Skip to content

Commit 6f74824

Browse files
alpealpe
committed
Merge branch 'main' into security/authority-verification2
* main: fix(network): add attestation height bounds validation (#359) build(deps): bump github.com/docker/cli (#366) build(deps): bump github.com/evstack/ev-node/core (#367) build(deps): bump golang.org/x/sync in the minor-updates group (#372) build(deps): bump google.golang.org/grpc in the patch-updates group (#370) ci(deps): bump docker/build-push-action from 6 to 7 (#371) ci(deps): bump docker/setup-buildx-action from 3 to 4 (#368) ci(deps): bump docker/login-action from 3 to 4 (#369) build(deps): bump go.opentelemetry.io/otel/sdk (#365) ci(deps): bump actions/upload-artifact from 6 to 7 (#364)
2 parents ebc7c76 + 0b371cb commit 6f74824

9 files changed

Lines changed: 298 additions & 172 deletions

File tree

‎.github/workflows/integration_test.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -28,10 +28,10 @@ jobs:
2828
- uses: actions/checkout@v5
2929

3030
- name: Set up Docker Buildx
31-
uses: docker/setup-buildx-action@v3
31+
uses: docker/setup-buildx-action@v4
3232

3333
- name: Log in to GHCR
34-
uses: docker/login-action@v3
34+
uses: docker/login-action@v4
3535
with:
3636
registry: ghcr.io
3737
username: ${{ github.actor }}
@@ -47,7 +47,7 @@ jobs:
4747
fi
4848
4949
- name: Build and push GM image
50-
uses: docker/build-push-action@v6
50+
uses: docker/build-push-action@v7
5151
with:
5252
context: .
5353
file: tests/integration/docker/Dockerfile.gm
@@ -81,7 +81,7 @@ jobs:
8181
cache: true
8282

8383
- name: Set up Docker Buildx
84-
uses: docker/setup-buildx-action@v3
84+
uses: docker/setup-buildx-action@v4
8585

8686
- name: Build Evolve Docker Image
8787
run: |
@@ -195,7 +195,7 @@ jobs:
195195
echo "GMD_HOME=$GMD_HOME" >> $GITHUB_OUTPUT
196196
197197
- name: Upload gm Binary and gmd Home Directory
198-
uses: actions/upload-artifact@v6
198+
uses: actions/upload-artifact@v7
199199
with:
200200
name: gmd
201201
include-hidden-files: true
@@ -558,7 +558,7 @@ jobs:
558558
go-version-file: go.mod
559559

560560
- name: Log in to GHCR
561-
uses: docker/login-action@v3
561+
uses: docker/login-action@v4
562562
with:
563563
registry: ghcr.io
564564
username: ${{ github.actor }}

‎.github/workflows/migration_test.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -61,14 +61,14 @@ jobs:
6161
fetch-depth: 0
6262

6363
- name: Log in to GHCR
64-
uses: docker/login-action@v3
64+
uses: docker/login-action@v4
6565
with:
6666
registry: ghcr.io
6767
username: ${{ github.actor }}
6868
password: ${{ secrets.GITHUB_TOKEN }}
6969

7070
- name: Set up Docker Buildx
71-
uses: docker/setup-buildx-action@v3
71+
uses: docker/setup-buildx-action@v4
7272

7373
- name: Echo tag
7474
run: |
@@ -77,7 +77,7 @@ jobs:
7777
echo "ENABLE_IBC=${{ matrix.enable_ibc }}"
7878
7979
- name: Build & push Cosmos-SDK image
80-
uses: docker/build-push-action@v6
80+
uses: docker/build-push-action@v7
8181
with:
8282
context: .
8383
file: Dockerfile.cosmos-sdk
@@ -110,14 +110,14 @@ jobs:
110110
fetch-depth: 0
111111

112112
- name: Log in to GHCR
113-
uses: docker/login-action@v3
113+
uses: docker/login-action@v4
114114
with:
115115
registry: ghcr.io
116116
username: ${{ github.actor }}
117117
password: ${{ secrets.GITHUB_TOKEN }}
118118

119119
- name: Set up Docker Buildx
120-
uses: docker/setup-buildx-action@v3
120+
uses: docker/setup-buildx-action@v4
121121

122122
- name: Echo tag
123123
run: |
@@ -126,7 +126,7 @@ jobs:
126126
echo "ENABLE_IBC=${{ matrix.enable_ibc }}"
127127
128128
- name: Build & push Evolve image
129-
uses: docker/build-push-action@v6
129+
uses: docker/build-push-action@v7
130130
with:
131131
context: .
132132
file: Dockerfile
@@ -161,7 +161,7 @@ jobs:
161161
cache: true
162162

163163
- name: Log in to GHCR
164-
uses: docker/login-action@v3
164+
uses: docker/login-action@v4
165165
with:
166166
registry: ghcr.io
167167
username: ${{ github.actor }}
@@ -203,7 +203,7 @@ jobs:
203203
cache: true
204204

205205
- name: Log in to GHCR
206-
uses: docker/login-action@v3
206+
uses: docker/login-action@v4
207207
with:
208208
registry: ghcr.io
209209
username: ${{ github.actor }}

‎go.mod‎

Lines changed: 51 additions & 42 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ require (
1919
github.com/cosmos/cosmos-sdk v0.50.15
2020
github.com/cosmos/gogoproto v1.7.2
2121
github.com/evstack/ev-node v1.0.0-rc.4.0.20260216131057-1da76345e4b9
22-
github.com/evstack/ev-node/core v1.0.0-rc.1.0.20260216131057-1da76345e4b9
22+
github.com/evstack/ev-node/core v1.0.0
2323
github.com/go-kit/kit v0.13.0
2424
github.com/golang/protobuf v1.5.4
2525
github.com/gorilla/websocket v1.5.3
@@ -36,31 +36,30 @@ require (
3636
github.com/spf13/viper v1.21.0
3737
github.com/stretchr/testify v1.11.1
3838
golang.org/x/net v0.51.0
39-
golang.org/x/sync v0.19.0
40-
google.golang.org/genproto/googleapis/api v0.0.0-20260217215200-42d3e9bedb6d
41-
google.golang.org/grpc v1.79.1
39+
golang.org/x/sync v0.20.0
40+
google.golang.org/genproto/googleapis/api v0.0.0-20260128011058-8636f8732409
41+
google.golang.org/grpc v1.79.2
4242
google.golang.org/protobuf v1.36.11
4343
gotest.tools/v3 v3.5.2
4444
)
4545

4646
require (
47-
buf.build/gen/go/bufbuild/bufplugin/protocolbuffers/go v1.36.11-20250718181942-e35f9b667443.1 // indirect
48-
buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.36.11-20260209202127-80ab13bee0bf.1 // indirect
49-
buf.build/gen/go/bufbuild/registry/connectrpc/go v1.19.1-20260126144947-819582968857.2 // indirect
50-
buf.build/gen/go/bufbuild/registry/protocolbuffers/go v1.36.11-20260126144947-819582968857.1 // indirect
51-
buf.build/gen/go/pluginrpc/pluginrpc/protocolbuffers/go v1.36.11-20241007202033-cf42259fcbfc.1 // indirect
52-
buf.build/go/app v0.2.0 // indirect
47+
buf.build/gen/go/bufbuild/bufplugin/protocolbuffers/go v1.36.6-20250121211742-6d880cc6cc8d.1 // indirect
48+
buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.36.6-20250425153114-8976f5be98c1.1 // indirect
49+
buf.build/gen/go/bufbuild/registry/connectrpc/go v1.18.1-20250424215339-a457693b5db4.1 // indirect
50+
buf.build/gen/go/bufbuild/registry/protocolbuffers/go v1.36.6-20250424215339-a457693b5db4.1 // indirect
51+
buf.build/gen/go/pluginrpc/pluginrpc/protocolbuffers/go v1.36.6-20241007202033-cf42259fcbfc.1 // indirect
52+
buf.build/go/app v0.1.0 // indirect
5353
buf.build/go/bufplugin v0.9.0 // indirect
54-
buf.build/go/bufprivateusage v0.1.0 // indirect
5554
buf.build/go/interrupt v1.1.0 // indirect
56-
buf.build/go/protovalidate v1.1.3 // indirect
55+
buf.build/go/protovalidate v0.12.0 // indirect
5756
buf.build/go/protoyaml v0.6.0 // indirect
5857
buf.build/go/spdx v0.2.0 // indirect
5958
buf.build/go/standard v0.1.0 // indirect
6059
cel.dev/expr v0.25.1 // indirect
6160
connectrpc.com/connect v1.19.1 // indirect
6261
connectrpc.com/grpcreflect v1.3.0 // indirect
63-
connectrpc.com/otelconnect v0.9.0 // indirect
62+
connectrpc.com/otelconnect v0.7.2 // indirect
6463
cosmossdk.io/schema v1.1.0 // indirect
6564
cosmossdk.io/x/tx v0.14.0 // indirect
6665
filippo.io/edwards25519 v1.1.1 // indirect
@@ -76,8 +75,8 @@ require (
7675
github.com/beorn7/perks v1.0.1 // indirect
7776
github.com/bgentry/speakeasy v0.2.0 // indirect
7877
github.com/boltdb/bolt v1.3.1 // indirect
79-
github.com/bufbuild/buf v1.66.0 // indirect
80-
github.com/bufbuild/protocompile v0.14.2-0.20260202185951-d02d3732d113 // indirect
78+
github.com/bufbuild/buf v1.54.0 // indirect
79+
github.com/bufbuild/protocompile v0.14.1 // indirect
8180
github.com/bufbuild/protoplugin v0.0.0-20250218205857-750e09ce93e1 // indirect
8281
github.com/bytedance/gopkg v0.1.3 // indirect
8382
github.com/bytedance/sonic v1.15.0 // indirect
@@ -89,37 +88,35 @@ require (
8988
github.com/cenkalti/backoff/v4 v4.3.0 // indirect
9089
github.com/cenkalti/backoff/v5 v5.0.3 // indirect
9190
github.com/cespare/xxhash/v2 v2.3.0 // indirect
92-
github.com/cli/browser v1.3.0 // indirect
9391
github.com/cloudwego/base64x v0.1.6 // indirect
9492
github.com/cockroachdb/errors v1.12.0 // indirect
9593
github.com/cockroachdb/fifo v0.0.0-20240606204812-0bbfbd93a7ce // indirect
9694
github.com/cockroachdb/logtags v0.0.0-20241215232642-bb51bb14a506 // indirect
9795
github.com/cockroachdb/pebble v1.1.5 // indirect
9896
github.com/cockroachdb/redact v1.1.6 // indirect
9997
github.com/cockroachdb/tokenbucket v0.0.0-20230807174530-cc333fc44b06 // indirect
100-
github.com/containerd/errdefs v1.0.0 // indirect
101-
github.com/containerd/errdefs/pkg v0.3.0 // indirect
102-
github.com/containerd/stargz-snapshotter/estargz v0.18.2 // indirect
98+
github.com/containerd/log v0.1.0 // indirect
99+
github.com/containerd/stargz-snapshotter/estargz v0.16.3 // indirect
103100
github.com/cosmos/btcutil v1.0.5 // indirect
104101
github.com/cosmos/go-bip39 v1.0.0 // indirect
105102
github.com/cosmos/gogogateway v1.2.0 // indirect
106103
github.com/cosmos/iavl v1.2.2 // indirect
107104
github.com/cosmos/ics23/go v0.11.0 // indirect
108105
github.com/cosmos/ledger-cosmos-go v0.14.0 // indirect
109106
github.com/cpuguy83/go-md2man/v2 v2.0.7 // indirect
110-
github.com/danieljoos/wincred v1.2.3 // indirect
107+
github.com/danieljoos/wincred v1.2.2 // indirect
111108
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
112109
github.com/davidlazar/go-crypto v0.0.0-20200604182044-b73af7476f6c // indirect
113110
github.com/decred/dcrd/dcrec/secp256k1/v4 v4.4.0 // indirect
114111
github.com/desertbit/timer v0.0.0-20180107155436-c41aec40b27f // indirect
115112
github.com/dgraph-io/badger/v4 v4.5.1 // indirect
116113
github.com/dgraph-io/ristretto/v2 v2.1.0 // indirect
117114
github.com/distribution/reference v0.6.0 // indirect
118-
github.com/docker/cli v29.2.1+incompatible // indirect
115+
github.com/docker/cli v29.2.0+incompatible // indirect
119116
github.com/docker/distribution v2.8.3+incompatible // indirect
120-
github.com/docker/docker v28.5.2+incompatible // indirect
121-
github.com/docker/docker-credential-helpers v0.9.5 // indirect
122-
github.com/docker/go-connections v0.6.0 // indirect
117+
github.com/docker/docker v28.1.1+incompatible // indirect
118+
github.com/docker/docker-credential-helpers v0.9.3 // indirect
119+
github.com/docker/go-connections v0.5.0 // indirect
123120
github.com/docker/go-units v0.5.0 // indirect
124121
github.com/dunglas/httpsfv v1.1.0 // indirect
125122
github.com/dustin/go-humanize v1.0.1 // indirect
@@ -133,25 +130,26 @@ require (
133130
github.com/fsnotify/fsnotify v1.9.0 // indirect
134131
github.com/getsentry/sentry-go v0.42.0 // indirect
135132
github.com/ghodss/yaml v1.0.0 // indirect
133+
github.com/go-chi/chi/v5 v5.2.2 // indirect
136134
github.com/go-kit/log v0.2.1 // indirect
137135
github.com/go-logfmt/logfmt v0.6.0 // indirect
138136
github.com/go-logr/logr v1.4.3 // indirect
139137
github.com/go-logr/stdr v1.2.2 // indirect
140138
github.com/go-viper/mapstructure/v2 v2.4.0 // indirect
141139
github.com/goccy/go-yaml v1.19.2 // indirect
142140
github.com/godbus/dbus v0.0.0-20190726142602-4481cbc300e2 // indirect
143-
github.com/gofrs/flock v0.13.0 // indirect
141+
github.com/gofrs/flock v0.12.1 // indirect
144142
github.com/gogo/googleapis v1.4.1 // indirect
145143
github.com/gogo/protobuf v1.3.2 // indirect
146144
github.com/golang/glog v1.2.5 // indirect
147145
github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
148146
github.com/golang/mock v1.6.0 // indirect
149147
github.com/golang/snappy v0.0.5-0.20231225225746-43d5d4cd4e0e // indirect
150148
github.com/google/btree v1.1.3 // indirect
151-
github.com/google/cel-go v0.27.0 // indirect
149+
github.com/google/cel-go v0.25.0 // indirect
152150
github.com/google/flatbuffers v25.1.24+incompatible // indirect
153151
github.com/google/go-cmp v0.7.0 // indirect
154-
github.com/google/go-containerregistry v0.21.0 // indirect
152+
github.com/google/go-containerregistry v0.20.3 // indirect
155153
github.com/google/gopacket v1.1.19 // indirect
156154
github.com/google/orderedcode v0.0.1 // indirect
157155
github.com/google/uuid v1.6.0 // indirect
@@ -216,8 +214,18 @@ require (
216214
github.com/mitchellh/go-homedir v1.1.0 // indirect
217215
github.com/mitchellh/mapstructure v1.5.0 // indirect
218216
github.com/moby/docker-image-spec v1.3.1 // indirect
217+
github.com/moby/go-archive v0.1.0 // indirect
218+
github.com/moby/locker v1.0.1 // indirect
219+
github.com/moby/patternmatcher v0.6.0 // indirect
220+
github.com/moby/sys/atomicwriter v0.1.0 // indirect
221+
github.com/moby/sys/mount v0.3.4 // indirect
222+
github.com/moby/sys/mountinfo v0.7.2 // indirect
223+
github.com/moby/sys/reexec v0.1.0 // indirect
224+
github.com/moby/sys/sequential v0.6.0 // indirect
225+
github.com/moby/sys/user v0.4.0 // indirect
226+
github.com/moby/sys/userns v0.1.0 // indirect
219227
github.com/moby/term v0.5.2 // indirect
220-
github.com/morikuni/aec v1.1.0 // indirect
228+
github.com/morikuni/aec v1.0.0 // indirect
221229
github.com/mr-tron/base58 v1.2.0 // indirect
222230
github.com/mtibben/percent v0.2.1 // indirect
223231
github.com/multiformats/go-base32 v0.1.0 // indirect
@@ -237,7 +245,7 @@ require (
237245
github.com/opencontainers/image-spec v1.1.1 // indirect
238246
github.com/pbnjay/memory v0.0.0-20210728143218-7b4eea64cf58 // indirect
239247
github.com/pelletier/go-toml/v2 v2.2.4 // indirect
240-
github.com/petermattis/goid v0.0.0-20260113132338-7c7de50cc741 // indirect
248+
github.com/petermattis/goid v0.0.0-20240813172612-4fcff4a6cae7 // indirect
241249
github.com/pion/datachannel v1.5.10 // indirect
242250
github.com/pion/dtls/v2 v2.2.12 // indirect
243251
github.com/pion/dtls/v3 v3.0.11 // indirect
@@ -258,6 +266,7 @@ require (
258266
github.com/pion/transport/v4 v4.0.1 // indirect
259267
github.com/pion/turn/v4 v4.0.2 // indirect
260268
github.com/pion/webrtc/v4 v4.1.2 // indirect
269+
github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c // indirect
261270
github.com/pkg/errors v0.9.1 // indirect
262271
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
263272
github.com/polydawn/refmt v0.89.0 // indirect
@@ -268,27 +277,27 @@ require (
268277
github.com/quic-go/quic-go v0.59.0 // indirect
269278
github.com/quic-go/webtransport-go v0.10.0 // indirect
270279
github.com/rcrowley/go-metrics v0.0.0-20201227073835-cf1acfcdf475 // indirect
271-
github.com/rivo/uniseg v0.4.7 // indirect
272280
github.com/rogpeppe/go-internal v1.14.1 // indirect
273281
github.com/russross/blackfriday/v2 v2.1.0 // indirect
274282
github.com/sagikazarmark/locafero v0.11.0 // indirect
275283
github.com/sasha-s/go-deadlock v0.3.5 // indirect
276-
github.com/segmentio/asm v1.2.1 // indirect
277-
github.com/segmentio/encoding v0.5.3 // indirect
278-
github.com/sirupsen/logrus v1.9.4 // indirect
284+
github.com/segmentio/asm v1.2.0 // indirect
285+
github.com/segmentio/encoding v0.4.1 // indirect
286+
github.com/sirupsen/logrus v1.9.3 // indirect
279287
github.com/sourcegraph/conc v0.3.1-0.20240121214520-5f936abd7ae8 // indirect
280288
github.com/spaolacci/murmur3 v1.1.0 // indirect
281289
github.com/spf13/afero v1.15.0 // indirect
282290
github.com/spf13/cast v1.10.0 // indirect
283291
github.com/spf13/pflag v1.0.10 // indirect
292+
github.com/stoewer/go-strcase v1.3.0 // indirect
284293
github.com/stretchr/objx v0.5.2 // indirect
285294
github.com/subosito/gotenv v1.6.0 // indirect
286295
github.com/syndtr/goleveldb v1.0.1-0.20220721030215-126854af5e6d // indirect
287296
github.com/tendermint/go-amino v0.16.0 // indirect
288-
github.com/tetratelabs/wazero v1.11.0 // indirect
297+
github.com/tetratelabs/wazero v1.9.0 // indirect
289298
github.com/tidwall/btree v1.8.1 // indirect
290299
github.com/twitchyliquid64/golang-asm v0.15.1 // indirect
291-
github.com/vbatts/tar-split v0.12.2 // indirect
300+
github.com/vbatts/tar-split v0.12.1 // indirect
292301
github.com/whyrusleeping/go-keyspace v0.0.0-20160322163242-5b898ac5add1 // indirect
293302
github.com/wlynxg/anet v0.0.5 // indirect
294303
github.com/zondax/hid v0.9.2 // indirect
@@ -300,7 +309,7 @@ require (
300309
go.lsp.dev/uri v0.3.0 // indirect
301310
go.opencensus.io v0.24.0 // indirect
302311
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
303-
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.65.0 // indirect
312+
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 // indirect
304313
go.opentelemetry.io/otel v1.40.0 // indirect
305314
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.40.0 // indirect
306315
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.40.0 // indirect
@@ -313,26 +322,26 @@ require (
313322
go.uber.org/mock v0.5.2 // indirect
314323
go.uber.org/multierr v1.11.0 // indirect
315324
go.uber.org/zap v1.27.1 // indirect
325+
go.uber.org/zap/exp v0.3.0 // indirect
316326
go.yaml.in/yaml/v2 v2.4.3 // indirect
317327
go.yaml.in/yaml/v3 v3.0.4 // indirect
318328
golang.org/x/arch v0.17.0 // indirect
319329
golang.org/x/crypto v0.48.0 // indirect
320-
golang.org/x/exp v0.0.0-20260218203240-3dfff04db8fa // indirect
321-
golang.org/x/mod v0.33.0 // indirect
330+
golang.org/x/exp v0.0.0-20260112195511-716be5621a96 // indirect
331+
golang.org/x/mod v0.32.0 // indirect
322332
golang.org/x/sys v0.41.0 // indirect
323-
golang.org/x/telemetry v0.0.0-20260209163413-e7419c687ee4 // indirect
333+
golang.org/x/telemetry v0.0.0-20260109210033-bd525da824e2 // indirect
324334
golang.org/x/term v0.40.0 // indirect
325335
golang.org/x/text v0.34.0 // indirect
326336
golang.org/x/time v0.12.0 // indirect
327-
golang.org/x/tools v0.42.0 // indirect
337+
golang.org/x/tools v0.41.0 // indirect
328338
golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da // indirect
329339
gonum.org/v1/gonum v0.17.0 // indirect
330340
google.golang.org/genproto v0.0.0-20241118233622-e639e219e697 // indirect
331-
google.golang.org/genproto/googleapis/rpc v0.0.0-20260217215200-42d3e9bedb6d // indirect
341+
google.golang.org/genproto/googleapis/rpc v0.0.0-20260128011058-8636f8732409 // indirect
332342
gopkg.in/yaml.v2 v2.4.0 // indirect
333343
gopkg.in/yaml.v3 v3.0.1 // indirect
334344
lukechampine.com/blake3 v1.4.1 // indirect
335-
mvdan.cc/xurls/v2 v2.6.0 // indirect
336345
nhooyr.io/websocket v1.8.6 // indirect
337346
pgregory.net/rapid v1.2.0 // indirect
338347
pluginrpc.com/pluginrpc v0.5.0 // indirect

0 commit comments

Comments
 (0)