Skip to content

deps: security bumps #552

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 8 commits into from
Mar 21, 2025
Merged

deps: security bumps #552

merged 8 commits into from
Mar 21, 2025

Conversation

fragwuerdig
Copy link
Collaborator

Summary of changes

Dear Terra Classic maintainers,

This pull request offers various fixes for security issues related to cosmos-sdk, ibc and wasm. Changes include::

  • cosmos-sdk to v0.47.16
  • ibc-go to v7.10.0
  • wasmvm to v1.5.9
  • ibc-hooks to commit hash 8a222c546f4f649e61d2b4c33ad91901201ca73d

Thank you for your attention.

@StrathCole StrathCole requested a review from Copilot March 21, 2025 09:53
Copy link

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This pull request addresses several security-related issues by updating dependency versions for cosmos-sdk, ibc-go, wasmvm, and ibc-hooks, and integrating a new application upgrade for version v11_2.

  • Implements a new upgrade handler in the v11_2 package.
  • Introduces constants to support the new upgrade.
  • Updates the application setup by setting a query router and including the new upgrade in the upgrade list.

Reviewed Changes

Copilot reviewed 6 out of 8 changed files in this pull request and generated no comments.

File Description
app/upgrades/v11_2/upgrades.go Adds a new upgrade handler for the v11_2 upgrade.
app/upgrades/v11_2/constants.go Introduces constants and a variable for the v11_2 upgrade.
app/keepers/keepers.go Initializes the query router for ICAHostKeeper.
app/app.go Imports the v11_2 upgrade and includes it in the upgrade list.
Files not reviewed (2)
  • go.mod: Language not supported
  • tests/interchaintest/go.mod: Language not supported
Comments suppressed due to low confidence (1)

app/upgrades/v11_2/upgrades.go:12

  • [nitpick] The function name 'CreateV112UpgradeHandler' is inconsistent with the upgrade version 'v11_2' used in the package and constants; consider renaming it to 'CreateV11_2UpgradeHandler' for consistency.
func CreateV112UpgradeHandler(

fragwuerdig and others added 4 commits March 21, 2025 11:00
@fragwuerdig fragwuerdig changed the title Security bumps deps: security bumps Mar 21, 2025
@fragwuerdig fragwuerdig merged commit 2253948 into main Mar 21, 2025
22 checks passed
@fragwuerdig fragwuerdig deleted the frag/security-bumps branch March 21, 2025 10:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants