Skip to content

build(deps): bump the gomod-minor-patch group across 1 directory with 15 updates#932

Open
dependabot[bot] wants to merge 3 commits into
developfrom
dependabot/go_modules/gomod-minor-patch-6538e8d0ea
Open

build(deps): bump the gomod-minor-patch group across 1 directory with 15 updates#932
dependabot[bot] wants to merge 3 commits into
developfrom
dependabot/go_modules/gomod-minor-patch-6538e8d0ea

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 11, 2026 •
edited
Loading

Bumps the gomod-minor-patch group with 6 updates in the / directory:

Package From To
cosmossdk.io/client/v2 2.0.0-beta.5 2.11.0
cosmossdk.io/x/evidence 0.1.1 0.2.0
cosmossdk.io/x/feegrant 0.1.1 0.2.0
github.com/cosmos/ibc-go/v10 10.5.0 10.6.0
github.com/onsi/ginkgo/v2 2.28.0 2.28.3
github.com/tidwall/gjson 1.18.0 1.19.0

Updates cosmossdk.io/client/v2 from 2.0.0-beta.5 to 2.11.0

Release notes

Sourced from cosmossdk.io/client/v2's releases.

client/v2.11.0

What's Changed

client/v2.11.0 is the first non beta release of the client/v2 package.

See the CHANGELOG for a full list of changes across all beta versions.

log/v2.1.0

Features

  • #26007 Implement fanout logger when OpenTelemetry is configured.

log/v2.0.0

Features

  • #25778 Introduce log v2, adding contextual methods to Logger for trace correlation.

store/v2.0.0

API Breaking

  • #25470 Refactor store interfaces to support generic value types (object stores):
    • Replace BasicKVStore, KVStore, and Iterator interfaces/types with generic GBasicKVStore[V], GKVStore[V], and GIterator[V]. The old names are retained as type aliases (e.g. KVStore = GKVStore[[]byte]).
    • Remove Iterator as a direct alias to dbm.Iterator. It is now GIterator[[]byte], a distinct interface defined in the store package. Code that type-asserts to dbm.Iterator will break.
    • Remove CacheWrap() and CacheWrapWithTrace() method declarations from the CacheWrap interface. CacheWrap now embeds CacheWrapper to obtain CacheWrap().
    • Add GetObjKVStore(StoreKey) ObjKVStore to the MultiStore interface.
    • Add generic store variants across cachekv, gaskv, prefix, transient, and mem packages (GStore[V], NewGStore, NewObjStore).
  • #26037 Remove GetCommitStore and GetCommitKVStore from the CommitMultiStore interface. Remove top-level store.CommitStore and store.CommitKVStore type aliases from store/reexport.go.
  • #26060 Remove non-functional StoreMetrics. This metric interface never worked, so this simply removes dead code.
  • #26061 Remove tracing from store interfaces and implementations:
    • Remove SetTracer, SetTracingContext, and TracingEnabled from MultiStore interface.
    • Remove CacheWrapWithTrace from CacheWrapper interface.
    • Remove traceWriter and traceContext parameters from cachemulti.NewStore, cachemulti.NewFromKVStore, and cachemulti.NewFromParent.
    • Remove store/tracekv package entirely.
    • Remove TraceContext type store/types.

Features

  • #25470 Add object KV stores and refactor the base store to be generic across the value parameter:
    • Add object store types: ObjKVStore, ObjBasicKVStore, ObjIterator, ObjectStoreKey, StoreTypeObject.
    • Add generic store types: GBasicKVStore[V], GKVStore[V], GIterator[V].
    • Add cachemulti.NewFromParent constructor for lazy cache multistore construction from a parent store function.
  • #25647 Add EarliestVersion() int64 to the CommitMultiStore interface and GetEarliestVersion(db) helper.

Bug Fixes

  • #20425 Fix nil pointer panic when querying historical state where a new store does not exist.
  • #24583 Fix pruning height calculation to correctly handle in-flight snapshots. Adds SnapshotAnnouncer interface and AnnounceSnapshotHeight to track snapshots in progress and prevent premature pruning of their heights.
Commits

Updates cosmossdk.io/core from 0.11.3 to 1.1.0

Release notes

Sourced from cosmossdk.io/core's releases.

schema/v1.1.0

Breaking Changes

cosmossdk.io/schema was previously tagged as v1.0.0, but several stubs were included in this release which were unimplemented. v1.1.0 removes any unimplemented stubs and retracts v1.0.0 so that the schema v1 API is actually reflective of the codebase.

Group v1.0.0 Release Notes

The Group module enables on-chain multisig and collective decision-making for any set of accounts. Groups are formed with weighted members and one or more configurable decision policies, then govern shared accounts through proposals. With enterprise-level support, it is ready for production deployments requiring flexible, auditable multi-party authorization.

🚀 Highlights

  • Weighted group membership: Create groups with an admin, weighted members, and attach decision policies that define how proposals pass. Admins can be a single address, a multisig, or a group policy account itself.
  • Full proposal lifecycle: Members submit proposals containing arbitrary SDK messages, vote (YES/NO/ABSTAIN/NO_WITH_VETO), and any account can trigger execution once accepted.
  • Flexible decision policies: Two built-in policies — threshold (absolute weighted vote count) and percentage (proportion of YES votes) — each with configurable voting and minimum execution periods. The DecisionPolicy interface supports custom extensions.

POA v1.0.0 Release Notes

The POA module provides an admin-managed validator set as a drop-in replacement for the staking, distribution, and slashing modules. Purpose-built for institutional deployments run by a known set of operators, it offers a streamlined validator lifecycle with no native token required. Fee distribution to validators and full governance compatibility are included out of the box.

🚀 Highlights

  • Admin-controlled validator lifecycle: A single, customizable admin account manages validator creation, power updates, and removal. This admin can be set to a multisig, governance, or a single address.
  • Proportional fee distribution: Transaction fees accumulate in the POA module account allocated to validators in proportion to their voting power. Validators withdraw their accumulated fees via MsgWithdrawFees at any time.
  • Governance integration: Proposal submission, deposits, and voting are gated to active validators. A custom vote-tallying function weights votes by validator power.

v0.54.3

What's Changed

Full Changelog: cosmos/cosmos-sdk@v0.54.2...v0.54.3

v0.54.2

Cosmos SDK v0.54.2 Release Notes

🚀 Highlights

Announcing Cosmos SDK v0.54

We are pleased to announce the release of Cosmos SDK v0.54! Cosmos SDK v0.54 is part of the 2026.1 release family. This release introduces order of magnitude improvements to network stability and throughput.

See the full v0.54 release notes for more details on what's included in this release.

Upgrading to this verison of the Cosmos SDK from any v0.50.x release will require a coordinated chain upgrade.

For more information on upgrading, please see our upgrade guide.

📝 Changelog

... (truncated)

Changelog

Sourced from cosmossdk.io/core's changelog.

Changelog

UNRELEASED

Breaking Changes

Features

  • (abci) #25620 Add support for new application side mempool ABCI methods.
  • (abci) #25969 Add support for new ABCI methods, InsertTx and ReapTxs.
  • (deps) #26388 Bump CometBFT version to v0.39.3.

Improvements

... (truncated)

Commits
  • be5e3aa feat(log): extend logger options (#15956)
  • 851e9e8 docs: update roadmap for q2 (#15952)
  • 91278f6 refactor(x/authz)!: Use KVStoreService, context.Context and return errors ins...
  • 26faee9 refactor: bcrypt key derivation to aead (#509) (#15817)
  • 428e19f refactor(x/distribution)!: Use KVStoreService, context.Context and return err...
  • a6ea094 ci: skip fix registration for linting (#15965)
  • 00b78fa refactor(x/auth): v2 adaptable tx instead of double decode (#15910)
  • 1179285 feat(hubl): cache bech32 prefix (#15954)
  • 6a8251a build(deps): bump cometbft to v0.37.1 (#15955)
  • 6dfe735 refactor!: use KVStoreService and context.Context in x/bank (#15891)
  • Additional commits viewable in compare view

Updates cosmossdk.io/errors from 1.0.2 to 1.1.0

Release notes

Sourced from cosmossdk.io/errors's releases.

schema/v1.1.0

Breaking Changes

cosmossdk.io/schema was previously tagged as v1.0.0, but several stubs were included in this release which were unimplemented. v1.1.0 removes any unimplemented stubs and retracts v1.0.0 so that the schema v1 API is actually reflective of the codebase.

Changelog

Sourced from cosmossdk.io/errors's changelog.

Changelog

UNRELEASED

Breaking Changes

Features

  • (abci) #25620 Add support for new application side mempool ABCI methods.
  • (abci) #25969 Add support for new ABCI methods, InsertTx and ReapTxs.
  • (deps) #26388 Bump CometBFT version to v0.39.3.

Improvements

... (truncated)

Commits
  • be5e3aa feat(log): extend logger options (#15956)
  • 851e9e8 docs: update roadmap for q2 (#15952)
  • 91278f6 refactor(x/authz)!: Use KVStoreService, context.Context and return errors ins...
  • 26faee9 refactor: bcrypt key derivation to aead (#509) (#15817)
  • 428e19f refactor(x/distribution)!: Use KVStoreService, context.Context and return err...
  • a6ea094 ci: skip fix registration for linting (#15965)
  • 00b78fa refactor(x/auth): v2 adaptable tx instead of double decode (#15910)
  • 1179285 feat(hubl): cache bech32 prefix (#15954)
  • 6a8251a build(deps): bump cometbft to v0.37.1 (#15955)
  • 6dfe735 refactor!: use KVStoreService and context.Context in x/bank (#15891)
  • Additional commits viewable in compare view

Updates cosmossdk.io/x/evidence from 0.1.1 to 0.2.0

Release notes

Sourced from cosmossdk.io/x/evidence's releases.

Rosetta v0.2.0

Changelog

More information on Rosetta here.

Improvements

  • #14118 Allow rosetta to be installed as a standalone application.
  • #14061 Adds openapi specification.
  • #13832 Correctly populates rosetta's /network/status endpoint response. Rosetta's data api is divided into its own go files (account, block, mempool, network).

Bug Fixes

  • #13832 Wrap tendermint RPC errors to rosetta errors.
Changelog

Sourced from cosmossdk.io/x/evidence's changelog.

0.2.0 (March 6, 2017)

BREAKING CHANGES:

  • Update to ABCI v0.4.0 and Tendermint v0.9.0
  • Coins are specified on the CLI as Xcoin, eg. 5gold
  • Cost is now Fee

FEATURES:

  • CLI for sending transactions and querying the state, designed to be easily extensible as plugins are implemented
  • Run Basecoin in-process with Tendermint
  • Add /account path in Query
  • IBC plugin for InterBlockchain Communication
  • Demo script of IBC between two chains

IMPROVEMENTS:

  • Use new Tendermint /commit endpoint for crafting IBC transactions
  • More unit tests
  • Use go-crypto S structs and go-data for more standard JSON
  • Demo uses fewer sleeps

BUG FIXES:

  • Various little fixes in coin arithmetic
  • More commit validation in IBC
  • Return results from transactions

PreHistory

January 14-18, 2017
  • Update to Tendermint v0.8.0
  • Cleanup a bit and release blog post
September 22, 2016
  • Basecoin compiles again
Commits
  • 8e4d6a5 Merge branch 'master' into develop
  • 72bebc6 Merge pull request #819 from cosmos/release/v0.14.0
  • 4807a19 Merge pull request #774 from fedekunze/fedekunze/README
  • 40b193f update changelog
  • 1074ab6 version and changelog
  • 9722f41 deps, changelog, version
  • 56c3ae4 Merge branch 'develop' into fedekunze/README
  • c155a82 addressed Rige's comments
  • 9b246ec Update README.md
  • 52f317a Merge pull request #800 from cosmos/rigel/tick-endblock
  • Additional commits viewable in compare view

Updates cosmossdk.io/x/feegrant from 0.1.1 to 0.2.0

Release notes

Sourced from cosmossdk.io/x/feegrant's releases.

Rosetta v0.2.0

Changelog

More information on Rosetta here.

Improvements

  • #14118 Allow rosetta to be installed as a standalone application.
  • #14061 Adds openapi specification.
  • #13832 Correctly populates rosetta's /network/status endpoint response. Rosetta's data api is divided into its own go files (account, block, mempool, network).

Bug Fixes

  • #13832 Wrap tendermint RPC errors to rosetta errors.
Changelog

Sourced from cosmossdk.io/x/feegrant's changelog.

0.2.0 (March 6, 2017)

BREAKING CHANGES:

  • Update to ABCI v0.4.0 and Tendermint v0.9.0
  • Coins are specified on the CLI as Xcoin, eg. 5gold
  • Cost is now Fee

FEATURES:

  • CLI for sending transactions and querying the state, designed to be easily extensible as plugins are implemented
  • Run Basecoin in-process with Tendermint
  • Add /account path in Query
  • IBC plugin for InterBlockchain Communication
  • Demo script of IBC between two chains

IMPROVEMENTS:

  • Use new Tendermint /commit endpoint for crafting IBC transactions
  • More unit tests
  • Use go-crypto S structs and go-data for more standard JSON
  • Demo uses fewer sleeps

BUG FIXES:

  • Various little fixes in coin arithmetic
  • More commit validation in IBC
  • Return results from transactions

PreHistory

January 14-18, 2017
  • Update to Tendermint v0.8.0
  • Cleanup a bit and release blog post
September 22, 2016
  • Basecoin compiles again
Commits
  • 8e4d6a5 Merge branch 'master' into develop
  • 72bebc6 Merge pull request #819 from cosmos/release/v0.14.0
  • 4807a19 Merge pull request #774 from fedekunze/fedekunze/README
  • 40b193f update changelog
  • 1074ab6 version and changelog
  • 9722f41 deps, changelog, version
  • 56c3ae4 Merge branch 'develop' into fedekunze/README
  • c155a82 addressed Rige's comments
  • 9b246ec Update README.md
  • 52f317a Merge pull request #800 from cosmos/rigel/tick-endblock
  • Additional commits viewable in compare view

Updates github.com/cosmos/ibc-go/v10 from 10.5.0 to 10.6.0

Release notes

Sourced from github.com/cosmos/ibc-go/v10's releases.

v10.6.0

ibc-go v10.6.0 Release Notes

This release fixes a potential blockage of the IBC v2 packet life cycle, caused by incorrect handling of an error in the callbacks middleware.

Migration Guide

This version requires a coordinated upgrade as it contains a state breaking change.

What's Changed

Full Changelog: cosmos/ibc-go@v10.5.1...v10.6.0

v10.5.1

ibc-go v10.5.1 Release Notes

This release fixes a failure caused by non-UTF8 values being included in error/event emission. View the full changelog for more details.

Migration Guide

This version does not contain any state or API breaking changes.

What's Changed

Full Changelog: cosmos/ibc-go@v10.5.0...v10.5.1

Changelog

Sourced from github.com/cosmos/ibc-go/v10's changelog.

v10.6.0 - 2026-04-24

Bug Fixes

  • (apps/callbacks) #8916 OnTimeoutPacket blocked by UnmarshalPacketData error (backport of #8856)

v10.5.1 - 2026-04-09

Bug Fixes

  • (apps/transfer) #8879 Use packet sender and receiver strings in unauthorized errors to avoid non-UTF8 event/simulation failures. (backport of #8874)
Commits
  • 1e4d410 fix(callbacks/v2): OnTimeoutPacket blocked by UnmarshalPacketData error (back...
  • f84fb81 revert: "fix(callbacks/v2): OnTimeoutPacket blocked by UnmarshalPacketData er...
  • 84c5bad fix(callbacks/v2): OnTimeoutPacket blocked by UnmarshalPacketData error (back...
  • c990bce docs(changelog): added release date (#8894)
  • 7ff5431 chore(docs): removed docs in release branch (#8880)
  • b849842 fix(transfer): use packet sender and receiver string in unauthorized error (b...
  • eaecf8a chore: wireup ibcv2 router in the simapp (#8847)
  • 48647f7 deps(08-wasm): locally pin ibc-go (#8748)
  • f791df1 deps(08-wasm): unpinned local ibc-go to use v10.5.0 instead (#8743)
  • See full diff in compare view

Updates github.com/onsi/ginkgo/v2 from 2.28.0 to 2.28.3

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.28.3

2.28.3

Maintenance

Bump all dependencies

v2.28.2

2.28.2

  • Add ArtifactDir() to support Go 1.26 testing.TB interface [f3a36b6]
  • Implement shell completion [94151c8]
  • Add asan CLI option mirroring msan implementation [4d21dbb]
  • Bump uri from 1.0.3 to 1.0.4 in /docs (#1630) [c102161]
  • fix aspect ratio [9619647]
  • update logos [5779304]

v2.28.1

2.28.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent with the fact that Go 1.23 has been out of support for almost six months.

Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.28.3

Maintenance

Bump all dependencies

2.28.2

  • Add ArtifactDir() to support Go 1.26 testing.TB interface [f3a36b6]
  • Implement shell completion [94151c8]
  • Add asan CLI option mirroring msan implementation [4d21dbb]
  • Bump uri from 1.0.3 to 1.0.4 in /docs (#1630) [c102161]
  • fix aspect ratio [9619647]
  • update logos [5779304]

2.28.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent with the fact that Go 1.23 has been out of support for almost six months.

Commits

Updates github.com/onsi/gomega from 1.39.1 to 1.40.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.40.0

1.40.0

We're adopting a new release strategy to minimize dependency bloat in projects that consume Gomega. It is a limitation of the go mod toolchain that test subdependencies of your project's direct dependencies get pulled in as indirect dependencies. In the case of Gomega, this ends up pulling in all of Ginkgo into your go.mod even if you are only using Gomega (Gomega uses Ginkgo for its own tests).

Going forward, releases will strip out all tests, tidy up the go.mod and then push this stripped down version to a new master-lite branch. These stripped-down versions will receive the vx.y.z git tag and will be picked up by the go toolchain.

Please open an issue if this new release process causes unexpected changes for your projects.

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.40.0

We're adopting a new release strategy to minimize dependency bloat in projects that consume Gomega. It is a limitation of the go mod toolchain that test subdependencies of your project's direct dependencies get pulled in as indirect dependencies. In the case of Gomega, this ends up pulling in all of Ginkgo into your go.mod even if you are only using Gomega (Gomega uses Ginkgo for its own tests).

Going forward, releases will strip out all tests, tidy up the go.mod and then push this stripped down version to a new master-lite branch. These stripped-down versions will receive the vx.y.z git tag and will be picked up by the go toolchain.

Please open an issue if this new release process causes unexpected changes for your projects.

Commits

Updates github.com/rs/zerolog from 1.34.0 to 1.35.0

Commits
  • 1396655 Bump CI Go matrix minimum from 1.21 to 1.23
  • 4b65a2f Bump actions/cache from 4 to 5 (#741)
  • b835796 Bump actions/setup-go from 5 to 6 (#742)
  • 134caf8 Added sanitization of journald keys (#751)
  • e133b6a Added variadic StrsV, ObjectsV, and StringersV (#752)
  • 82017d8 Bump github.com/coreos/go-systemd/v22 from 22.6.0 to 22.7.0 (#753)
  • 2f5b8a9 fix: UpdateContext skips Nop and zero-value loggers (#754)
  • d64c9a7 Add slog.Handler implementation for zerolog (#755)
  • a0d61dc fix: return dict to Event pool (#749)
  • f6fbd33 Test coverage improvements (#748)
  • Additional commits viewable in compare view

Updates github.com/tidwall/gjson from 1.18.0 to 1.19.0

Commits

Updates golang.org/x/net from 0.49.0 to 0.53.0

Commits
  • a8d1fc1 go.mod: update golang.org/x dependencies
  • 056ac74 quic: avoid depending on golang.org/x/sys/unix
  • c85f611 http3: add http3 package for testing in std
  • 805fc81 http2: add transport API tests
  • e63b894 http2: support testing via net/http.Transport.RoundTrip
  • 9ee1e48 http2/hpack: prevent HeaderField from escaping during encoding
  • 1e71bd8 http2: prevent hanging Transport due to bad SETTINGS frame
  • 7bca150 internal/http3: respect net/http Server Shutdown context when shutting down
  • 44c41be internal/http3: prevent server from holding mutex when sleeping during shutdown
  • 228a67a internal/http3: add CloseIdleConnections support in transport
  • Additional commits viewable in compare view

Updates golang.org/x/sync from 0.19.0 to 0.20.0

Commits
  • ec11c4a errgroup: fix a typo in the documentation
  • 1a58307 all: modernize interface{} -> any
  • 3172ca5 all: upgrade go directive to at least 1.25.0 [generated]
  • See full diff in compare view

Updates golang.org/x/text from 0.33.0 to 0.36.0

Commits
  • 8577a70 go.mod: update golang.org/x dependencies
  • 7ca2c6d go.mod: update golang.org/x dependencies
  • 73d1ba9 all: upgrade go directive to at least 1.25.0 [generated]
  • 817fba9 go.mod: update golang.org/x dependencies
  • 3264de9 all: clean up old Go hacks
  • 74af298 all: fix tags in remaining Unicode tables
  • 117e03b all: delete old Unicode tables
  • 9463ea4 all: update to Unicode 17
  • 7278b25 internal/export/idna: update for post-Unicode 10 idna changes
  • f964ad8 internal/export/idna: delete old code
  • Additional commits viewable in compare view

Updates google.golang.org/genproto/googleapis/api from 0.0.0-20251202230838-ff82c1b0f217 to 0.0.0-20260226221140-a57be14db171

Commits

Updates google.golang.org/grpc from 1.79.3 to 1.80.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.80.0

Behavior Changes

  • balancer: log a warning if a balancer is registered with uppercase letters, as balancer names should be lowercase. In a future release, balancer names will be treated as case-insensitive; see #5288 for details. (#8837)
  • xds: update resource error handling and re-resolution logic (#8907)
    • Re-resolve all LOGICAL_DNS clusters simultaneously when re-resolution is requested.
    • Fail all in-flight RPCs immediately upon receipt of listener or route resource errors, instead of allowing them to complete.

Bug Fixes

  • xds: support the LB policy configured in LOGICAL_DNS cluster resources instead of defaulting to pick_first. (#8733)
  • credentials/tls: perform per-RPC authority validation against the leaf certificate instead of the entire peer certificate chain. (#8831)
  • xds: enabling A76 ring hash endpoint keys no longer causes EDS resources with invalid proxy metadata to be NACKed when HTTP CONNECT (gRFC A86) is disabled. (#8875)
  • xds: validate that the sum of endpoint weights in a locality does not exceed the maximum uint32 value. (#8899)
  • xds: fix incorrect proto field access in the weighted round robin (WRR) configuration where blackout_period was used instead of weight_expiration_period. (#8915)
  • xds/rbac: handle addresses with ports in IP matchers. (#8990)

New Features

  • ringhash: enable gRFC A76 (endpoint hash keys and request hash headers) by default. (#8922)

Performance Improvements

  • credentials/alts: pool write buffers to reduce memory allocations and usage. (#8919)
  • grpc: enable the use of pooled write buffers for buffering HTTP/2 frame writes by default. This reduces memory usage when connections are idle. Use the WithSharedWriteBuffer dial option or the SharedWriteBuffer server option to disable this feature. (#8957)
  • xds/priority: stop caching child LB policies removed from the configuration. This will help reduce memory and cpu usage when localities are constantly switching between priorities. (#8997)
  • mem: add a faster tiered buffer pool; use the experimental mem.NewBinaryTieredBufferPool function to create such pools. (#8775)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the gomod-minor-patch group across 1 directory with…
5e0be41 
… 15 updates

Bumps the gomod-minor-patch group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cosmossdk.io/client/v2](https://github.com/cosmos/cosmos-sdk) | `2.0.0-beta.5` | `2.11.0` |
| [cosmossdk.io/x/evidence](https://github.com/cosmos/cosmos-sdk) | `0.1.1` | `0.2.0` |
| [cosmossdk.io/x/feegrant](https://github.com/cosmos/cosmos-sdk) | `0.1.1` | `0.2.0` |
| [github.com/cosmos/ibc-go/v10](https://github.com/cosmos/ibc-go) | `10.5.0` | `10.6.0` |
| [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.28.0` | `2.28.3` |
| [github.com/tidwall/gjson](https://github.com/tidwall/gjson) | `1.18.0` | `1.19.0` |



Updates `cosmossdk.io/client/v2` from 2.0.0-beta.5 to 2.11.0
- [Release notes](https://github.com/cosmos/cosmos-sdk/releases)
- [Changelog](https://github.com/cosmos/cosmos-sdk/blob/main/CHANGELOG.md)
- [Commits](cosmos/cosmos-sdk@client/v2.0.0-beta.5...client/v2.11.0)

Updates `cosmossdk.io/core` from 0.11.3 to 1.1.0
- [Release notes](https://github.com/cosmos/cosmos-sdk/releases)
- [Changelog](https://github.com/cosmos/cosmos-sdk/blob/main/CHANGELOG.md)
- [Commits](cosmos/cosmos-sdk@core/v0.11.3...log/v1.1.0)

Updates `cosmossdk.io/errors` from 1.0.2 to 1.1.0
- [Release notes](https://github.com/cosmos/cosmos-sdk/releases)
- [Changelog](https://github.com/cosmos/cosmos-sdk/blob/main/CHANGELOG.md)
- [Commits](cosmos/cosmos-sdk@store/v1.0.2...log/v1.1.0)

Updates `cosmossdk.io/x/evidence` from 0.1.1 to 0.2.0
- [Release notes](https://github.com/cosmos/cosmos-sdk/releases)
- [Changelog](https://github.com/cosmos/cosmos-sdk/blob/v0.2.0/CHANGELOG.md)
- [Commits](cosmos/cosmos-sdk@x/nft/v0.1.1...v0.2.0)

Updates `cosmossdk.io/x/feegrant` from 0.1.1 to 0.2.0
- [Release notes](https://github.com/cosmos/cosmos-sdk/releases)
- [Changelog](https://github.com/cosmos/cosmos-sdk/blob/v0.2.0/CHANGELOG.md)
- [Commits](cosmos/cosmos-sdk@x/nft/v0.1.1...v0.2.0)

Updates `github.com/cosmos/ibc-go/v10` from 10.5.0 to 10.6.0
- [Release notes](https://github.com/cosmos/ibc-go/releases)
- [Changelog](https://github.com/cosmos/ibc-go/blob/main/CHANGELOG.md)
- [Commits](cosmos/ibc-go@v10.5.0...v10.6.0)

Updates `github.com/onsi/ginkgo/v2` from 2.28.0 to 2.28.3
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.28.0...v2.28.3)

Updates `github.com/onsi/gomega` from 1.39.1 to 1.40.0
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.39.1...v1.40.0)

Updates `github.com/rs/zerolog` from 1.34.0 to 1.35.0
- [Commits](rs/zerolog@v1.34.0...v1.35.0)

Updates `github.com/tidwall/gjson` from 1.18.0 to 1.19.0
- [Commits](tidwall/gjson@v1.18.0...v1.19.0)

Updates `golang.org/x/net` from 0.49.0 to 0.53.0
- [Commits](golang/net@v0.49.0...v0.53.0)

Updates `golang.org/x/sync` from 0.19.0 to 0.20.0
- [Commits](golang/sync@v0.19.0...v0.20.0)

Updates `golang.org/x/text` from 0.33.0 to 0.36.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.33.0...v0.36.0)

Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20251202230838-ff82c1b0f217 to 0.0.0-20260226221140-a57be14db171
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/grpc` from 1.79.3 to 1.80.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.79.3...v1.80.0)

---
updated-dependencies:
- dependency-name: cosmossdk.io/client/v2
  dependency-version: 2.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-patch
- dependency-name: cosmossdk.io/core
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gomod-minor-patch
- dependency-name: cosmossdk.io/errors
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-patch
- dependency-name: cosmossdk.io/x/evidence
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-patch
- dependency-name: cosmossdk.io/x/feegrant
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-patch
- dependency-name: github.com/cosmos/ibc-go/v10
  dependency-version: 10.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-patch
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.28.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-minor-patch
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-patch
- dependency-name: github.com/rs/zerolog
  dependency-version: 1.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-patch
- dependency-name: github.com/tidwall/gjson
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-patch
- dependency-name: golang.org/x/net
  dependency-version: 0.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-patch
- dependency-name: golang.org/x/sync
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-patch
- dependency-name: golang.org/x/text
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-patch
- dependency-name: google.golang.org/genproto/googleapis/api
  dependency-version: 0.0.0-20260226221140-a57be14db171
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-minor-patch
- dependency-name: google.golang.org/grpc
  dependency-version: 1.80.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 11, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 11, 2026 15:06
@dependabot dependabot Bot requested review from calvinaco and randy-cro and removed request for a team May 11, 2026 15:06
@socket-security
Copy link
Copy Markdown

socket-security Bot commented May 11, 2026 •
edited
Loading

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedgolang/​github.com/​onsi/​gomega@​v1.39.1 ⏵ v1.40.073 +2100100100100
Updatedgolang/​golang.org/​x/​net@​v0.49.0 ⏵ v0.53.075 +1100100100100
Updatedgolang/​google.golang.org/​grpc@​v1.79.3 ⏵ v1.80.075 +1100100100100
Updatedgolang/​cosmossdk.io/​api@​v0.9.2 ⏵ v1.0.076100100100100
Updatedgolang/​golang.org/​x/​text@​v0.33.0 ⏵ v0.36.077100100100100
Updatedgolang/​google.golang.org/​genproto/​googleapis/​api@​v0.0.0-20251202230838-ff82c1b0f217 ⏵ v0.0.0-20260226221140-a57be14db17180100100100100
Updatedgolang/​github.com/​onsi/​ginkgo/​v2@​v2.28.0 ⏵ v2.28.384 +1100100100100
Updatedgolang/​github.com/​rs/​zerolog@​v1.34.0 ⏵ v1.35.086 -4100100100100
Updatedgolang/​github.com/​cosmos/​ibc-go/​v10@​v10.5.0 ⏵ v10.6.096 +2100100100100
Updatedgolang/​golang.org/​x/​sync@​v0.19.0 ⏵ v0.20.099100100100100
Updatedgolang/​cosmossdk.io/​client/​v2@​v2.0.0-beta.5 ⏵ v2.11.0100 +1100100100100
Updatedgolang/​cosmossdk.io/​errors@​v1.0.2 ⏵ v1.1.0100100100100100
Updatedgolang/​cosmossdk.io/​x/​evidence@​v0.1.1 ⏵ v0.2.0100 +1100100100100
Updatedgolang/​cosmossdk.io/​x/​feegrant@​v0.1.1 ⏵ v0.2.0100 +1100100100100
Updatedgolang/​cosmossdk.io/​core@​v0.11.3 ⏵ v1.1.0100100100100100
Updatedgolang/​github.com/​tidwall/​gjson@​v1.18.0 ⏵ v1.19.0100100100100100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@calvinaco calvinaco Awaiting requested review from calvinaco calvinaco is a code owner automatically assigned from crypto-org-chain/cronos-dev

@randy-cro randy-cro Awaiting requested review from randy-cro randy-cro is a code owner automatically assigned from crypto-org-chain/cronos-dev

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@JayT106