Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Sync fork #6

Merged
merged 932 commits into from
Nov 26, 2024
Merged

Sync fork #6

merged 932 commits into from
Nov 26, 2024

Conversation

marcello33
Copy link

@marcello33 marcello33 commented Nov 26, 2024

PR to sync our fork's main branch

dependabot bot and others added 30 commits August 19, 2024 06:31
…ometbft#3736)

Bumps
[github.com/sasha-s/go-deadlock](https://github.com/sasha-s/go-deadlock)
from 0.3.1 to 0.3.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sasha-s/go-deadlock/releases">github.com/sasha-s/go-deadlock's
releases</a>.</em></p>
<blockquote>
<h2>v0.3.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Add missing sync.NewCond wrapper by <a
href="https://github.com/ncw"><code>@​ncw</code></a> in <a
href="https://redirect.github.com/sasha-s/go-deadlock/pull/22">sasha-s/go-deadlock#22</a></li>
<li>fixed the comment of Opts.DeadlockTimeout in deadlock.go by <a
href="https://github.com/h3n4l"><code>@​h3n4l</code></a> in <a
href="https://redirect.github.com/sasha-s/go-deadlock/pull/23">sasha-s/go-deadlock#23</a></li>
<li>deadlock: Add TryLock wrappers by <a
href="https://github.com/jrajahalme"><code>@​jrajahalme</code></a> in <a
href="https://redirect.github.com/sasha-s/go-deadlock/pull/30">sasha-s/go-deadlock#30</a></li>
<li>Reuse timers with sync.Pool by <a
href="https://github.com/millfort"><code>@​millfort</code></a> in <a
href="https://redirect.github.com/sasha-s/go-deadlock/pull/31">sasha-s/go-deadlock#31</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/ncw"><code>@​ncw</code></a> made their
first contribution in <a
href="https://redirect.github.com/sasha-s/go-deadlock/pull/22">sasha-s/go-deadlock#22</a></li>
<li><a href="https://github.com/h3n4l"><code>@​h3n4l</code></a> made
their first contribution in <a
href="https://redirect.github.com/sasha-s/go-deadlock/pull/23">sasha-s/go-deadlock#23</a></li>
<li><a
href="https://github.com/jrajahalme"><code>@​jrajahalme</code></a> made
their first contribution in <a
href="https://redirect.github.com/sasha-s/go-deadlock/pull/30">sasha-s/go-deadlock#30</a></li>
<li><a href="https://github.com/millfort"><code>@​millfort</code></a>
made their first contribution in <a
href="https://redirect.github.com/sasha-s/go-deadlock/pull/31">sasha-s/go-deadlock#31</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/sasha-s/go-deadlock/compare/v0.3.1...v0.3.3">https://github.com/sasha-s/go-deadlock/compare/v0.3.1...v0.3.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sasha-s/go-deadlock/commit/464d34347a399b840a4f963cc96dfc993ccf8c62"><code>464d343</code></a>
update github workflows to test on go 1.23</li>
<li><a
href="https://github.com/sasha-s/go-deadlock/commit/564b73de7bb88918c298624d530f83efcec20cbf"><code>564b73d</code></a>
update goid</li>
<li><a
href="https://github.com/sasha-s/go-deadlock/commit/ed6f7f6d979ce0a3df1ba7683c7735373a9a97c7"><code>ed6f7f6</code></a>
Reuse timers with sync.Pool (<a
href="https://redirect.github.com/sasha-s/go-deadlock/issues/31">#31</a>)</li>
<li><a
href="https://github.com/sasha-s/go-deadlock/commit/20e556a2e9adcf7184892aeb8d5f254293e505d7"><code>20e556a</code></a>
deadlock: Add TryLock wrappers (<a
href="https://redirect.github.com/sasha-s/go-deadlock/issues/30">#30</a>)</li>
<li><a
href="https://github.com/sasha-s/go-deadlock/commit/5afde13977e624ab3bd64e5801f75f9e8eb1f41b"><code>5afde13</code></a>
fixed the comment of Opts.DeadlockTimeout in deadlock.go (<a
href="https://redirect.github.com/sasha-s/go-deadlock/issues/23">#23</a>)</li>
<li><a
href="https://github.com/sasha-s/go-deadlock/commit/f58e13930c01bb88ec001b9eddffa3c2afcadbeb"><code>f58e139</code></a>
Add missing sync.NewCond wrapper (<a
href="https://redirect.github.com/sasha-s/go-deadlock/issues/22">#22</a>)</li>
<li><a
href="https://github.com/sasha-s/go-deadlock/commit/4a6d8f385ee1559eaf7147969730022208b3506f"><code>4a6d8f3</code></a>
Create go.yml</li>
<li><a
href="https://github.com/sasha-s/go-deadlock/commit/e8cdaa485d8bad7743135de6082a4332c83592c4"><code>e8cdaa4</code></a>
update go versions in CI</li>
<li><a
href="https://github.com/sasha-s/go-deadlock/commit/1182f7860fd571d1092e0483285e995aff8a0a70"><code>1182f78</code></a>
Update Readme.md</li>
<li><a
href="https://github.com/sasha-s/go-deadlock/commit/82c26c5c235b3c675d9ddfda5792ab33a1f171f8"><code>82c26c5</code></a>
migrate to travis-ci.com</li>
<li>See full diff in <a
href="https://github.com/sasha-s/go-deadlock/compare/v0.3.1...v0.3.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sasha-s/go-deadlock&package-manager=go_modules&previous-version=0.3.1&new-version=0.3.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…metbft#3737)

Bumps [github.com/cosmos/gogoproto](https://github.com/cosmos/gogoproto)
from 1.6.0 to 1.7.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cosmos/gogoproto/releases">github.com/cosmos/gogoproto's
releases</a>.</em></p>
<blockquote>
<h2>v1.7.0</h2>
<h2>What's Changed</h2>
<ul>
<li>refactor: use structural type for AnyResolver &amp; Message by <a
href="https://github.com/tac0turtle"><code>@​tac0turtle</code></a> in <a
href="https://redirect.github.com/cosmos/gogoproto/pull/144">cosmos/gogoproto#144</a></li>
<li>refactor: increase gogoproto compatibility by <a
href="https://github.com/julienrbrt"><code>@​julienrbrt</code></a> in <a
href="https://redirect.github.com/cosmos/gogoproto/pull/145">cosmos/gogoproto#145</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/cosmos/gogoproto/compare/v1.6.0...v1.7.0">https://github.com/cosmos/gogoproto/compare/v1.6.0...v1.7.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/cosmos/gogoproto/blob/main/CHANGELOG.md">github.com/cosmos/gogoproto's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/cosmos/gogoproto/releases/tag/v1.7.0">v1.7.0</a>
- 2024-08-12</h2>
<h3>Improvements</h3>
<ul>
<li><a
href="https://redirect.github.com/cosmos/gogoproto/pull/145">#145</a>
Remove <code>x/exp</code> dependency for greater compatibility.</li>
<li><a
href="https://redirect.github.com/cosmos/gogoproto/pull/144">#144</a>
Change proto.Message and jsonpb.Anyresolver to aliased types to allow
different implementations of the same interface.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/cosmos/gogoproto/commit/70f82eb45331b1eb0db349b02a73a9d8e914305f"><code>70f82eb</code></a>
refactor: increase gogoproto compatibility (<a
href="https://redirect.github.com/cosmos/gogoproto/issues/145">#145</a>)</li>
<li><a
href="https://github.com/cosmos/gogoproto/commit/a2d130f767761f9f7ffbc19e699129693ab8b07c"><code>a2d130f</code></a>
refactor: use structural type for AnyResolver &amp; Message (<a
href="https://redirect.github.com/cosmos/gogoproto/issues/144">#144</a>)</li>
<li>See full diff in <a
href="https://github.com/cosmos/gogoproto/compare/v1.6.0...v1.7.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/cosmos/gogoproto&package-manager=go_modules&previous-version=1.6.0&new-version=1.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
….5 (cometbft#3741)

Bumps
[github.com/creachadair/atomicfile](https://github.com/creachadair/atomicfile)
from 0.3.4 to 0.3.5.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/creachadair/atomicfile/commit/2b70dd62aef9f6a69f59f8d95595473c176c90fd"><code>2b70dd6</code></a>
go.mod: update module dependencies</li>
<li><a
href="https://github.com/creachadair/atomicfile/commit/574dbc42c0285513ef412257c253cf44a1c68fc2"><code>574dbc4</code></a>
go.mod: update module dependencies</li>
<li><a
href="https://github.com/creachadair/atomicfile/commit/4b69ae8371d13d5ff769b9c2b6b9bc1654216381"><code>4b69ae8</code></a>
go.mod: update module dependencies</li>
<li><a
href="https://github.com/creachadair/atomicfile/commit/aef99b6cfd69aa10a6b92470c41a8c1f2fc7402d"><code>aef99b6</code></a>
go.mod: update module dependencies</li>
<li><a
href="https://github.com/creachadair/atomicfile/commit/501382e007cc34dfaf7389f4fe80eab416b70a6d"><code>501382e</code></a>
go.mod: update module dependencies</li>
<li><a
href="https://github.com/creachadair/atomicfile/commit/4aa8a6221da2b4eda593416450b63e642c963378"><code>4aa8a62</code></a>
go.mod: update module dependencies</li>
<li><a
href="https://github.com/creachadair/atomicfile/commit/1ca910492dc714bd1c6c693a99bd023fa0976feb"><code>1ca9104</code></a>
go.mod: update module dependencies</li>
<li><a
href="https://github.com/creachadair/atomicfile/commit/a9d8b752bc04f5479a527d744485eeca0284a034"><code>a9d8b75</code></a>
go.mod: update module dependencies</li>
<li>See full diff in <a
href="https://github.com/creachadair/atomicfile/compare/v0.3.4...v0.3.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/creachadair/atomicfile&package-manager=go_modules&previous-version=0.3.4&new-version=0.3.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
cometbft#3740)

Bumps
[github.com/btcsuite/btcd/btcutil](https://github.com/btcsuite/btcd)
from 1.1.5 to 1.1.6.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/btcsuite/btcd/commit/bda7977a9abc4a27e5c089389f60e5d5117b5433"><code>bda7977</code></a>
Merge pull request <a
href="https://redirect.github.com/btcsuite/btcd/issues/2235">#2235</a>
from AlexsandroRyan/pkg-update-checkmarx-cve</li>
<li><a
href="https://github.com/btcsuite/btcd/commit/913f95b2b258afac7b0139c4a1bef9f7e3c5bddc"><code>913f95b</code></a>
Updated github.com/btcsuite/btcd to address CVE-2024-34478</li>
<li><a
href="https://github.com/btcsuite/btcd/commit/97400aa23ec3ebc94673c7ce37d14a26b60be9ec"><code>97400aa</code></a>
Merge pull request <a
href="https://redirect.github.com/btcsuite/btcd/issues/2225">#2225</a>
from Crypt-iQ/statusbytes_08062024</li>
<li><a
href="https://github.com/btcsuite/btcd/commit/3eda1a58a24336c4c1aabe953f84b32a03da62cb"><code>3eda1a5</code></a>
blockchain: copy utxo status bytes to avoid UB</li>
<li><a
href="https://github.com/btcsuite/btcd/commit/b161cd6a199b4e35acec66afc5aad221f05fe1e3"><code>b161cd6</code></a>
Merge pull request <a
href="https://redirect.github.com/btcsuite/btcd/issues/2218">#2218</a>
from guggero/btcec-fix</li>
<li><a
href="https://github.com/btcsuite/btcd/commit/cefeeaa6b6a3d950eff894814e8a45adc898a0f8"><code>cefeeaa</code></a>
mod+rpcserver: bump to latest version of btcec</li>
<li><a
href="https://github.com/btcsuite/btcd/commit/ff2e03e11233fa25c01cf4acbf76501fc008b31f"><code>ff2e03e</code></a>
chore: fix some comments for struct field (<a
href="https://redirect.github.com/btcsuite/btcd/issues/2214">#2214</a>)</li>
<li><a
href="https://github.com/btcsuite/btcd/commit/2134387ba8ff6d33d90afba285c5f0d52f3a0f6b"><code>2134387</code></a>
Merge pull request <a
href="https://redirect.github.com/btcsuite/btcd/issues/2208">#2208</a>
from kcalvinalvin/2024-07-01-close-blockfiles</li>
<li><a
href="https://github.com/btcsuite/btcd/commit/e5d15fddb9c486dfe382bc95dc38d2fd247813bf"><code>e5d15fd</code></a>
btcec/ecdsa: remove error return value for SignCompact (<a
href="https://redirect.github.com/btcsuite/btcd/issues/2211">#2211</a>)</li>
<li><a
href="https://github.com/btcsuite/btcd/commit/c9fae1ac7cca6e6d55baec913286e483e28923a9"><code>c9fae1a</code></a>
ffldb: close block files before deleting them</li>
<li>Additional commits viewable in <a
href="https://github.com/btcsuite/btcd/compare/btcutil/v1.1.5...btcutil/v1.1.6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/btcsuite/btcd/btcutil&package-manager=go_modules&previous-version=1.1.5&new-version=1.1.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…1.20.0 (cometbft#3739)

Bumps
[github.com/prometheus/client_golang](https://github.com/prometheus/client_golang)
from 1.19.1 to 1.20.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/prometheus/client_golang/releases">github.com/prometheus/client_golang's
releases</a>.</em></p>
<blockquote>
<h2>v1.20.0</h2>
<p>Thanks everyone for contributions!</p>
<p>:warning: In this release we remove one (broken anyway, given Go
runtime changes) metric and add three new (representing GOGC, GOMEMLIMIT
and GOMAXPROCS flags) to the default
<code>collectors.NewGoCollector()</code> collector. Given its popular
usage, expect your binary to expose two additional metric.</p>
<h2>Changes</h2>
<ul>
<li>[CHANGE] :warning: go-collector: Remove
<code>go_memstat_lookups_total</code> metric which was always 0; Go
runtime stopped sharing pointer lookup statistics. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1577">#1577</a></li>
<li>[FEATURE] ⚠️ go-collector: Add 3 default metrics:
<code>go_gc_gogc_percent</code>, <code>go_gc_gomemlimit_bytes</code> and
<code>go_sched_gomaxprocs_threads</code> as those are recommended by the
Go team. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1559">#1559</a></li>
<li>[FEATURE] go-collector: Add more information to all metrics' HELP
e.g. the exact <code>runtime/metrics</code> sourcing each metric (if
relevant). <a
href="https://redirect.github.com/prometheus/client_golang/issues/1568">#1568</a>
<a
href="https://redirect.github.com/prometheus/client_golang/issues/1578">#1578</a></li>
<li>[FEATURE] testutil: Add CollectAndFormat method. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1503">#1503</a></li>
<li>[FEATURE] histograms: Add support for exemplars in native
histograms. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1471">#1471</a></li>
<li>[FEATURE] promhttp: Add experimental support for <code>zstd</code>
on scrape, controlled by the request <code>Accept-Encoding</code>
header. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1496">#1496</a></li>
<li>[FEATURE] api/v1: Add <code>WithLimit</code> parameter to all API
methods that supports it. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1544">#1544</a></li>
<li>[FEATURE] prometheus: Add support for created timestamps in constant
histograms and constant summaries. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1537">#1537</a></li>
<li>[FEATURE] process-collectors: Add network usage metrics:
<code>process_network_receive_bytes_total</code> and
<code>process_network_transmit_bytes_total</code>. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1555">#1555</a></li>
<li>[FEATURE] promlint: Add duplicated metric lint rule. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1472">#1472</a></li>
<li>[BUGFIX] promlint: Relax metric type in name linter rule. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1455">#1455</a></li>
<li>[BUGFIX] promhttp: Make sure server
instrumentation wrapping supports new and future extra responseWriter
methods. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1480">#1480</a></li>
<li>[BUGFIX] testutil: Functions using compareMetricFamilies are now
failing if filtered metricNames are not in the input. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1424">#1424</a></li>
</ul>
<!-- raw HTML omitted -->
<ul>
<li>feat(prometheus/testutil/promlint/validations): refine
lintMetricType… by <a
href="https://github.com/foehammer127"><code>@​foehammer127</code></a>
in <a
href="https://redirect.github.com/prometheus/client_golang/pull/1455">prometheus/client_golang#1455</a></li>
<li>Bump github.com/prometheus/client_golang from 1.18.0 to 1.19.0 in
/examples/middleware by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/prometheus/client_golang/pull/1457">prometheus/client_golang#1457</a></li>
<li>Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/prometheus/client_golang/pull/1458">prometheus/client_golang#1458</a></li>
<li>Bump golang.org/x/sys from 0.16.0 to 0.17.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/prometheus/client_golang/pull/1459">prometheus/client_golang#1459</a></li>
<li>Bump github.com/prometheus/client_golang from 1.18.0 to 1.19.0 in
/tutorial/whatsup by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/prometheus/client_golang/pull/1461">prometheus/client_golang#1461</a></li>
<li>Merge Release 1.19 back to main by <a
href="https://github.com/ArthurSens"><code>@​ArthurSens</code></a> in <a
href="https://redirect.github.com/prometheus/client_golang/pull/1462">prometheus/client_golang#1462</a></li>
<li>Bump the github-actions group with 2 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/prometheus/client_golang/pull/1456">prometheus/client_golang#1456</a></li>
<li>Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/prometheus/client_golang/pull/1466">prometheus/client_golang#1466</a></li>
<li>Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 in
/examples/middleware by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/prometheus/client_golang/pull/1467">prometheus/client_golang#1467</a></li>
<li>Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 in
/tutorial/whatsup by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/prometheus/client_golang/pull/1469">prometheus/client_golang#1469</a></li>
<li>Add LintDuplicateMetric to promlint by <a
href="https://github.com/bboreham"><code>@​bboreham</code></a> in <a
href="https://redirect.github.com/prometheus/client_golang/pull/1472">prometheus/client_golang#1472</a></li>
<li>Auto-update Go Collector Metrics for new Go versions by <a
href="https://github.com/SachinSahu431"><code>@​SachinSahu431</code></a>
in <a
href="https://redirect.github.com/prometheus/client_golang/pull/1476">prometheus/client_golang#1476</a></li>
<li>Implement Unwrap() for responseWriterDelegator by <a
href="https://github.com/igor-drozdov"><code>@​igor-drozdov</code></a>
in <a
href="https://redirect.github.com/prometheus/client_golang/pull/1480">prometheus/client_golang#1480</a></li>
<li>Bump golang.org/x/sys from 0.17.0 to 0.18.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/prometheus/client_golang/pull/1485">prometheus/client_golang#1485</a></li>
<li>Bump github.com/prometheus/procfs from 0.12.0 to 0.13.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/prometheus/client_golang/pull/1486">prometheus/client_golang#1486</a></li>
<li>ci: Remove hardcoded supported Go versions from go.yml by <a
href="https://github.com/SachinSahu431"><code>@​SachinSahu431</code></a>
in <a
href="https://redirect.github.com/prometheus/client_golang/pull/1489">prometheus/client_golang#1489</a></li>
<li>feat: metrics generation workflow by <a
href="https://github.com/SachinSahu431"><code>@​SachinSahu431</code></a>
in <a
href="https://redirect.github.com/prometheus/client_golang/pull/1481">prometheus/client_golang#1481</a></li>
<li>fix: remove redundant go module in middleware example by <a
href="https://github.com/majolo"><code>@​majolo</code></a> in <a
href="https://redirect.github.com/prometheus/client_golang/pull/1492">prometheus/client_golang#1492</a></li>
<li>chore: Refactor how base metrics are added to Sched metrics by <a
href="https://github.com/ArthurSens"><code>@​ArthurSens</code></a> in <a
href="https://redirect.github.com/prometheus/client_golang/pull/1483">prometheus/client_golang#1483</a></li>
<li>gocollector: Add regex option to allow collection of debug runtime
metrics by <a
href="https://github.com/ArthurSens"><code>@​ArthurSens</code></a> in <a
href="https://redirect.github.com/prometheus/client_golang/pull/1389">prometheus/client_golang#1389</a></li>
<li>Bump github.com/prometheus/common from 0.48.0 to 0.52.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/prometheus/client_golang/pull/1498">prometheus/client_golang#1498</a></li>
<li>chore: fix function name in comment by <a
href="https://github.com/oftenoccur"><code>@​oftenoccur</code></a> in <a
href="https://redirect.github.com/prometheus/client_golang/pull/1497">prometheus/client_golang#1497</a></li>
<li>build(deps): bump golang.org/x/net from 0.20.0 to 0.23.0 in
/tutorial/whatsup by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/prometheus/client_golang/pull/1501">prometheus/client_golang#1501</a></li>
<li>build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/prometheus/client_golang/pull/1502">prometheus/client_golang#1502</a></li>
<li>feat(dependency): replace go-spew package by <a
href="https://github.com/dongjiang1989"><code>@​dongjiang1989</code></a>
in <a
href="https://redirect.github.com/prometheus/client_golang/pull/1499">prometheus/client_golang#1499</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md">github.com/prometheus/client_golang's
changelog</a>.</em></p>
<blockquote>
<h2>1.20.0 / 2024-08-14</h2>
<ul>
<li>[CHANGE] ⚠️ go-collector: Remove
<code>go_memstat_lookups_total</code> metric which was always 0; Go
runtime stopped sharing pointer lookup statistics. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1577">#1577</a></li>
<li>[FEATURE] ⚠️ go-collector: Add 3 default metrics:
<code>go_gc_gogc_percent</code>, <code>go_gc_gomemlimit_bytes</code> and
<code>go_sched_gomaxprocs_threads</code> as those are recommended by the
Go team. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1559">#1559</a></li>
<li>[FEATURE] go-collector: Add more information to all metrics' HELP
e.g. the exact <code>runtime/metrics</code> sourcing each metric (if
relevant). <a
href="https://redirect.github.com/prometheus/client_golang/issues/1568">#1568</a>
<a
href="https://redirect.github.com/prometheus/client_golang/issues/1578">#1578</a></li>
<li>[FEATURE] testutil: Add CollectAndFormat method. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1503">#1503</a></li>
<li>[FEATURE] histograms: Add support for exemplars in native
histograms. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1471">#1471</a></li>
<li>[FEATURE] promhttp: Add experimental support for <code>zstd</code>
on scrape, controlled by the request <code>Accept-Encoding</code>
header. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1496">#1496</a></li>
<li>[FEATURE] api/v1: Add <code>WithLimit</code> parameter to all API
methods that supports it. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1544">#1544</a></li>
<li>[FEATURE] prometheus: Add support for created timestamps in constant
histograms and constant summaries. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1537">#1537</a></li>
<li>[FEATURE] process-collectors: Add network usage metrics:
<code>process_network_receive_bytes_total</code> and
<code>process_network_transmit_bytes_total</code>. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1555">#1555</a></li>
<li>[FEATURE] promlint: Add duplicated metric lint rule. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1472">#1472</a></li>
<li>[BUGFIX] promlint: Relax metric type in name linter rule. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1455">#1455</a></li>
<li>[BUGFIX] promhttp: Make sure server instrumentation wrapping
supports new and future extra responseWriter methods. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1480">#1480</a></li>
<li>[BUGFIX] testutil: Functions using compareMetricFamilies are now
failing if filtered metricNames are not in the input. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1424">#1424</a></li>
</ul>
<h2>1.19.0 / 2024-02-27</h2>
<p>The module <code>prometheus/common v0.48.0</code> introduced an
incompatibility when used together with client_golang (See <a
href="https://redirect.github.com/prometheus/client_golang/pull/1448">prometheus/client_golang#1448</a>
for more details). If your project uses client_golang and you want to
use <code>prometheus/common v0.48.0</code> or higher, please update
client_golang to v1.19.0.</p>
<ul>
<li>[CHANGE] Minimum required go version is now 1.20 (we also test
client_golang against new 1.22 version). <a
href="https://redirect.github.com/prometheus/client_golang/issues/1445">#1445</a>
<a
href="https://redirect.github.com/prometheus/client_golang/issues/1449">#1449</a></li>
<li>[FEATURE] collectors: Add version collector. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1422">#1422</a>
<a
href="https://redirect.github.com/prometheus/client_golang/issues/1427">#1427</a></li>
</ul>
<h2>1.18.0 / 2023-12-22</h2>
<ul>
<li>[FEATURE] promlint: Allow creation of custom metric validations. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1311">#1311</a></li>
<li>[FEATURE] Go programs using client_golang can be built in wasip1 OS.
<a
href="https://redirect.github.com/prometheus/client_golang/issues/1350">#1350</a></li>
<li>[BUGFIX] histograms: Add timer to reset ASAP after bucket limiting
has happened. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1367">#1367</a></li>
<li>[BUGFIX] testutil: Fix comparison of metrics with empty Help
strings. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1378">#1378</a></li>
<li>[ENHANCEMENT] Improved performance of
<code>MetricVec.WithLabelValues(...)</code>. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1360">#1360</a></li>
</ul>
<h2>1.17.0 / 2023-09-27</h2>
<ul>
<li>[CHANGE] Minimum required go version is now 1.19 (we also test
client_golang against new 1.21 version). <a
href="https://redirect.github.com/prometheus/client_golang/issues/1325">#1325</a></li>
<li>[FEATURE] Add support for Created Timestamps in Counters, Summaries
and Historams. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1313">#1313</a></li>
<li>[ENHANCEMENT] Enable detection of a native histogram without
observations. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1314">#1314</a></li>
</ul>
<h2>1.16.0 / 2023-06-15</h2>
<ul>
<li>[BUGFIX] api: Switch to POST for LabelNames, Series, and
QueryExemplars. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1252">#1252</a></li>
<li>[BUGFIX] api: Fix undefined execution order in return statements. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1260">#1260</a></li>
<li>[BUGFIX] native histograms: Fix bug in bucket key calculation. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1279">#1279</a></li>
<li>[ENHANCEMENT] Reduce constrainLabels allocations for all metrics. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1272">#1272</a></li>
<li>[ENHANCEMENT] promhttp: Add process start time header for scrape
efficiency. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1278">#1278</a></li>
<li>[ENHANCEMENT] promlint: Improve metricUnits runtime. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1286">#1286</a></li>
</ul>
<h2>1.15.1 / 2023-05-3</h2>
<ul>
<li>[BUGFIX] Fixed promhttp.Instrument* handlers wrongly trying to
attach exemplar to unsupported metrics (e.g. summary), <br />
causing panics. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1253">#1253</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/prometheus/client_golang/commit/73b811c54a628c7a7fe43005fb81351f64da9289"><code>73b811c</code></a>
Cut 1.20.0 release. (<a
href="https://redirect.github.com/prometheus/client_golang/issues/1580">#1580</a>)</li>
<li><a
href="https://github.com/prometheus/client_golang/commit/7ce508988aa3bfc91d56afa9f82b7167b36c4590"><code>7ce5089</code></a>
gocollector: Attach original runtime/metrics metric name to help. (<a
href="https://redirect.github.com/prometheus/client_golang/issues/1578">#1578</a>)</li>
<li><a
href="https://github.com/prometheus/client_golang/commit/062300ede93e1e14dcf47291c8ed03f5bf3c1109"><code>062300e</code></a>
Remove go_memstat_lookups_total; added runtime/metrics calculation to
memstat...</li>
<li><a
href="https://github.com/prometheus/client_golang/commit/aa3c00d2ee32f97a06edc29716ae80ba0e713b9e"><code>aa3c00d</code></a>
Update common Prometheus files (<a
href="https://redirect.github.com/prometheus/client_golang/issues/1576">#1576</a>)</li>
<li><a
href="https://github.com/prometheus/client_golang/commit/3ad272204b3a9bf4c182d3baba3aac45436b87d1"><code>3ad2722</code></a>
Add default Go runtime metrics for /gc/gogc:percent,
/gc/gomemlimit:bytes, /s...</li>
<li><a
href="https://github.com/prometheus/client_golang/commit/071572721cd4164b69d68547e565bb7a760daaf2"><code>0715727</code></a>
Update common Prometheus files (<a
href="https://redirect.github.com/prometheus/client_golang/issues/1573">#1573</a>)</li>
<li><a
href="https://github.com/prometheus/client_golang/commit/3634bd9bda79715b96ee5b1c587bb26b449a147c"><code>3634bd9</code></a>
ci: daggerize test and lint pipelines (<a
href="https://redirect.github.com/prometheus/client_golang/issues/1534">#1534</a>)</li>
<li><a
href="https://github.com/prometheus/client_golang/commit/28b5e6e136a4cbc391b240aafd7de219b5c17843"><code>28b5e6e</code></a>
Merge pull request <a
href="https://redirect.github.com/prometheus/client_golang/issues/1572">#1572</a>
from prometheus/repo_sync</li>
<li><a
href="https://github.com/prometheus/client_golang/commit/8e18075c9e8c2d46e60d0ad17ada613678407894"><code>8e18075</code></a>
Update common Prometheus files</li>
<li><a
href="https://github.com/prometheus/client_golang/commit/46f77a97fa1e83e7285634745bd5c92c11bf20c7"><code>46f77a9</code></a>
Merge pull request <a
href="https://redirect.github.com/prometheus/client_golang/issues/1571">#1571</a>
from prometheus/dependabot/github_actions/github-act...</li>
<li>Additional commits viewable in <a
href="https://github.com/prometheus/client_golang/compare/v1.19.1...v1.20.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/prometheus/client_golang&package-manager=go_modules&previous-version=1.19.1&new-version=1.20.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…3738)

Bumps [gonum.org/v1/gonum](https://github.com/gonum/gonum) from 0.15.0
to 0.15.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gonum/gonum/releases">gonum.org/v1/gonum's
releases</a>.</em></p>
<blockquote>
<h2>v0.15.1</h2>
<p>Release v0.15.1 is a bug fix release in the v0.15 branch.</p>
<p>Fixes since v0.15.0:</p>
<p>b6147192 stat/distuv: correct Gamma Mode() and LogProb(0)/Prob(0) for
alpha &lt;= 1
5bc3fec2 mat: fix dst matrix shape check in QR.RTo
354eb431 mat: calculate Q elements lazily when calling QR.At</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/gonum/gonum/commit/bdcda9a453049449163d160b98285b64ec8093a1"><code>bdcda9a</code></a>
graph: use slices package for sorting and reversing slices</li>
<li><a
href="https://github.com/gonum/gonum/commit/a9b228ed6bdcfafd52ce8ba413595310823a0004"><code>a9b228e</code></a>
A+C: add Tristan Nicholls</li>
<li><a
href="https://github.com/gonum/gonum/commit/1f29d7b1d1724243c9f4a156cb1e16c9cbb15de1"><code>1f29d7b</code></a>
mat: calculate Q elements lazily when calling QR.At</li>
<li><a
href="https://github.com/gonum/gonum/commit/f1a62e187e273b2d99f9c2a04fa8931df9c22947"><code>f1a62e1</code></a>
mat: fix dst matrix shape check in QR.RTo</li>
<li><a
href="https://github.com/gonum/gonum/commit/4cb1c6f4a863dd4bde148d9b8736b7d69af4b75b"><code>4cb1c6f</code></a>
ci,mod: update to go1.23</li>
<li><a
href="https://github.com/gonum/gonum/commit/0c62273e338b91cd9578ed93572c693ba55e1eaa"><code>0c62273</code></a>
A+C: add Dirk Müller</li>
<li><a
href="https://github.com/gonum/gonum/commit/0efa2841bf9d1f6ad3b4f5638089c8d6cc72f51e"><code>0efa284</code></a>
A+C: add Tom Payne</li>
<li><a
href="https://github.com/gonum/gonum/commit/f48364e31d40fb9c3b6de7b7d20223edd6d49779"><code>f48364e</code></a>
interp: increase speed of findSegment</li>
<li><a
href="https://github.com/gonum/gonum/commit/1dd194f95b64cda4727b9548bcd2471b4372c7c8"><code>1dd194f</code></a>
stat/distuv: correct Gamma Mode doc comment</li>
<li><a
href="https://github.com/gonum/gonum/commit/35bb474ac513c77971be8e1e9ab2bd1eaca07c79"><code>35bb474</code></a>
stat/distuv: correct Gamma Mode() and LogProb(0)/Prob(0) for alpha &lt;=
1</li>
<li>Additional commits viewable in <a
href="https://github.com/gonum/gonum/compare/v0.15.0...v0.15.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gonum.org/v1/gonum&package-manager=go_modules&previous-version=0.15.0&new-version=0.15.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
Also disable the P2P log messages on the switches, which are not
relevant for mempool.

In particular, this PR changes the log level of
`TestReactor_MaxTxBytes`, which is very verbose and it currently could
take 12s with the default "debug" level. With "info" level it takes
300ms.

For reviewers, the PR can be reviewed commit by commit.

---------

Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
Running a `go get` should consistently build this project as per the
README. However, the latest patch release of `btcec/v2` is not a proper
Semantic Versioning patch. It removes an error return value from
`ecdsa.SignCompact` function (btcsuite/btcd@e5d15fd). This is
functionally a no-op, as the underlying function was hardcoded to always
return `nil` as error. However, this is still a breaking change
(compiler/build error) for all consumers of this function, as they
historically expected two return values, but now only get one.

Ref: btcsuite/btcd#2211
Ref: cometbft#3531
Ref: cometbft#3536

---

#### PR checklist

- [ ] Tests written/updated
- [x] Changelog entry added in `.changelog` (we use
[unclog](https://github.com/informalsystems/unclog) to manage our
changelog)
- [ ] Updated relevant documentation (`docs/` or `spec/`) and code
comments

Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
Fixes cometbft#2443

Note that `Flush` is only called from an (unsafe) RPC endpoint, so it
can be called at any time.

---

#### PR checklist

- [ ] Tests written/updated
- [X] Changelog entry added in `.changelog` (we use
[unclog](https://github.com/informalsystems/unclog) to manage our
changelog)
- [ ] Updated relevant documentation (`docs/` or `spec/`) and code
comments

---------

Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
Closes cometbft#3766.

---

#### PR checklist

- [ ] Tests written/updated
- [ ] Changelog entry added in `.changelog` (we use
[unclog](https://github.com/informalsystems/unclog) to manage our
changelog)
- [x] Updated relevant documentation (`docs/` or `spec/`) and code
comments
…bft#3768)

because we are missing some CVE if we don't update.

<!--

Please add a reference to the issue that this PR addresses and indicate
which
files are most critical to review. If it fully addresses a particular
issue,
please include "Closes #XXX" (where "XXX" is the issue number).

If this PR is non-trivial/large/complex, please ensure that you have
either
created an issue that the team's had a chance to respond to, or had some
discussion with the team prior to submitting substantial pull requests.
The team
can be reached via GitHub Discussions or the Cosmos Network Discord
server in
the #cometbft channel. GitHub Discussions is preferred over Discord as
it
allows us to keep track of conversations topically.
https://github.com/cometbft/cometbft/discussions

If the work in this PR is not aligned with the team's current
priorities, please
be advised that it may take some time before it is merged - especially
if it has
not yet been discussed with the team.

See the project board for the team's current priorities:
https://github.com/orgs/cometbft/projects/1

-->

---

#### PR checklist

- [ ] Tests written/updated
- [ ] Changelog entry added in `.changelog` (we use
[unclog](https://github.com/informalsystems/unclog) to manage our
changelog)
- [ ] Updated relevant documentation (`docs/` or `spec/`) and code
comments

Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…1.20.1 (cometbft#3778)

Bumps
[github.com/prometheus/client_golang](https://github.com/prometheus/client_golang)
from 1.20.0 to 1.20.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/prometheus/client_golang/releases">github.com/prometheus/client_golang's
releases</a>.</em></p>
<blockquote>
<h2>v1.20.1</h2>
<ul>
<li>[BUGFIX] process-collector: Fixed unregistered descriptor error when
using process collector with PedanticRegistry on Linux machines. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1587">#1587</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/prometheus/client_golang/blob/v1.20.1/CHANGELOG.md">github.com/prometheus/client_golang's
changelog</a>.</em></p>
<blockquote>
<h2>1.20.1 / 2024-08-20</h2>
<ul>
<li>[BUGFIX] process-collector: Fixed unregistered descriptor error when
using process collector with <code>PedanticRegistry</code> on linux
machines. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1587">#1587</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/prometheus/client_golang/commit/2254d6c3087d3660f73785ae123c7cc705f2a9c2"><code>2254d6c</code></a>
Merge pull request <a
href="https://redirect.github.com/prometheus/client_golang/issues/1587">#1587</a>
from prometheus/fix-processcollector</li>
<li><a
href="https://github.com/prometheus/client_golang/commit/4a15d0584653a36547195042512218cad99888c6"><code>4a15d05</code></a>
Cut 1.20.1</li>
<li><a
href="https://github.com/prometheus/client_golang/commit/f2dd7b35fd3f28b6a59b64953aab727b5c0c0404"><code>f2dd7b3</code></a>
Use pedantic registry in other places too, to double check.</li>
<li><a
href="https://github.com/prometheus/client_golang/commit/261fe84cd4f670b8e51bf74f6f6bbb96aa1fce20"><code>261fe84</code></a>
bugfix: Pass network metrics to processCollector's Describe()
function</li>
<li><a
href="https://github.com/prometheus/client_golang/commit/5bf3341b6684a18bfdc019c9b2c154ab6a42c0a1"><code>5bf3341</code></a>
Use NewPedanticRegistry in Process' Collector tests</li>
<li>See full diff in <a
href="https://github.com/prometheus/client_golang/compare/v1.20.0...v1.20.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/prometheus/client_golang&package-manager=go_modules&previous-version=1.20.0&new-version=1.20.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…o 0.3.0 (cometbft#3771)

Bumps
[github.com/cometbft/cometbft-load-test](https://github.com/cometbft/cometbft-load-test)
from 0.1.0 to 0.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cometbft/cometbft-load-test/releases">github.com/cometbft/cometbft-load-test's
releases</a>.</em></p>
<blockquote>
<h2>v0.3.0</h2>
<p><a
href="https://github.com/cometbft/cometbft-load-test/blob/v0.3.0/CHANGELOG.md#v030">CHANGELOG</a></p>
<h2>v0.2.0</h2>
<p><a
href="https://github.com/cometbft/cometbft-load-test/blob/v0.2.0/CHANGELOG.md#v020">CHANGELOG</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/cometbft/cometbft-load-test/blob/main/CHANGELOG.md">github.com/cometbft/cometbft-load-test's
changelog</a>.</em></p>
<blockquote>
<h2>v0.3.0</h2>
<p><em>August 19, 2024</em></p>
<p>This release bumps Go version.</p>
<h3>DEPENDENCIES</h3>
<ul>
<li>bump Go version from 1.20 to 1.22
(<a
href="https://redirect.github.com/cometbft/cometbft-load-test/pull/35">#35</a>)</li>
</ul>
<h2>v0.2.0</h2>
<p><em>August 19, 2024</em></p>
<p>This releases updates the dependencies to the latest versions.
<code>satori/go.uuid</code>
is replaced with <code>google/uuid</code>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/cometbft/cometbft-load-test/commit/27a181d88151416ef6a60854bf37d8a4824550fe"><code>27a181d</code></a>
v0.3.0 (<a
href="https://redirect.github.com/cometbft/cometbft-load-test/issues/36">#36</a>)</li>
<li><a
href="https://github.com/cometbft/cometbft-load-test/commit/6bb512a1c20afb79c00f525cfb7b731c084de5ae"><code>6bb512a</code></a>
chore: bump Go version from 1.20 to 1.22 (<a
href="https://redirect.github.com/cometbft/cometbft-load-test/issues/35">#35</a>)</li>
<li><a
href="https://github.com/cometbft/cometbft-load-test/commit/3f0c79ed7592bf16fcb0344ba47069a0eccb0d4f"><code>3f0c79e</code></a>
ci: release job: replace --rm-dist w/ --clean (<a
href="https://redirect.github.com/cometbft/cometbft-load-test/issues/34">#34</a>)</li>
<li><a
href="https://github.com/cometbft/cometbft-load-test/commit/7c23a63dd0b2d9137ada67002c1aaa39cd004480"><code>7c23a63</code></a>
v0.2.0 (<a
href="https://redirect.github.com/cometbft/cometbft-load-test/issues/33">#33</a>)</li>
<li><a
href="https://github.com/cometbft/cometbft-load-test/commit/48151f26ec6710b0d339f24a2341445ff6fd835d"><code>48151f2</code></a>
deps: replace vulnerable satori/go.uuid with google/uuid (<a
href="https://redirect.github.com/cometbft/cometbft-load-test/issues/32">#32</a>)</li>
<li><a
href="https://github.com/cometbft/cometbft-load-test/commit/5db29633ca6d1a81c470445cdf796732b76e3c57"><code>5db2963</code></a>
chore: bump all deps (<a
href="https://redirect.github.com/cometbft/cometbft-load-test/issues/31">#31</a>)</li>
<li><a
href="https://github.com/cometbft/cometbft-load-test/commit/8b4754b506eb3b314194ddcd9ad87c603ab9fc4f"><code>8b4754b</code></a>
Bump goreleaser/goreleaser-action from 5 to 6 (<a
href="https://redirect.github.com/cometbft/cometbft-load-test/issues/26">#26</a>)</li>
<li><a
href="https://github.com/cometbft/cometbft-load-test/commit/b849ec00eb4fc83d3b5bcdece0490a796886be15"><code>b849ec0</code></a>
Bump github.com/prometheus/client_golang from 1.19.0 to 1.19.1 (<a
href="https://redirect.github.com/cometbft/cometbft-load-test/issues/24">#24</a>)</li>
<li><a
href="https://github.com/cometbft/cometbft-load-test/commit/010143813173e1ecf7d10d5d92ea1706b3123791"><code>0101438</code></a>
Bump golangci/golangci-lint-action from 4.0.0 to 6.0.1 (<a
href="https://redirect.github.com/cometbft/cometbft-load-test/issues/23">#23</a>)</li>
<li><a
href="https://github.com/cometbft/cometbft-load-test/commit/895a628fcb654a22c16b8f9b69cf6a4cfd327e90"><code>895a628</code></a>
Bump codecov/codecov-action from 4.1.0 to 4.3.0 (<a
href="https://redirect.github.com/cometbft/cometbft-load-test/issues/19">#19</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/cometbft/cometbft-load-test/compare/v0.1.0...v0.3.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/cometbft/cometbft-load-test&package-manager=go_modules&previous-version=0.1.0&new-version=0.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
<!--

Please add a reference to the issue that this PR addresses and indicate
which
files are most critical to review. If it fully addresses a particular
issue,
please include "Closes #XXX" (where "XXX" is the issue number).

If this PR is non-trivial/large/complex, please ensure that you have
either
created an issue that the team's had a chance to respond to, or had some
discussion with the team prior to submitting substantial pull requests.
The team
can be reached via GitHub Discussions or the Cosmos Network Discord
server in
the #cometbft channel. GitHub Discussions is preferred over Discord as
it
allows us to keep track of conversations topically.
https://github.com/cometbft/cometbft/discussions

If the work in this PR is not aligned with the team's current
priorities, please
be advised that it may take some time before it is merged - especially
if it has
not yet been discussed with the team.

See the project board for the team's current priorities:
https://github.com/orgs/cometbft/projects/1

-->

---

#### PR checklist

- [ ] Tests written/updated
- [ ] Changelog entry added in `.changelog` (we use
[unclog](https://github.com/informalsystems/unclog) to manage our
changelog)
- [ ] Updated relevant documentation (`docs/` or `spec/`) and code
comments

Signed-off-by: shandongzhejiang <[email protected]>
<!--

Please add a reference to the issue that this PR addresses and indicate
which
files are most critical to review. If it fully addresses a particular
issue,
please include "Closes #XXX" (where "XXX" is the issue number).

If this PR is non-trivial/large/complex, please ensure that you have
either
created an issue that the team's had a chance to respond to, or had some
discussion with the team prior to submitting substantial pull requests.
The team
can be reached via GitHub Discussions or the Cosmos Network Discord
server in
the #cometbft channel. GitHub Discussions is preferred over Discord as
it
allows us to keep track of conversations topically.
https://github.com/cometbft/cometbft/discussions

If the work in this PR is not aligned with the team's current
priorities, please
be advised that it may take some time before it is merged - especially
if it has
not yet been discussed with the team.

See the project board for the team's current priorities:
https://github.com/orgs/cometbft/projects/1

-->

---

#### PR checklist

- [ ] Tests written/updated
- [ ] Changelog entry added in `.changelog` (we use
[unclog](https://github.com/informalsystems/unclog) to manage our
changelog)
- [ ] Updated relevant documentation (`docs/` or `spec/`) and code
comments
---

#### PR checklist

- [ ] Tests written/updated
- [ ] Changelog entry added in `.changelog` (we use
[unclog](https://github.com/informalsystems/unclog) to manage our
changelog)
- [ ] Updated relevant documentation (`docs/` or `spec/`) and code
comments
Also, capitalise all first letters of logging messages.

---

#### PR checklist

- [ ] Tests written/updated
- [ ] Changelog entry added in `.changelog` (we use
[unclog](https://github.com/informalsystems/unclog) to manage our
changelog)
- [ ] Updated relevant documentation (`docs/` or `spec/`) and code
comments
close cometbft#3836 

#### PR checklist

- [ ] Tests written/updated
- [ ] Changelog entry added in `.changelog` (we use
[unclog](https://github.com/informalsystems/unclog) to manage our
changelog)
- [ ] Updated relevant documentation (`docs/` or `spec/`) and code
comments
…1.20.2 (cometbft#3852)

Bumps
[github.com/prometheus/client_golang](https://github.com/prometheus/client_golang)
from 1.20.1 to 1.20.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/prometheus/client_golang/releases">github.com/prometheus/client_golang's
releases</a>.</em></p>
<blockquote>
<h2>v1.20.2</h2>
<ul>
<li>[BUGFIX] promhttp: Unset Content-Encoding header when data is
uncompressed. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1596">#1596</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md">github.com/prometheus/client_golang's
changelog</a>.</em></p>
<blockquote>
<h2>1.20.2 / 2024-08-23</h2>
<ul>
<li>[BUGFIX] promhttp: Unset Content-Encoding header when data is
uncompressed. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1596">#1596</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/prometheus/client_golang/commit/67121dc55a7c1ac353141e360a2b184c5e3d5529"><code>67121dc</code></a>
Merge pull request <a
href="https://redirect.github.com/prometheus/client_golang/issues/1596">#1596</a>
from mrueg/fix-uncompressed-content-header</li>
<li><a
href="https://github.com/prometheus/client_golang/commit/187acd4ca1a05e3207990e427cae7057a1e58961"><code>187acd4</code></a>
Cut 1.20.2</li>
<li><a
href="https://github.com/prometheus/client_golang/commit/f7f8f3a1e2c09da4b88b78b7e04a9252187cf71f"><code>f7f8f3a</code></a>
fix: Unset Content-Encoding header when uncompressed</li>
<li>See full diff in <a
href="https://github.com/prometheus/client_golang/compare/v1.20.1...v1.20.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/prometheus/client_golang&package-manager=go_modules&previous-version=1.20.1&new-version=1.20.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…cometbft#3851)

Bumps
[github.com/pelletier/go-toml/v2](https://github.com/pelletier/go-toml)
from 2.2.2 to 2.2.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pelletier/go-toml/releases">github.com/pelletier/go-toml/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.2.3</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>What's new</h3>
<ul>
<li>Allow <code>int</code>, <code>uint</code>, and <code>float</code> as
map keys by <a
href="https://github.com/daniel-weisse"><code>@​daniel-weisse</code></a>
in <a
href="https://redirect.github.com/pelletier/go-toml/pull/958">pelletier/go-toml#958</a></li>
</ul>
<h3>Performance</h3>
<ul>
<li>Remove unstable.Parser allocation when creating Decoder by <a
href="https://github.com/mvdan"><code>@​mvdan</code></a> in <a
href="https://redirect.github.com/pelletier/go-toml/pull/953">pelletier/go-toml#953</a></li>
</ul>
<h3>Fixed bugs</h3>
<ul>
<li>Fix reflect.Pointer backward compatibility by <a
href="https://github.com/xxxVitoxxx"><code>@​xxxVitoxxx</code></a> in <a
href="https://redirect.github.com/pelletier/go-toml/pull/956">pelletier/go-toml#956</a></li>
</ul>
<h3>Documentation</h3>
<ul>
<li>Fix readme typo by <a
href="https://github.com/testwill"><code>@​testwill</code></a> in <a
href="https://redirect.github.com/pelletier/go-toml/pull/951">pelletier/go-toml#951</a></li>
</ul>
<h3>Other changes</h3>
<ul>
<li>go.mod: bump minimum language version to 1.21 by <a
href="https://github.com/mvdan"><code>@​mvdan</code></a> in <a
href="https://redirect.github.com/pelletier/go-toml/pull/949">pelletier/go-toml#949</a></li>
<li>Bump testing to go 1.23 by <a
href="https://github.com/pelletier"><code>@​pelletier</code></a> in <a
href="https://redirect.github.com/pelletier/go-toml/pull/961">pelletier/go-toml#961</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/mvdan"><code>@​mvdan</code></a> made
their first contribution in <a
href="https://redirect.github.com/pelletier/go-toml/pull/949">pelletier/go-toml#949</a></li>
<li><a href="https://github.com/testwill"><code>@​testwill</code></a>
made their first contribution in <a
href="https://redirect.github.com/pelletier/go-toml/pull/951">pelletier/go-toml#951</a></li>
<li><a
href="https://github.com/xxxVitoxxx"><code>@​xxxVitoxxx</code></a> made
their first contribution in <a
href="https://redirect.github.com/pelletier/go-toml/pull/956">pelletier/go-toml#956</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/pelletier/go-toml/compare/v2.2.2...v2.2.3">https://github.com/pelletier/go-toml/compare/v2.2.2...v2.2.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pelletier/go-toml/commit/b730b2be5d3ab7283067ddf61188f41cdf42ce06"><code>b730b2b</code></a>
Bump testing to go 1.23 (<a
href="https://redirect.github.com/pelletier/go-toml/issues/961">#961</a>)</li>
<li><a
href="https://github.com/pelletier/go-toml/commit/a437caafe5af3e437224eced5431c03f072033cf"><code>a437caa</code></a>
Fix reflect.Pointer backward compatibility (<a
href="https://redirect.github.com/pelletier/go-toml/issues/956">#956</a>)</li>
<li><a
href="https://github.com/pelletier/go-toml/commit/be6c57be3089a6f566cb6b0f6325b67806c0c7cb"><code>be6c57b</code></a>
Fix readme typo(<a
href="https://redirect.github.com/pelletier/go-toml/issues/951">#951</a>)</li>
<li><a
href="https://github.com/pelletier/go-toml/commit/d55304782ef5d990c45b4ec62e0f45ba781ffb9a"><code>d553047</code></a>
Allow int, uint, and floats as map keys (<a
href="https://redirect.github.com/pelletier/go-toml/issues/958">#958</a>)</li>
<li><a
href="https://github.com/pelletier/go-toml/commit/0977c05dd5a60f7fd4136bb24430890d3917e755"><code>0977c05</code></a>
Update goreleaser action to <code>v6</code> and set goreleaser binary to
<code>v2</code> (<a
href="https://redirect.github.com/pelletier/go-toml/issues/959">#959</a>)</li>
<li><a
href="https://github.com/pelletier/go-toml/commit/bccd6e48f4f1136ff48e67d344f8aab3209c77d7"><code>bccd6e4</code></a>
allocate unstable.Parser as part of decoder (<a
href="https://redirect.github.com/pelletier/go-toml/issues/953">#953</a>)</li>
<li><a
href="https://github.com/pelletier/go-toml/commit/9b890cf9c53db5baefc8d1dd886f93b6b15830ab"><code>9b890cf</code></a>
go.mod: bump minimum and language to 1.21 (<a
href="https://redirect.github.com/pelletier/go-toml/issues/949">#949</a>)</li>
<li>See full diff in <a
href="https://github.com/pelletier/go-toml/compare/v2.2.2...v2.2.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/pelletier/go-toml/v2&package-manager=go_modules&previous-version=2.2.2&new-version=2.2.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…metbft#3855)

Bumps
[bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action)
from 1.37.0 to 1.38.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/bufbuild/buf-setup-action/releases">bufbuild/buf-setup-action's
releases</a>.</em></p>
<blockquote>
<h2>v1.38.0</h2>
<p>Release v1.38.0</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/bufbuild/buf-setup-action/commit/058316dbc9b9f2adb1bcfc8b2fce48d74e7292d9"><code>058316d</code></a>
Release v1.38.0 (<a
href="https://redirect.github.com/bufbuild/buf-setup-action/issues/220">#220</a>)</li>
<li>See full diff in <a
href="https://github.com/bufbuild/buf-setup-action/compare/v1.37.0...v1.38.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bufbuild/buf-setup-action&package-manager=github_actions&previous-version=1.37.0&new-version=1.38.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
In e2e, transactions generated with `runner load` have a constant prefix
`"a="`, which does not work with how lanes are currently assigned. This
PR lets `runner load` to set the lane of each tx that it generates, and
it includes it in the tx's `Payload`. Then on `CheckTx`, the app parses
the payload to obtain the lane.

Note that e2e's `TestApp_Tx` generates transaction values that are not
`Payload`s, so for these cases, `CheckTx` should not fail if it cannot
parse the tx, it must just assign the 0 lane.

The loader assigns lanes picked randomly from the list of lanes defined
in the app. This PR adds to the e2e manifest an option
`load_lane_weights`, which is used by the loader to select the lane
proportionally to its weight.

---

#### PR checklist

- [ ] Tests written/updated
- [ ] Changelog entry added in `.changelog` (we use
[unclog](https://github.com/informalsystems/unclog) to manage our
changelog)
- [ ] Updated relevant documentation (`docs/` or `spec/`) and code
comments

---------

Co-authored-by: Sergio Mena <[email protected]>
because it's not Ethereum compatible and breaks Berachain

Reverts cometbft#3627

<!--

Please add a reference to the issue that this PR addresses and indicate
which
files are most critical to review. If it fully addresses a particular
issue,
please include "Closes #XXX" (where "XXX" is the issue number).

If this PR is non-trivial/large/complex, please ensure that you have
either
created an issue that the team's had a chance to respond to, or had some
discussion with the team prior to submitting substantial pull requests.
The team
can be reached via GitHub Discussions or the Cosmos Network Discord
server in
the #cometbft channel. GitHub Discussions is preferred over Discord as
it
allows us to keep track of conversations topically.
https://github.com/cometbft/cometbft/discussions

If the work in this PR is not aligned with the team's current
priorities, please
be advised that it may take some time before it is merged - especially
if it has
not yet been discussed with the team.

See the project board for the team's current priorities:
https://github.com/orgs/cometbft/projects/1

-->

---

#### PR checklist

- [x] Tests written/updated
- [x] Changelog entry added in `.changelog` (we use
[unclog](https://github.com/informalsystems/unclog) to manage our
changelog)
- [x] Updated relevant documentation (`docs/` or `spec/`) and code
comments
<!--

Please add a reference to the issue that this PR addresses and indicate
which
files are most critical to review. If it fully addresses a particular
issue,
please include "Closes #XXX" (where "XXX" is the issue number).

If this PR is non-trivial/large/complex, please ensure that you have
either
created an issue that the team's had a chance to respond to, or had some
discussion with the team prior to submitting substantial pull requests.
The team
can be reached via GitHub Discussions or the Cosmos Network Discord
server in
the #cometbft channel. GitHub Discussions is preferred over Discord as
it
allows us to keep track of conversations topically.
https://github.com/cometbft/cometbft/discussions

If the work in this PR is not aligned with the team's current
priorities, please
be advised that it may take some time before it is merged - especially
if it has
not yet been discussed with the team.

See the project board for the team's current priorities:
https://github.com/orgs/cometbft/projects/1

-->

---

#### PR checklist

- [ ] Tests written/updated
- [ ] Changelog entry added in `.changelog` (we use
[unclog](https://github.com/informalsystems/unclog) to manage our
changelog)
- [ ] Updated relevant documentation (`docs/` or `spec/`) and code
comments
log the tx hash when `e2e` app test fails

#### PR checklist

- [X] Tests written/updated
- [ ] Changelog entry added in `.changelog` (we use
[unclog](https://github.com/informalsystems/unclog) to manage our
changelog)
- [ ] Updated relevant documentation (`docs/` or `spec/`) and code
comments

Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
instead of the custom job

See https://github.com/styfle/cancel-workflow-action:

```
Important

You probably don't need to install this custom action.

Instead, use the native concurrency property to cancel workflows, for example:

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
Read GitHub's official documentation to learn more.
```

<!--

Please add a reference to the issue that this PR addresses and indicate
which
files are most critical to review. If it fully addresses a particular
issue,
please include "Closes #XXX" (where "XXX" is the issue number).

If this PR is non-trivial/large/complex, please ensure that you have
either
created an issue that the team's had a chance to respond to, or had some
discussion with the team prior to submitting substantial pull requests.
The team
can be reached via GitHub Discussions or the Cosmos Network Discord
server in
the #cometbft channel. GitHub Discussions is preferred over Discord as
it
allows us to keep track of conversations topically.
https://github.com/cometbft/cometbft/discussions

If the work in this PR is not aligned with the team's current
priorities, please
be advised that it may take some time before it is merged - especially
if it has
not yet been discussed with the team.

See the project board for the team's current priorities:
https://github.com/orgs/cometbft/projects/1

-->

---

#### PR checklist

- [ ] Tests written/updated
- [ ] Changelog entry added in `.changelog` (we use
[unclog](https://github.com/informalsystems/unclog) to manage our
changelog)
- [ ] Updated relevant documentation (`docs/` or `spec/`) and code
comments

Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
1. instead of trying to merge immediately, assign automerge label.
2. merge PRs with automerge label (and no manual-backport label)
3. **approve PRs from dependabot**

<!--

Please add a reference to the issue that this PR addresses and indicate
which
files are most critical to review. If it fully addresses a particular
issue,
please include "Closes #XXX" (where "XXX" is the issue number).

If this PR is non-trivial/large/complex, please ensure that you have
either
created an issue that the team's had a chance to respond to, or had some
discussion with the team prior to submitting substantial pull requests.
The team
can be reached via GitHub Discussions or the Cosmos Network Discord
server in
the #cometbft channel. GitHub Discussions is preferred over Discord as
it
allows us to keep track of conversations topically.
https://github.com/cometbft/cometbft/discussions

If the work in this PR is not aligned with the team's current
priorities, please
be advised that it may take some time before it is merged - especially
if it has
not yet been discussed with the team.

See the project board for the team's current priorities:
https://github.com/orgs/cometbft/projects/1

-->

---

#### PR checklist

- [ ] Tests written/updated
- [ ] Changelog entry added in `.changelog` (we use
[unclog](https://github.com/informalsystems/unclog) to manage our
changelog)
- [ ] Updated relevant documentation (`docs/` or `spec/`) and code
comments

Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
dependabot bot and others added 26 commits November 12, 2024 16:50
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.30.0 to
0.31.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/golang/net/commit/334afa0d53434157eb708b09ff35a42db2c4531a"><code>334afa0</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="https://github.com/golang/net/commit/d7f220d3b8964f859b642e7d7c1a0d0973000939"><code>d7f220d</code></a>
quic: add LocalAddr and RemoteAddr to quic.Conn</li>
<li><a
href="https://github.com/golang/net/commit/858db1a8c8f71cbefb8ff2c896ff9aa86d761a47"><code>858db1a</code></a>
http2: surface errors occurring very early in a client conn's
lifetime</li>
<li><a
href="https://github.com/golang/net/commit/0aa844c2c8b6054d98e91f074355d5a50528934c"><code>0aa844c</code></a>
http2: support unencrypted HTTP/2 handoff from net/http</li>
<li><a
href="https://github.com/golang/net/commit/f35fec92ec9213ee211cf45f451a5970386f7978"><code>f35fec9</code></a>
http2: detect hung client connections by confirming stream resets</li>
<li><a
href="https://github.com/golang/net/commit/e883daec587fecbebb6434e53c153335e8bdeaef"><code>e883dae</code></a>
README: don't recommend go get</li>
<li><a
href="https://github.com/golang/net/commit/511cc3a40645a2f6ed3d21a1d0803b5057b9aaa1"><code>511cc3a</code></a>
html: add Node.{Ancestors,ChildNodes,Descendants}()</li>
<li><a
href="https://github.com/golang/net/commit/4783315416d92ff3d4664762748bd21776b42b98"><code>4783315</code></a>
http2: limit 1xx based on size, do not limit when delivered</li>
<li><a
href="https://github.com/golang/net/commit/5716b9813d2c78aa3bb6e08160517facfb2e84e6"><code>5716b98</code></a>
internal/socket: execute gofmt</li>
<li><a
href="https://github.com/golang/net/commit/42b11863606139133313f265e6cf2a4d1d8ca972"><code>42b1186</code></a>
http2: support ResponseController.EnableFullDuplex</li>
<li>See full diff in <a
href="https://github.com/golang/net/compare/v0.30.0...v0.31.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/net&package-manager=go_modules&previous-version=0.30.0&new-version=0.31.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
Co-authored-by: Andy Nogueira <[email protected]>
…bft#4467)

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from
1.67.1 to 1.68.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/grpc/grpc-go/releases">google.golang.org/grpc's
releases</a>.</em></p>
<blockquote>
<h2>Release 1.68.0</h2>
<h1>Behavior Changes</h1>
<ul>
<li>stats/opentelemetry/csm: Get mesh_id local label from
&quot;CSM_MESH_ID&quot; environment variable, rather than parsing from
bootstrap file (<a
href="https://redirect.github.com/grpc/grpc-go/issues/7740">#7740</a>)</li>
<li>orca (experimental): if using an ORCA listener, it must now be
registered only on a READY SubConn, and the listener will automatically
be stopped when the connection is lost. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/7663">#7663</a>)</li>
<li>client: <code>ClientConn.Close()</code> now closes transports
simultaneously and waits for transports to be closed before returning.
(<a
href="https://redirect.github.com/grpc/grpc-go/issues/7666">#7666</a>)</li>
<li>credentials: TLS credentials created via <code>NewTLS</code> that
use <code>tls.Config.GetConfigForClient</code> will now have
CipherSuites, supported TLS versions and ALPN configured automatically.
These were previously only set for configs not using the
<code>GetConfigForClient</code> option. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/7709">#7709</a>)</li>
</ul>
<h1>Bug Fixes</h1>
<ul>
<li>transport: prevent deadlock in client transport shutdown when
writing the GOAWAY frame hangs. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/7662">#7662</a>)</li>
<li>mem: reuse buffers more accurately by using slice capacity instead
of length (<a
href="https://redirect.github.com/grpc/grpc-go/issues/7702">#7702</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/PapaCharlie"><code>@​PapaCharlie</code></a></li>
</ul>
</li>
<li>status: Fix regression caused by <a
href="https://redirect.github.com/grpc/grpc-go/issues/6919">#6919</a> in
status.Details() causing it to return a wrapped type when getting proto
messages generated with protoc-gen-go &lt; v1. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/7724">#7724</a>)</li>
</ul>
<h1>Dependencies</h1>
<ul>
<li>Bump minimum supported Go version to <code>go1.22.7</code>. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/7624">#7624</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/grpc/grpc-go/commit/acba4d3e9d537eb5adc09947ebc7cfb85ec774cc"><code>acba4d3</code></a>
Change version to 1.68.0 (<a
href="https://redirect.github.com/grpc/grpc-go/issues/7743">#7743</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/5363dca57d52c3ed9c5636f60c230633f9b11ec3"><code>5363dca</code></a>
credentials: Apply defaults to TLS configs provided through
GetConfigForClien...</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/056dc64310d66e9e8bf5de62f645f62dc681d917"><code>056dc64</code></a>
status: Fix status incompatibility introduced by <a
href="https://redirect.github.com/grpc/grpc-go/issues/6919">#6919</a>
and move non-regenerat...</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/b79fb619d0ee760167bfabc373c415441183de80"><code>b79fb61</code></a>
mem: use slice capacity instead of length, to determine whether to pool
buffe...</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/54841eff8c107067337510cda5b304df1f1bf1bc"><code>54841ef</code></a>
stats/opentelemetry/csm: Get mesh_id local label from
&quot;CSM_MESH_ID&quot; environme...</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/ad81c20503be8c36d929741078e1a53a292e4048"><code>ad81c20</code></a>
pickfirstleaf: minor simplification to reconcileSubConnsLocked method
(<a
href="https://redirect.github.com/grpc/grpc-go/issues/7731">#7731</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/b850ea533f746ce3aa7bcc56b041f27e7204de8c"><code>b850ea5</code></a>
transport : wait for goroutines to exit before transport closes (<a
href="https://redirect.github.com/grpc/grpc-go/issues/7666">#7666</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/00b9e140ce71480ee7ecc6b85317021e0fe11fbb"><code>00b9e14</code></a>
pickfirst: New pick first policy for dualstack (<a
href="https://redirect.github.com/grpc/grpc-go/issues/7498">#7498</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/18a4eacc06189a8384ffb76b5add28c60ad9f169"><code>18a4eac</code></a>
testutils: add couple of log statements to the restartable listener type
(<a
href="https://redirect.github.com/grpc/grpc-go/issues/7716">#7716</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/fdc2ec2c84c8d21fb23ba82d2aeb95cdef8091e8"><code>fdc2ec2</code></a>
xdsclient: deflake TestADS_ResourcesAreRequestedAfterStreamRestart (<a
href="https://redirect.github.com/grpc/grpc-go/issues/7720">#7720</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/grpc/grpc-go/compare/v1.67.1...v1.68.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=google.golang.org/grpc&package-manager=go_modules&previous-version=1.67.1&new-version=1.68.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…ometbft#4469)

Bumps google.golang.org/protobuf from 1.34.2 to 1.35.1.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=google.golang.org/protobuf&package-manager=go_modules&previous-version=1.34.2&new-version=1.35.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
Closes cometbft#4370 


---

---------

Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…oteInfo` (cometbft#4460)

Closes cometbft#4458 

---

#### PR checklist

- [ ] Tests written/updated
- [ ] Changelog entry added in `.changelog` (we use
[unclog](https://github.com/informalsystems/unclog) to manage our
changelog)
- [x] Updated relevant documentation (`docs/` or `spec/`) and code
comments

---------

Co-authored-by: Andy Nogueira <[email protected]>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
Co-authored-by: Daniel <[email protected]>
This PR adds information about the extra fields used in ABCI to support
lanes.

---

---------

Co-authored-by: Anton Kaliaev <[email protected]>
Co-authored-by: Hernán Vanzetto <[email protected]>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…ometbft#4484)

The `v1LegacyLayout` type uses `fmt.Sprintf()` to create the DB keys.
This PR substitutes `fmt.Sprintf` with string concatenation, which is
3-4 times faster for such a simple string.

In general, we shouldn't use `fmt.Sprintf()` to concatenate strings,
because it's inefficient.
Exceptions could be constructing error messages (but we should use
`fmt.Errorf()` for that) or tests.

---

#### PR checklist

- ~[ ] Tests written/updated~
- [x] Changelog entry added in `.changelog` (we use
[unclog](https://github.com/informalsystems/unclog) to manage our
changelog)
- ~[ ] Updated relevant documentation (`docs/` or `spec/`) and code
comments~

---------

Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…ound state (cometbft#4436)

This goroutine runs continuously with a minimal, negligible timer (so
the Go scheduler will not starve). For practical purposes the timer does
not exist because it is so short (would fire 10,000x per second).


https://github.com/cometbft/cometbft/blob/48db7ac0037db4e16eab7536a05966f928a4b70b/internal/consensus/reactor.go#L560-L561

This routine acquires locks to both (1) the consensus state struct and
subsequently (2) the round state struct. It allocates new memory for a
copy of consensus state anytime it can acquire the lock, which is often,
as the lock is only held when consensus state is being mutated or read.
The size of this allocation is approximately 216 bytes on a 64-bit arch.
The struct is about half pointers and half fixed-size fields.


https://github.com/cometbft/cometbft/blob/48db7ac0037db4e16eab7536a05966f928a4b70b/internal/consensus/state.go#L259-L264

Proposal
---------

This fix removes the hot loop update of the reactor's view of round
state by copying the round state from the event bus. In the case this is
not passed, consensus state is accessed the same as it was before in
`updateRoundStateNoCsLock()`, i.e. without acquiring the lock.

Another change worth noting is passing and storing the struct itself
instead of a pointer to the struct to more clearly indicate this is an
owned clone of the round state.

These two changes should reduce garbage collector thrash.

---

#### PR checklist

- [ ] Tests written/updated
- [ ] Changelog entry added in `.changelog` (we use
[unclog](https://github.com/informalsystems/unclog) to manage our
changelog)
- [x] Updated relevant documentation (`docs/` or `spec/`) and code
comments

---------

Co-authored-by: Daniel <[email protected]>
…o create DB keys. (cometbft#4489)

The `v1LegacyLayout` type of pkg `store` uses `fmt.Sprintf()` to create
the DB keys.
This PR refactors functions using `fmt.Sprintf` to improve their speed
and memory usage.

---

#### PR checklist

- [x] Tests written/updated
- [x] Changelog entry added in `.changelog` (we use
[unclog](https://github.com/informalsystems/unclog) to manage our
changelog)
- [x] Updated relevant documentation (`docs/` or `spec/`) and code
comments

---------

Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
Contributes to cometbft#4318

The DOG spec is based on Flood's spec (cometbft#4477)


[README.md](https://github.com/cometbft/cometbft/tree/hvanz/flood-spec-4318/spec/mempool/gossip/)

---------

Co-authored-by: Andy Nogueira <[email protected]>
Co-authored-by: Daniel <[email protected]>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…nifests (cometbft#4478)

Workaround for cometbft#4492.

This PR:

1. Describes the issue with introduced by
cometbft#2283 in comments in the source
code (check FIXMEs and TODOs)
2. Temporarily disables the validator set oscillations in the generated
manifest, used in nightly runs

Item 2. has the side effect that not only the validator set oscillations
but also the consensus params oscillations are disabled, while we are
only aware of issues in the former.

---

#### PR checklist

- [ ] Tests written/updated
- [ ] Changelog entry added in `.changelog` (we use
[unclog](https://github.com/informalsystems/unclog) to manage our
changelog)
- [ ] Updated relevant documentation (`docs/` or `spec/`) and code
comments

---------

Co-authored-by: Andy Nogueira <[email protected]>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…metbft#4506)

Bumps
[bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action)
from 1.46.0 to 1.47.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/bufbuild/buf-setup-action/releases">bufbuild/buf-setup-action's
releases</a>.</em></p>
<blockquote>
<h2>v1.47.2</h2>
<p>Release v1.47.2</p>
<h2>v1.47.1</h2>
<p>Release v1.47.1</p>
<h2>v1.47.0</h2>
<p>Release v1.47.0</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/bufbuild/buf-setup-action/commit/9672cee01808979ea1249f81d6d321217b9a10f6"><code>9672cee</code></a>
Release v1.47.2 (<a
href="https://redirect.github.com/bufbuild/buf-setup-action/issues/232">#232</a>)</li>
<li><a
href="https://github.com/bufbuild/buf-setup-action/commit/89fd430737d67cb92a677e1ae1b5a1f59a2b9c6d"><code>89fd430</code></a>
Release v1.47.1 (<a
href="https://redirect.github.com/bufbuild/buf-setup-action/issues/231">#231</a>)</li>
<li><a
href="https://github.com/bufbuild/buf-setup-action/commit/5b36a1d0a60a060b0da2009af632c8ecf3dc61ac"><code>5b36a1d</code></a>
Release v1.47.0 (<a
href="https://redirect.github.com/bufbuild/buf-setup-action/issues/230">#230</a>)</li>
<li>See full diff in <a
href="https://github.com/bufbuild/buf-setup-action/compare/v1.46.0...v1.47.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bufbuild/buf-setup-action&package-manager=github_actions&previous-version=1.46.0&new-version=1.47.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ometbft#4505)

Bumps
[slackapi/slack-github-action](https://github.com/slackapi/slack-github-action)
from 1.27.0 to 2.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/slackapi/slack-github-action/releases">slackapi/slack-github-action's
releases</a>.</em></p>
<blockquote>
<h2>Slack Send v2.0.0</h2>
<p><strong>YAML! And more API methods! With improved erroring! And
more!</strong></p>
<p>Sending data to Slack can now be done with the YAML format, and that
data can be sent to [a Slack API method][methods] or <a
href="https://github.com/slackapi/slack-github-action/tree/main#sending-techniques">technique
of choice</a> with the provided payload. And additional configurations
can improve error handling or customize values between steps.</p>
<p>Breaking changes happen with this update and recommended migration
strategies are detailed below. Adding this step to new workflows might
prefer to follow the <a
href="https://github.com/slackapi/slack-github-action/tree/main#slack-send-github-action"><code>README</code></a>
instead 📚</p>
<h2>What's changed</h2>
<p>Both inputs of payload variables, techniques for sending the payload,
additional configurations, and expected outputs were changed:</p>
<ul>
<li><strong>Sending variables</strong>
<ul>
<li>Breaking changes
<ul>
<li><a
href="https://github.com/slackapi/slack-github-action/blob/HEAD/#only-one-payload-input-can-be-provided">Only
one payload input can be provided</a></li>
<li><a
href="https://github.com/slackapi/slack-github-action/blob/HEAD/#only-one-technique-to-send-can-be-provided">Only
one technique to send can be provided</a></li>
<li><a
href="https://github.com/slackapi/slack-github-action/blob/HEAD/#variable-replacements-no-longer-happen-by-default">Variable
replacements no longer happen by default</a></li>
<li><a
href="https://github.com/slackapi/slack-github-action/blob/HEAD/#payload-file-path-parsed-option-was-removed">Payload
file path parsed option was removed</a></li>
</ul>
</li>
<li>Enhancements
<ul>
<li><a
href="https://github.com/slackapi/slack-github-action/blob/HEAD/#payloads-can-now-be-written-in-yaml">Payloads
can now be written in YAML</a></li>
<li><a
href="https://github.com/slackapi/slack-github-action/blob/HEAD/#payload-can-now-be-written-in-unwrapped-json">Payload
can now be written in unwrapped JSON</a></li>
</ul>
</li>
</ul>
</li>
<li><strong>Sending techniques</strong>
<ul>
<li>Technique 1: Slack Workflow Builder
<ul>
<li>Breaking changes
<ul>
<li><a
href="https://github.com/slackapi/slack-github-action/blob/HEAD/#the-webhook-type-must-be-specified-in-webhook-inputs">The
webhook type must be specified in webhook inputs</a></li>
<li><a
href="https://github.com/slackapi/slack-github-action/blob/HEAD/#payload-flattening-no-longer-happens-by-default">Payload
flattening no longer happens by default</a></li>
</ul>
</li>
<li>Enhancements
<ul>
<li><a
href="https://github.com/slackapi/slack-github-action/blob/HEAD/#the-webhook-url-can-be-specified-in-webhook-inputs">The
webhook URL can be specified in webhook inputs</a></li>
</ul>
</li>
</ul>
</li>
<li>Technique 2: Slack API method
<ul>
<li>Breaking changes
<ul>
<li><a
href="https://github.com/slackapi/slack-github-action/blob/HEAD/#the-slack-api-method-now-must-be-specified-in-inputs">The
Slack API method now must be specified in inputs</a></li>
<li><a
href="https://github.com/slackapi/slack-github-action/blob/HEAD/#a-token-must-be-provided-with-other-inputs">A
token must be provided with other inputs</a></li>
<li><a
href="https://github.com/slackapi/slack-github-action/blob/HEAD/#inputs-to-the-slack-api-method-must-be-provided-in-payloads">Inputs
to the Slack API method must be provided in payloads</a></li>
<li><a
href="https://github.com/slackapi/slack-github-action/blob/HEAD/#messages-cannot-be-sent-to-multiple-channels-in-one-step">Messages
cannot be sent to multiple channels in one step</a></li>
</ul>
</li>
</ul>
</li>
<li>Technique 3: Slack incoming webhook
<ul>
<li>Breaking changes
<ul>
<li><a
href="https://github.com/slackapi/slack-github-action/blob/HEAD/#the-webhook-type-must-be-specified-for-incoming-webhooks">The
webhook type must be specified for incoming webhooks</a></li>
</ul>
</li>
<li>Enhancements
<ul>
<li><a
href="https://github.com/slackapi/slack-github-action/blob/HEAD/#the-webhook-url-can-be-specified-for-incoming-webhooks">The
webhook URL can be specified for incoming webhook</a></li>
</ul>
</li>
</ul>
</li>
</ul>
</li>
<li><strong>Additional configurations</strong>
<ul>
<li>Enhancements
<ul>
<li><a
href="https://github.com/slackapi/slack-github-action/blob/HEAD/#steps-can-exit-with-an-error-after-a-failed-slack-api-call">Steps
can exit with an error after a failed Slack API call</a></li>
<li><a
href="https://github.com/slackapi/slack-github-action/blob/HEAD/#failed-requests-can-be-retried-various-amounts-of-times">Failed
requests can be retried various amounts of times</a></li>
<li><a
href="https://github.com/slackapi/slack-github-action/blob/HEAD/#provided-payloads-can-be-flattened-with-a-delimiter">Provided
payloads can be flattened with a delimiter</a></li>
<li><a
href="https://github.com/slackapi/slack-github-action/blob/HEAD/#provided-payloads-can-have-templated-variables-replaced">Provided
payloads can have templated variables replaced</a></li>
<li><a
href="https://github.com/slackapi/slack-github-action/blob/HEAD/#proxying-https-requests-can-be-done-within-inputs">Proxying
HTTPS requests can be done within inputs</a></li>
</ul>
</li>
</ul>
</li>
<li><strong>Expected outputs</strong>
<ul>
<li>Breaking changes
<ul>
<li><a
href="https://github.com/slackapi/slack-github-action/blob/HEAD/#the-time-value-is-now-returned-as-the-unix-epoch-time">The
time value is now returned as the Unix epoch time</a></li>
</ul>
</li>
<li>Enhancements
<ul>
<li><a
href="https://github.com/slackapi/slack-github-action/blob/HEAD/#an-ok-value-is-added-to-represent-response-success">An
ok value is added to represent response success</a></li>
</ul>
</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/slackapi/slack-github-action/commit/485a9d42d3a73031f12ec201c457e2162c45d02d"><code>485a9d4</code></a>
Release</li>
<li><a
href="https://github.com/slackapi/slack-github-action/commit/e598089eaef53883a2d9b325e044899548518a03"><code>e598089</code></a>
chore(release): tag version 2.0.0</li>
<li><a
href="https://github.com/slackapi/slack-github-action/commit/e9b3a6beef047e819b8fb417da538f97a93a2ec8"><code>e9b3a6b</code></a>
feat!: wrap payloads to send to a &quot;method&quot; with
&quot;token&quot; or &quot;webhook&quot; (<a
href="https://redirect.github.com/slackapi/slack-github-action/issues/333">#333</a>)</li>
<li><a
href="https://github.com/slackapi/slack-github-action/commit/74ae656892e6e68e5168be5fb5fc1368a5569b3b"><code>74ae656</code></a>
chore(release): tag version 1.27.1</li>
<li><a
href="https://github.com/slackapi/slack-github-action/commit/bd0e2818bf5e26dd18c03ce249d01eceb8e1cb04"><code>bd0e281</code></a>
build(deps): bump codecov/codecov-action from 4.5.0 to 4.6.0 (<a
href="https://redirect.github.com/slackapi/slack-github-action/issues/355">#355</a>)</li>
<li><a
href="https://github.com/slackapi/slack-github-action/commit/e1275295793d6d76cbc729c451b2e81dbf52ecaa"><code>e127529</code></a>
build(deps): bump <code>@​actions/core</code> from 1.10.1 to 1.11.1 (<a
href="https://redirect.github.com/slackapi/slack-github-action/issues/354">#354</a>)</li>
<li><a
href="https://github.com/slackapi/slack-github-action/commit/6b51022aeafdaaaccae849ca0a1b963ed597bf1f"><code>6b51022</code></a>
build(deps-dev): bump eslint-plugin-jsdoc from 50.3.1 to 50.4.3 (<a
href="https://redirect.github.com/slackapi/slack-github-action/issues/353">#353</a>)</li>
<li><a
href="https://github.com/slackapi/slack-github-action/commit/555e4ad8ef03a28151a2332aeba97ed5e3aeea37"><code>555e4ad</code></a>
build(deps-dev): bump eslint-plugin-import from 2.30.0 to 2.31.0 (<a
href="https://redirect.github.com/slackapi/slack-github-action/issues/352">#352</a>)</li>
<li><a
href="https://github.com/slackapi/slack-github-action/commit/8d4500e89ea2d0c66975b82ebffbca9da18ecefc"><code>8d4500e</code></a>
build(deps): bump <code>@​slack/web-api</code> from 7.5.0 to 7.7.0 (<a
href="https://redirect.github.com/slackapi/slack-github-action/issues/351">#351</a>)</li>
<li><a
href="https://github.com/slackapi/slack-github-action/commit/d0dece60f0be2ec50f76b5de480d355c020cd2e1"><code>d0dece6</code></a>
build(deps-dev): bump mocha from 10.7.3 to 10.8.2 (<a
href="https://redirect.github.com/slackapi/slack-github-action/issues/350">#350</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/slackapi/slack-github-action/compare/v1.27.0...v2.0.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=slackapi/slack-github-action&package-manager=github_actions&previous-version=1.27.0&new-version=2.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…#4490)

This PR refactors the `v1LegacyLayout` key creation to improve its speed
and reduce its memory usage.
Follow up to cometbft#4484.

---

#### PR checklist

- [x] Tests written/updated
- [x] Changelog entry added in `.changelog` (we use
[unclog](https://github.com/informalsystems/unclog) to manage our
changelog)
- [x] Updated relevant documentation (`docs/` or `spec/`) and code
comments

---------

Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
With the introduction of BLS signatures, the maximum size of the
signature can be 96 in some cases. The spec was not reflecting this
information.

---

#### PR checklist

- [ ] Tests written/updated
- [ ] Changelog entry added in `.changelog` (we use
[unclog](https://github.com/informalsystems/unclog) to manage our
changelog)
- [ ] Updated relevant documentation (`docs/` or `spec/`) and code
comments

Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
Updates  in preparation for `v1.0.0-rc2`:

- `summary.md`
- Tutorial instructions

#### PR checklist

- [ ] Tests written/updated
- [X] Changelog entry added in `.changelog` (we use
[unclog](https://github.com/informalsystems/unclog) to manage our
changelog)
- [x] Updated relevant documentation (`docs/` or `spec/`) and code
comments

---------

Co-authored-by: Daniel <[email protected]>
Co-authored-by: Anton Kaliaev <[email protected]>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…ometbft#4504)

Bumps
[github.com/dgraph-io/badger/v4](https://github.com/dgraph-io/badger)
from 4.3.1 to 4.4.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/dgraph-io/badger/releases">github.com/dgraph-io/badger/v4's
releases</a>.</em></p>
<blockquote>
<h2>Badger v4.4.0</h2>
<h2>What's Changed</h2>
<ul>
<li>chore(deps): bump the minor group with 2 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/dgraph-io/badger/pull/2119">dgraph-io/badger#2119</a></li>
<li>fix: sentinel errors should not have stack traces by <a
href="https://github.com/mitar"><code>@​mitar</code></a> in <a
href="https://redirect.github.com/dgraph-io/badger/pull/2042">dgraph-io/badger#2042</a></li>
<li>chore(deps): bump github.com/klauspost/compress from 1.17.10 to
1.17.11 in the patch group by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/dgraph-io/badger/pull/2120">dgraph-io/badger#2120</a></li>
<li>Feature: Allow stream custom maxsize per batch by <a
href="https://github.com/simon28082"><code>@​simon28082</code></a> in <a
href="https://redirect.github.com/dgraph-io/badger/pull/2063">dgraph-io/badger#2063</a></li>
<li>retract v4.3.0 due to <a
href="https://redirect.github.com/dgraph-io/badger/issues/2121">#2121</a>
and <a
href="https://redirect.github.com/dgraph-io/badger/issues/2113">#2113</a>,
use ristretto v2 by <a
href="https://github.com/mangalaman93"><code>@​mangalaman93</code></a>
in <a
href="https://redirect.github.com/dgraph-io/badger/pull/2122">dgraph-io/badger#2122</a></li>
<li>docs(using-badger) add project to docs by <a
href="https://github.com/thisisdev-patrick"><code>@​thisisdev-patrick</code></a>
in <a
href="https://redirect.github.com/dgraph-io/badger/pull/2124">dgraph-io/badger#2124</a></li>
<li>upgrade ristretto and use Go 1.21 by <a
href="https://github.com/mangalaman93"><code>@​mangalaman93</code></a>
in <a
href="https://redirect.github.com/dgraph-io/badger/pull/2125">dgraph-io/badger#2125</a></li>
<li>set min Go version to v1.21 by <a
href="https://github.com/mangalaman93"><code>@​mangalaman93</code></a>
in <a
href="https://redirect.github.com/dgraph-io/badger/pull/2126">dgraph-io/badger#2126</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/dgraph-io/badger/compare/v4.3.1...v4.4.0">https://github.com/dgraph-io/badger/compare/v4.3.1...v4.4.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/dgraph-io/badger/blob/main/CHANGELOG.md">github.com/dgraph-io/badger/v4's
changelog</a>.</em></p>
<blockquote>
<h2>[4.4.0] - 2024-10-26</h2>
<ul>
<li>retract v4.3.0 due to <a
href="https://redirect.github.com/dgraph-io/badger/issues/2121">#2121</a>
and <a
href="https://redirect.github.com/dgraph-io/badger/issues/2113">#2113</a>,
upgrade to Go v1.23, use ristretto v2 in <a
href="https://redirect.github.com/dgraph-io/badger/pull/2122">dgraph-io/badger#2122</a></li>
<li>Allow stream custom maxsize per batch in <a
href="https://redirect.github.com/dgraph-io/badger/pull/2063">dgraph-io/badger#2063</a></li>
<li>chore(deps): bump github.com/klauspost/compress from 1.17.10 to
1.17.11 in the patch group in <a
href="https://redirect.github.com/dgraph-io/badger/pull/2120">dgraph-io/badger#2120</a></li>
<li>fix: sentinel errors should not have stack traces in <a
href="https://redirect.github.com/dgraph-io/badger/pull/2042">dgraph-io/badger#2042</a></li>
<li>chore(deps): bump the minor group with 2 updates in <a
href="https://redirect.github.com/dgraph-io/badger/pull/2119">dgraph-io/badger#2119</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/dgraph-io/badger/compare/v4.3.1...v4.4.0">https://github.com/dgraph-io/badger/compare/v4.3.1...v4.4.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/dgraph-io/badger/commit/b239e991bd41122a6d0e70dd581882f97f72957f"><code>b239e99</code></a>
set min Go version to v1.21 (<a
href="https://redirect.github.com/dgraph-io/badger/issues/2126">#2126</a>)</li>
<li><a
href="https://github.com/dgraph-io/badger/commit/2827c6839f5a2dcffe7790f3c3bef3e61083999c"><code>2827c68</code></a>
upgrade ristretto and use Go 1.21 (<a
href="https://redirect.github.com/dgraph-io/badger/issues/2125">#2125</a>)</li>
<li><a
href="https://github.com/dgraph-io/badger/commit/8b1f4a91541b43548963c572e8f0bd04d288c0d6"><code>8b1f4a9</code></a>
update changelog till v4.4.0 (<a
href="https://redirect.github.com/dgraph-io/badger/issues/2123">#2123</a>)</li>
<li><a
href="https://github.com/dgraph-io/badger/commit/ae70aa957422aaabc152d8c6e2f6a62fd0c8e49e"><code>ae70aa9</code></a>
Update stale.yml</li>
<li><a
href="https://github.com/dgraph-io/badger/commit/dcaa109ee632b4a017c57f85bcbf3e9bba50885b"><code>dcaa109</code></a>
docs(using-badger) add project to docs (<a
href="https://redirect.github.com/dgraph-io/badger/issues/2124">#2124</a>)</li>
<li><a
href="https://github.com/dgraph-io/badger/commit/7f657f862cbde20503d33a546cdfc928e8d833cd"><code>7f657f8</code></a>
retract v4.3.0 due to <a
href="https://redirect.github.com/dgraph-io/badger/issues/2121">#2121</a>
and <a
href="https://redirect.github.com/dgraph-io/badger/issues/2113">#2113</a>,
upgrade to Go v1.23, use ristretto v2 ...</li>
<li><a
href="https://github.com/dgraph-io/badger/commit/10a09e67bb72f7c53a9115c6be00deea3a9b1bf0"><code>10a09e6</code></a>
Allow stream custom maxsize per batch (<a
href="https://redirect.github.com/dgraph-io/badger/issues/2063">#2063</a>)</li>
<li><a
href="https://github.com/dgraph-io/badger/commit/ca7c9d47d860b46953e03175a455e987a345f230"><code>ca7c9d4</code></a>
chore(deps): bump github.com/klauspost/compress from 1.17.10 to 1.17.11
in th...</li>
<li><a
href="https://github.com/dgraph-io/badger/commit/de3932e8e9a6a9dca01b467436a593f898cbdcf8"><code>de3932e</code></a>
fix: sentinel errors should not have stack traces (<a
href="https://redirect.github.com/dgraph-io/badger/issues/2042">#2042</a>)</li>
<li><a
href="https://github.com/dgraph-io/badger/commit/16b63dfd2aa5c8a3d28ce8ea402b00c3a7cab7ae"><code>16b63df</code></a>
chore(deps): bump the minor group with 2 updates (<a
href="https://redirect.github.com/dgraph-io/badger/issues/2119">#2119</a>)</li>
<li>See full diff in <a
href="https://github.com/dgraph-io/badger/compare/v4.3.1...v4.4.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/dgraph-io/badger/v4&package-manager=go_modules&previous-version=4.3.1&new-version=4.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…cometbft#4523)

This is no the final fix and has to be followed up with cometbft#4521 .

Merging this will make all the PRs currently open against main pass. 

---

#### PR checklist

- [ ] Tests written/updated
- [ ] Changelog entry added in `.changelog` (we use
[unclog](https://github.com/informalsystems/unclog) to manage our
changelog)
- [ ] Updated relevant documentation (`docs/` or `spec/`) and code
comments
This PR generates new mocks because the version of mockery changes.
Marking it as draft until all tests pass.

The resolution comes from vektra/mockery#848 .

We should think of a way to make our mocks compatible with the upcoming
`v3` release.

---

#### PR checklist

- [ ] Tests written/updated
- [x ] Changelog entry added in `.changelog` (we use
[unclog](https://github.com/informalsystems/unclog) to manage our
changelog)
- [ ] Updated relevant documentation (`docs/` or `spec/`) and code
comments

---------

Co-authored-by: Andy Nogueira <[email protected]>
Adding changelog for cometbft#4521 

---

#### PR checklist

- [ ] Tests written/updated
- [ ] Changelog entry added in `.changelog` (we use
[unclog](https://github.com/informalsystems/unclog) to manage our
changelog)
- [ ] Updated relevant documentation (`docs/` or `spec/`) and code
comments
…ft#4520)

Partially close: cometbft#4519 

#### PR checklist

- [ ] Tests written/updated
- [ ] Changelog entry added in `.changelog` (we use
[unclog](https://github.com/informalsystems/unclog) to manage our
changelog)
- [ ] Updated relevant documentation (`docs/` or `spec/`) and code
comments

Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
….6 (cometbft#4502)

Bumps
[github.com/creachadair/atomicfile](https://github.com/creachadair/atomicfile)
from 0.3.5 to 0.3.6.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/creachadair/atomicfile/commit/af74d966bbf1a11f73fa68bfdebee9b14df3293a"><code>af74d96</code></a>
Release v0.3.6</li>
<li><a
href="https://github.com/creachadair/atomicfile/commit/943c39c0700f24c20cde5a6ac34a68aaf5c2d321"><code>943c39c</code></a>
atomicfile: add reference links to doc comments</li>
<li><a
href="https://github.com/creachadair/atomicfile/commit/63947374c7d53c85c7c3bb625db3df18e3449795"><code>6394737</code></a>
README.md: add CI link</li>
<li><a
href="https://github.com/creachadair/atomicfile/commit/eb424c329fc4e17b2c410e583f042fe359a3ce5b"><code>eb424c3</code></a>
go.mod: update module dependencies</li>
<li><a
href="https://github.com/creachadair/atomicfile/commit/fae049b6167385b2fa335ba483358dc7fa72b341"><code>fae049b</code></a>
go.mod: update module dependencies</li>
<li><a
href="https://github.com/creachadair/atomicfile/commit/effedb1be01de0336177f5756d0347a4cd1f1fb3"><code>effedb1</code></a>
go.mod: update module dependencies</li>
<li><a
href="https://github.com/creachadair/atomicfile/commit/4a1e145b3af0df9a762c8cae8aacf2e8be3254ea"><code>4a1e145</code></a>
go.mod: update module dependencies</li>
<li><a
href="https://github.com/creachadair/atomicfile/commit/52d6d86b379b5f4f0fbf22c825e31948368b3746"><code>52d6d86</code></a>
go.mod: update module dependencies</li>
<li><a
href="https://github.com/creachadair/atomicfile/commit/e3af1b0ec63d3b319597ff3bc902c7373655f344"><code>e3af1b0</code></a>
atomicfile: clean up example output before exit</li>
<li><a
href="https://github.com/creachadair/atomicfile/commit/3ef1948e203d619b9f280b5c0d90dbf7bfeabc5c"><code>3ef1948</code></a>
Fix path handling in a unit test.</li>
<li>Additional commits viewable in <a
href="https://github.com/creachadair/atomicfile/compare/v0.3.5...v0.3.6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/creachadair/atomicfile&package-manager=go_modules&previous-version=0.3.5&new-version=0.3.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…n` | `v1.x` backport) (cometbft#4532)

This PR fixes the Slack Notifications in GitHub Actions that got broken
after this [PR](cometbft#4505) got
merged.

#### PR checklist

- [ ] Tests written/updated
- [ ] Changelog entry added in `.changelog` (we use
[unclog](https://github.com/informalsystems/unclog) to manage our
changelog)
- [ ] Updated relevant documentation (`docs/` or `spec/`) and code
comments
…ometbft#4537)

Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify)
from 1.9.0 to 1.10.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/stretchr/testify/releases">github.com/stretchr/testify's
releases</a>.</em></p>
<blockquote>
<h2>v1.10.0</h2>
<h2>What's Changed</h2>
<h3>Functional Changes</h3>
<ul>
<li>Add PanicAssertionFunc by <a
href="https://github.com/fahimbagar"><code>@​fahimbagar</code></a> in <a
href="https://redirect.github.com/stretchr/testify/pull/1337">stretchr/testify#1337</a></li>
<li>assert: deprecate CompareType by <a
href="https://github.com/dolmen"><code>@​dolmen</code></a> in <a
href="https://redirect.github.com/stretchr/testify/pull/1566">stretchr/testify#1566</a></li>
<li>assert: make YAML dependency pluggable via build tags by <a
href="https://github.com/dolmen"><code>@​dolmen</code></a> in <a
href="https://redirect.github.com/stretchr/testify/pull/1579">stretchr/testify#1579</a></li>
<li>assert: new assertion NotElementsMatch by <a
href="https://github.com/hendrywiranto"><code>@​hendrywiranto</code></a>
in <a
href="https://redirect.github.com/stretchr/testify/pull/1600">stretchr/testify#1600</a></li>
<li>mock: in order mock calls by <a
href="https://github.com/ReyOrtiz"><code>@​ReyOrtiz</code></a> in <a
href="https://redirect.github.com/stretchr/testify/pull/1637">stretchr/testify#1637</a></li>
<li>Add assertion for NotErrorAs by <a
href="https://github.com/palsivertsen"><code>@​palsivertsen</code></a>
in <a
href="https://redirect.github.com/stretchr/testify/pull/1129">stretchr/testify#1129</a></li>
<li>Record Return Arguments of a Call by <a
href="https://github.com/jayd3e"><code>@​jayd3e</code></a> in <a
href="https://redirect.github.com/stretchr/testify/pull/1636">stretchr/testify#1636</a></li>
<li>assert.EqualExportedValues: accepts everything by <a
href="https://github.com/redachl"><code>@​redachl</code></a> in <a
href="https://redirect.github.com/stretchr/testify/pull/1586">stretchr/testify#1586</a></li>
</ul>
<h3>Fixes</h3>
<ul>
<li>assert: make tHelper a type alias by <a
href="https://github.com/dolmen"><code>@​dolmen</code></a> in <a
href="https://redirect.github.com/stretchr/testify/pull/1562">stretchr/testify#1562</a></li>
<li>Do not get argument again unnecessarily in Arguments.Error() by <a
href="https://github.com/TomWright"><code>@​TomWright</code></a> in <a
href="https://redirect.github.com/stretchr/testify/pull/820">stretchr/testify#820</a></li>
<li>Fix time.Time compare by <a
href="https://github.com/myxo"><code>@​myxo</code></a> in <a
href="https://redirect.github.com/stretchr/testify/pull/1582">stretchr/testify#1582</a></li>
<li>assert.Regexp: handle []byte array properly by <a
href="https://github.com/kevinburkesegment"><code>@​kevinburkesegment</code></a>
in <a
href="https://redirect.github.com/stretchr/testify/pull/1587">stretchr/testify#1587</a></li>
<li>assert: collect.FailNow() should not panic by <a
href="https://github.com/marshall-lee"><code>@​marshall-lee</code></a>
in <a
href="https://redirect.github.com/stretchr/testify/pull/1481">stretchr/testify#1481</a></li>
<li>mock: simplify implementation of FunctionalOptions by <a
href="https://github.com/dolmen"><code>@​dolmen</code></a> in <a
href="https://redirect.github.com/stretchr/testify/pull/1571">stretchr/testify#1571</a></li>
<li>mock: caller information for unexpected method call by <a
href="https://github.com/spirin"><code>@​spirin</code></a> in <a
href="https://redirect.github.com/stretchr/testify/pull/1644">stretchr/testify#1644</a></li>
<li>suite: fix test failures by <a
href="https://github.com/stevenh"><code>@​stevenh</code></a> in <a
href="https://redirect.github.com/stretchr/testify/pull/1421">stretchr/testify#1421</a></li>
<li>Fix issue <a
href="https://redirect.github.com/stretchr/testify/issues/1662">#1662</a>
(comparing infs should fail) by <a
href="https://github.com/ybrustin"><code>@​ybrustin</code></a> in <a
href="https://redirect.github.com/stretchr/testify/pull/1663">stretchr/testify#1663</a></li>
<li>NotSame should fail if args are not pointers <a
href="https://redirect.github.com/stretchr/testify/issues/1661">#1661</a>
by <a href="https://github.com/sikehish"><code>@​sikehish</code></a> in
<a
href="https://redirect.github.com/stretchr/testify/pull/1664">stretchr/testify#1664</a></li>
<li>Increase timeouts in Test_Mock_Called_blocks to reduce flakiness in
CI by <a href="https://github.com/sikehish"><code>@​sikehish</code></a>
in <a
href="https://redirect.github.com/stretchr/testify/pull/1667">stretchr/testify#1667</a></li>
<li>fix: compare functional option names for indirect calls by <a
href="https://github.com/arjun-1"><code>@​arjun-1</code></a> in <a
href="https://redirect.github.com/stretchr/testify/pull/1626">stretchr/testify#1626</a></li>
</ul>
<h3>Documantation, Build &amp; CI</h3>
<ul>
<li>.gitignore: ignore &quot;go test -c&quot; binaries by <a
href="https://github.com/dolmen"><code>@​dolmen</code></a> in <a
href="https://redirect.github.com/stretchr/testify/pull/1565">stretchr/testify#1565</a></li>
<li>mock: improve doc by <a
href="https://github.com/dolmen"><code>@​dolmen</code></a> in <a
href="https://redirect.github.com/stretchr/testify/pull/1570">stretchr/testify#1570</a></li>
<li>mock: fix FunctionalOptions docs by <a
href="https://github.com/snirye"><code>@​snirye</code></a> in <a
href="https://redirect.github.com/stretchr/testify/pull/1433">stretchr/testify#1433</a></li>
<li>README: link out to the excellent testifylint by <a
href="https://github.com/brackendawson"><code>@​brackendawson</code></a>
in <a
href="https://redirect.github.com/stretchr/testify/pull/1568">stretchr/testify#1568</a></li>
<li>assert: fix typo in comment by <a
href="https://github.com/JohnEndson"><code>@​JohnEndson</code></a> in <a
href="https://redirect.github.com/stretchr/testify/pull/1580">stretchr/testify#1580</a></li>
<li>Correct the EventuallyWithT and EventuallyWithTf example by <a
href="https://github.com/JonCrowther"><code>@​JonCrowther</code></a> in
<a
href="https://redirect.github.com/stretchr/testify/pull/1588">stretchr/testify#1588</a></li>
<li>CI: bump softprops/action-gh-release from 1 to 2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/stretchr/testify/pull/1575">stretchr/testify#1575</a></li>
<li>mock: document more alternatives to deprecated
AnythingOfTypeArgument by <a
href="https://github.com/dolmen"><code>@​dolmen</code></a> in <a
href="https://redirect.github.com/stretchr/testify/pull/1569">stretchr/testify#1569</a></li>
<li>assert: Correctly document EqualValues behavior by <a
href="https://github.com/brackendawson"><code>@​brackendawson</code></a>
in <a
href="https://redirect.github.com/stretchr/testify/pull/1593">stretchr/testify#1593</a></li>
<li>fix: grammar in godoc by <a
href="https://github.com/miparnisari"><code>@​miparnisari</code></a> in
<a
href="https://redirect.github.com/stretchr/testify/pull/1607">stretchr/testify#1607</a></li>
<li>.github/workflows: Run tests for Go 1.22 by <a
href="https://github.com/HaraldNordgren"><code>@​HaraldNordgren</code></a>
in <a
href="https://redirect.github.com/stretchr/testify/pull/1629">stretchr/testify#1629</a></li>
<li>Document suite's lack of support for t.Parallel by <a
href="https://github.com/brackendawson"><code>@​brackendawson</code></a>
in <a
href="https://redirect.github.com/stretchr/testify/pull/1645">stretchr/testify#1645</a></li>
<li>assert: fix typos in comments by <a
href="https://github.com/alexandear"><code>@​alexandear</code></a> in <a
href="https://redirect.github.com/stretchr/testify/pull/1650">stretchr/testify#1650</a></li>
<li>mock: fix doc comment for NotBefore by <a
href="https://github.com/alexandear"><code>@​alexandear</code></a> in <a
href="https://redirect.github.com/stretchr/testify/pull/1651">stretchr/testify#1651</a></li>
<li>Generate better comments for require package by <a
href="https://github.com/Neokil"><code>@​Neokil</code></a> in <a
href="https://redirect.github.com/stretchr/testify/pull/1610">stretchr/testify#1610</a></li>
<li>README: replace Testify V2 notice with <a
href="https://github.com/dolmen"><code>@​dolmen</code></a>'s V2
manifesto by <a
href="https://github.com/hendrywiranto"><code>@​hendrywiranto</code></a>
in <a
href="https://redirect.github.com/stretchr/testify/pull/1518">stretchr/testify#1518</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/fahimbagar"><code>@​fahimbagar</code></a> made
their first contribution in <a
href="https://redirect.github.com/stretchr/testify/pull/1337">stretchr/testify#1337</a></li>
<li><a href="https://github.com/TomWright"><code>@​TomWright</code></a>
made their first contribution in <a
href="https://redirect.github.com/stretchr/testify/pull/820">stretchr/testify#820</a></li>
<li><a href="https://github.com/snirye"><code>@​snirye</code></a> made
their first contribution in <a
href="https://redirect.github.com/stretchr/testify/pull/1433">stretchr/testify#1433</a></li>
<li><a href="https://github.com/myxo"><code>@​myxo</code></a> made their
first contribution in <a
href="https://redirect.github.com/stretchr/testify/pull/1582">stretchr/testify#1582</a></li>
<li><a
href="https://github.com/JohnEndson"><code>@​JohnEndson</code></a> made
their first contribution in <a
href="https://redirect.github.com/stretchr/testify/pull/1580">stretchr/testify#1580</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/stretchr/testify/commit/89cbdd9e7b39eb58896d316a7495597d3aba4371"><code>89cbdd9</code></a>
Merge pull request <a
href="https://redirect.github.com/stretchr/testify/issues/1626">#1626</a>
from arjun-1/fix-functional-options-diff-indirect-calls</li>
<li><a
href="https://github.com/stretchr/testify/commit/07bac606be2191ae89a281195e58d01e0de7b5f8"><code>07bac60</code></a>
Merge pull request <a
href="https://redirect.github.com/stretchr/testify/issues/1667">#1667</a>
from sikehish/flaky</li>
<li><a
href="https://github.com/stretchr/testify/commit/716de8dff46ed7ae3c6ebb7a6124db741ba7c018"><code>716de8d</code></a>
Increase timeouts in Test_Mock_Called_blocks to reduce flakiness in
CI</li>
<li><a
href="https://github.com/stretchr/testify/commit/118fb8346630c192421c8914848381af9d4412a7"><code>118fb83</code></a>
NotSame should fail if args are not pointers <a
href="https://redirect.github.com/stretchr/testify/issues/1661">#1661</a>
(<a
href="https://redirect.github.com/stretchr/testify/issues/1664">#1664</a>)</li>
<li><a
href="https://github.com/stretchr/testify/commit/7d99b2b43d8f60a8982a78cde6e8bd287dea5da0"><code>7d99b2b</code></a>
attempt 2</li>
<li><a
href="https://github.com/stretchr/testify/commit/05f87c016035811e6d8371f1887ec360c318f53f"><code>05f87c0</code></a>
more similar</li>
<li><a
href="https://github.com/stretchr/testify/commit/ea7129e00694592e20cb34c58a6b8a251418b9da"><code>ea7129e</code></a>
better fmt</li>
<li><a
href="https://github.com/stretchr/testify/commit/a1b9c9efe3c25c50678b1e492045164b914e255f"><code>a1b9c9e</code></a>
Merge pull request <a
href="https://redirect.github.com/stretchr/testify/issues/1663">#1663</a>
from ybrustin/master</li>
<li><a
href="https://github.com/stretchr/testify/commit/8302de98b17649445fc1f1992fc3fecdb40c59ba"><code>8302de9</code></a>
Merge branch 'master' into master</li>
<li><a
href="https://github.com/stretchr/testify/commit/89352f7958086841c72425ccd6f43ab299e1309c"><code>89352f7</code></a>
Merge pull request <a
href="https://redirect.github.com/stretchr/testify/issues/1518">#1518</a>
from hendrywiranto/adjust-readme-remove-v2</li>
<li>Additional commits viewable in <a
href="https://github.com/stretchr/testify/compare/v1.9.0...v1.10.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/stretchr/testify&package-manager=go_modules&previous-version=1.9.0&new-version=1.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
cometbft#4535)

Bumps
[github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver)
from 3.3.0 to 3.3.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/Masterminds/semver/releases">github.com/Masterminds/semver/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.3.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix for allowing some version that were invalid by <a
href="https://github.com/mattfarina"><code>@​mattfarina</code></a> in <a
href="https://redirect.github.com/Masterminds/semver/pull/253">Masterminds/semver#253</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/Masterminds/semver/compare/v3.3.0...v3.3.1">https://github.com/Masterminds/semver/compare/v3.3.0...v3.3.1</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/Masterminds/semver/blob/master/CHANGELOG.md">github.com/Masterminds/semver/v3's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/Masterminds/semver/commit/1558ca3488226e3490894a145e831ad58a5ff958"><code>1558ca3</code></a>
Merge pull request <a
href="https://redirect.github.com/Masterminds/semver/issues/253">#253</a>
from mattfarina/fix-bad-versions</li>
<li><a
href="https://github.com/Masterminds/semver/commit/252dd61dd30c2bcf2bcfc30be1428c68d8f25934"><code>252dd61</code></a>
Fix for allowing some version that were invalid</li>
<li>See full diff in <a
href="https://github.com/Masterminds/semver/compare/v3.3.0...v3.3.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/Masterminds/semver/v3&package-manager=go_modules&previous-version=3.3.0&new-version=3.3.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
# PR Summary
Small PR - Commit 10fa8d1 moved the
`pool.go` file. This PR adjusts sources to changes.

Signed-off-by: Emmanuel Ferdman <[email protected]>
Copy link

Quality Gate Failed Quality Gate failed

Failed conditions
14 Security Hotspots
36.0% Duplication on New Code (required ≤ 3%)

See analysis details on SonarQube Cloud

@marcello33 marcello33 merged commit 19e2da4 into main Nov 26, 2024
32 of 33 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.