build(deps): bump cosmossdk.io/x/tx from 0.13.7 to 1.0.1

[dependabot]

Bumps cosmossdk.io/x/tx from 0.13.7 to 1.0.1.

Release notes

Sourced from cosmossdk.io/x/tx's releases.

Cosmovisor v1.0.0 Release Notes

This is the first major release of Cosmovisor. It changes the way Cosmovisor is searching for an upgrade event from an app. Instead of scanning standard input and standard output logs, the Cosmovisor observes the $DAEMON_HOME/upgrade-info.json file, that is produced by the x/upgrade module. The upgrade-info.json files is created by the x/upgrade module and contains information from the on-chain upgrade Plan record. Using the file based approach solved many outstanding problems: freezing when logs are too long, race condition with the x/upgrade handler, and potential exploit (if a chain would allow to log an arbitrary message, then an attacker could produce a fake upgrade signal and halt a chain or instrument a download of modified, hacked binary when the auto download option is enabled).

Auto downloads

Cosmovisor v1.0 supports auto downloads based on the information in the data/upgrade-info.json. In the Cosmos SDK < v0.44, that file doesn't contain upgrade.Plan.Info, that is needed for doing auto download. Hence Cosmovisor v1.0 auto download won't work with Apps updating from v0.43 and earlier.

NOTE: we don't recommend using auto download functionality. It can lead to potential chain halt when the upgrade Plan contains a bad link or the resource with the binary will be temporarily unavailable. We are planning on adding a upgrade verification command which can potentially solve this issue.

Other updates

• Changed default value of DAEMON_RESTART_AFTER_UPGRADE to true.
• Added version command, which prints both the Cosmovisor and the associated app version.
• Added help command, which prints the Cosmovisor help without passing it to the associated version. This is an exception, because normally, Cosmovisor passes all arguments to the associated app.

For more details, please see the CHANGELOG.

DB v1.0.0-beta.1

github.com/cosmos/cosmos-sdk/db (cosmos-sdk/db here an after) is a module in the Cosmos SDK repository. It is used in store/v2 instead of tendermint/tm-db which is now deprecated. cosmos-sdk/db extends the tendermint/tm-db interface. however, it only supports BaggerDB and RocksDB (the databases we tested, which provide snapshot functionality necessary for store/v2 and ADR-040 implementation).

v0.52.0-rc.1

Cosmos SDK v0.52.0-rc.1 Release Notes

We've just released a release candidate for the Cosmos SDK v0.52.0. APIs should now be stable, and we encourage everyone to start integrating with this release candidate.

This release is the first totally modular release of the Cosmos SDK. Many components have been extracted in their own modules. Refer to the version matrix to understand what it means (modules have been tagged as rc.1 as well).

A final release is expected in the coming days 🎄.

Please see the CHANGELOG for an exhaustive list of changes.
Refer to the UPGRADING.md for upgrading your application.

Full Commit History: cosmos/cosmos-sdk@release/v0.50.x...release/v0.52.x

v0.52.0-beta.2

Cosmos SDK v0.52.0-beta.2 Release Notes

There are no release notes for pre-releases.

When integrating, use the latest pseudo version from the release branch (release/v0.52.x) for SDK modules or main for other packages. Cosmos SDK modules won't be tagged before RC. Refer to the version matrix to understand what it means. Note, this beta contains some dependencies annoyance that will be resolved before the RC (i.e. the SDK is temporarily importing bank and staking).

Please see the CHANGELOG for an exhaustive list of changes.
Refer to the UPGRADING.md for upgrading your application.

Full Commit History: cosmos/cosmos-sdk@release/v0.50.x...release/v0.52.x Changes from last beta: cosmos/cosmos-sdk@v0.52.0-beta.1...v0.52.0-beta.2

... (truncated)

Changelog

Sourced from cosmossdk.io/x/tx's changelog.

Changelog

[Unreleased]

Every module contains its own CHANGELOG.md. Please refer to the module you are interested in.

Features

• (baseapp) #20291 Simulate nested messages.
• (client/keys) #21829 Add support for importing hex key using standard input.

Improvements

Bug Fixes

... (truncated)

Commits

• 90e3e69 chore: prepare math 1.0.1 (#16153)
• fb8ff07 perf: Speedup Dec.Sqrt() (#16141)
• 793cbe5 fix: snapshot error message wording (#16146)
• 2276629 build(deps): Bump cosmossdk.io/core from 0.6.1 to 0.7.0 (#16147)
• 94dec7a perf: Remove indentation in REST respones (#16142)
• 92247cb fix: snapshot commands panic if snapshot don't exists (#16138)
• 14af232 docs: add core changelog (#16134)
• ddf51cc fix: allow non-EOA accounts to stake in simulation (#16068)
• 6c07d59 build(deps): bump core to v0.7.0 and fix GHSA-3vp4-m3rf-835h (#16128)
• f7418c6 refactor(gov)!: use collections for constitution and params state (#16118)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

• Review comments: Directly reply to a review comment made by CodeRabbit. Example:
  • I pushed a fix in commit <commit_id>, please review it.
  • Generate unit testing code for this file.
  • Open a follow-up GitHub issue for this discussion.
• Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
  • @coderabbitai generate unit testing code for this file.
  • @coderabbitai modularize this function.
• PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
  • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
  • @coderabbitai read src/utils.ts and generate unit testing code.
  • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
  • @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

• @coderabbitai pause to pause the reviews on a PR.
• @coderabbitai resume to resume the paused reviews.
• @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
• @coderabbitai full review to do a full review from scratch and review all the files again.
• @coderabbitai summary to regenerate the summary of the PR.
• @coderabbitai generate docstrings to generate docstrings for this PR. (Beta)
• @coderabbitai resolve resolve all the CodeRabbit review comments.
• @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
• @coderabbitai help to get help.

Other keywords and placeholders

• Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
• Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
• Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

• You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
• Please see the configuration documentation for more information.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

• Visit our Documentation for detailed information on how to use CodeRabbit.
• Join our Discord Community to get help, request features, and share feedback.
• Follow us on X/Twitter for updates and announcements.

[dependabot]

Superseded by #43.