build(deps): Bump the go_modules group across 35 directories with 4 updates

[dependabot]

Bumps the go_modules group with 1 update in the / directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /client/v2 directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /runtime/v2 directory: golang.org/x/net.
Bumps the go_modules group with 1 update in the /server/v2 directory: golang.org/x/net.
Bumps the go_modules group with 1 update in the /server/v2/cometbft directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /simapp directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /simapp/v2 directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /store directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /tests directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 2 updates in the /tests/systemtests directory: github.com/cometbft/cometbft and cosmossdk.io/x/tx.
Bumps the go_modules group with 2 updates in the /tools/confix directory: github.com/cometbft/cometbft and cosmossdk.io/x/tx.
Bumps the go_modules group with 2 updates in the /tools/cosmovisor directory: github.com/cometbft/cometbft and cosmossdk.io/x/tx.
Bumps the go_modules group with 2 updates in the /tools/hubl directory: github.com/cometbft/cometbft and cosmossdk.io/x/tx.
Bumps the go_modules group with 1 update in the /x/accounts directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /x/accounts/defaults/base directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /x/accounts/defaults/lockup directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /x/accounts/defaults/multisig directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /x/authz directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /x/bank directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /x/circuit directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /x/consensus directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /x/distribution directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /x/epochs directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /x/evidence directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /x/feegrant directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /x/gov directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /x/group directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /x/mint directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /x/nft directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /x/params directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /x/protocolpool directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /x/slashing directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /x/staking directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /x/tx directory: golang.org/x/net.
Bumps the go_modules group with 1 update in the /x/upgrade directory: github.com/cometbft/cometbft.

Updates github.com/cometbft/cometbft from 1.0.0-rc1.0.20240908111210-ab0be101882f to 1.0.1

Release notes

Sourced from github.com/cometbft/cometbft's releases.

v1.0.1

See the CHANGELOG for this release.

v1.0.0

See the CHANGELOG for changes available in this release.

Please see more information on the Upgrading from CometBFT v0.38 to v1.0 guide.

v1.0.0-rc2

See the CHANGELOG for changes available in this pre-release, but not yet officially released.

Changelog

Sourced from github.com/cometbft/cometbft's changelog.

v1.0.1

February 3, 2025

This release fixes two security issues (ASA-2025-001, ASA-2025-002). Users are encouraged to upgrade as soon as possible.

BUG FIXES

• [blocksync] Ban peer if it reports height lower than what was previously reported (ASA-2025-001)
• [consensus] Fix overflow in synchrony parameters in linux/amd64 architecture. Cap SynchronyParams.MessageDelay to 24hrs. Cap SynchronyParams.Precision to 30 sec. (#4815)
• [crypto/bls12381] Fix JSON marshal of private key (#4772)
• [crypto/bls12381] Modify Sign, Verify to use dstMinPk (#4783)
• [privval] Re-enable some sanity checks related to vote extensions when signing a vote (#3642)
• [types] Check that Part.Index equals Part.Proof.Index (ASA-2025-001)

DEPENDENCIES

• [go/runtime] Bump minimum Go version to 1.23.5 (#4888)

v1.0.0

December 17, 2024

This is a major release of CometBFT that includes several substantial changes that aim to reduce bandwidth consumption, enable modularity, improve integrators' experience and increase the velocity of the CometBFT development team, including:

1. Proposer-Based Timestamps (PBTS) support. PBTS is a Byzantine fault-tolerant algorithm used by CometBFT for computing block times. When activated on a chain, it replaces the pre-existing BFT-time algorithm. See spec doc for PBTS.
2. Validators now proactively communicate the block parts they already have so others do not resend them, reducing amplification in the network and reducing bandwidth consumption.
3. An experimental feature in the mempool that allows limiting the number of peers to which transactions are forwarded, allowing operators to optimize gossip-related bandwidth consumption further.
4. An opt-in nop mempool, which allows application developers to turn off all

... (truncated)

Commits

• See full diff in compare view

Updates golang.org/x/net from 0.30.0 to 0.34.0

Commits

• dfc720d go.mod: update golang.org/x dependencies
• 8e66b04 html: use strings.EqualFold instead of lowering ourselves
• b935f7b html: avoid endless loop on error token
• 9af49ef route: remove unused sizeof* consts
• 6705db9 quic: clean up crypto streams when dropping packet protection keys
• 4ef7588 quic: handle ACK frame in packet which drops number space
• 552d8ac Revert "route: change from syscall to x/sys/unix"
• 13a7c01 Revert "route: remove unused sizeof* consts on freebsd"
• 285e1cf go.mod: update golang.org/x dependencies
• d0a1049 route: remove unused sizeof* consts on freebsd
• Additional commits viewable in compare view

Updates github.com/cometbft/cometbft from 1.0.0-rc1.0.20240908111210-ab0be101882f to 1.0.1

Release notes

Sourced from github.com/cometbft/cometbft's releases.

v1.0.1

See the CHANGELOG for this release.

v1.0.0

See the CHANGELOG for changes available in this release.

Please see more information on the Upgrading from CometBFT v0.38 to v1.0 guide.

v1.0.0-rc2

See the CHANGELOG for changes available in this pre-release, but not yet officially released.

Changelog

Sourced from github.com/cometbft/cometbft's changelog.

v1.0.1

February 3, 2025

This release fixes two security issues (ASA-2025-001, ASA-2025-002). Users are encouraged to upgrade as soon as possible.

BUG FIXES

• [blocksync] Ban peer if it reports height lower than what was previously reported (ASA-2025-001)
• [consensus] Fix overflow in synchrony parameters in linux/amd64 architecture. Cap SynchronyParams.MessageDelay to 24hrs. Cap SynchronyParams.Precision to 30 sec. (#4815)
• [crypto/bls12381] Fix JSON marshal of private key (#4772)
• [crypto/bls12381] Modify Sign, Verify to use dstMinPk (#4783)
• [privval] Re-enable some sanity checks related to vote extensions when signing a vote (#3642)
• [types] Check that Part.Index equals Part.Proof.Index (ASA-2025-001)

DEPENDENCIES

• [go/runtime] Bump minimum Go version to 1.23.5 (#4888)

v1.0.0

December 17, 2024

This is a major release of CometBFT that includes several substantial changes that aim to reduce bandwidth consumption, enable modularity, improve integrators' experience and increase the velocity of the CometBFT development team, including:

1. Proposer-Based Timestamps (PBTS) support. PBTS is a Byzantine fault-tolerant algorithm used by CometBFT for computing block times. When activated on a chain, it replaces the pre-existing BFT-time algorithm. See spec doc for PBTS.
2. Validators now proactively communicate the block parts they already have so others do not resend them, reducing amplification in the network and reducing bandwidth consumption.
3. An experimental feature in the mempool that allows limiting the number of peers to which transactions are forwarded, allowing operators to optimize gossip-related bandwidth consumption further.
4. An opt-in nop mempool, which allows application developers to turn off all

... (truncated)

Commits

• See full diff in compare view

Updates golang.org/x/net from 0.30.0 to 0.34.0

Commits

• dfc720d go.mod: update golang.org/x dependencies
• 8e66b04 html: use strings.EqualFold instead of lowering ourselves
• b935f7b html: avoid endless loop on error token
• 9af49ef route: remove unused sizeof* consts
• 6705db9 quic: clean up crypto streams when dropping packet protection keys
• 4ef7588 quic: handle ACK frame in packet which drops number space
• 552d8ac Revert "route: change from syscall to x/sys/unix"
• 13a7c01 Revert "route: remove unused sizeof* consts on freebsd"
• 285e1cf go.mod: update golang.org/x dependencies
• d0a1049 route: remove unused sizeof* consts on freebsd
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.30.0 to 0.33.0

Commits

• dfc720d go.mod: update golang.org/x dependencies
• 8e66b04 html: use strings.EqualFold instead of lowering ourselves
• b935f7b html: avoid endless loop on error token
• 9af49ef route: remove unused sizeof* consts
• 6705db9 quic: clean up crypto streams when dropping packet protection keys
• 4ef7588 quic: handle ACK frame in packet which drops number space
• 552d8ac Revert "route: change from syscall to x/sys/unix"
• 13a7c01 Revert "route: remove unused sizeof* consts on freebsd"
• 285e1cf go.mod: update golang.org/x dependencies
• d0a1049 route: remove unused sizeof* consts on freebsd
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.30.0 to 0.33.0

Commits

• dfc720d go.mod: update golang.org/x dependencies
• 8e66b04 html: use strings.EqualFold instead of lowering ourselves
• b935f7b html: avoid endless loop on error token
• 9af49ef route: remove unused sizeof* consts
• 6705db9 quic: clean up crypto streams when dropping packet protection keys
• 4ef7588 quic: handle ACK frame in packet which drops number space
• 552d8ac Revert "route: change from syscall to x/sys/unix"
• 13a7c01 Revert "route: remove unused sizeof* consts on freebsd"
• 285e1cf go.mod: update golang.org/x dependencies
• d0a1049 route: remove unused sizeof* consts on freebsd
• Additional commits viewable in compare view

Updates github.com/cometbft/cometbft from 1.0.0-rc1.0.20240908111210-ab0be101882f to 1.0.1

Release notes

Sourced from github.com/cometbft/cometbft's releases.

v1.0.1

See the CHANGELOG for this release.

v1.0.0

See the CHANGELOG for changes available in this release.

Please see more information on the Upgrading from CometBFT v0.38 to v1.0 guide.

v1.0.0-rc2

See the CHANGELOG for changes available in this pre-release, but not yet officially released.

Changelog

Sourced from github.com/cometbft/cometbft's changelog.

v1.0.1

February 3, 2025

This release fixes two security issues (ASA-2025-001, ASA-2025-002). Users are encouraged to upgrade as soon as possible.

BUG FIXES

• [blocksync] Ban peer if it reports height lower than what was previously reported (ASA-2025-001)
• [consensus] Fix overflow in synchrony parameters in linux/amd64 architecture. Cap SynchronyParams.MessageDelay to 24hrs. Cap SynchronyParams.Precision to 30 sec. (#4815)
• [crypto/bls12381] Fix JSON marshal of private key (#4772)
• [crypto/bls12381] Modify Sign, Verify to use dstMinPk (#4783)
• [privval] Re-enable some sanity checks related to vote extensions when signing a vote (#3642)
• [types] Check that Part.Index equals Part.Proof.Index (ASA-2025-001)

DEPENDENCIES

• [go/runtime] Bump minimum Go version to 1.23.5 (#4888)

v1.0.0

December 17, 2024

This is a major release of CometBFT that includes several substantial changes that aim to reduce bandwidth consumption, enable modularity, improve integrators' experience and increase the velocity of the CometBFT development team, including:

1. Proposer-Based Timestamps (PBTS) support. PBTS is a Byzantine fault-tolerant algorithm used by CometBFT for computing block times. When activated on a chain, it replaces the pre-existing BFT-time algorithm. See spec doc for PBTS.
2. Validators now proactively communicate the block parts they already have so others do not resend them, reducing amplification in the network and reducing bandwidth consumption.
3. An experimental feature in the mempool that allows limiting the number of peers to which transactions are forwarded, allowing operators to optimize gossip-related bandwidth consumption further.
4. An opt-in nop mempool, which allows application developers to turn off all

... (truncated)

Commits

• See full diff in compare view

Updates golang.org/x/net from 0.30.0 to 0.34.0

Commits

• dfc720d go.mod: update golang.org/x dependencies
• 8e66b04 html: use strings.EqualFold instead of lowering ourselves
• b935f7b html: avoid endless loop on error token
• 9af49ef route: remove unused sizeof* consts
• 6705db9 quic: clean up crypto streams when dropping packet protection keys
• 4ef7588 quic: handle ACK frame in packet which drops number space
• 552d8ac Revert "route: change from syscall to x/sys/unix"
• 13a7c01 Revert "route: remove unused sizeof* consts on freebsd"
• 285e1cf go.mod: update golang.org/x dependencies
• d0a1049 route: remove unused sizeof* consts on freebsd
• Additional commits viewable in compare view

Updates github.com/cometbft/cometbft from 1.0.0-rc1.0.20240908111210-ab0be101882f to 1.0.1

Release notes

Sourced from github.com/cometbft/cometbft's releases.

v1.0.1

See the CHANGELOG for this release.

v1.0.0

See the CHANGELOG for changes available in this release.

Please see more information on the Upgrading from CometBFT v0.38 to v1.0 guide.

v1.0.0-rc2

See the CHANGELOG for changes available in this pre-release, but not yet officially released.

Changelog

Sourced from github.com/cometbft/cometbft's changelog.

v1.0.1

February 3, 2025

This release fixes two security issues (ASA-2025-001, ASA-2025-002). Users are encouraged to upgrade as soon as possible.

BUG FIXES

• [blocksync] Ban peer if it reports height lower than what was previously reported (ASA-2025-001)
• [consensus] Fix overflow in synchrony parameters in linux/amd64 architecture. Cap SynchronyParams.MessageDelay to 24hrs. Cap SynchronyParams.Precision to 30 sec. (#4815)
• [crypto/bls12381] Fix JSON marshal of private key (#4772)
• [crypto/bls12381] Modify Sign, Verify to use dstMinPk (#4783)
• [privval] Re-enable some sanity checks related to vote extensions when signing a vote (#3642)
• [types] Check that Part.Index equals Part.Proof.Index (ASA-2025-001)

DEPENDENCIES

• [go/runtime] Bump minimum Go version to 1.23.5 (#4888)

v1.0.0

December 17, 2024

This is a major release of CometBFT that includes several substantial changes that aim to reduce bandwidth consumption, enable modularity, improve integrators' experience and increase the velocity of the CometBFT development team, including:

1. Proposer-Based Timestamps (PBTS) support. PBTS is a Byzantine fault-tolerant algorithm used by CometBFT for computing block times. When activated on a chain, it replaces the pre-existing BFT-time algorithm. See spec doc for PBTS.
2. Validators now proactively communicate the block parts they already have so others do not resend them, reducing amplification in the network and reducing bandwidth consumption.
3. An experimental feature in the mempool that allows limiting the number of peers to which transactions are forwarded, allowing operators to optimize gossip-related bandwidth consumption further.
4. An opt-in nop mempool, which allows application developers to turn off all

... (truncated)

Commits

• See full diff in compare view

Updates golang.org/x/net from 0.30.0 to 0.34.0

Commits

• dfc720d go.mod: update golang.org/x dependencies
• 8e66b04 html: use strings.EqualFold instead of lowering ourselves
• b935f7b html: avoid endless loop on error token
• 9af49ef route: remove unused sizeof* consts
• 6705db9 quic: clean up crypto streams when dropping packet protection keys
• 4ef7588 quic: handle ACK frame in packet which drops number space
• 552d8ac Revert "route: change from syscall to x/sys/unix"
• 13a7c01 Revert "route: remove unused sizeof* consts on freebsd"
• 285e1cf go.mod: update golang.org/x dependencies
• d0a1049 route: remove unused sizeof* consts on freebsd
• Additional commits viewable in compare view

Updates github.com/cometbft/cometbft from 1.0.0-rc1.0.20240908111210-ab0be101882f to 1.0.1

Release notes

Sourced from github.com/cometbft/cometbft's releases.

v1.0.1

See the CHANGELOG for this release.

v1.0.0

See the CHANGELOG for changes available in this release.

Please see more information on the Upgrading from CometBFT v0.38 to v1.0 guide.

v1.0.0-rc2

See the CHANGELOG for changes available in this pre-release, but not yet officially released.

Changelog

Sourced from github.com/cometbft/cometbft's changelog.

v1.0.1

February 3, 2025

This release fixes two security issues (ASA-2025-001, ASA-2025-002). Users are encouraged to upgrade as soon as possible.

BUG FIXES

• [blocksync] Ban peer if it reports height lower than what was previously reported (ASA-2025-001)
• [consensus] Fix overflow in synchrony parameters in linux/amd64 architecture. Cap SynchronyParams.MessageDelay to 24hrs. Cap SynchronyParams.Precision to 30 sec. (#4815)
• [crypto/bls12381] Fix JSON marshal of private key (#4772)
• [crypto/bls12381] Modify Sign, Verify to use dstMinPk (#4783)
• [privval] Re-enable some sanity checks related to vote extensions when signing a vote (#3642)
• [types] Check that Part.Index equals Part.Proof.Index (ASA-2025-001)

DEPENDENCIES

• [go/runtime] Bump minimum Go version to 1.23.5 (#4888)

v1.0.0

December 17, 2024

This is a major release of CometBFT that includes several substantial changes that aim to reduce bandwidth consumption, enable modularity, improve integrators' experience and increase the velocity of the CometBFT development team, including:

1. Proposer-Based Timestamps (PBTS) support. PBTS is a Byzantine fault-tolerant algorithm used by CometBFT for computing block times. When activated on a chain, it replaces the pre-existing BFT-time algorithm. See spec doc for PBTS.
2. Validators now proactively communicate the block parts they already have so others do not resend them, reducing amplification in the network and reducing bandwidth consumption.
3. An experimental feature in the mempool that allows limiting the number of peers to which transactions are forwarded, allowing operators to optimize gossip-related bandwidth consumption further.
4. An opt-in nop mempool, which allows application developers to turn off all

... (truncated)

Commits

• See full diff in compare view

Updates golang.org/x/net from 0.30.0 to 0.34.0

Commits

• dfc720d go.mod: update golang.org/x dependencies
• 8e66b04 html: use strings.EqualFold instead of lowering ourselves
• b935f7b html: avoid endless loop on error token
• 9af49ef route: remove unused sizeof* consts
• 6705db9 quic: clean up crypto streams when dropping packet protection keys
• 4ef7588 quic: handle ACK frame in packet which drops number space
• 552d8ac Revert "route: change from syscall to x/sys/unix"
• 13a7c01 Revert "route: remove unused sizeof* consts on freebsd"
• 285e1cf go.mod: update golang.org/x dependencies
• d0a1049 route: remove unused sizeof* consts on freebsd
• Additional commits viewable in compare view

Updates github.com/cometbft/cometbft from 1.0.0-rc1 to 1.0.1

Release notes

Sourced from github.com/cometbft/cometbft's releases.

v1.0.1

See the CHANGELOG for this release.

v1.0.0

See the CHANGELOG for changes available in this release.

Please see more information on the Upgrading from CometBFT v0.38 to v1.0 guide.

v1.0.0-rc2

See the CHANGELOG for changes available in this pre-release, but not yet officially released.

Changelog

Sourced from github.com/cometbft/cometbft's changelog.

v1.0.1

February 3, 2025

This release fixes two security issues (ASA-2025-001, ASA-2025-002). Users are encouraged to upgrade as soon as possible.

BUG FIXES

• [blocksync] Ban peer if it reports height lower than what was previously reported (ASA-2025-001)
• [consensus] Fix overflow in synchrony parameters in linux/amd64 architecture. Cap SynchronyParams.MessageDelay to 24hrs. Cap SynchronyParams.Precision to 30 sec. (#4815)
• [crypto/bls12381] Fix JSON marshal of private key (#4772)
• [crypto/bls12381] Modify Sign, Verify to use dstMinPk (#4783)
• [privval] Re-enable some sanity checks related to vote extensions when signing a vote (#3642)
• [types] Check that Part.Index equals Part.Proof.Index (ASA-2025-001)

DEPENDENCIES

• [go/runtime] Bump minimum Go version to 1.23.5 (#4888)

v1.0.0

December 17, 2024

This is a major release of CometBFT that includes several substantial changes that aim to reduce bandwidth consumption, enable modularity, improve integrators' experience and increase the velocity of the CometBFT development team, including:

1. Proposer-Based Timestamps (PBTS) support. PBTS is a Byzantine fault-tolerant algorithm used by CometBFT for computing block times. When activated on a chain, it replaces the pre-existing BFT-time algorithm. See spec doc for PBTS.
2. Validators now proactively communicate the block parts they already have so others do not resend them, reducing amplification in the network and reducing bandwidth consumption.
3. An experimental feature in the mempool that allows limiting the number of peers to which transactions are forwarded, allowing operators to optimize gossip-related bandwidth consumption further.
4. An opt-in nop mempool, which allows application developers to turn off all

... (truncated)

Commits

• See full diff in compare view

Updates golang.org/x/net from 0.30.0 to 0.34.0

Commits

• dfc720d go.mod: update golang.org/x dependencies
• 8e66b04 html: use strings.EqualFold instead of lowering ourselves
• b935f7b html: avoid endless loop on error token
• 9af49ef route: remove unused sizeof* consts
• 6705db9 quic: clean up crypto streams when dropping packet protection keys
• 4ef7588 quic: handle ACK frame in packet which drops number space
• 552d8ac Revert "route: change from syscall to x/sys/unix"
• 13a7c01 Revert "route: remove unused sizeof* consts on freebsd"
• 285e1cf go.mod: update golang.org/x dependencies
• d0a1049 route: remove unused sizeof* consts on freebsd
• Additional commits viewable in compare view

Updates github.com/cometbft/cometbft from 1.0.0-rc1.0.20240908111210-ab0be101882f to 1.0.1

Release notes

Sourced from github.com/cometbft/cometbft's releases.

v1.0.1

See the CHANGELOG for this release.

v1.0.0

See the CHANGELOG for changes available in this release.

Please see more information on the Upgrading from CometBFT v0.38 to v1.0 guide.

v1.0.0-rc2

See the CHANGELOG for changes available in this pre-release, but not yet officially released.

Changelog

Sourced from github.com/cometbft/cometbft's changelog.

v1.0.1

February 3, 2025

This release fixes two security issues (ASA-2025-001, ASA-2025-002). Users are encouraged to upgrade as soon as possible.

BUG FIXES

• [blocksync] Ban peer if it reports height lower than what was previously reported (ASA-2025-001)
• [consensus] Fix overflow in synchrony parameters in linux/amd64 architecture. Cap SynchronyParams.MessageDelay to 24hrs. Cap SynchronyParams.Precision to 30 sec. (#4815)
• [crypto/bls12381] Fix JSON marshal of private key (#4772)
• [crypto/bls12381] Modify Sign, Verify to use dstMinPk (#4783)
• [privval] Re-enable some sanity checks related to vote extensions when signing a vote (#3642)
• [types] Check that Part.Index equals Part.Proof.Index (ASA-2025-001)

DEPENDENCIES

• [go/runtime] Bump minimum Go version to 1.23.5 (#4888)

v1.0.0

December 17, 2024

This is a major release of CometBFT that includes several substantial changes that aim to reduce bandwidth consumption, enable modularity, improve integrators' experience and increase the velocity of the CometBFT development team, including:

1. Proposer-Based Timestamps (PBTS) support. PBTS is a Byzantine fault-tolerant algorithm used by CometBFT for computing block times. When activated on a chain, it replaces the pre-existing BFT-time algorithm. See spec doc for PBTS.
2. Validators now proactively communicate the block parts they already have so others do not resend them, reducing amplification in the network and reducing bandwidth consumption.
3. An experimental feature in the mempool that allows limiting the number of peers to which transactions are forwarded, allowing operators to optimize gossip-related bandwidth consumption further.
4. An opt-in nop mempool, which allows application developers to turn off all

... (truncated)

Commits

• See full diff in compare view

Updates golang.org/x/net from 0.30.0 to 0.34.0

Commits

• dfc720d go.mod: update golang.org/x dependencies
• 8e66b04 html: use strings.EqualFold instead of lowering ourselves
• b935f7b html: avoid endless loop on error token
• 9af49ef route: remove unused sizeof* consts
• 6705db9 quic: clean up crypto streams when dropping packet protection keys
• 4ef7588 quic: handle ACK frame in packet which drops number space
• 552d8ac Revert "route: change from syscall to x/sys/unix"
• 13a7c01 Revert "route: remove unused sizeof* consts on freebsd"
• 285e1cf go.mod: update golang.org/x dependencies
• d0a1049 route: remove unused sizeof* consts on freebsd
• Additional commits viewable in compare view

Updates github.com/cometbft/cometbft from 0.38.15 to 0.38.17

Release notes

Sourced from github.com/cometbft/cometbft's releases.

v1.0.1

See the CHANGELOG for this release.

v1.0.0

See the CHANGELOG for changes available in this release.

Please see more information on the Upgrading from CometBFT v0.38 to v1.0 guide.

v1.0.0-rc2

See the CHANGELOG for changes available in this pre-release, but not yet officially released.

Changelog

Sourced from github.com/cometbft/cometbft's changelog.

v1.0.1

February 3, 2025

This release fixes two security issues (ASA-2025-001, ASA-2025-002). Users are encouraged to upgrade as soon as possible.

BUG FIXES

• [blocksync] Ban peer if it reports height lower than what was previously reported (ASA-2025-001)
• [consensus] Fix overflow in synchrony parameters in linux/amd64 architecture. Cap SynchronyParams.MessageDelay to 24hrs. Cap SynchronyParams.Precision to 30 sec. (#4815)
• [crypto/bls12381] Fix JSON marshal of private key (#4772)
• [crypto/bls12381] Modify Sign, Verify to use dstMinPk (#4783)
• [privval] Re-enable some sanity checks related to vote extensions when signing a vote (#3642)
• [types] Check that Part.Index equals Part.Proof.Index (ASA-2025-001)

DEPENDENCIES

• [go/runtime] Bump minimum Go version to 1.23.5 (#4888)

v1.0.0

December 17, 2024

This is a major release of CometBFT that includes several substantial changes that aim to reduce bandwidth consumption, enable modularity, improve integrators' experience and increase the velocity of the CometBFT development team, including:

1. Proposer-Based Timestamps (PBTS) support. PBTS is a Byzantine fault-tolerant algorithm used by CometBFT for computing block times. When activated on a chain, it replaces the pre-existing BFT-time algorithm. See spec doc for PBTS.
2. Validators now proactively communicate the block parts they already have so others do not resend them, reducing amplification in the network and reducing bandwidth consumption.
3. An experimental feature in the mempool that allows limiting the number of peers to which transactions are forwarded, allowing operators to optimize gossip-related bandwidth consumption further.
4. An opt-in nop mempool, which allows application developers to turn off all

... (truncated)

Commits

• See full diff in compare view

Updates golang.org/x/net from 0.30.0 to 0.34.0

Commits

• dfc720d go.mod: update golang.org/x dependencies
• 8e66b04 html: use strings.EqualFold instead of lowering ourselves
• b935f7b html: avoid endless loop on error token
• 9af49ef route: remove unused sizeof* consts
• 6705db9 quic: clean up crypto streams when dropping packet protection keys
• 4ef7588 quic: handle ACK frame in packet which drops number space
• 552d8ac Revert "route: change from syscall to x/sys/unix"
• 13a7c01 Revert "route: remove unused sizeof* consts on freebsd"
• 285e1cf go.mod: update golang.org/x dependencies
• d0a1049 route: remove unused sizeof* consts on freebsd
• Additional commits viewable in compare view

Updates cosmossdk.io/x/tx from 0.13.3-0.20240419091757-db5906b1e894 to 0.13.7

Commits

• See full diff in compare view

Updates github.com/golang/glog from 1.2.2 to 1.2.3

Release notes

Sourced from github.com/golang/glog's releases.

v1.2.3

What's Changed

• glog: check that stderr is valid before using it by default by @​chressie in golang/glog#72
• glog: fix typo by @​chressie in golang/glog#73

Full Changelog: golang/glog@v1.2.2...v1.2.3

Commits

• 04dbec0 glog: fix typo (#73)
• 459cf3b glog: check that stderr is valid before using it by default (#72)
• See full diff in compare view

Updates github.com/cometbft/cometbft from 0.38.15 to 0.38.17

Release notes

Sourced from github.com/cometbft/cometbft's releases.

v1.0.1

See the CHANGELOG for this release.

v1.0.0

See the CHANGELOG for changes available in this release.

Please see more information on the Upgrading from CometBFT v0.38 to v1.0 guide.

v1.0.0-rc2

See the CHANGELOG for changes available in this pre-release, but not yet officially released.

Changelog

Sourced from github.com/cometbft/cometbft's changelog.

v1.0.1

February 3, 2025

This release fixes two security issues (ASA-2025-001, ASA-2025-002). Users are encouraged to upgrade as soon as possible.

BUG FIXES

• [blocksync] Ban peer if it reports height lower than what was previously reported (ASA-2025-001)
• [consensus] Fix overflow in synchrony parameters in linux/amd64 architecture. Cap SynchronyParams.MessageDelay to 24hrs. Cap SynchronyParams.Precision to 30 sec. (#4815)
• [crypto/bls12381] Fix JSON marshal of private key (#4772)
• [crypto/bls12381] Modify Sign, Verify to use dstMinPk (#4783)
• [privval] Re-enable some sanity checks related to vote extensions when signing a vote (#3642)
• [types] Check that Part.Index equals Part.Proof.Index (ASA-2025-001)

DEPENDENCIES

• [go/runtime] Bump minimum Go version to 1.23.5 (#4888)

v1.0.0

December 17, 2024

This is a major release of CometBFT that includes several substantial changes that aim to reduce bandwidth consumption, enable modularity, improve integrators' experience and increase the velocity of the CometBFT development team, including:

1. Proposer-Based Timestamps (PBTS) support. PBTS is a Byzantine fault-tolerant algorithm used by CometBFT for computing block times. When activated on a chain, it replaces the pre-existing BFT-time algorithm. See spec doc for PBTS.
2. Validators now proactively communicate the block parts they already have so others do not resend them, reducing amplification in the network and reducing bandwidth consumption.
3. An experimental feature in the mempool that allows limiting the number of peers to which transactions are forwarded, allowing operators to optimize gossip-related bandwidth consumption further.
4. An opt-in nop mempool, which allows application developers to turn off all

... (truncated)

Commits

• See full diff in compare view

Updates golang.org/x/net from 0.30.0 to 0.34.0

Commits

• dfc720d go.mod: update golang.org/x dependencies
• 8e66b04 html: use strings.EqualFold instead of lowering ourselves
• b935f7b html: avoid endless loop on error token
• 9af49ef route: remove unused sizeof* consts
• 6705db9 quic: clean up crypto streams when dropping packet protection keys
• 4ef7588Description has been truncated