Commit c4f9ac4
authored
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4&size=40){kind=avatar}
build(deps): Bump github.com/cometbft/cometbft from 0.38.17 to 0.38.19 in /test/e2e (#2843)
Bumps
[github.com/cometbft/cometbft](https://github.com/cometbft/cometbft)
from 0.38.17 to 0.38.19.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cometbft/cometbft/releases">github.com/cometbft/cometbft's
releases</a>.</em></p>
<blockquote>
<h2>v0.38.19</h2>
<p>This is a security patch release to the CometBFT <code>v0.38.x</code>
family that fixes <a
href="https://github.com/cometbft/cometbft/security/advisories/GHSA-hrhf-2vcr-ghch">GHSA-hrhf-2vcr-ghch</a></p>
<h2>What's Changed</h2>
<ul>
<li>chore: fix test docker image by <a
href="https://github.com/aljo242"><code>@aljo242</code></a> in <a
href="https://redirect.github.com/cometbft/cometbft/pull/5299">cometbft/cometbft#5299</a></li>
<li>chore: refactor changelogs by <a
href="https://github.com/aljo242"><code>@aljo242</code></a> in <a
href="https://redirect.github.com/cometbft/cometbft/pull/5303">cometbft/cometbft#5303</a></li>
<li>chore: update and fix mockery tooling on v0.38 by <a
href="https://github.com/aljo242"><code>@aljo242</code></a> in <a
href="https://redirect.github.com/cometbft/cometbft/pull/5301">cometbft/cometbft#5301</a></li>
<li>chore: fix the linter by <a
href="https://github.com/aljo242"><code>@aljo242</code></a> in <a
href="https://redirect.github.com/cometbft/cometbft/pull/5304">cometbft/cometbft#5304</a></li>
<li>fix(store): Properly prune extended commits (backport <a
href="https://redirect.github.com/cometbft/cometbft/issues/5276">#5276</a>)
by <a href="https://github.com/mergify"><code>@mergify</code></a>[bot]
in <a
href="https://redirect.github.com/cometbft/cometbft/pull/5313">cometbft/cometbft#5313</a></li>
<li>chore: clean up the repo by <a
href="https://github.com/aljo242"><code>@aljo242</code></a> in <a
href="https://redirect.github.com/cometbft/cometbft/pull/5315">cometbft/cometbft#5315</a></li>
<li>fix: remove exposed dockertest port to unblock postgres test by <a
href="https://github.com/almk-dev"><code>@almk-dev</code></a> in <a
href="https://redirect.github.com/cometbft/cometbft/pull/5325">cometbft/cometbft#5325</a></li>
<li>fix(consensus/reactor): reject oversized proposals (backport <a
href="https://redirect.github.com/cometbft/cometbft/issues/5324">#5324</a>)
by <a href="https://github.com/mergify"><code>@mergify</code></a>[bot]
in <a
href="https://redirect.github.com/cometbft/cometbft/pull/5407">cometbft/cometbft#5407</a></li>
<li><a
href="https://github.com/cometbft/cometbft/commit/be5677c3e58f998b7f67bb6186dd2c9b81a041a1">GHSA-hrhf-2vcr-ghch</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/cometbft/cometbft/compare/v0.38.18...v0.38.19">https://github.com/cometbft/cometbft/compare/v0.38.18...v0.38.19</a></p>
<h2>v0.38.18</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: remove redundant error check for PubKeyToProto by <a
href="https://github.com/islishude"><code>@islishude</code></a> in <a
href="https://redirect.github.com/cometbft/cometbft/pull/4917">cometbft/cometbft#4917</a></li>
<li>ci: remove govulncheck (backport <a
href="https://redirect.github.com/cometbft/cometbft/issues/4946">#4946</a>)
by <a href="https://github.com/mergify"><code>@mergify</code></a>[bot]
in <a
href="https://redirect.github.com/cometbft/cometbft/pull/4961">cometbft/cometbft#4961</a></li>
<li>build(deps): Bump docker/setup-buildx-action from 3.8.0 to 3.9.0 by
<a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/cometbft/cometbft/pull/4936">cometbft/cometbft#4936</a></li>
<li>fix(ci): Fix docker builds (backport <a
href="https://redirect.github.com/cometbft/cometbft/issues/4949">#4949</a>)
by <a href="https://github.com/mergify"><code>@mergify</code></a>[bot]
in <a
href="https://redirect.github.com/cometbft/cometbft/pull/4963">cometbft/cometbft#4963</a></li>
<li>build(deps): Bump docker/build-push-action from 6.13.0 to 6.14.0 by
<a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/cometbft/cometbft/pull/4972">cometbft/cometbft#4972</a></li>
<li>build(deps): Bump docker/setup-buildx-action from 3.9.0 to 3.10.0 by
<a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/cometbft/cometbft/pull/5008">cometbft/cometbft#5008</a></li>
<li>build(deps): Bump docker/build-push-action from 6.14.0 to 6.15.0 by
<a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/cometbft/cometbft/pull/5009">cometbft/cometbft#5009</a></li>
<li>build(deps): Bump golang.org/x/sync from 0.10.0 to 0.11.0 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/cometbft/cometbft/pull/4990">cometbft/cometbft#4990</a></li>
<li>build(deps): Bump github.com/spf13/cobra from 1.8.1 to 1.9.1 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/cometbft/cometbft/pull/4992">cometbft/cometbft#4992</a></li>
<li>build(deps): Bump golang.org/x/net from 0.34.0 to 0.35.0 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/cometbft/cometbft/pull/4998">cometbft/cometbft#4998</a></li>
<li>build(deps): Bump github.com/decred/dcrd/dcrec/secp256k1/v4 from
4.3.0 to 4.4.0 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/cometbft/cometbft/pull/4997">cometbft/cometbft#4997</a></li>
<li>build(deps): Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
by <a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/cometbft/cometbft/pull/4994">cometbft/cometbft#4994</a></li>
<li>build(deps): Bump github.com/prometheus/client_golang from 1.20.5 to
1.21.0 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/cometbft/cometbft/pull/4995">cometbft/cometbft#4995</a></li>
<li>chore: fix typo in workflow_dispatch (backport <a
href="https://redirect.github.com/cometbft/cometbft/issues/5164">#5164</a>)
by <a href="https://github.com/mergify"><code>@mergify</code></a>[bot]
in <a
href="https://redirect.github.com/cometbft/cometbft/pull/5166">cometbft/cometbft#5166</a></li>
<li>ci(testapp-docker): release two images, not one (backport <a
href="https://redirect.github.com/cometbft/cometbft/issues/5014">#5014</a>)
by <a href="https://github.com/mergify"><code>@mergify</code></a>[bot]
in <a
href="https://redirect.github.com/cometbft/cometbft/pull/5168">cometbft/cometbft#5168</a></li>
<li>chore: add supported version to e2e image tag (backport <a
href="https://redirect.github.com/cometbft/cometbft/issues/5169">#5169</a>)
by <a href="https://github.com/mergify"><code>@mergify</code></a>[bot]
in <a
href="https://redirect.github.com/cometbft/cometbft/pull/5171">cometbft/cometbft#5171</a></li>
<li>chore: remove tag from individual builds (backport <a
href="https://redirect.github.com/cometbft/cometbft/issues/5173">#5173</a>)
by <a href="https://github.com/mergify"><code>@mergify</code></a>[bot]
in <a
href="https://redirect.github.com/cometbft/cometbft/pull/5174">cometbft/cometbft#5174</a></li>
<li>refactor: e2e-node docker build (backport <a
href="https://redirect.github.com/cometbft/cometbft/issues/5176">#5176</a>)
by <a href="https://github.com/mergify"><code>@mergify</code></a>[bot]
in <a
href="https://redirect.github.com/cometbft/cometbft/pull/5178">cometbft/cometbft#5178</a></li>
<li>refactor: cometbft image build (backport <a
href="https://redirect.github.com/cometbft/cometbft/issues/5179">#5179</a>)
by <a href="https://github.com/mergify"><code>@mergify</code></a>[bot]
in <a
href="https://redirect.github.com/cometbft/cometbft/pull/5181">cometbft/cometbft#5181</a></li>
<li>fix: add git to docker ignore (backport <a
href="https://redirect.github.com/cometbft/cometbft/issues/5214">#5214</a>)
by <a href="https://github.com/mergify"><code>@mergify</code></a>[bot]
in <a
href="https://redirect.github.com/cometbft/cometbft/pull/5216">cometbft/cometbft#5216</a></li>
<li>fix: do multistage builds for e2e-node (backport <a
href="https://redirect.github.com/cometbft/cometbft/issues/5220">#5220</a>)
by <a href="https://github.com/mergify"><code>@mergify</code></a>[bot]
in <a
href="https://redirect.github.com/cometbft/cometbft/pull/5222">cometbft/cometbft#5222</a></li>
<li>fix: add libs to e2e tests v0.38.x by <a
href="https://github.com/zrbecker"><code>@zrbecker</code></a> in <a
href="https://redirect.github.com/cometbft/cometbft/pull/5234">cometbft/cometbft#5234</a></li>
<li>chore: reindex to event sink from cli (backport <a
href="https://redirect.github.com/cometbft/cometbft/issues/5209">#5209</a>)
by <a href="https://github.com/mergify"><code>@mergify</code></a>[bot]
in <a
href="https://redirect.github.com/cometbft/cometbft/pull/5240">cometbft/cometbft#5240</a></li>
<li>feat: precommit metrics by <a
href="https://github.com/technicallyty"><code>@technicallyty</code></a>
in <a
href="https://redirect.github.com/cometbft/cometbft/pull/5251">cometbft/cometbft#5251</a></li>
<li>chore: prep release for v0.38.18 by <a
href="https://github.com/technicallyty"><code>@technicallyty</code></a>
in <a
href="https://redirect.github.com/cometbft/cometbft/pull/5253">cometbft/cometbft#5253</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/cometbft/cometbft/compare/v0.38.17...v0.38.18">https://github.com/cometbft/cometbft/compare/v0.38.17...v0.38.18</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/cometbft/cometbft/blob/v0.38.19/CHANGELOG.md">github.com/cometbft/cometbft's
changelog</a>.</em></p>
<blockquote>
<h2>v0.38.19</h2>
<p><em>October 14, 2025</em></p>
<p>This release fixes two security issues, including (<a
href="https://github.com/cometbft/cometbft/security/advisories/GHSA-hrhf-2vcr-ghch">ASA-2025-003</a>).
Users are encouraged to upgrade as soon as possible.</p>
<p>Additionally included is a bug fix to properly prune extended commits
(with
vote extensions).</p>
<h3>BUG-FIXES</h3>
<ul>
<li><code>[consensus]</code> Reject oversized proposals
(<a
href="https://redirect.github.com/cometbft/cometbft/pull/5324">#5324</a>)</li>
<li><code>[store]</code> Prune extended commits properly
(<a
href="https://redirect.github.com/cometbft/cometbft/issues/5275">5275</a>)</li>
<li><code>[bits]</code> Validate BitArray mismatched Bits and Elems
length
(<a
href="https://github.com/cometbft/cometbft/security/advisories/GHSA-hrhf-2vcr-ghch">ASA-2025-003</a>)</li>
</ul>
<h2>v0.38.18</h2>
<p><em>July 3, 2025</em></p>
<p>Adds precommit metrics and reindex CLI command.</p>
<h3>IMPROVEMENTS</h3>
<ul>
<li>Adds metrics that emit precommit data; precommit quorum delay from
proposal, and precommit vote count and stake weight within timeout
commit period.
(<a
href="https://redirect.github.com/cometbft/cometbft/issues/5251">#5251</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/cometbft/cometbft/commit/be5677c3e58f998b7f67bb6186dd2c9b81a041a1"><code>be5677c</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/cometbft/cometbft/commit/2cd5d91d9db3fc9f4628b1a8e7af54e724f37538"><code>2cd5d91</code></a>
fix(consensus/reactor): reject oversized proposals (backport <a
href="https://redirect.github.com/cometbft/cometbft/issues/5324">#5324</a>)
(<a
href="https://redirect.github.com/cometbft/cometbft/issues/5407">#5407</a>)</li>
<li><a
href="https://github.com/cometbft/cometbft/commit/bb538f0c8166ed892f01fef11e367c161cf25ef2"><code>bb538f0</code></a>
fix: remove exposed dockertest port to unblock postgres test (<a
href="https://redirect.github.com/cometbft/cometbft/issues/5325">#5325</a>)</li>
<li><a
href="https://github.com/cometbft/cometbft/commit/61b60f6ae75c8d5afe2cd78dee5fb648bb5778e9"><code>61b60f6</code></a>
chore: clean up the repo (<a
href="https://redirect.github.com/cometbft/cometbft/issues/5315">#5315</a>)</li>
<li><a
href="https://github.com/cometbft/cometbft/commit/9806733a041268c524a0d919636ad01f577f9b74"><code>9806733</code></a>
fix(store): Properly prune extended commits (backport <a
href="https://redirect.github.com/cometbft/cometbft/issues/5276">#5276</a>)
(<a
href="https://redirect.github.com/cometbft/cometbft/issues/5313">#5313</a>)</li>
<li><a
href="https://github.com/cometbft/cometbft/commit/c7891389673585a9b8361b845d02a8702538cccc"><code>c789138</code></a>
chore: fix the linter (<a
href="https://redirect.github.com/cometbft/cometbft/issues/5304">#5304</a>)</li>
<li><a
href="https://github.com/cometbft/cometbft/commit/840e70914124ba60e7233c4b2699bcc14ab926fb"><code>840e709</code></a>
chore: update and fix mockery tooling on v0.38 (<a
href="https://redirect.github.com/cometbft/cometbft/issues/5301">#5301</a>)</li>
<li><a
href="https://github.com/cometbft/cometbft/commit/020c7cf9ee21b03c28b4331166788ed064e7dba2"><code>020c7cf</code></a>
chore: refactor changelogs (<a
href="https://redirect.github.com/cometbft/cometbft/issues/5303">#5303</a>)</li>
<li><a
href="https://github.com/cometbft/cometbft/commit/91348c6e5a46e8081643ac5d5b0c58784dfb0f99"><code>91348c6</code></a>
chore: fix test docker image (<a
href="https://redirect.github.com/cometbft/cometbft/issues/5299">#5299</a>)</li>
<li><a
href="https://github.com/cometbft/cometbft/commit/5344a6e3bd806ba352b89f600c7f19c139442117"><code>5344a6e</code></a>
chore: prep release for v0.38.18 (<a
href="https://redirect.github.com/cometbft/cometbft/issues/5253">#5253</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/cometbft/cometbft/compare/v0.38.17...v0.38.19">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/evstack/ev-node/network/alerts).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>1 parent 8951196 commit c4f9ac4
2 files changed
Lines changed: 3 additions & 3 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
52 | 52 | | |
53 | 53 | | |
54 | 54 | | |
55 | | - | |
| 55 | + | |
56 | 56 | | |
57 | 57 | | |
58 | 58 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
106 | 106 | | |
107 | 107 | | |
108 | 108 | | |
109 | | - | |
110 | | - | |
| 109 | + | |
| 110 | + | |
111 | 111 | | |
112 | 112 | | |
113 | 113 | | |
| |||
0 commit comments