesis validation ensuresdistrKeeperis set if distribution module is used as proposal cancel destination.systemtestsintotestutiland no longer under its owngo.mod.BaseApp.SetStoreMetrics. TheStoreMetricsinterface never worked, so removing dead code.SetTracer,SetTracingContext, andTracingEnabledfromMultiStoreinterface.CacheWrapWithTracefromCacheWrapperinterface.BaseApp.SetCommitMultiStoreTracerand tracing context logic fromBaseApp.cacheTxContextandFinalizeBlock.io.Writerparameter fromservertypes.AppCreatorandtraceWriter io.Writerfromservertypes.AppExporter.traceStore io.Writerparameter fromsimapp.NewSimAppand all enterprise simapp constructors.traceStore io.Writerfrom alltestutil/simsxapp factory signatures.github.com/cosmos/cosmos-sdk/store/v2as the store package instead ofcosmossdk.io/storeand all import paths have changed.Features
init,gentx,collect-gentxNewPubKeyFromBytesfunction to thesecp256r1package to createPubKeyfrom bytesverbose_log_levelflag for configuring the log level when switching to verbose logging mode during sensitive operations (such as chain upgrades).PubKeyFromCometTypeAndByteshelper function to convert fromcomet/v2PubKeys to thecryptotypes.Pubkeyinterface.DefaultProposalHandler.DelegatorStartingInfo,ValidatorHistoricalRewards, andValidatorCurrentRewards.earliest_block_heightandlatest_block_heightfields toGetSyncingResponse.TimeValue(ValueCodec[time.Time]) to collections/codec.poamodule under theenterprisedirectory.GetBlockResultsandGetLatestBlockResultsgRPC endpoints to expose CometBFT block results includingfinalize_block_events.Improvements
ExtensionOptionstype for programmatic otel.yaml generation.EmitEventandEmitEventson theEventManager. These functions will continue to be maintained.stateand makelastCommitInfoatomic to prevent race conditions betweenCommitandCreateQueryContext.x/stakingauthz proto.GetAllBalancesandGetAccountsBalanceskeeper methods.IterateRawmethod toMultiindex type to satisfty queryCollectioninterface.grpc.DialOptionparameter toStartGrpcServerfor custom gRPC client connection options.PriorityNonceMempool.Remove.Bug Fixes
earliest_store_heightinnode.StatusgRPC endpoint instead of hardcoded0.defer iterator.Close()calls inIterateDelegatorRedelegationsandGetRedelegationsto prevent resource leaks.InvokeSetHooksbeing called with a nil keeper andAppModulecontaining a copy instead of a pointer (hooks set post creating theAppModulelike with depinject didn't apply because it's a different instance).InvokeSetHooks.GetHeightFromMetadataStrictAPI togrpcclient for better error handling.SigVerificationDecoratorsignature incarnation cache causing state divergence under blockstm.DecisionPolicygetter calls.Deprecated
app.gocode to not usedepinjectas we are phasing it out.app.NewUncachedContext, consider usingapp.NewNextBlockContextorapp.NewContextinstead, seeUPGRADING.mdfor more details.v0.54.0-rc.4Compare Source
v0.54.0-rc.3Compare Source
v0.54.0-rc.2Compare Source
v0.54.0-rc.1Compare Source
v0.54.0-beta.0Compare Source
v0.54.0-alpha.0Compare Source
v0.53.8Compare Source
This release contains important security fixes. We recommend all chains upgrade to this patch release as soon as possible using a coordinated upgrade
This release is state breaking
What's Changed
Full Changelog: cosmos/cosmos-sdk@v0.53.7...v0.53.8
v0.53.7Compare Source
Cosmos SDK v0.53.7 Release Notes
🚀 Highlights
This patch release includes minor functionality additions.
📝 Changelog
Check out the changelog for an exhaustive list of changes or compare changes from the last release.
v0.53.6Compare Source
Improvements
Bug Fixes
OverrideEventstoEventManagerI.v0.53.5Compare Source
Features
BaseApp.Improvements
x/mintparams validation.Bug Fixes
withdraw-validator-commissioncmd.Deprecated
x/nftmodule in the Cosmos SDK repository. This module will not be maintained to the extent that our core modules will and will be kept in a legacy repo.x/groupmodule in the Cosmos SDK repository. This module will not be maintained to the extent that our core modules will and will be kept in a legacy repo.Invarianttype in the Cosmos SDK.telemetrypackage, usage ofgithub.com/hashicorp/go-metricsand thetelemetryconfiguration section. New instrumentation should use the official OpenTelemetry go API and Cosmos SDK applications can automatically expose OpenTelemetry metrics, traces and logs via OpenTelemetry declarative configuration.v0.53.4Compare Source
This patch update also includes minor dependency bumps.
Features
DefaultProposalHandler.v0.53.3Compare Source
Bug Fixes
v0.53.2Compare Source
This patch update also includes minor dependency bumps.
Bug Fixes
InvokeSetHooks.v0.53.1Compare Source
Cosmos SDK v0.53.1 Release Notes
💬 Release Discussion
🚀 Highlights
Announcing Cosmos SDK v0.53.1
This release is a patch update that includes feedback from early users of Cosmos SDK v0.53.0.
Upgrading to this version of the Cosmos SDK from any
v0.53.xis trivial and does not require a chain upgrade.📝 Changelog
Check out the changelog for an exhaustive list of changes, or compare changes from the last release.
v0.53.0Compare Source
Features
IsGT, fortypes.Coin. This method is used to check if atypes.Coinis greater than anothertypes.Coin.Commitdefault true,Lean,SimulateEveryOperation,PrintAllInvariants,DBBackendparams removed--timeout-timestampflag that allows users to specify a block time at which the unordered transactions should expire from the mempool.x/epochsfrom Osmosis--qrcodeflag tokeys showcommand to support displaying keys address QR code.ed25519keys for transaction signing.StreamingManagerto baseapp to extend the abci listeners.keyring-default-keynameinclient.tomlfor specifying a default key name, and skip the need to use the--fromflag when signing transactions.x/mintbegin blocker.InflationCalculationFnargument tomint.NewAppModule()is now ignored and must be nil. To set a customInflationCalculationFnon the default minter, usemintkeeper.WithMintFn(mintkeeper.DefaultMintFn(customInflationFn)).ObjectStoreapi in context.Executorto support custom execution logic and incarnation cache for performance optimisationImprovements
FeeAllowance,FeeAllowanceQueue.ValidateDenomcalls inbank.SendCoinsandCoin.AmountOf()method onsdk.Coinsno longer willpanicif given an invalid denom and will instead return a zero value.<appd> keys add,<appd> keys importand<appd> keys renameby checking name validation.<appd> keys addand<appd> keys showby checking whether there are duplicate keys in the multisig case.<appd> keys exportand<appd> keys mnemonicby adding --yes option to skip interactive confirmation.SendCoinsnow checks forSendRestrictionsbefore instead of after deducting coins usingsubUnlockedCoins.InputOutputCoinsbefore coin deduction.github.com/cosmos/gogoproto/types/anywith aliases to these left incodec/typesso that there should be no breakage to existing code. This allows protobuf generated code to optionally reference the SDK's customAny