v4.0.2 BCNAD codename: stickyfingers - security patch

What's Changed

• Update last_upgrade.md by @RaulBernal in #470
• Bump docker/setup-qemu-action from 2 to 3 by @dependabot in #446
• Bump softprops/action-gh-release from 1 to 2 by @dependabot in #447
• Bump actions/checkout from 3 to 4 by @dependabot in #449
• Bump actions/upload-artifact from 3 to 4 by @dependabot in #461
• Bump github.com/cosmos/cosmos-db from 1.0.2 to 1.1.0 by @dependabot in #468
• Bump actions/checkout from 3 to 4 by @dependabot in #474
• Bump actions/setup-go from 3 to 5 by @dependabot in #473
• Security patches by @RaulBernal in #479
  • Bump WASM (v2.1.3 to v2.1.4)
  • Bump golang/x/ deps
    • Bump golang.org/x/crypto from 0.29.0 to 0.31.0
    • Bump golang.org/x/tools from 0.27.0 to 0.28.0
    • Bump cosmossdk.io/core from 0.11.1 to 0.11.2
    • Bump github.com/docker/docker from 26.1.2+incompatible to 26.1.5+incompatible

Release details

commit: c7b5d58bf9c4653f6188b0a0fdfa576405840aa4
cosmos_sdk_version: v0.50.10
go: go version go1.23.4 linux/amd64
name: bcna
server_name: bcnad
version: v4.0.2

Instructions for to compile

cd $HOME
git clone https://github.com/BitCannaGlobal/bcna.git
cd bcna
git checkout v4.0.2
make build

Instructions for to download

rm -rf bcnad_linux_amd64.tar.gz # delete if exists
wget https://github.com/BitCannaGlobal/bcna/releases/download/v4.0.2/bcnad_linux_amd64.tar.gz
sha256sum bcnad_linux_amd64.tar.gz 
# Output: `20a7f8c22eebf91b7c5e34b80ced2cad43691c37e2f1b5ab5eacba0824a917ae ` 
tar zxvf bcnad_linux_amd64.tar.gz
rm bcnad_linux_amd64.tar.gz
./bcnad_linux_amd64 version # --> v4.0.2

Setup Cosmovisor

If you download the binary change the 2nd line and type the proper path

mkdir -p $HOME/.bcna/cosmovisor/upgrades/stickyfingers/bin/
mv $HOME/bcna/build/bcnad $HOME/.bcna/cosmovisor/upgrades/stickyfingers/bin/
$HOME/.bcna/cosmovisor/upgrades/stickyfingers/bin/bcnad version # --> 4.0.2

Full Changelog: v4.0.1...v4.0.2

v4.0.1 codename: stickyfingers - BCNAD + WASM

Important Upgrade info about this release:

requires a governance proposal to start a new consensus because we bump IBC/go & Cosmos-SDK & add Wasm module.
is plenty compatible with v4.0.0, both will upgrade the chain.
include an emergency path for cosmo-math lib and a fix for Makefile bug introduced in v4.0.0

Halt height: 16.782.000
Estimated Target Date: Mo 25 Nov 2024 17:20:00h CEST (16:20:00h UTC)
Cosmovisor (folder) Plan Name: stickyfingers
version/tag: v4.0.1
commit: 42ccc11c4d4fce7c72523b748a06f2779f6aa417

Instructions for to compile

cd $HOME
git clone https://github.com/BitCannaGlobal/bcna.git
cd bcna
git checkout v4.0.1
make build

Instructions for to download

rm -rf bcnad_linux_amd64.tar.gz # delete if exists
wget https://github.com/BitCannaGlobal/bcna/releases/download/v4.0.1/bcnad_linux_amd64.tar.gz
sha256sum bcnad_linux_amd64.tar.gz 
# Output: `c2dcb6842e2e83ba5fe9b526899650d5e69aff3b3d7721e050e09dc84c74a92b` 
tar zxvf bcnad_linux_amd64.tar.gz
rm bcnad_linux_amd64.tar.gz
./bcnad_linux_amd64 version # --> v4.0.1

Setup Cosmovisor

If you download the binary change the 2nd line and type the proper path

mkdir -p $HOME/.bcna/cosmovisor/upgrades/stickyfingers/bin/
mv $HOME/bcna/build/bcnad $HOME/.bcna/cosmovisor/upgrades/stickyfingers/bin/
$HOME/.bcna/cosmovisor/upgrades/stickyfingers/bin/bcnad version # --> 4.0.1

What's new

• Bump and refactor from Cosmos-SDK v0.47 to v0.50.9
• Security and stability upgrades
• Remove custom modules & add Wasm by @RaulBernal in #422

What's Changed from v4.0.0

• Makefile bug fix at clean function.

SHA256SUM

c2dcb6842e2e83ba5fe9b526899650d5e69aff3b3d7721e050e09dc84c74a92b   bcnad_linux_amd64.tar.gz
1c1f1c19844b4c97899e1c1ac8924bdd563ae0f2578fe9adcf4592488cb3d0d7     bcnad_linux_arm64.tar.gz

v4.0.0 codename: stickyfingers - BCNAD + WASM

Important Upgrade info:

Don't use this release due a bug on Makefile!
Please use v4.0.1: https://github.com/BitCannaGlobal/bcna/releases/tag/v4.0.1

v4.0.0-rc6

What's Changed

• Add Dockerfile & GitHub Actions to compile BCNAD by @RaulBernal in #444
• Update v4-devnet-1 with v4 changes by @RaulBernal in #445

Important note

• Only for use at DEVNET-1
• It patches a bug at WASM-VM 2.1.2
• This patch requires a new consensus (start-stop chain)

Full Changelog: v4.0.0-rc5...v4.0.0-rc6

v4.0.0-rc5 codename: stickyfingers-fix

What's Changed

• Bump SDK version from v0.50.9 to v0.50.10 by @RaulBernal in #437
• Remove custom modules & add Wasm by @RaulBernal in #422
• Bump and refactor from Cosmos-SDK v0.47 to v0.50.9
• 425 v4 include upgrade code to fix consensus params error at devnet 1 by @RaulBernal in #426
• Bump IBC/go to v8.5.1 by @RaulBernal in #427
• BUG: New consensus params keeper using the wrong key again and move the data into the consensus params keeper with the right key by @RaulBernal in #429
• Set WASM upload/instantiate params by @RaulBernal in #431
• v4 defaults at APP.TOML & CONFIG.TOML by @RaulBernal in #434

Important note

• Only for use at DEVNET-1
• It fixes the previous v4.0.0-rc3 avoiding SDK & modules installation

Instructions (compile)

cd $HOME/bcna
git fetch
git checkout v4.0.0-rc5
make install
bcnad version --long | grep -e commit -e version
#version: 4.0.0-rc5
#commit: 07792dcbfeaef6ccc1654880d90737bde1bebf51
sudo systemctl restart bcnad && sudo journalctl -fu bcnad -o cat
#consensus
curl -s http://localhost:26657/consensus_state  | jq '.result.round_state.height_vote_set[0].prevotes_bit_array'

Cosmovisor instructions

mkdir -p $HOME/.bcna/cosmovisor/upgrades/stickyfingers-fix/bin
mv build/bcnad $HOME/.bcna/cosmovisor/upgrades/stickyfingers-fix/bin

Hash256sum

910f25854bcbedb6148c65acb0d56c5faf0a21010747b692a934156ed98cd225  bcna_darwin_arm64.tar.gz
5ad13a68f97f3d76eeabe73aaa16a7a4189bd402c1383283bd26cfed177b1934  bcna_linux_amd64.tar.gz

Full Changelog: v4.0.0-rc2...v4.0.0-rc4
Full Changelog: v4.0.0-rc3...v4.0.0-rc4
Full Changelog: v4.0.0-rc4...v4.0.0-rc5

v4.0.0-rc4 codename: `stickyfingers-fix`

What's Changed

• Remove custom modules & add Wasm by @RaulBernal in #422
• Bump and refactor from Cosmos-SDK v0.47 to v0.50.9
• 425 v4 include upgrade code to fix consensus params error at devnet 1 by @RaulBernal in #426
• Bump IBC/go to v8.5.1 by @RaulBernal in #427
• BUG: New consensus params keeper using the wrong key again and move the data into the consensus params keeper with the right key by @RaulBernal in #429
• Set WASM upload/instantiate params by @RaulBernal in #431
• v4 defaults at APP.TOML & CONFIG.TOML by @RaulBernal in #434

Important note

• Only for use at DEVNET-1
• It fixes the previous v4.0.0-rc3 avoiding SDK & modules installation

Instructions (compile)

cd $HOME/bcna
git fetch
git checkout v4.0.0-rc4
make install
bcnad version --long | grep -e commit -e version
#version: 4.0.0-rc4
#commit: ba851eb3bea22eaddc6cb281d454f74ee218331e
sudo systemctl restart bcnad && sudo journalctl -fu bcnad -o cat
#consensus
curl -s http://localhost:26657/consensus_state  | jq '.result.round_state.height_vote_set[0].prevotes_bit_array'

Cosmovisor instructions

mkdir $HOME/.bcna/cosmovisor/upgrades/stickyfingers-fix/bin
mv build/bcnad $HOME/.bcna/cosmovisor/upgrades/stickyfingers-fix/bin

Full Changelog: v4.0.0-rc2...v4.0.0-rc4
Full Changelog: v4.0.0-rc3...v4.0.0-rc4

v4.0.0-rc3

What's Changed

• remove custom modules & add Wasm by @RaulBernal in #422
• Bump and refactor from Cosmos-SDK v0.47 to v0.50.9

Instructions (compile)

cd $HOME/bcna
git fetch
git checkout v4.0.0-rc3
make install
bcnad version --long | grep -e commit -e version
#version: 4.0.0-rc3
#commit: 7ddd08a48759a2837a5d1b05247d172c7a6ca38e
sudo systemctl restart bcnad && sudo journalctl -fu bcnad -o cat
#consensus
curl -s http://localhost:26657/consensus_state  | jq '.result.round_state.height_vote_set[0].prevotes_bit_array'

Cosmovisor instructions

mkdir $HOME/.bcna/cosmovisor/upgrades/stickyfingers/bin
mv build/bcnad $HOME/.bcna/cosmovisor/upgrades/stickyfingers/bin

Full Changelog: v4.0.0-rc2...v4.0.0-rc3

BitCanna v3.1.1 - Codename `ganjarevolutionburn`

What's new

• Security and stability upgrades.

Instructions

• No state-machine breaking, so apply ASAP and restart daemon.

What's Changed

• Bump golangci/golangci-lint-action from 4 to 6 by @dependabot in #364
• Bump google.golang.org/grpc from 1.62.1 to 1.64.0 by @dependabot in #369
• Bump github.com/cosmos/ibc-go/v7 from 7.4.0 to 7.5.1 by @dependabot in #373
• Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.16.0 to 2.20.0 by @dependabot in #371
• Bump github.com/spf13/viper from 1.18.2 to 1.19.0 by @dependabot in #375
• Bump github.com/spf13/cobra from 1.8.0 to 1.8.1 by @dependabot in #377
• fix gRPC port by @RaulBernal in #397
• Bump github.com/hashicorp/go-getter from 1.7.1 to 1.7.5 by @dependabot in #398
• Bump github.com/cosmos/ibc-go/v7 from 7.5.1 to 7.8.0 by @dependabot in #413
• Bump github.com/cosmos/gogoproto from 1.4.10 to 1.7.0 by @dependabot in #409
• Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.20.0 to 2.22.0 by @dependabot in #410
• Bump github.com/spf13/cast from 1.6.0 to 1.7.0 by @dependabot in #405
• Retract ibc-go uprade to avoid state-breaking by @RaulBernal in #417. (TESTED)

New Contributors

• @NodesHub made their first contribution in #372
• @111STAVR111 made their first contribution in #385

Binary checksums:

0f7783b729411fefdd482daa45a18b2bccaf095eb3bd79b0d2989d54a15dd303  bcna_darwin_arm64.tar.gz
305d784f1fca6616d2c643043e7b1cef12e143aa27aa9d1ae3b06d515c8c517e  bcna_linux_amd64.tar.gz

Full Changelog: v3.1.0...v3.1.1

BitCanna v3.1.0 - Codename `ganjarevolutionburn`

Important Upgrade info:

This release requires a governance proposal to start a new consensus because we bump IBC/go from v7.3.2 to v7.4.0 (security advisory)

Halt height: 13.846.420
Estimated Target Date: Fr 10 May 2024 16:50:00h CEST (14:50:00h UTC)
Cosmovisor (folder) Plan Name: ganjarevolutionburn
version/tag: v3.1.0
commit: be10f9e1362b2f4de45a95c045387949e2acd6ad

What's new:

• New burn module.
• Discussion about this new module: ignite/cli#4022
• Whitelist of hardcoded addresses that could be burned (protocol level)
• Bump ibc/go from v7.3.2 to v7.4.0 (security advisory) - V047 burn module bump deps #352
• Bump Cosmos-sdk from v0.47.9 to v0.47.11
• Bump CometBFT from v0.37.4 to v0.37.5

New contributions:

Thanks to @locky10loumpi & @atmoner for his huge contribution with the initial release of the Burn module

Quick instructions

Mandatory to compile with go1.21.x (check recent discovered vulns at Ubuntu)
NOTE: Provided files in Github were compiled with go1.22.1 forcing Makefile (a new updated version in on main branch)

Option 1. Download:

rm -rf bcna_linux_amd64.tar.gz # delete if exists
wget https://github.com/BitCannaGlobal/bcna/releases/download/v3.1.0/bcna_linux_amd64.tar.gz
sha256sum bcna_linux_amd64.tar.gz 
# Output: `7a714e976ef5d2589ce08736f9f12b15e44b2e63a80bf2fb86e82c2319ebcadf` 
tar zxvf bcna_linux_amd64.tar.gz
rm bcna_linux_amd64.tar.gz
./bcnad version # --> v3.1.0

With Cosmovisor

mkdir -p $HOME/.bcna/cosmovisor/upgrades/ganjarevolutionburn/bin/
mv bcnad $HOME/.bcna/cosmovisor/upgrades/ganjarevolutionburn/bin/
$HOME/.bcna/cosmovisor/upgrades/ganjarevolutionburn/bin/bcnad version # --> 3.1.0
sudo service cosmovisor restart && sudo journalctl -fu cosmovisor -o cat   # Not necessary but desirable to make sure that everything is ok.

With BCNAD as service daemon

sudo mv bcnad $(which bcnad)
bcnad version # --> v3.1.0
#When the halt-height comes: 
sudo service bcnad restart && sudo journalctl -fu bcnad -o cat

Option 2. Compile:

cd bcna && git fetch 
git checkout v3.1.0
make build # and move the binary to the path
make install # if patch/service file  is at $GOBIN

commit: be10f9e1362b2f4de45a95c045387949e2acd6ad

With Cosmovisor

mkdir -p $HOME/.bcna/cosmovisor/upgrades/ganjarevolutionburn/bin/
mv build/bcnad $HOME/.bcna/cosmovisor/upgrades/ganjarevolutionburn/bin/
$HOME/.bcna/cosmovisor/upgrades/ganjarevolutionburn/bin/bcnad version # --> 3.1.0
sudo service cosmovisor restart && sudo journalctl -fu cosmovisor -o cat  # Not necessary but desirable to make sure that everything is ok.

With BCNAD as service daemon

sudo mv build/bcnad $(which bcnad)
bcnad version # --> 3.1.0
#When the halt-height comes: 
sudo service bcnad restart && sudo journalctl -fu bcnad -o cat

SHA256 Checksums

93b7df8a5bd14979cedf6d3c34fc8b7ecce8032c0858733d44a84abc64182ead  bcna_darwin_arm64.tar.gz
7a714e976ef5d2589ce08736f9f12b15e44b2e63a80bf2fb86e82c2319ebcadf  bcna_linux_amd64.tar.gz
04455e3ebc839252f1f4072f6d5839788483a21803b88b9a800924e645482f0b  bcna_linux_arm64.tar.gz

What's Changed

• update doc for BCNAD v3.0.2 by @RaulBernal in #331
• V047 burn module add params by @RaulBernal in #340
• V047 burn module tests by @RaulBernal in #342
• Bump github.com/cosmos/ibc-go/v7 from 7.3.2 to 7.4.0 by @dependabot in #351
• V047 burn module bump deps by @RaulBernal in #352
• WhiteList control by @RaulBernal in #357
• Update docs for v3.1.0-rc2 by @El-Jay-Crypto in #359
• V3.1.0 by @RaulBernal in #363
• Burn module & custom burn message by @RaulBernal in #335

Full Changelog: v3.1.0-rc0...v3.1.0

BitCanna v3.1.0-rc2 - Codename `ganjarevolutionburn`

Important Upgrade info:

This release requires a governance proposal to start a new consensus because we bump IBC/go from v7.3.2 to v7.4.0 (security advisory)

Halt height: 7400000
Estimated Target Date: Wd 17 Apr 2024 16:30:00h CEST (14:30:00h UTC)
Cosmovisor (folder) Plan Name: ganjarevolutionburn
version/tag: v3.1.0-rc2
commit: 68114ab5317f3d29562a4aff8fee62ab92e56622
branch: https://github.com/BitCannaGlobal/bcna/tree/v047-burn-module

What's new:

• New burn module. Only for testing purposes (DEVNET-1)
• Discussion about this new module: ignite/cli#4022
• Whitelist of hardcoded addresses that could be burned (protocol level)
• Bump ibc/go from v7.3.2 to v7.4.0 (security advisory) - V047 burn module bump deps #352
• Bump cosmos-sdk from v0.47.9 to v0.47.10

New contributions:

Thanks to @locky10loumpi & @atmoner for his huge contribution with the initial release of the Burn module

What's Changed

• V047 burn module add params by @RaulBernal in #340
• V047 burn module tests by @RaulBernal in #342
• V047 burn module bump deps by @RaulBernal in #352
• WhiteList control by @RaulBernal in #357

Quick instructions

Mandatory to compile with go1.21.x (check recent discovered vulns at Ubuntu)
NOTE: Provided files in Github were compiled with go1.22.1 forcing Makefile

Option 1. Download:

rm -rf bcna_linux_amd64.tar.gz # delete if exists
wget https://github.com/BitCannaGlobal/bcna/releases/download/v3.1.0-rc2/bcna_linux_amd64.tar.gz
sha256sum bcna_linux_amd64.tar.gz 
# Output: `d4e92b5fe4091f710df54840ff462c05897c4b886418ac84cb76e1eaeb5950a0` 
tar zxvf bcna_linux_amd64.tar.gz
rm bcna_linux_amd64.tar.gz
./bcnad version # --> v3.1.0-rc2

With Cosmovisor

mkdir -p $HOME/.bcna/cosmovisor/upgrades/ganjarevolutionburn/bin/
mv bcnad $HOME/.bcna/cosmovisor/upgrades/ganjarevolutionburn/bin/
$HOME/.bcna/cosmovisor/upgrades/ganjarevolutionburn/bin/bcnad version # --> 3.1.0-rc2
sudo service cosmovisor restart && sudo journalctl -fu cosmovisor -o cat   # Not necessary but desirable to make sure that everything is ok.

With BCNAD as service daemon

sudo mv bcnad $(which bcnad)
bcnad version # --> v3.1.0-rc2
#When the halt-height comes: 
sudo service bcnad restart && sudo journalctl -fu bcnad -o cat

Option 2. Compile:

cd bcna && git fetch 
git checkout v3.1.0-rc2
make build # and move the binary to the path
make install # if patch/service file  is at $GOBIN

commit: 68114ab5317f3d29562a4aff8fee62ab92e56622

With Cosmovisor

mkdir -p $HOME/.bcna/cosmovisor/upgrades/ganjarevolutionburn/bin/
mv build/bcnad $HOME/.bcna/cosmovisor/upgrades/ganjarevolutionburn/bin/
$HOME/.bcna/cosmovisor/upgrades/ganjarevolutionburn/bin/bcnad version # --> 3.1.0-rc2
sudo service cosmovisor restart && sudo journalctl -fu cosmovisor -o cat  # Not necessary but desirable to make sure that everything is ok.

With BCNAD as service daemon

sudo mv build/bcnad $(which bcnad)
bcnad version # --> 3.1.0-rc2
#When the halt-height comes: 
sudo service bcnad restart && sudo journalctl -fu bcnad -o cat

SHA256 Checksums

e311273110d8bf873630a4a3453278483ded8942561095319ea1a6478d4366e6  bcna_darwin_arm64.tar.gz
d4e92b5fe4091f710df54840ff462c05897c4b886418ac84cb76e1eaeb5950a0  bcna_linux_amd64.tar.gz
96f52f98be20e12f0f4df398331f4330b29ea9be0dc8a303a4c7a45fcabc95d0  bcna_linux_arm64.tar.gz

Full Changelog: v3.1.0-rc0...v3.1.0-rc2