misc(tools)!: remove `tools` package #2046

faddat · 2024-01-16T02:38:59Z

1. protos are now built with the sdk's proto builder
1. go tools methodology just bloats .mod and .sum making comet harder to work with
1. tidy: mod and sum don't have maintenance tools in them anymore
1. stop using an abandoned Dockerfile

tl;dr: by removing things from go.mod we can make comet easier to maintain, even if that means less stylish golang.

PR checklist

Tests written/updated
Changelog entry added in .changelog (we use unclog to manage our changelog)
Updated relevant documentation (docs/ or spec/) and code comments

2) go tools methodology just bloats .mod and .sum making comet harder to work with

melekes

I'm actually in favor of this PR because in our Makefile, we always use the @latest version, which defeats the purpose of having a tools package in the first place.

Thanks @faddat ❤️

adizere

Concept ACK.

@melekes anyone else from the team needs to review/approve this ?

tools/README.md

…ure-means-less-deps

melekes · 2024-01-17T03:22:24Z

@melekes anyone else from the team needs to review/approve this ?

I'd like to hear what @mzabaluev and/or @sergio-mena think about this.

cason · 2024-01-17T09:03:51Z

Should we check whether this at least currently works? I mean the Dockerfile, in particular, which still uses a pretty old version of Go.

Dropping a lot of dependencies for the repo is plus of this proposal.

faddat · 2024-01-17T12:12:11Z

doing the conflicts thing

…is-bad-idea-because-secure-means-less-deps

faddat · 2024-01-17T12:13:38Z

@cason It doesn't work sir.

scripts/mockery_generate.sh

sergio-mena · 2024-01-17T14:09:25Z

I'd like to hear what @mzabaluev and/or @sergio-mena think about this.

I've applied this PR's patch and run "make build", "make proto-gen", "make mockery", "make lint". Everything seems to be working fine, so I'm in favor of adopting this.

BTW, thanks @faddat for submitting this 👍

mzabaluev

I never had to use this subdirectory so I don't have a very informed opinion, but the content does not seem like a healthy way of doing things and it does bring a lot of unneeded dependencies.

I think we can treat buf as a required tool installed externally, at least that's what I always did locally. Its results are fairly stable, and more dependent on compiler plugins which can be pinned to a revision in buf.gen.yaml.

Co-authored-by: Sergio Mena <sergio@informal.systems>

…ure-means-less-deps

- 1) protos are now built with the sdk's proto builder - 2) go tools methodology just bloats .mod and .sum making comet harder to work with - 3) tidy: mod and sum don't have maintenance tools in them anymore - 4) stop using an abandoned Dockerfile --------- tl;dr: by removing things from go.mod we can make comet easier to maintain, even if that means less stylish golang. --- #### PR checklist - [ ] Tests written/updated - [ ] Changelog entry added in `.changelog` (we use [unclog](https://github.com/informalsystems/unclog) to manage our changelog) - [ ] Updated relevant documentation (`docs/` or `spec/`) and code comments --------- Co-authored-by: Sergio Mena <sergio@informal.systems> (cherry picked from commit 2bbb5c1) # Conflicts: # go.mod # go.sum # tools/README.md

- 1) protos are now built with the sdk's proto builder - 2) go tools methodology just bloats .mod and .sum making comet harder to work with - 3) tidy: mod and sum don't have maintenance tools in them anymore - 4) stop using an abandoned Dockerfile --------- tl;dr: by removing things from go.mod we can make comet easier to maintain, even if that means less stylish golang. --- #### PR checklist - [ ] Tests written/updated - [ ] Changelog entry added in `.changelog` (we use [unclog](https://github.com/informalsystems/unclog) to manage our changelog) - [ ] Updated relevant documentation (`docs/` or `spec/`) and code comments --------- Co-authored-by: Sergio Mena <sergio@informal.systems> (cherry picked from commit 2bbb5c1)

This is an automatic backport of pull request #2046 done by [Mergify](https://mergify.com). --- <details> <summary>Mergify commands and options</summary> <br /> More conditions and actions can be found in the [documentation](https://docs.mergify.com/). You can also trigger Mergify actions by commenting on this pull request: - `@Mergifyio refresh` will re-evaluate the rules - `@Mergifyio rebase` will rebase this PR on its base branch - `@Mergifyio update` will merge the base branch into this PR - `@Mergifyio backport <destination>` will backport this PR on `<destination>` branch Additionally, on Mergify [dashboard](https://dashboard.mergify.com) you can: - look at your merge queues - generate the Mergify configuration with the config editor. Finally, you can contact us on https://mergify.com </details> Co-authored-by: Jacob Gadikian <jacobgadikian@gmail.com>

- **Versioned protobuf files (#495)** - **Restore rpc/grpc/v1/types.pb.go** - **proto: restore deprecation notice on BroadcastAPI** - **Struct `Client` exposes sensitive data (#784)** - **Unsafe int cast in `kill` command (#783)** - **ADR-100: Data Companion Push API (#73)** - **rfc: incoming txs while catching up (#735)** - **build(deps): Bump bufbuild/buf-setup-action from 1.17.0 to 1.18.0 (#804)** - **build(deps): Bump github.com/cosmos/gogoproto from 1.4.8 to 1.4.9 (#806)** - **build(deps): Bump golang.org/x/sync from 0.1.0 to 0.2.0 (#807)** - **build(deps): Bump google.golang.org/grpc from 1.54.0 to 1.55.0 (#813)** - **build(deps): Bump github.com/prometheus/client_golang from 1.15.0 to 1.15.1 (#810)** - **build(deps): Bump github.com/bufbuild/buf from 1.17.0 to 1.18.0 (#809)** - **build(deps): Bump github.com/bufbuild/buf from 1.17.0 to 1.18.0 (#809)** - **build(deps): Bump github.com/prometheus/client_model from 0.3.0 to 0.4.0 (#812)** - **build(deps): Bump github.com/prometheus/common from 0.42.0 to 0.43.0 (#811)** - **ADR-103: Protobuf definition versioning (#772)** - **spec/p2p: Specify the operation of a Reactor (#714)** - **build(deps): Bump github.com/docker/distribution (#827)** - **build(deps): Bump github.com/cloudflare/circl from 1.3.1 to 1.3.3 (#828)** - **ADR-103: Protobuf definition versioning (#772) (#817)** - **build(deps): Bump github.com/cosmos/gogoproto from 1.4.9 to 1.4.10 (#830)** - **build(deps): Bump golang.org/x/net from 0.9.0 to 0.10.0 (#831)** - **build(deps): Bump golang.org/x/crypto from 0.8.0 to 0.9.0 (#832)** - **build(deps): Bump github.com/vektra/mockery/v2 from 2.26.1 to 2.27.1 (#833)** - **rpc: Remove response data from response failure logs (#829)** - **pubsub/kvindexer:support for big numbers - v2 (#797)** - **Extend the infrastructure provider with `StartNodes` and `StopTestnet` (#796)** - **grpc: Add base gRPC server with version service (#818)** - **Digital Ocean implementation of `StartNodes` and `StopTestnet` (#846)** - **RFC 102: Improve forward compatibility of proto-generated Rust (#724)** - **mempool: Add metric to measure how many times a tx was received (#637)** - **`e2e` provider is extended with `Disconnect`, `Reconnect` and `CheckUpgraded` (#852)** - **Sort `loadtime` tool's report (#854)** - **feat: make handshake cancelable (#857)** - **proto: Restore snake_case JSON for `ExecTxResult` (#856)** - **qa: 200-nodes test on v0.38 (#877)** - **qa: rotating node test on `v0.38.x` (#883)** - **Changes to QA related files (e.g., `method.md`) (#878)** - **build(deps): Bump bufbuild/buf-setup-action from 1.18.0 to 1.19.0 (#868)** - **build(d 2BDE eps): Bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (#873)** - **build(deps): Bump github.com/bufbuild/buf from 1.18.0 to 1.19.0 (#872)** - **Adds `vote_extension_size` to manifests (#858)** - **build(deps): Bump github.com/vektra/mockery/v2 from 2.27.1 to 2.28.1 (#893)** - **build(deps): Bump github.com/prometheus/common from 0.43.0 to 0.44.0 (#892)** - **build(deps): Bump slackapi/slack-github-action from 1.23.0 to 1.24.0 (#869)** - **ADR 104: State sync from local application snapshot (#801)** - **build(deps): Bump github.com/go-git/go-git/v5 from 5.6.1 to 5.7.0 (#891)** - **mempool: slight refactor for improving readability (#894)** - **Add Vote Extension varying size testnet (#888)** - **fix: lint fail when golangci-lint bump from v1.52.2 to v1.53.x (#908)** - **build(deps): Bump github.com/bufbuild/buf from 1.19.0 to 1.20.0 (#912)** - **build(deps): Bump github.com/golangci/golangci-lint (#917)** - **build(deps): Bump github.com/spf13/viper from 1.15.0 to 1.16.0 (#913)** - **build(deps): Bump bufbuild/buf-setup-action from 1.19.0 to 1.20.0 (#910)** - **build(deps): Bump github.com/vektra/mockery/v2 from 2.28.1 to 2.28.2 (#914)** - **Minor fixes to `RELEASES.md` (#923)** - **Prevent a transaction to appear twice in the mempool (#890)** - **New metrics to track duplicate votes and block parts (#896) (#905)** - **e2e tests are being skipped; `INFRASTRUCTURE-*` bug; portGen inconsistency bug (#933)** - **build(deps): Bump github.com/bufbuild/buf from 1.20.0 to 1.21.0 (#948)** - **build(deps): Bump bufbuild/buf-setup-action from 1.20.0 to 1.21.0 (#946)** - **spec/p2p: document the p2p API used by Reactors (#851)** - **build(deps): Bump docker/login-action from 2.1.0 to 2.2.0 (#944)** - **e2e: Generate prometheus.yaml on setup (#954)** - **Update the type annotations in the light client spec (#955)** - **build(deps): Bump docker/build-push-action fr F438 om 4.0.0 to 4.1.0 (#947)** - **build(deps): Bump docker/setup-buildx-action from 2.5.0 to 2.7.0 (#962)** - **Add requirement for `CheckTx` in ABCI spec (#928)** - **fix: avoid recursive call after rename to (*PeerState).MarshalJSON (#865)** - **Port upstream proto changes to cometbft package** - **changelog: Import entries for v0.34.28, v0.34.29, v0.37.1 and v0.37.2 to `main` (#974)** - **test/e2e: Fix Docker image build (#984)** - **build(deps): Bump github.com/BurntSushi/toml from 1.3.0 to 1.3.2 (#952)** - **build(deps): Bump github.com/vektra/mockery/v2 from 2.28.2 to 2.29.0 (#953)** - **Remove duplicate function `deterministicExecTxResult` (#986)** - **mempool: Fix the benchmarks (#934)** - **Add `CMT_HOME` (or remove it?) (#983)** - **Remove buf.yaml at the root of the source tree (#979)** - **build(deps): Bump docker/build-push-action from 4.1.0 to 4.1.1 (#989)** - **build(deps): Bump golang.org/x/net from 0.10.0 to 0.11.0 (#994)** - **build(deps): Bump golang.org/x/sync from 0.2.0 to 0.3.0 (#990)** - **build(deps): Bump google.golang.org/grpc from 1.55.0 to 1.56.0 (#992)** - **build(deps): Bump github.com/golangci/golangci-lint from 1.53.2 to 1.53.3 (#996)** - **build(deps): Bump github.com/prometheus/client_golang from 1.15.1 to 1.16.0 (#991)** - **spec/p2p: new structure for the p2p specification (#966)** - **consensus: optimize vote and block part gossip with HasProposalBlockPartMessage and random sleeps (#904)** - **Extend ABCI `max_block_size` parameter to give extended control to the app (#1003)** - **build(deps): Bump bufbuild/buf-setup-action from 1.21.0 to 1.22.0 (#1026)** - **Bump logs on non-fatal vote validation failures to Info level (#1022)** - **Update codeowners to include DevRel team (#1023)** - **deps: Manually bump github.com/vektra/mockery/v2 from 2.29.0 to 2.30.1 (#1009)** - **Update releasing.md to sign tags (#1034)** - **build(deps): Bump github.com/bufbuild/buf from 1.21.0 to 1.22.0 (#1027)** - **Rename ABCI enums and values to satisfy buf guidelines (#975)** - **build(deps): Bump google.golang.org/grpc from 1.56.0 to 1.56.1 (#1028)** - **docs: Added double quotes to /abci_query path param (#1015)** - **Update Docs with Finalize Block (#760)** - **Clarifies that processProposal may be called for set of transactions different from the one returned in the preceding prepareProposal (#1033)** - **Update the annotation of part_set.go (#1056)** - **build(deps): Bump docker/setup-buildx-action from 2.7.0 to 2.8.0 (#1071)** - **build(deps): Bump github.com/vektra/mockery/v2 from 2.30.1 to 2.30.16 (#1064)** - **build(deps): Bump bufbuild/buf-setup-action from 1.22.0 to 1.23.1 (#1072)** - **build(deps): Bump github.com/bufbuild/buf from 1.22.0 to 1.23.1 (#1066)** - **build(deps): Bump google.golang.org/protobuf from 1.30.0 to 1.31.0 (#1065)** - **build(deps): Bump google.golang.org/grpc from 1.56.1 to 1.56.2 (#1101)** - **build(deps): Bump golang.org/x/crypto from 0.10.0 to 0.11.0 (#1103)** - **build(deps): Bump docker/setup-buildx-action from 2.8.0 to 2.9.0 (#1105)** - **build(deps): Bump github.com/vektra/mockery/v2 from 2.30.16 to 2.31.1 (#1100)** - **build(deps): Bump golang.org/x/net from 0.11.0 to 0.12.0 (#1102)** - **ci: Trigger workflows on merge group (#1118)** - **Revert "config: add bootstrap peers (#9680)" (#1109)** - **node: Revert removal of public reactor accessors (#1120)** - **ci: Disable CodeQL check in merge queues (#1123)** - **p2p: Remove UPnP functionality (#1114)** - **ADR 107: Rename proto versions to pre-v1 betas (#1110)** - **RFC 104: Internal messaging using the actor model (#1092)** - **build(deps): Bump github.com/bufbuild/buf from 1.23.1 to 1.24.0 (#1131)** - **build(deps): Bump github.com/vektra/mockery/v2 from 2.31.1 to 2.32.0 (#1132)** - **build(deps): Bump docker/setup-buildx-action from 2.9.0 to 2.9.1 (#1133)** - **build(deps): Bump bufbuild/buf-setup-action from 1.23.1 to 1.24.0 (#1134)** - **spec: Add mempool specification in English and Quint (#997)** - **mempool: ADR for refactoring list of senders (#1032)** - **build(deps): Bump bufbuild/buf-setup-action from 1.24.0 to 1.25.0 (#1157)** - **build(deps): Bump github.com/go-git/go-git/v5 from 5.7.0 to 5.8.0 (#1159)** - **build(deps): Bump github.com/bufbuild/buf from 1.24.0 to 1.25.0 (#1160)** - **proxy: Rename "unsynchronized" to "connection-synchronized" local client creator (#1145)** - **mempool: Keep track of senders in reactor instead of implementation (#1010)** - **cmd: Remove `replay` and `replay-console` subcommands (#1170)** - **build(deps): Bump google.golang.org/grpc from 1.56.2 to 1.57.0 (#1181)** - **build(deps): Bump github.com/go-git/go-git/v5 from 5.8.0 to 5.8.1 (#1180)** - **ci: Remove Mergify automerge (#1182)** - **Add gRPC block service (#1142)** - **blocksync: export errors (#1186)** - **Porting changes related to creating a lean docker image from `pierre/fast-prototyping-1059` branch. (#1192)** - **chore: Format repo (#1193)** - **Add BlockResults gRPC service (#1168)** - **consensus: remove logic to unlock block on +2/3 prevote for nil (#1175)** - **ADR 101: Add GetLatest method to block service (#1209)** - **ADR 101: Implement pruning mechanism (#1150)** - **config: export errors (#1190)** - **build(deps): Bump github.com/vektra/mockery/v2 from 2.32.0 to 2.32.3 (#1218)** - **Add check for non-`nil` in `enterCommit` (#1208)** - **Log proposer's address when correctly accepting a proposal (#1079)** - **Close evidence.db OnStop (#1210)** - **build(deps): Bump bufbuild/buf-setup-action from 1.25.0 to 1.25.1 (#1213)** - **build(deps): Bump golang.org/x/crypto from 0.11.0 to 0.12.0 (#1215)** - **build(deps): Bump github.com/bufbuild/buf from 1.25.0 to 1.25.1 (#1216)** - **build(deps): Bump golang.org/x/net from 0.12.0 to 0.14.0 (#1217)** - **Forward-port: update state to prevote `nil` when proposal block does not match locked block (#1203)** - **mempool: Store peer ids as p2p.ID instead of uint16 (remove mempoolIDs) (#1191)** - **ADR-101: implement gRPC `PruningService` (#1154)** - **consensus: Avoid process proposal when we know correct nodes validated it (#1231)** - **ADR-101: Metrics to monitor the pruning (#1234)** - **build(deps): Bump bufbuild/buf-setup-action from 1.25.1 to 1.26.0 (#1241)** - **build(deps): Bump github.com/bufbuild/buf from 1.25.1 to 1.26.1 (#1239)** - **build(deps): Bump github.com/golangci/golangci-lint (#1240)** - **build(deps): Bump github.com/vektra/mockery/v2 from 2.32.3 to 2.32.4 (#1242)** - **abci: export errors (#1185)** - **consensus: export errors (#1211)** - **ADR-101: Pruning mechanism minor fixes (#1246)** - **chore: Bump minimum Go version on `main` to v1.21 (#1244)** - **ADR 101: Add `Close` method to gRPC client (#1251)** - **ADR 108: ADR for extending E2E infrastructure so that we can check CometBFT's behaviour with respect to ABCI++ grammar. (#902)** - **docs: Add logging guide to contributing guidelines (#1250)** - **chore: log `app_hash` as hex (#1264)** - **update language (#1263)** - **build(deps): Bump bufbuild/buf-setup-action from 1.26.0 to 1.26.1 (#1272)** - **build(deps): Bump gonum.org/v1/gonum from 0.13.0 to 0.14.0 (#1275)** - **build(deps): Bump github.com/cosmos/gogoproto from 1.4.10 to 1.4.11 (#1276)** - **ADR 101: Refactor height check-related logic and tests (#1271)** - **Fixed linter** - **Revert "Fixed linter"** - **Fixed mem aliasing in for loop (#1280)** - **Remove genesis persistence in state db (#1017)** - **Revert "Remove genesis persistence in state db (#1017)" (#1294)** - **evidence: export errors (#1284)** - **Re-implement removal of genesis persistence in state db (#1295)** - **build(deps): Bump docker/setup-buildx-action from 2.9.1 to 2.10.0 (#1298)** - **node: verify genesis doc hash against the file contents rather than remarshalled JSON (#1293)** - **indexer: Implement pruning mechanism (#1176)** - **Provide relevant block data in `ExtendVote` (#1270)** - **node/state:bootstrap state api (#1057)** - **build(deps): Bump actions/checkout from 3 to 4 (#1319)** - **build(deps): Bump docker/build-push-action from 4.1.1 to 4.2.1 (#1318)** - **Fix (#1323)** - **state: remove genesis file from database (#1297)** - **Added changelog for pruning metrics (#1335)** - **Removed begin_block_events and end_block_events from rpc doc (#1338)** - **consensus: test for precommit/locking corner case (#1257)** - **TxIndexer and BlockIndexer pruning metrics (#1334)** - **Forward port changes to changelog and `UPGRADING.md` for release `v0.38.0` (#1341)** - **Update Go version specified in root README on main for v0.34.x (#1352)** - **Add test/e2e/data to gitignore (#1349)** - **docs: gRPC services and data companion pruning services (#1307)** - **Add genesis_hash flag check on node startup (#1324)** - **gRPC for Tx and Block indexer pruning (#1327)** - **build(deps): Bump docker/build-push-action from 4.2.1 to 5.0.0 (#1371)** - **build(deps): Bump docker/setup-buildx-action from 2.10.0 to 3.0.0 (#1370)** - **build(deps): Bump docker/login-action from 2.2.0 to 3.0.0 (#1368)** - **build(deps): Bump goreleaser/goreleaser-action from 4 to 5 (#1369)** - **ADR101: Moved changelog entries (#1377)** - **Max byte check (#1384)** - **Update to string (#1385)** - **mempool: Remove unused peerID constants (#1379)** - **build(deps): Bump github.com/google/uuid from 1.3.0 to 1.3.1 (#1392)** - **build(deps): Bump github.com/rs/cors from 1.9.0 to 1.10.0 (#1393)** - **build(deps): Bump github.com/go-git/go-git/v5 from 5.8.1 to 5.9.0 (#1396)** - **build(deps): Bump github.com/vektra/mockery/v2 from 2.32.4 to 2.34.0 (#1400)** - **build(deps): Bump github.com/go-kit/kit from 0.12.0 to 0.13.0 (#1397)** - **build(deps): Bump github.com/golangci/golangci-lint (#1398)** - **build(deps): Bump google.golang.org/grpc from 1.57.0 to 1.58.2 (#1399)** - **doc: improve documentation of BlockParams.MaxBytes (#1405)** - **rpc: Improve abci_query parameter documentation (#1184)** - **Bump p2p version following introduction of `HasProposalBlockPartMessage` (#1411)** - **RFC: Allowing Non-Determinism in `ProcessProposal` (#1391)** - **ADR-101: Data Companion Pull API (#82)** - **build(deps): Bump github.com/rs/cors from 1.10.0 to 1.10.1 (#1418)** - **build(deps): Bump github.com/vektra/mockery/v2 from 2.34.0 10000 to 2.34.2 (#1416)** - **build(deps): Bump github.com/prometheus/client_golang (#1417)** - **fix typos (#1413)** - **Renames Tendermint to CometBFT in the RPC related test code (#1428)** - **Renames Tendermint to CometBFT in the RPC related test code. This file was missing and it was not caught in the branch testing. (#1433)** - **Reject incoming txs while node is catching up (#1119)** - **build(deps): Bump golang.org/x/crypto from 0.13.0 to 0.14.0 (#1458)** - **build(deps): Bump golang.org/x/sync from 0.3.0 to 0.4.0 (#1454)** - **build(deps): Bump golang.org/x/net from 0.15.0 to 0.16.0 (#1453)** - **build(deps): Bump bufbuild/buf-setup-action from 1.26.1 to 1.27.0 (#1449)** - **build(deps): Bump styfle/cancel-workflow-action from 0.11.0 to 0.12.0 (#1450)** - **build(deps): Bump github.com/prometheus/client_model (#1455)** - **build(deps): Bump github.com/bufbuild/buf from 1.26.1 to 1.27.0 (#1459)** - **build(deps): Bump github.com/spf13/viper from 1.16.0 to 1.17.0 (#1456)** - **test: respect P2PConfig fuzzing configuration in MultiplexTransport (#1414)** - **build(deps): Bump github.com/vektra/mockery/v2 from 2.34.2 to 2.35.3 (#1462)** - **crypto: export errors (#1463)** - **Do not race with pruning to validate headers and validators (#1467)** - **fix typos (#1487)** - **Call observer only when retain height changes (#1490)** - **build(deps): Bump pillow from 9.3.0 to 10.0.1 in /scripts/qa/reporting (#1493)** - **abci: Add relaxed local client synchronization models (#1141)** - **docs: fix typos (#1500)** - **Post-merge fixes for feature/proto-upgrade** - **Make BuildLastCommitInfo and BuildExtendedCommitInfo public (#1502)** - **build(deps): Bump github.com/vektra/mockery/v2 from 2.35.3 to 2.35.4 (#1497)** - **build(deps): Bump google.golang.org/grpc from 1.58.2 to 1.58.3 (#1498)** - **build(deps): Bump golang.org/x/net from 0.16.0 to 0.17.0 (#1499)** - **tiny change: reorder expected and actual values (#1506)** - **Fixed docker port alias (#1507)** - **build(deps): Bump bufbuild/buf-setup-action from 1.27.0 to 1.27.1 (#1527)** - **Implement ADR-107: rename proto package version suffixes to v1beta* pattern (#1510)** - **e2e: Fix flakiness in grpc tests due to pruning (#1492)** - **fix spelling of bandwidth (#1534)** - **Fix linting on `main` (#1531)** - **build(deps): Bump github.com/prometheus/common from 0.44.0 to 0.45.0 (#1524)** - **build(deps): Bump github.com/bufbuild/buf from 1.27.0 to 1.27.1 (#1522)** - **build(deps): Bump github.com/golangci/golangci-lint (#1540)** - **fix some typos (#1541)** - **indexer-respect-height-params-on-query (#1529)** - **Correct go_package paths in service proto files (#1538)** - **build(deps): Bump google.golang.org/grpc from 1.58.3 to 1.59.0 (#1521)** - **build(deps): Bump github.com/vektra/mockery/v2 from 2.35.4 to 2.36.0 (#1523)** - **feat(mempool): export error (#1427)** - **Rename proto messages and services to satisfy default buf lints (#1533)** - **RFC 106: non-idempotent methods in data companion (#1545)** - **build(deps): Bump github.com/go-git/go-git/v5 from 5.9.0 to 5.10.0 (#1550)** - **build(deps): Bump github.com/bufbuild/buf from 1.27.1 to 1.27.2 (#1551)** - **build(deps): Bump github.com/google/uuid from 1.3.1 to 1.4.0 (#1552)** - **build(deps): Bump bufbuild/buf-setup-action from 1.27.1 to 1.27.2 (#1553)** - **use assert.Greater instead of Equal for better error reporting (#1547)** - **rpc: Version the RPC APIs (#1412)** - **mempool: Add metric size of pool in bytes (#1512)** - **build(deps): Bump github.com/docker/docker (#1570)** - **build(deps): Bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (#1572)** - **build(deps): Bump golang.org/x/sync from 0.4.0 to 0.5.0 (#1574)** - **build(deps): Bump github.com/vektra/mockery/v2 from 2.36.0 to 2.36.1 (#1576)** - **build(deps): Bump github.com/gorilla/websocket from 1.5.0 to 1.5.1 (#1575)** - **build(deps): Bump github.com/golangci/golangci-lint (#1573)** - **chore: consolidate changelog improvements section (#1578)** - **Implementation of ADR-108 (#930)** - **Reduce the default MaxBytes to 4mb and increase MaxGas to 10 million (#1518)** - **e2e: Allow disabling the PEX reactor on all nodes in the testnet (#1580)** - **Experimental - Reduce # of connections effectively used to gossip transactions out (#1558)** - **Update proto file references to follow renaming/versioning (#1555)** - **Make `LoadBlock` also return block metadata (#1557)** - **mempool: Limit gossip connections to persistent and non-persistent peers (experimental) (#1584)** - **fix: docs: default db provider moved from node to config (#1588)** - **build(deps): Bump github.com/bufbuild/buf from 1.27.2 to 1.28.0 (#1598)** - **build(deps): Bump bufbuild/buf-setup-action from 1.27.2 to 1.28.0 (#1602)** - **build(deps): Bump golang.org/x/crypto from 0.14.0 to 0.15.0 (#1599)** - **build(deps): Bump golang.org/x/net from 0.17.0 to 0.18.0 (#1597)** - **RFC 107: Internal signalling using event observers (#1164)** - **ADR 110: Remote mempool (#1565)** - **chore: aligns function descriptions with godoc standards in the types package (#1593)** - **docs: various improvements (#1603)** - **chore: Merge branch main into feature/proto-upgrade (#1612)** - **Removes wrong assertion and decreases likelyhood of block from the future has actually been already created (#1619)** - **Split /api off to separate go.mod (#1608)** - **feature: Reduce Go API surface area (ADR 109) (#1605)** - **refactor: Export func MakeHTTPDialer (#1594)** - **First draft (#1483)** - **pruning:do not attempt to prune state if no blocks are pruned (#1616)** - **Update SECURITY.md (#1626)** - **Update changelog on `main` with new releases (#1644)** - **proto: Update README (#1648)** - **ADR 111: `nop` Mempool (#1585)** - **ADR-111: Addressed Ethan's comment (#1667)** - **build(deps): Bump github.com/vektra/mockery/v2 from 2.36.1 to 2.37.1 (#1662)** - **build(deps): Bump docker/build-push-action from 5.0.0 to 5.1.0 (#1664)** - **build(deps): Bump bufbuild/buf-setup-action from 1.28.0 to 1.28.1 (#1665)** - **ci: Fix v0.34 nightly build (#1655)** - **build(deps): Bump github.com/bufbuild/buf from 1.28.0 to 1.28.1 (#1663)** - **feature/proto-upgrade: Fix generated mock code (#1673)** - **Update link in README.md (#1674)** - **Renames the semantic versioning variable to CMT (#1621)** - **mempool: add `nop` mempool (#1643)** - **e2e:fix-digital-ocean-ports (#1678)** - **Revert modularization of the test infra (#1488) (#1676)** - **docs: various small improvements (part 2) (#1683)** - **Do not block indefinitely on the semaphore (#1654)** - **Adds tests that check for FIFO ordering being broken by gossip (#1628)** - **loadtime: Add parameter for displaying results in one line (#1511)** - **Promote latest versions of Protobuf definitions to v1 packages (#1677)** - **chore: Update CHANGELOG.md (#1701)** - **build(deps): Bump github.com/google/uuid from 1.3.1 to 1.4.0 (#1696)** - **build(deps): Bump github.com/vektra/mockery/v2 from 2.37.1 to 2.38.0 (#1697)** - **build(deps): Bump github.com/go-git/go-git/v5 from 5.9.0 to 5.10.1 (#1702)** - **proto: document the `cometbft.*` versioned protos (#1694)** - **Clean up changelog entries and README files for versioned proto changes (#1707)** - **chore(proto): add missing docs (#1703)** - **feature/proto-upgrade: Last-minute fixes (#1709)** - **e2e: Support emulated latencies between docker images (#1560)** - **build(deps): Bump golang.org/x/net from 0.14.0 to 0.17.0 in /api (#1713)** - **Prepare `main` for `v1.x` backport branch (#1714)** - **build(deps): Bump golang.org/x/crypto from 0.15.0 to 0.16.0 (#1720)** - **build(deps): Bump golang.org/x/net from 0.18.0 to 0.19.0 (#1719)** - **types: validate Validator#Address field (#1715)** - **Enable Mergify backports for `v1.x` branch (#1724)** - **deps: Bump cometbft-db to v0.9.0 (#1725)** - **buf improvements prior to publishing on BSR (#1726)** - **proto: give our buf module a name (#1734)** - **deps: Bump cometbft-db to v0.9.1 (#1737)** - **chore: Update root docs (#1740)** - **fix: increase abci socket message size limit to 2GB (#1730)** - **proto: make comment in README more Markdowny (#1743)** - **fix: Txs Validate (#1687)** - **Add test missing in #1687 (#1712)** - **perf(state): batch save `State` (#1735)** - **Update CODE_OF_CONDUCT.md (#1708)** - **[e2e] Fixes prepareProposal not to return oversized set of transactions (#1756)** - **perf(store): Batch save `Block` (#1755)** - **Fix: Fix minor typos (#1780)** - **`VerifyCommitLight` and `VerifyCommitLightTrusting` _never_ check all signatures (#1750)** - **Fix typo in encoding.md (#1801)** - **chore(docs): small improvements (#1781)** - **build(deps): Bump github.com/go-git/go-git/v5 from 5.10.1 to 5.11.0 (#1797)** - **build(deps): Bump actions/setup-go from 4 to 5 (#1794)** - **build(deps): Bump actions/stale from 8 to 9 (#1795)** - **build(deps): Bump github.com/spf13/viper from 1.17.0 to 1.18.1 (#1796)** - **Chore/fix other typos (#1809)** - **chore(spec): specify which fields must be deterministic (#1804)** - **Small improvements in #1806 not present in #1750 (#1808)** - **Add changelog for #1749 (#1807)** - **e2e: Implement latency emulation for DigitalOcean (#1587)** - **add GH workflow for linting code using codespell (#1824)** - **chore(docs): explain the effect of `timeout_propose` (#1798)** - **build(deps): Bump actions/upload-artifact from 3 to 4 (#1845)** - **build(deps): Bump actions/setup-python from 2 to 5 (#1843)** - **build(deps): Bump github/codeql-action from 2 to 3 (#1847)** - **build(deps): Bump actions/checkout from 2 to 4 (#1846)** - **build(deps): Bump github.com/google/uuid from 1.4.0 to 1.5.0 (#1850)** - **build(deps): Bump google.golang.org/grpc from 1.59.0 to 1.60.0 (#1851)** - **golangci-lint: enable all the linters by default (#1838)** - **Updates go crypto package to v0.17.0 (#1859)** - **Adds checks for nil keys and signatures (#1855)** - **The store DB and the companion `BlockStore` struct are sometimes out of sync (#1856)** - **Allow blocksync to not verify all signatures (#1858)** - **Fixing the ABCI grammar and updating the code for e2e tests to account for the new grammar. (#1829)** - **docs: Fix Discord links in README (#1874)** - **build(deps): Bump github.com/prometheus/client_golang (#1909)** - **build(deps): Bump github.com/btcsuite/btcd/btcutil from 1.1.3 to 1.1.5 (#1908)** - **build(deps): Bump google.golang.org/protobuf (#1885)** - **build(deps): Bump github.com/spf13/viper from 1.18.1 to 1.18.2 (#1884)** - **build(deps): Bump google.golang.org/grpc from 1.60.0 to 1.60.1 (#1883)** - **remove unused linters that produced a warning and ensure that unparam is enabled (#1905)** - **Fix HTTP response body not being closed after reading (#1945)** - **Disable undesired linting code (#1959)** - **Extend kvstore example add with with key types (#1876)** - **Extra check in `VerifyExtension` (#1877)** - **build(deps): Bump github.com/vektra/mockery/v2 from 2.38.0 to 2.39.1 (#1882)** - **perf(crypto/merkle, crypto/tmhash): simplify+optimize SHA256 hashing of multiple byteslices (#1921)** - **Update localnet-start Makefile (#1975)** - **blocksync: wait for poolRoutine to stop in (*Reactor).OnStop (#1879)** - **fix TestListenerTimeoutReadWrite (#1947)** - **docs: fix typos (#1988)** - **this is the kindest commit I can think of. Take it that way and read the code. (#1987)** - **there's really no need for this anymore (#1986)** - **feat: DefaultHttpClient support setting proxy from env (#1900)** - **feat: lint tests (#1906)** - **chore: fix typos (#1991)** - **build(deps): Bump golang.org/x/sync from 0.5.0 to 0.6.0 (#1992)** - **feat(proxy): export errors (#1899)** - **doc:fix broken link in DOCKER/README.md (#1996)** - **feat: custom dependencies order (#1994)** - **PBTS: migrating to `main` the new version of the specification (#1973)** - **Fix paths to scripts/metricsgen in go:generate commands (#1998)** - **chore: fix some typos (#2002)** - **docs(light): fix broken link to spec (#2007)** - **chore(test/loadtime): replace tm-load-test w/ cometbft-load-test (#2009)** - **ci: Remove unused `tests` target when compiling e2e (#2022)** - **spec: fix typo in `encoding.md` (#2024)** - **mempool: Fix data races in CListMempool's height and notifiedTxsAvailable (#2021)** - **chore(test/loadtime): cleanup go.sum and golangci.yml (#2025)** - **build(deps): Bump github.com/prometheus/common from 0.45.0 to 0.46.0 (#2040)** - **build(deps): Bump github.com/vektra/mockery/v2 from 2.39.1 to 2.40.1 (#2038)** - **feat(rpc): Use default port for HTTP(S) URLs when there is no explicit port (#1903)** - **misc(go.mod): remove unused peg dependency (#2044)** - **config: Remove unused `max_batch_bytes` (#2050)** - **Merge pull request from GHSA-qr8r-m495-7hc4** - **misc(tools)!: remove `tools` package (#2046)** - **docs(guides): add missing import (#2070)** - **deps(localnode): bump alpine version (#2077)** - **misc(Makefile): add `help` target to display the help msg (#2074)** - **`e2e`: test vote extension activation via `InitChain` and `FinalizeBlock` (#2066)** - **scripts: metricsgen parses '// metrics:' pattern (#2090)** - **e2e: Add `load_max_txs` option to manifest (#2094)** - **consensus: Add `chain_size_bytes` metric (#2093)** - **feat: conventional commits (#1995)** - **Forward port of tendermint/tendermint#7605, tendermint/spec#393, and tendermint/tendermint#8142 (#2018)** - **ci: fix permissions for "Conventional PR Title" (#2099)** - **PBTS: additions and fixes on migrated spec (#2013)** - **PBTS: forward port of tendermint/tendermint#7709 (#2089)** - **feat: use go workspace (#1924)** - **fix: `ValidateUpdate`: allow no-change updates regardless of current height (#2112)** - **test(localnet): Add monitoring tools for localnet (#2108)** - **feat: add gofumpt (#2049)** - **feat(consensus): increase log level for corner case when prevoting a proposal (#2042)** - **docs: v1 - diataxis framework (#2105)** - **feat(consensus): additional sanity checks for the size of proposed blocks (#1408)** - **perf(internal/blocksync): avoid double-calling `types.BlockFromProto` (#2016)** - **build(deps): Bump google.golang.org/grpc from 1.60.1 to 1.61.0 (#2178)** - **build(deps): Bump bufbuild/buf-setup-action from 1.28.1 to 1.29.0 (#2161)** - **build(deps): Bump styfle/cancel-workflow-action from 0.12.0 to 0.12.1 (#2160)** - **build(deps): Bump slackapi/slack-github-action from 1.24.0 to 1.25.0 (#2162)** - **build(deps): Bump github.com/google/uuid from 1.5.0 to 1.6.0 (#2176)** - **refactor(privval): reverse conditional + more idiomatic Go code with early returns (#2156)** - **fix(e2e): path to latency script files in DO (#2148)** - **build(deps): Bump github.com/cometbft/cometbft-db from 0.9.1 to 0.10.0 (#2175)** - **chore(Makefile): add `setup-pre-commit` target to init git hook (#2123)** - **feat: add pebbledb (https://github.com/cockroachdb/pebble) (#2132)** - **perf(internal/blocksync): do not `ValidateBlock` twice (#2026)** - **feat(e2e): Add new targets `fast` and `clean` to Makefile (#2192)** - **ci: add `spec` type in conventional-pr-title (#2191)** - **fix(privval): retry accepting a connection on errors (#2047)** - **fix(.github/workflows): correct parameters to lint_pr_title (#2199)** - **docs: update QA method steps for qa-infra changes (#2198)** - **feat!(pbts): forward port of tendermint/tendermint#7711 (#2149)** - **docs(pbts): forward port of PBTS documentation and fixes (#2124)** - **fix: if-return and early-return (#2215)** - **chore: remove amazon linux Dockerfile and update test/docker/Dockerfile (#2135)** - **feat(ci): pre-commit framework (#2214)** - **ci: add `merge` type for conventional-pr-title (#2219)** - **spec(consensus/pbts): update description for introduced parameters. (#2206)** - **perf: optimize psql indexer (#2142)** - **fix(go.mod): do not use `replace` for api (#2236)** - **fix(Makefile): gofumpt no longer needed (#2235)** - **fix(p2p/pex): gracefully shutdown `Reactor` (#2010)** - **test(mempool): fix TestMempoolUpdateDoesNotPanicWhenApplicationMissedTx (#2242)** - **fix(flowrate): fix non-determinism in flowrate tests (#2147)** - **refactor!: Implement RFC 106: remove `GetLatestBlock*` methods from data companion API (#2240)** - **build(deps): Bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (#2253)** - **chore(config): update DB section in toml.go (#2249)** - **fix(consensus): do not precommit nil if proposal block is received (#2221)** - **build(deps): Bump github.com/opencontainers/runc from 1.1.5 to 1.1.12 (#2261)** - **fix(mempool/tests): Reduce tests duration (#2263)** - **ci: run golangci-lint linters for all files (not only ones which were modified) (#2250)** - **refactor(examples): small changes to kvstore app (#2267)** - **refactor(mempool): simplify parameters of resCbFirstTime and resCbRecheck (#2272)** - **perf(mempool/cache): clear map in Reset (#2259)** - **test(abci): update e2e tests to check against ABCI 2.0 grammar (#2201)** - **docs: symbolic references to steps in the qa-infra README (#2280)** - **chore: updated doc link (#2296)** - **fix(consensus): prevote nil upon timeout when Proposal is missing (#2218)** - **build(deps): Bump pre-commit/action from 3.0.0 to 3.0.1 (#2307)** - **build(deps): Bump golang.org/x/net from 0.20.0 to 0.21.0 (#2300)** - **build(deps): Bump github.com/cometbft/cometbft-db from 0.10.0 to 0.11.0 (#2299)** - **docs: ADR-112 Proposer-Based Timestamps (#2223)** - **refactor(internal/statesync): replace ticker with `time.After(X)` (#2294)** - **fix: simultaneous rpc test failures (#2150)** - **chore(docs): alter the section about the effects of `timeout_commit` (#1892)** - **refactor(p2p)!: Refactor PeerSet to eliminate data races & improve performance (#2246)** - **feat(pbts): Update consensus params to include pbts enabled (#2231)** - **feat(storage/metrics): Metrics to measure storage (#1974)** - **feat(e2e): Log number of sent txs (success and failed) (#2328)** - **chore: enable gomoddirectives, unparam (#2290)** - **docs: images not rendering properly in docs (#2331)** - **docs: Fix references about DeliverTx (#2330)** - **docs(qa): Add table of contents to existing QA reports (#2343)** - **chore: enable perfsprint linter (#2291)** - **feat(pruning): trigger explicitly compaction upon pruning (#1972)** - **docs: explain how to skip pre-commit hook (#2358)** - **build(deps): Bump github.com/prometheus/common from 0.46.0 to 0.47.0 (#2373)** - **build(deps): Bump google.golang.org/grpc from 1.61.0 to 1.61.1 (#2372)** - **feat(e2e): Option to set max block size in bytes at genesis (#2362)** - **build(deps): Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0 (#2371)** - **revert(pbts): revert removal of BFT Time related functions (#2205)** - **fix(e2e): Reduce flakiness of TestGRPC_GetBlockResults (#2367)** - **spec(consensus): update Block Time documentation in spec (#2316)** - **spec: adaptive MSGDELAY parameter included in PBTS spec (#2318)** - **feat(pbts): Moving VoteExtensionsEnableHeight from ABCIParams to FeatureParams. (#2335)** - **fix: remove TestMempoolFIFOWithParallelCheckTx (#2364)** - **fix(docker-compose): fix subnet (#2383)** - **feat(pbts): enable `e2e` manifest config to set `PbtsEnableHeight` (#2284)** - **perf(internal/state): avoid double-saving FinalizeBlockResponse (#2017)** - **build(deps): Bump fonttools from 4.37.4 to 4.43.0 in /scripts/qa/reporting (#2407)** - **build(deps): Bump pillow from 10.0.1 to 10.2.0 in /scripts/qa/reporting (#2408)** - **fix(node): Forward compaction config params to blockstore constructor (#2418)** - **refactor!: moved `MedianTime` out of `internal` folder (#2397)** - **chore: typo fixes (#2403)** - **chore(pbts): Removes useless code (#2420)** - **build(deps): Bump github.com/prometheus/common from 0.47.0 to 0.48.0 (#2430)** - **build(deps): Bump google.golang.org/grpc from 1.61.1 to 1.62.0 (#2429)** - **test(consensus): PBTS should be enabled by default in test units (#2329)** - **test(consensus): test enabling PBTS at a given height (#2404)** - **refactor(protobuf): switch from gogofaster to gocosmos generator (#2425)** - **docs(tutorials/install): add `From Go package` (#2414)** - **docs(pbts): documentation for PBTS-related consensus parameters (#2376)** - **refactor(consensus): print err from SignAndCheckVote (#2346)** - **feat(e2e): add parameter to set a custom output directory for testnet files (#2433)** - **spec(consensus): update description of consensus parameters for PBTS (#2415)** - **fix(localnet): Grafana dashboards for storage tests - removed experimental metrics (#2448)** - **fix(jsonrpc): enable HTTP basic auth in WS client (#2434)** - **feat(pbts): Adds timestamp to the `msgInfo` written into the WAL (#2388)** - **fix: `Rollback`: wrong modification of `state.LastHeightValidatorsChanged` while rollback at a special height (#2136)** - **docs(changelog): add missing entry for #2136 (#2459)** - **fix(pbts): legacy `ABCIParams` values are properly translated to `FeatureParams` values (#2462)** - **fix(e2e): Fixing the bug in ABCI e2e tests (#2468)** - **feat(localnet): Grafana PNG rendering for easier graph exports (#2472)** - **docs(README): remove Terra (#2469)** - **docs: document PBTS adaptive delays mechanism (#2452)** - **fix(config): Moved compact variables to the right section (#2477)** - **feat(metrics): more buckets for ProposalTimestampDifference (#2479)** - **fix(metrics): more buckets for ProposalTimestampDifference (#2481)** - **feat(pbts): Make synchrony params adaptive (#2431)** - **ci: check metrics generation in CI checks (#2483)** - **feat(consensus): improve logging for timely and untimely messages (#2321)** - **feat(types): improve Proposal and SynchronyParams validation tests (#2489)** - **test(consensus): refactor TestStateLock_POLSafety tests (#2492)** - **feat(types): refactor types.AdaptiveSynchronyParams method (#2490)** - **fix: lint errors introduced with the latest merge (#2495)** - **build(deps): Bump docker/setup-buildx-action from 3.0.0 to 3.1.0 (#2500)** - **build(deps): Bump github.com/prometheus/client_golang from 1.18.0 to 1.19.0 (#2508)** - **build(deps): Bump golang.org/x/crypto from 0.19.0 to 0.20.0 (#2507)** - **build(deps): Bump github.com/prometheus/common from 0.48.0 to 0.49.0 (#2506)** - **build(deps): Bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (#2505)** - **fix(docs): include `timesync` daemon instructions (#2491)** - **feat(privval)!: DO NOT require extension signature (#2496)** - **refactor(privval): rename sign_extension to skip_sign_extension (#2519)** - **spec(abci): fixes the spec to inform about the presence of invalid extensions in `last_commit` (#2423)** - **fix(pbts): block Time must be Canonical (#2493)** - **feat(e2e): Add manifest option `clock_skew` and corresponding backend functionality (#2454)** - **fix(mempool): converting to uint64 before additions to avoid overflows (#2498)** - **refactor!: Rename `skip_sign_extension` to `skip_extension_signing` (#2522)** - **docs(ADR): ADR-108 updated to account for the new changes in the grammar and code. (#2528)** - **feat(e2e): add generator support for clock skew + env variable rename (#2488)** - **spec(proto): add `cometbft.privval.v1beta2` proto package (#2529)** - **chore: improving error handling in the PendingEvidence (#2550)** - **feat(blocksync)!: set the max number of (concurrently) downloaded blocks to {peersCount * 20} (#2467)** - **build(deps): Bump bufbuild/buf-setup-action from 1.29.0 to 1.30.0 (#2557)** - **build(deps): Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 (#2560)** - **build(deps): Bump golang.org/x/net from 0.21.0 to 0.22.0 (#2562)** - **fix(cmd/cometbft/commands/version): update the output for v1 (#2546)** - **build(deps): Bump docker/build-push-action from 5.1.0 to 5.2.0 (#2558)** - **build(deps): Bump github.com/prometheus/common from 0.49.0 to 0.50.0 (#2559)** - **build(deps): Bump google.golang.org/grpc from 1.62.0 to 1.62.1 (#2563)** - **build(deps): Bump golang.org/x/crypto from 0.20.0 to 0.21.0 (#2561)** - **feat(blocksync): sort peers by download rate & multiple requests for closer blocks (#2475)** - **feat(pbts): Adjusts PBTS metrics buckets (#2578)** - **fix(blocksync): use timer instead of time.After (#2584)** - **fix: temporary fix for `api` dependency (#2589)** --------- Signed-off-by: Thane Thomson <connect@thanethomson.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Thane Thomson <connect@thanethomson.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com> Co-authored-by: Mikhail Zabaluev <mikhail@informal.systems> Co-authored-by: Troy Kessler <43882936+troykessler@users.noreply.github.com> Co-authored-by: leven <112051166+lx-xiang@users.noreply.github.com> Co-authored-by: werty144 <anton-paramonov2000@yandex.ru> Co-authored-by: Adi Seredinschi <adizere@gmail.com> Co-authored-by: Sukey <35202440+sukey2008@users.noreply.github.com> Co-authored-by: Sergio Mena <sergio@informal.systems> Co-authored-by: Jasmina Malicevic <jasmina.dustinac@gmail.com> Co-authored-by: moriluka <85185077+moriluka@users.noreply.github.com> Co-authored-by: Đỗ Việt Hoàng <hoangdv2429@gmail.com> Co-authored-by: alex <152680487+azukiboy@users.noreply.github.com> Co-authored-by: Hernán Vanzetto <15466498+hvanz@users.noreply.github.com> Co-authored-by: Daniel <daniel.cason@informal.systems> Co-authored-by: Andy Nogueira <me@andynogueira.dev> Co-authored-by: nenadmilosevic95 <50905385+nenadmilosevic95@users.noreply.github.com> Co-authored-by: nenadmilosevic95 <nenad@informal.systems> Co-authored-by: Jacob Gadikian <jacobgadikian@gmail.com> Co-authored-by: Greg Szabo <16846635+greg-szabo@users.noreply.github.com> Co-authored-by: Emmanuel T Odeke <emm.odeke@gmail.com> Co-authored-by: jchappelow <140431406+jchappelow@users.noreply.github.com> Co-authored-by: shuoer86 <129674997+shuoer86@users.noreply.github.com> Co-authored-by: levisyin <150114626+levisyin@users.noreply.github.com> Co-authored-by: vuittont60 <81072379+vuittont60@users.noreply.github.com> Co-authored-by: Halimao <1065621723@qq.com> Co-authored-by: alex <152680487+bodhi-crypo@users.noreply.github.com> Co-authored-by: Daniel <daniel.cason@usi.ch> Co-authored-by: Josef Widder <44643235+josef-widder@users.noreply.github.com> Co-authored-by: William Banfield <4561443+williambanfield@users.noreply.github.com> Co-authored-by: Kukovec <jure.kukovec@gmail.com> Co-authored-by: Daniel Cason <cason@gandria> Co-authored-by: M. J. Fromberger <fromberger@interchain.io> Co-authored-by: hattizai <150505746+hattizai@users.noreply.github.com> Co-authored-by: Huulu <35667132+IssouChancla@users.noreply.github.com> Co-authored-by: katelyn martin <me+cratelyn@katelyn.world> Co-authored-by: Richard Gibson <richard.gibson@gmail.com> Co-authored-by: Jean Deruelle <jean.deruelle@gmail.com> Co-authored-by: glnro <8335464+glnro@users.noreply.github.com> Co-authored-by: Greg Szabo <greg@philosobear.com> Co-authored-by: Emmanuel T Odeke <emmanuel@orijtech.com> Co-authored-by: levisyin <lilassherl@gmail.com> Co-authored-by: k0marov <95040709+k0marov@users.noreply.github.com> Co-authored-by: Adi Seredinschi <a@seredinschi.net> Co-authored-by: Pan chao <152830401+Pan-chao@users.noreply.github.com> Co-authored-by: Khanh Hoa <49144992+hoanguyenkh@users.noreply.github.com> Co-authored-by: glnro <lauren@informal.systems> Co-authored-by: toni <143221387+xyztoni@users.noreply.github.com> Co-authored-by: DragonKid <idragonkid@gmail.com> Co-authored-by: Matt Ketmo <matthieu@moquet.net> Co-authored-by: Ethan <cosinlinker@gmail.com> Co-authored-by: Evgeny Danilenko <6655321@bk.ru> Co-authored-by: Duong Minh Ngoc <153509244+minhngoc274@users.noreply.github.com> Co-authored-by: Kero <keroroxx520@gmail.com>

melekes · 2024-08-20T05:46:17Z

@mergify backport v0.34.x

mergify · 2024-08-20T05:46:30Z

backport v0.34.x

✅ Backports have been created

#3760 misc(tools)!: remove tools package (backport #2046) has been created for branch v0.34.x but encountered conflicts

- 1) protos are now built with the sdk's proto builder - 2) go tools methodology just bloats .mod and .sum making comet harder to work with - 3) tidy: mod and sum don't have maintenance tools in them anymore - 4) stop using an abandoned Dockerfile --------- tl;dr: by removing things from go.mod we can make comet easier to maintain, even if that means less stylish golang. --- #### PR checklist - [ ] Tests written/updated - [ ] Changelog entry added in `.changelog` (we use [unclog](https://github.com/informalsystems/unclog) to manage our changelog) - [ ] Updated relevant documentation (`docs/` or `spec/`) and code comments --------- Co-authored-by: Sergio Mena <sergio@informal.systems> (cherry picked from commit 2bbb5c1) # Conflicts: # go.mod # go.sum # scripts/mockery_generate.sh # tools/README.md # tools/proto/Dockerfile # types/params.go

- 1) protos are now built with the sdk's proto builder - 2) go tools methodology just bloats .mod and .sum making comet harder to work with - 3) tidy: mod and sum don't have maintenance tools in them anymore - 4) stop using an abandoned Dockerfile --------- tl;dr: by removing things from go.mod we can make comet easier to maintain, even if that means less stylish golang. --- #### PR checklist - [ ] Tests written/updated - [ ] Changelog entry added in `.changelog` (we use [unclog](https://github.com/informalsystems/unclog) to manage our changelog) - [ ] Updated relevant documentation (`docs/` or `spec/`) and code comments <hr>This is an automatic backport of pull request #2046 done by [Mergify](https://mergify.com). --------- Co-authored-by: Jacob Gadikian <jacobgadikian@gmail.com> Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com>

melekes · 2024-09-11T05:33:54Z

@mergify backport v0.37.x

mergify · 2024-09-11T05:33:57Z

backport v0.37.x

✅ Backports have been created

#4070 misc(tools)!: remove tools package (backport #2046) has been created for branch v0.37.x but encountered conflicts

- 1) protos are now built with the sdk's proto builder - 2) go tools methodology just bloats .mod and .sum making comet harder to work with - 3) tidy: mod and sum don't have maintenance tools in them anymore - 4) stop using an abandoned Dockerfile --------- tl;dr: by removing things from go.mod we can make comet easier to maintain, even if that means less stylish golang. --- #### PR checklist - [ ] Tests written/updated - [ ] Changelog entry added in `.changelog` (we use [unclog](https://github.com/informalsystems/unclog) to manage our changelog) - [ ] Updated relevant documentation (`docs/` or `spec/`) and code comments --------- Co-authored-by: Sergio Mena <sergio@informal.systems> (cherry picked from commit 2bbb5c1) # Conflicts: # go.mod # go.sum # tools/README.md # tools/tools.go # types/params.go

- 1) protos are now built with the sdk's proto builder - 2) go tools methodology just bloats .mod and .sum making comet harder to work with - 3) tidy: mod and sum don't have maintenance tools in them anymore - 4) stop using an abandoned Dockerfile --------- tl;dr: by removing things from go.mod we can make comet easier to maintain, even if that means less stylish golang. --- #### PR checklist - [ ] Tests written/updated - [ ] Changelog entry added in `.changelog` (we use [unclog](https://github.com/informalsystems/unclog) to manage our changelog) - [ ] Updated relevant documentation (`docs/` or `spec/`) and code comments <hr>This is an automatic backport of pull request #2046 done by [Mergify](https://mergify.com). --------- Co-authored-by: Jacob Gadikian <jacobgadikian@gmail.com> Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com>

This is an automatic backport of pull request #2046 done by [Mergify](https://mergify.com). Cherry-pick of 2bbb5c1 has failed: ``` On branch mergify/bp/v0.38.x/pr-2046 Your branch is up to date with 'origin/v0.38.x'. You are currently cherry-picking commit 2bbb5c1. (fix conflicts and run "git cherry-pick --continue") (use "git cherry-pick --skip" to skip this patch) (use "git cherry-pick --abort" to cancel the cherry-pick operation) Changes to be committed: modified: scripts/mockery_generate.sh deleted: tools/proto/Dockerfile deleted: tools/tools.go modified: types/params.go Unmerged paths: (use "git add/rm <file>..." as appropriate to mark resolution) both modified: go.mod both modified: go.sum deleted by them: tools/README.md ``` To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/github/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally --- <details> <summary>Mergify commands and options</summary> <br /> More conditions and actions can be found in the [documentation](https://docs.mergify.com/). You can also trigger Mergify actions by commenting on this pull request: - `@Mergifyio refresh` will re-evaluate the rules - `@Mergifyio rebase` will rebase this PR on its base branch - `@Mergifyio update` will merge the base branch into this PR - `@Mergifyio backport <destination>` will backport this PR on `<destination>` branch Additionally, on Mergify [dashboard](https://dashboard.mergify.com) you can: - look at your merge queues - generate the Mergify configuration with the config editor. Finally, you can contact us on https://mergify.com </details> --------- Co-authored-by: Jacob Gadikian <jacobgadikian@gmail.com> Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com>

This is an automatic backport of pull request #2046 done by [Mergify](https://mergify.com). Cherry-pick of 2bbb5c1 has failed: ``` On branch mergify/bp/v0.38.x/pr-2046 Your branch is up to date with 'origin/v0.38.x'. You are currently cherry-picking commit 2bbb5c1. (fix conflicts and run "git cherry-pick --continue") (use "git cherry-pick --skip" to skip this patch) (use "git cherry-pick --abort" to cancel the cherry-pick operation) Changes to be committed: modified: scripts/mockery_generate.sh deleted: tools/proto/Dockerfile deleted: tools/tools.go modified: types/params.go Unmerged paths: (use "git add/rm <file>..." as appropriate to mark resolution) both modified: go.mod both modified: go.sum deleted by them: tools/README.md ``` To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/github/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally --- <details> <summary>Mergify commands and options</summary> <br /> More conditions and actions can be found in the [documentation](https://docs.mergify.com/). You can also trigger Mergify actions by commenting on this pull request: - `@Mergifyio refresh` will re-evaluate the rules - `@Mergifyio rebase` will rebase this PR on its base branch - `@Mergifyio update` will merge the base branch into this PR - `@Mergifyio backport <destination>` will backport this PR on `<destination>` branch Additionally, on Mergify [dashboard](https://dashboard.mergify.com) you can: - look at your merge queues - generate the Mergify configuration with the config editor. Finally, you can contact us on https://mergify.com </details> --------- Co-authored-by: Jacob Gadikian <jacobgadikian@gmail.com> Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com> (cherry picked from commit 418f82e) # Conflicts: # go.mod # go.sum # state/indexer/mocks/block_indexer.go # state/txindex/mocks/tx_indexer.go

#4075) This is an automatic backport of pull request #2046 done by [Mergify](https://mergify.com). Cherry-pick of 2bbb5c1 has failed: ``` On branch mergify/bp/v0.38.x/pr-2046 Your branch is up to date with 'origin/v0.38.x'. You are currently cherry-picking commit 2bbb5c1. (fix conflicts and run "git cherry-pick --continue") (use "git cherry-pick --skip" to skip this patch) (use "git cherry-pick --abort" to cancel the cherry-pick operation) Changes to be committed: modified: scripts/mockery_generate.sh deleted: tools/proto/Dockerfile deleted: tools/tools.go modified: types/params.go Unmerged paths: (use "git add/rm <file>..." as appropriate to mark resolution) both modified: go.mod both modified: go.sum deleted by them: tools/README.md ``` To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/github/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally --- <details> <summary>Mergify commands and options</summary> <br /> More conditions and actions can be found in the [documentation](https://docs.mergify.com/). You can also trigger Mergify actions by commenting on this pull request: - `@Mergifyio refresh` will re-evaluate the rules - `@Mergifyio rebase` will rebase this PR on its base branch - `@Mergifyio update` will merge the base branch into this PR - `@Mergifyio backport <destination>` will backport this PR on `<destination>` branch Additionally, on Mergify [dashboard](https://dashboard.mergify.com) you can: - look at your merge queues - generate the Mergify configuration with the config editor. Finally, you can contact us on https://mergify.com </details><hr>This is an automatic backport of pull request #2073 done by [Mergify](https://mergify.com). --------- Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com>

* build(deps): Bump github.com/minio/highwayhash from 1.0.2 to 1.0.3 (#3914) Bumps [github.com/minio/highwayhash](https://github.com/minio/highwayhash) from 1.0.2 to 1.0.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/minio/highwayhash/releases">github.com/minio/highwayhash's releases</a>.</em></p> <blockquote> <h2>Version v1.0.3</h2> <p>Added support for ARM SVE instructions, resulting in performance improvements over existing NEON implementation.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/minio/highwayhash/commit/030a8b332625f1501d534324055b1de810fe9233"><code>030a8b3</code></a> Disable SVE2 support until tested on real hardware (not just emulator)</li> <li><a href="https://github.com/minio/highwayhash/commit/b2d40df9d11faf657708d4b24a24b7b92c5b23d9"><code>b2d40df</code></a> Fix build on non-ARM architectures</li> <li><a href="https://github.com/minio/highwayhash/commit/ff8131595115a8e3d2af219b1ded0d11658baf2a"><code>ff81315</code></a> Update function for SVE2</li> <li><a href="https://github.com/minio/highwayhash/commit/a48b3f20491775094a4cbb7d93da8ab945c7ecbf"><code>a48b3f2</code></a> Add separate test case for Update function</li> <li><a href="https://github.com/minio/highwayhash/commit/3346a584da73836f01ab720398a8d61999ff35e4"><code>3346a58</code></a> ARM SVE code for update method</li> <li><a href="https://github.com/minio/highwayhash/commit/6a9c19b1156f8704d73a73a2d8ba2ef653988f25"><code>6a9c19b</code></a> Update ARM performance on Graviton3</li> <li><a href="https://github.com/minio/highwayhash/commit/1304c103e59f69c73f8b461d5c65a6bce0b11395"><code>1304c10</code></a> > Warning: 1 issue was detected with this workflow: git checkout HEAD^2 is no...</li> <li><a href="https://github.com/minio/highwayhash/commit/b6f6ef7b89a1265fd1e2cf0ec1c513ec5027de0f"><code>b6f6ef7</code></a> Upgrade CI versions</li> <li><a href="https://github.com/minio/highwayhash/commit/1a96f281b5c687cf18030f723e303c6093a3c3d0"><code>1a96f28</code></a> Bump golang.org/x/sys from 0.0.0-20190130150945-aca44879d564 to 0.1.0</li> <li><a href="https://github.com/minio/highwayhash/commit/9cb37b8cb4e3ed1cf7e0fda944dce3e64c35bddc"><code>9cb37b8</code></a> Fix build tags for newer Go.</li> <li>Additional commits viewable in <a href="https://github.com/minio/highwayhash/compare/v1.0.2...v1.0.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/minio/highwayhash&package-manager=go_modules&previous-version=1.0.2&new-version=1.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> * build(deps): Bump github.com/prometheus/common from 0.55.0 to 0.57.0 (#3911) Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.55.0 to 0.57.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/prometheus/common/releases">github.com/prometheus/common's releases</a>.</em></p> <blockquote> <h2>v0.57.0</h2> <h2>What's Changed</h2> <ul> <li>feat: new promslog and promslog/flag packages to wrap log/slog by <a href="https://github.com/tjhop"><code>@tjhop</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/677">prometheus/common#677</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/tjhop"><code>@tjhop</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/common/pull/677">prometheus/common#677</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/common/compare/v0.56.0...v0.57.0">https://github.com/prometheus/common/compare/v0.56.0...v0.57.0</a></p> <h2>v0.56.0</h2> <h2>What's Changed</h2> <ul> <li>Don't always fetch a OAuth2 token, if the secret from a file didn't change by <a href="https://github.com/multani"><code>@multani</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/647">prometheus/common#647</a></li> <li>remove dependency to github.com/prometheus/client_golang by <a href="https://github.com/ilius"><code>@ilius</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/662">prometheus/common#662</a></li> <li>Bump github.com/aws/aws-sdk-go from 1.54.7 to 1.54.11 in /sigv4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/661">prometheus/common#661</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@prombot</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/664">prometheus/common#664</a></li> <li>Revert <a href="https://redirect.github.com/prometheus/common/issues/576">#576</a> and add deprecation notice by <a href="https://github.com/SuperQ"><code>@SuperQ</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/665">prometheus/common#665</a></li> <li>Bump golang.org/x/net from 0.26.0 to 0.27.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/667">prometheus/common#667</a></li> <li>use basic string in IsValidLegacyMetricName by <a href="https://github.com/ywwg"><code>@ywwg</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/668">prometheus/common#668</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@prombot</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/672">prometheus/common#672</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@prombot</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/674">prometheus/common#674</a></li> <li>Bump github.com/aws/aws-sdk-go from 1.54.19 to 1.55.5 in /sigv4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/671">prometheus/common#671</a></li> <li>sigv4: support nil body by <a href="https://github.com/roidelapluie"><code>@roidelapluie</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/673">prometheus/common#673</a></li> <li>Fix overflows of untyped int constants on 32-bit by <a href="https://github.com/dswarbrick"><code>@dswarbrick</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/675">prometheus/common#675</a></li> <li>Update client_golang by <a href="https://github.com/SuperQ"><code>@SuperQ</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/676">prometheus/common#676</a></li> <li>Update golangci lint by <a href="https://github.com/roidelapluie"><code>@roidelapluie</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/679">prometheus/common#679</a></li> <li>expfmt: Add UTF-8 syntax support in text_parse.go by <a href="https://github.com/fedetorres93"><code>@fedetorres93</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/670">prometheus/common#670</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@prombot</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/681">prometheus/common#681</a></li> <li>fix(utf8): provide a method for explicitly checking label names for legacy validity by <a href="https://github.com/ywwg"><code>@ywwg</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/682">prometheus/common#682</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/multani"><code>@multani</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/common/pull/647">prometheus/common#647</a></li> <li><a href="https://github.com/ilius"><code>@ilius</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/common/pull/662">prometheus/common#662</a></li> <li><a href="https://github.com/dswarbrick"><code>@dswarbrick</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/common/pull/675">prometheus/common#675</a></li> <li><a href="https://github.com/fedetorres93"><code>@fedetorres93</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/common/pull/670">prometheus/common#670</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/common/compare/v0.55.0...v0.56.0">https://github.com/prometheus/common/compare/v0.55.0...v0.56.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/prometheus/common/commit/9bbc9cb5e3685e0dbb85461dde3385509a507550"><code>9bbc9cb</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/common/issues/677">#677</a> from tjhop/feat/add-promslog-pkg</li> <li><a href="https://github.com/prometheus/common/commit/6ea2584af7f3a2c136ccf2f7844d9d7015680479"><code& 10000 gt;6ea2584</code></a> feat: new promslog and promslog/flag packages to wrap log/slog</li> <li><a href="https://github.com/prometheus/common/commit/6623230f2fa6d06f840b03469d6d786172c4a74f"><code>6623230</code></a> Provide a method for explicitly checking label names for legacy validity. (<a href="https://redirect.github.com/prometheus/common/issues/682">#682</a>)</li> <li><a href="https://github.com/prometheus/common/commit/19d07967696b0039bc5b76fc1e72f2be289961e1"><code>19d0796</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/common/issues/681">#681</a> from prometheus/repo_sync</li> <li><a href="https://github.com/prometheus/common/commit/29a2d2c75f018a6b6da1309e44b8210a7c48406e"><code>29a2d2c</code></a> Update common Prometheus files</li> <li><a href="https://github.com/prometheus/common/commit/8968b6c1d012c44709ce098644b57d681a5eb571"><code>8968b6c</code></a> expfmt: Add UTF-8 syntax support in text_parse.go (<a href="https://redirect.github.com/prometheus/common/issues/670">#670</a>)</li> <li><a href="https://github.com/prometheus/common/commit/cd4bcc02f4479542b7b360049c2ce7db52d3163d"><code>cd4bcc0</code></a> Update golangci lint (<a href="https://redirect.github.com/prometheus/common/issues/679">#679</a>)</li> <li><a href="https://github.com/prometheus/common/commit/2cac84e1490776cacb3f46f14e7adbaf8dcb4596"><code>2cac84e</code></a> Update client_golang (<a href="https://redirect.github.com/prometheus/common/issues/676">#676</a>)</li> <li><a href="https://github.com/prometheus/common/commit/79c0459359c4f5fa2113241540dca24054c1b348"><code>79c0459</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/common/issues/675">#675</a> from dswarbrick/fix-32bit-overflows</li> <li><a href="https://github.com/prometheus/common/commit/008d7b8628857284ef9162e41a8734f1e479dd80"><code>008d7b8</code></a> Fix overflows of untyped int constants on 32-bit</li> <li>Additional commits viewable in <a href="https://github.com/prometheus/common/compare/v0.55.0...v0.57.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/prometheus/common&package-manager=go_modules&previous-version=0.55.0&new-version=0.57.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> * build(deps): Bump bufbuild/buf-setup-action from 1.38.0 to 1.39.0 (#3938) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.38.0 to 1.39.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bufbuild/buf-setup-action/releases">bufbuild/buf-setup-action's releases</a>.</em></p> <blockquote> <h2>v1.39.0</h2> <p>Release v1.39.0</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/54abbed4fe8d8d45173eca4798b0c39a53a7b658"><code>54abbed</code></a> Release v1.39.0 (<a href="https://redirect.github.com/bufbuild/buf-setup-action/issues/221">#221</a>)</li> <li>See full diff in <a href="https://github.com/bufbuild/buf-setup-action/compare/v1.38.0...v1.39.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bufbuild/buf-setup-action&package-manager=github_actions&previous-version=1.38.0&new-version=1.39.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> * build(deps): Bump slackapi/slack-github-action from 1.26.0 to 1.27.0 (#3939) Bumps [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) from 1.26.0 to 1.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/slackapi/slack-github-action/releases">slackapi/slack-github-action's releases</a>.</em></p> <blockquote> <h2>Slack Send V1.27.0</h2> <h2>What's changed</h2> <p>This release introduces an optional <code>payload-delimiter</code> parameter for flattening nested objects with a customized delimiter before the payload is sent to Slack Workflow Builder when using workflow webhook triggers.</p> <pre lang="diff"><code> - name: Send a custom flattened payload uses: slackapi/slack-github-action@v1.27.0 + with: + payload-delimiter: "_" env: SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }} </code></pre> <p>Setting this value to an underscore (<code>_</code>) is recommended when using nested inputs within Workflow Builder to match expected input formats of Workflow Builder, but the actual value can be changed to something else! This "flattening" behavior <strong>did</strong> exist prior to this version, but used a period (<code>.</code>) which is not valid for webook inputs in Workflow Builder.</p>  <p>The resulting output of flattened objects is not always clear, but the following can hopefully serve as a quick reference as well as <a href="https://github.com/slackapi/slack-github-action/blob/5d1fb07d3c4f410b8d278134c714edff31264beb/test/slack-send-test.js#L264-L319">these specs</a> when using <code>_</code> as the delimiter:</p> <p><strong>Input</strong>:</p> <pre lang="json"><code>{ "apples": "tree", "bananas": { "truthiness": true } } </code></pre> <p><strong>Output</strong>:</p> <pre lang="json"><code>{ "apples": "tree", "bananas_truthiness": "true" } </code></pre> <p>Notice that <code>bananas_truthiness</code> is also stringified in this process, as part of updating values to match the expected inputs of Workflow Builder!</p>  <h2>Changes</h2> <p>In addition to the changes above, the following lists all of the changes since the prior version with the <strong>complete changelog</strong> changes found here: <a href="https://github.com/slackapi/slack-github-action/compare/v1.26.0...v1.27.0">https://github.com/slackapi/slack-github-action/compare/v1.26.0...v1.27.0</a></p> <h4>🎁 Enhancements</h4>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/slackapi/slack-github-action/commit/37ebaef184d7626c5f204ab8d3baff4262dd30f0"><code>37ebaef</code></a> Automatic compilation</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/5d1fb07d3c4f410b8d278134c714edff31264beb"><code>5d1fb07</code></a> chore(release): tag version 1.27.0</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/3bc06716971bb1dc2899ccd0332da69b8b778356"><code>3bc0671</code></a> chore(deps): bump axios to 1.7.5 (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/332">#332</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/b452451af72f751bd902edfbbc084a8b2e6e5031"><code>b452451</code></a> feat: make the payload delimiter configurable for workflow webhook triggers (...</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/c50e848fe18b1da5665e19286e3c9b86ad1b3bf5"><code>c50e848</code></a> build(deps-dev): bump mocha from 10.5.2 to 10.7.0 (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/328">#328</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/e4a9c4b6853f8b64ba9fee848d3f30198f9427c1"><code>e4a9c4b</code></a> build(deps): bump <code>@slack/web-api</code> from 7.2.0 to 7.3.2 (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/327">#327</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/9a7f0fa18816ae797b801ec2c27a04499fc2381b"><code>9a7f0fa</code></a> build(deps-dev): bump chai from 4.4.1 to 4.5.0 (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/326">#326</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/73b7062b8dccf12c0d62626d19953ea628e418ba"><code>73b7062</code></a> build(deps-dev): bump eslint-plugin-jsdoc from 48.5.0 to 48.10.2 (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/325">#325</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/3d5207b5cf109bd2640ec20613ed7f29ab46e853"><code>3d5207b</code></a> build(deps): bump https-proxy-agent from 7.0.4 to 7.0.5 (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/320">#320</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/4e15b6a964ca554d1a7b7a56850baa97e8316be2"><code>4e15b6a</code></a> build(deps): bump <code>@slack/web-api</code> from 7.0.4 to 7.2.0 (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/323">#323</a>)</li> <li>Additional commits viewable in <a href="https://github.com/slackapi/slack-github-action/compare/v1.26.0...v1.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=slackapi/slack-github-action&package-manager=github_actions&previous-version=1.26.0&new-version=1.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> * build(deps): Bump bufbuild/buf-setup-action from 1.39.0 to 1.40.1 (#4024) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.39.0 to 1.40.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bufbuild/buf-setup-action/releases">bufbuild/buf-setup-action's releases</a>.</em></p> <blockquote> <h2>v1.40.1</h2> <p>Release v1.40.1</p> <h2>v1.40.0</h2> <p>Release v1.40.0</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/2dbfb63c8b0cc4f1707ba5dd23017e998a25b2f0"><code>2dbfb63</code></a> Release v1.40.1 (<a href="https://redirect.github.com/bufbuild/buf-setup-action/issues/223">#223</a>)</li> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/51c53201f0da34af376e0b998c889ebb2813d479"><code>51c5320</code></a> Release v1.40.0 (<a href="https://redirect.github.com/bufbuild/buf-setup-action/issues/222">#222</a>)</li> <li>See full diff in <a href="https://github.com/bufbuild/buf-setup-action/compare/v1.39.0...v1.40.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bufbuild/buf-setup-action&package-manager=github_actions&previous-version=1.39.0&new-version=1.40.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore: Bump go toolchain to `1.22.7` on `v0.38.x` (#4065) * feat(mempool/metrics): Add new `evicted_txs` metric and call unused `rejected_txs` (backport #4019) (#4052) #### PR checklist - [ ] Tests written/updated - [x] Changelog entry added in `.changelog` (we use [unclog](https://github.com/informalsystems/unclog) to manage our changelog) - [X] Updated relevant documentation (`docs/` or `spec/`) and code comments <hr>This is an automatic backport of pull request #4019 done by [Mergify](https://mergify.com). --------- Co-authored-by: Hernán Vanzetto <15466498+hvanz@users.noreply.github.com> Co-authored-by: hvanz <hernan.vanzetto@gmail.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> * build(deps): Bump Go to 1.22 (backport #4059) (#4073) ### Context We are updating CometBFT dependencies to fix new CVE vulnerabilities. Cometbft-db v0.9.5 updates its Go version to 1.22 and updates some of its dependencies vulnerable to CVEs. See its [CHANGELOG](https://github.com/cometbft/cometbft-db/blob/v0.9.x/CHANGELOG.md#v095) ### This Change This PR updates cometbft-db to v0.9.5. --- #### PR checklist ~- [ ] Tests written/updated~ - [ ] Changelog entry added in `.changelog` (we use [unclog](https://github.com/informalsystems/unclog) to manage our changelog) ~- [ ] Updated relevant documentation (`docs/` or `spec/`) and code comments~ <hr>This is an automatic backport of pull request #4059 done by [Mergify](https://mergify.com).<hr>This is an automatic backport of pull request #4072 done by [Mergify](https://mergify.com). --------- Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com> * misc(tools)!: remove `tools` package (backport #2046) (#2073) This is an automatic backport of pull request #2046 done by [Mergify](https://mergify.com). Cherry-pick of 2bbb5c1095e38ad81eff9bff024e8f3f0e054d78 has failed: ``` On branch mergify/bp/v0.38.x/pr-2046 Your branch is up to date with 'origin/v0.38.x'. You are currently cherry-picking commit 2bbb5c109. (fix conflicts and run "git cherry-pick --continue") (use "git cherry-pick --skip" to skip this patch) (use "git cherry-pick --abort" to cancel the cherry-pick operation) Changes to be committed: modified: scripts/mockery_generate.sh deleted: tools/proto/Dockerfile deleted: tools/tools.go modified: types/params.go Unmerged paths: (use "git add/rm <file>..." as appropriate to mark resolution) both modified: go.mod both modified: go.sum deleted by them: tools/README.md ``` To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/github/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally --- <details> <summary>Mergify commands and options</summary> <br /> More conditions and actions can be found in the [documentation](https://docs.mergify.com/). You can also trigger Mergify actions by commenting on this pull request: - `@Mergifyio refresh` will re-evaluate the rules - `@Mergifyio rebase` will rebase this PR on its base branch - `@Mergifyio update` will merge the base branch into this PR - `@Mergifyio backport <destination>` will backport this PR on `<destination>` branch Additionally, on Mergify [dashboard](https://dashboard.mergify.com) you can: - look at your merge queues - generate the Mergify configuration with the config editor. Finally, you can contact us on https://mergify.com </details> --------- Co-authored-by: Jacob Gadikian <jacobgadikian@gmail.com> Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com> * build(deps): Bump gonum.org/v1/gonum from 0.12.0 to 0.15.1 (#3910) Bumps [gonum.org/v1/gonum](https://github.com/gonum/gonum) from 0.12.0 to 0.15.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/gonum/gonum/releases">gonum.org/v1/gonum's releases</a>.</em></p> <blockquote> <h2>v0.15.1</h2> <p>Release v0.15.1 is a bug fix release in the v0.15 branch.</p> <p>Fixes since v0.15.0:</p> <p>b6147192 stat/distuv: correct Gamma Mode() and LogProb(0)/Prob(0) for alpha <= 1 5bc3fec2 mat: fix dst matrix shape check in QR.RTo 354eb431 mat: calculate Q elements lazily when calling QR.At</p> <h2>v0.15.0</h2> <p>Release v0.15.0 is a minor release in the v0.15 branch.</p> <p>Bug fixes/improvements since v0.14.0:</p> <p>269815f0 spatial/curve: new package to constuct 2-, 3- and 4-D Hilbert curves b27ae13f lapack/gonum: add Dptcon 55edfc1d lapack/testlapack: add dlanst 3462e90a lapack/gonum: add Dptsv 44d84c93 lapack/gonum: add Dpttrs c4e3bfbe lapack/gonum: add Dpttrf fa306f21 lapack/gonum: handle NaN and Inf input to Dgecon db43f45c graph/path: do not keep duplicate paths in YenKShortestPaths 5e05b179 lapack/gonum: fix accumulation in Dlassq 606793d4 stat/distmv: add EigenSym interface ff24a548 stat/distmv: add special case in NormalRandCov for mat.EigenSym 83fd3a6d mat: add RawValues and RawQ to EigenSym 999e48d0 mat: make EigenSym satisfy Matrix 71ca02b7 mat: delegate to SolveTo method in *Dense.Solve f560d5cb stat/distmv: add NormalRandCov b2722176 mat: make LQ satisfy Matrix 78bc3a48 mat: add VecDense.Permute 6e2f5c58 lapack/gonum: require exact length of tau in QR routines bd767ae5 mat: don't panic in Dims on zero Cholesky types 45b74210 mat: make QR satisfy Matrix aef3c5f3 mat: make LU satisfy Matrix 2d1137f1 mat: add LU.RowPivots and deprecate LU.Pivot ef75f4dd mat: return U and ColumnPivots from PivotedCholesky 5f74663e mat: add Dense.PermuteRows and PermuteCols ff3e3209 lapack/lapack64: add Geqp3 and clean up docs 7df15c33 lapack/gonum: clean up Dgghrd and its test f0a57a45 lapack/gonum: add Dgghrd and its test 7bed099d lapack/gonum: clean up Dlanhs and its test aa92aa08 spatial/kdtree: update value in place in NKeeper.Keep</p> <h2>v0.14.0</h2> <p>Release v0.14.0 is a minor release in the v0.14 branch.</p> <p>API breaking changes:</p> <p>9e7bb936 graph/path: allow cost-based Yen shortest path calculation</p>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/gonum/gonum/commit/bdcda9a453049449163d160b98285b64ec8093a1"><code>bdcda9a</code></a> graph: use slices package for sorting and reversing slices</li> <li><a href="https://github.com/gonum/gonum/commit/a9b228ed6bdcfafd52ce8ba413595310823a0004"><code>a9b228e</code></a> A+C: add Tristan Nicholls</li> <li><a href="https://github.com/gonum/gonum/commit/1f29d7b1d1724243c9f4a156cb1e16c9cbb15de1"><code>1f29d7b</code></a> mat: calculate Q elements lazily when calling QR.At</li> <li><a href="https://github.com/gonum/gonum/commit/f1a62e187e273b2d99f9c2a04fa8931df9c22947"><code>f1a62e1</code></a> mat: fix dst matrix shape check in QR.RTo</li> <li><a href="https://github.com/gonum/gonum/commit/4cb1c6f4a863dd4bde148d9b8736b7d69af4b75b"><code>4cb1c6f</code></a> ci,mod: update to go1.23</li> <li><a href="https://github.com/gonum/gonum/commit/0c62273e338b91cd9578ed93572c693ba55e1eaa"><code>0c62273</code></a> A+C: add Dirk Müller</li> <li><a href="https://github.com/gonum/gonum/commit/0efa2841bf9d1f6ad3b4f5638089c8d6cc72f51e"><code>0efa284</code></a> A+C: add Tom Payne</li> <li><a href="https://github.com/gonum/gonum/commit/f48364e31d40fb9c3b6de7b7d20223edd6d49779"><code>f48364e</code></a> interp: increase speed of findSegment</li> <li><a href="https://github.com/gonum/gonum/commit/1dd194f95b64cda4727b9548bcd2471b4372c7c8"><code>1dd194f</code></a> stat/distuv: correct Gamma Mode doc comment</li> <li><a href="https://github.com/gonum/gonum/commit/35bb474ac513c77971be8e1e9ab2bd1eaca07c79"><code>35bb474</code></a> stat/distuv: correct Gamma Mode() and LogProb(0)/Prob(0) for alpha <= 1</li> <li>Additional commits viewable in <a href="https://github.com/gonum/gonum/compare/v0.12.0...v0.15.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gonum.org/v1/gonum&package-manager=go_modules&previous-version=0.12.0&new-version=0.15.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): Bump bufbuild/buf-setup-action from 1.40.1 to 1.41.0 (#4096) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.40.1 to 1.41.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bufbuild/buf-setup-action/releases">bufbuild/buf-setup-action's releases</a>.</em></p> <blockquote> <h2>v1.41.0</h2> <p>Release v1.41.0</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/2881ede27923557cb71f4ddc8954905c2639d1fb"><code>2881ede</code></a> Release v1.41.0 (<a href="https://redirect.github.com/bufbuild/buf-setup-action/issues/224">#224</a>)</li> <li>See full diff in <a href="https://github.com/bufbuild/buf-setup-action/compare/v1.40.1...v1.41.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bufbuild/buf-setup-action&package-manager=github_actions&previous-version=1.40.1&new-version=1.41.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix(mempool): change "mempool is full" log level to debug (backport #4123) (#4145) it happens in benchmark or production when traffic is high, the log frequency is very high because it's triggered by p2p tx propagation message. Solution: - change it to debug level <hr>This is an automatic backport of pull request #4123 done by [Mergify](https://mergify.com). --------- Co-authored-by: yihuang <yi.codeplayer@gmail.com> Co-authored-by: Andy Nogueira <me@andynogueira.dev> * build(deps): Bump bufbuild/buf-setup-action from 1.41.0 to 1.42.0 (#4160) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.41.0 to 1.42.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bufbuild/buf-setup-action/releases">bufbuild/buf-setup-action's releases</a>.</em></p> <blockquote> <h2>v1.42.0</h2> <p>Release v1.42.0</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/a8b4a18369a5feb07d4bf9cb2b24f81d105d7bab"><code>a8b4a18</code></a> Release v1.42.0 (<a href="https://redirect.github.com/bufbuild/buf-setup-action/issues/225">#225</a>)</li> <li>See full diff in <a href="https://github.com/bufbuild/buf-setup-action/compare/v1.41.0...v1.42.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bufbuild/buf-setup-action&package-manager=github_actions&previous-version=1.41.0&new-version=1.42.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): Bump docker/build-push-action from 6.7.0 to 6.8.0 (#4194) Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.7.0 to 6.8.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/build-push-action/releases">docker/build-push-action's releases</a>.</em></p> <blockquote> <h2>v6.8.0</h2> <ul> <li>Bump <code>@docker/actions-toolkit</code> from 0.37.1 to 0.38.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1230">docker/build-push-action#1230</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push-action/compare/v6.7.0...v6.8.0">https://github.com/docker/build-push-action/compare/v6.7.0...v6.8.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/build-push-action/commit/32945a339266b759abcbdc89316275140b0fc960"><code>32945a3</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/1230">#1230</a> from docker/dependabot/npm_and_yarn/docker/actions-t...</li> <li><a href="https://github.com/docker/build-push-action/commit/e0fe9cf0f26132beab7b62929bd647eef9e7df31"><code>e0fe9cf</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/build-push-action/commit/8f1ff6bf9a836299c21b10f942be49efb52a832c"><code>8f1ff6b</code></a> chore(deps): Bump <code>@docker/actions-toolkit</code> from 0.37.1 to 0.38.0</li> <li>See full diff in <a href="https://github.com/docker/build-push-action/compare/v6.7.0...v6.8.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/build-push-action&package-manager=github_actions&previous-version=6.7.0&new-version=6.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): Bump github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0 (#4207) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.11.0 to 5.12.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/go-git/go-git/releases">github.com/go-git/go-git/v5's releases</a>.</em></p> <blockquote> <h2>v5.12.0</h2> <h2>What's Changed</h2> <ul> <li>git: Worktree.AddWithOptions: add skipStatus option when providing a specific path by <a href="https://github.com/moranCohen26"><code>@moranCohen26</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/994">go-git/go-git#994</a></li> <li>git: Signer: fix usage of crypto.Signer interface by <a href="https://github.com/wlynch"><code>@wlynch</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/1029">go-git/go-git#1029</a></li> <li>git: Remote, fetch, adds the prune option. by <a href="https://github.com/juliens"><code>@juliens</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/366">go-git/go-git#366</a></li> <li>git: Add crypto.Signer option to CommitOptions. by <a href="https://github.com/wlynch"><code>@wlynch</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/996">go-git/go-git#996</a></li> <li>git: Worktree checkout tag hash id (<a href="https://redirect.github.com/go-git/go-git/issues/959">#959</a>) by <a href="https://github.com/aymanbagabas"><code>@aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/966">go-git/go-git#966</a></li> <li>git: Worktree, Don't panic on empty or root path when checking if it is valid by <a href="https://github.com/tim775"><code>@tim775</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/1042">go-git/go-git#1042</a></li> <li>git: Add commit validation for Reset by <a href="https://github.com/pjbgf"><code>@pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/1048">go-git/go-git#1048</a></li> <li>git: worktree_commit, Fix amend commit to apply changes. Fixes <a href="https://redirect.github.com/go-git/go-git/issues/1024">#1024</a> by <a href="https://github.com/onee-only"><code>@onee-only</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/1045">go-git/go-git#1045</a></li> <li>git: Implement Merge function with initial <code>FastForwardMerge</code> support by <a href="https://github.com/pjbgf"><code>@pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/1044">go-git/go-git#1044</a></li> <li>plumbing: object, Make first commit visible on logs filtered with filename. Fixes <a href="https://redirect.github.com/go-git/go-git/issues/191">#191</a> by <a href="https://github.com/onee-only"><code>@onee-only</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/1036">go-git/go-git#1036</a></li> <li>plumbing: no panic in printStats function. Fixes <a href="https://redirect.github.com/go-git/go-git/issues/177">#177</a> by <a href="https://github.com/nodivbyzero"><code>@nodivbyzero</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/971">go-git/go-git#971</a></li> <li>plumbing: object, Optimize logging with file. by <a href="https://github.com/onee-only"><code>@onee-only</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/1046">go-git/go-git#1046</a></li> <li>plumbing: object, check legitimacy in (*Tree).Encode by <a href="https://github.com/niukuo"><code>@niukuo</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/967">go-git/go-git#967</a></li> <li>plumbing: format/gitattributes, close file in ReadAttributesFile by <a href="https://github.com/prskr"><code>@prskr</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/1018">go-git/go-git#1018</a></li> <li>plumbing: check setAuth error. Fixes <a href="https://redirect.github.com/go-git/go-git/issues/185">#185</a> by <a href="https://github.com/nodivbyzero"><code>@nodivbyzero</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/969">go-git/go-git#969</a></li> <li>plumbing: object, fix variable defaultUtf8CommitMessageEncoding name spell error by <a href="https://github.com/Jerry-yz"><code>@Jerry-yz</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/987">go-git/go-git#987</a></li> <li>utils: merkletrie, calculate filesystem node's hash lazily. by <a href="https://github.com/candid82"><code>@candid82</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/825">go-git/go-git#825</a></li> <li>utils: update comment in node.go's Hash() by <a href="https://github.com/codablock"><code>@codablock</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/992">go-git/go-git#992</a></li> <li>_example: fix 404 link and added ssh-agent clone link by <a href="https://github.com/grinish21"><code>@grinish21</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/1022">go-git/go-git#1022</a></li> <li>_example: checkout-branch example by <a href="https://github.com/dlambda"><code>@dlambda</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/446">go-git/go-git#446</a></li> <li>_example: example for git clone using ssh-agent by <a href="https://github.com/pjbgf"><code>@pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/998">go-git/go-git#998</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/candid82"><code>@candid82</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/825">go-git/go-git#825</a></li> <li><a href="https://github.com/codablock"><code>@codablock</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/992">go-git/go-git#992</a></li> <li><a href="https://github.com/Jerry-yz"><code>@Jerry-yz</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/987">go-git/go-git#987</a></li> <li><a href="https://github.com/wlynch"><code>@wlynch</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/996">go-git/go-git#996</a></li> <li><a href="https://github.com/moranCohen26"><code>@moranCohen26</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/994">go-git/go-git#994</a></li> <li><a href="https://github.com/grinish21"><code>@grinish21</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/1022">go-git/go-git#1022</a></li> <li><a href="https://github.com/prskr"><code>@prskr</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/1018">go-git/go-git#1018</a></li> <li><a href="https://github.com/dlambda"><code>@dlambda</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/446">go-git/go-git#446</a></li> <li><a href="https://github.com/juliens"><code>@juliens</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/366">go-git/go-git#366</a></li> <li><a href="https://github.com/onee-only"><code>@onee-only</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/1036">go-git/go-git#1036</a></li> <li><a href="https://github.com/tim775"><code>@tim775</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/1042">go-git/go-git#1042</a></li> <li><a href="https://github.com/niukuo"><code>@niukuo</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/967">go-git/go-git#967</a></li> <li><a href="https://github.com/avoidalone"><code>@avoidalone</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/1047">go-git/go-git#1047</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/go-git/go-git/compare/v5.11.0...v5.12.0">https://github.com/go-git/go-git/compare/v5.11.0...v5.12.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/go-git/go-git/commit/302dddeda962e4bb3477a8e4080bc6f5a253e2bb"><code>302ddde</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/1060">#1060</a> from go-git/dependabot/go_modules/github.com/gliderl...</li> <li><a href="https://github.com/go-git/go-git/commit/6bba34deab858ad5d74733686f0a8b4c2940f388"><code>6bba34d</code></a> build: bump github.com/gliderlabs/ssh from 0.3.6 to 0.3.7</li> <li><a href="https://github.com/go-git/go-git/commit/feaeb36df2438dd5f861be2c1041f4e07c126233"><code>feaeb36</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/937">#937</a> from matejrisek/feature/rename-short-fields</li> <li><a href="https://github.com/go-git/go-git/commit/7959a42552a99b2e2df21a6aacafc97b2b5c7457"><code>7959a42</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/1052">#1052</a> from go-git/dependabot/go_modules/github.com/skeema/...</li> <li><a href="https://github.com/go-git/go-git/commit/4c17ce7c6a7936a61cea17bee56daf5d9c2b21e4"><code>4c17ce7</code></a> build: bump github.com/skeema/knownhosts from 1.2.1 to 1.2.2</li> <li><a href="https://github.com/go-git/go-git/commit/3f77e6f0292bdabb6368a42ef0f5fa925ed42f60"><code>3f77e6f</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/1048">#1048</a> from pjbgf/fix-reset-validation</li> <li><a href="https://github.com/go-git/go-git/commit/6af38e000608a795320cd17c99491853f0b8ad3a"><code>6af38e0</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/1047">#1047</a> from avoidalone/master</li> <li><a href="https://github.com/go-git/go-git/commit/e6c3e58198d176c497bb2dba1a2adb9302597676"><code>e6c3e58</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/1044">#1044</a> from pjbgf/ff-merge</li> <li><a href="https://github.com/go-git/go-git/commit/04f7b23cbb85040a276ab2b7d6879223779451fd"><code>04f7b23</code></a> *: fix some comments</li> <li><a href="https://github.com/go-git/go-git/commit/f4f1a876e622c45ed51d05df1298d421a6868fcc"><code>f4f1a87</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/971">#971</a> from nodivbyzero/fix-177-diff-print-file-stats</li> <li>Additional commits viewable in <a href="https://github.com/go-git/go-git/compare/v5.11.0...v5.12.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/go-git/go-git/v5&package-manager=go_modules&previous-version=5.11.0&new-version=5.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): Bump github.com/sasha-s/go-deadlock from 0.3.1 to 0.3.5 (#4205) Bumps [github.com/sasha-s/go-deadlock](https://github.com/sasha-s/go-deadlock) from 0.3.1 to 0.3.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sasha-s/go-deadlock/releases">github.com/sasha-s/go-deadlock's releases</a>.</em></p> <blockquote> <h2>v0.3.3</h2> <h2>What's Changed</h2> <ul> <li>Add missing sync.NewCond wrapper by <a href="https://github.com/ncw"><code>@ncw</code></a> in <a href="https://redirect.github.com/sasha-s/go-deadlock/pull/22">sasha-s/go-deadlock#22</a></li> <li>fixed the comment of Opts.DeadlockTimeout in deadlock.go by <a href="https://github.com/h3n4l"><code>@h3n4l</code></a> in <a href="https://redirect.github.com/sasha-s/go-deadlock/pull/23">sasha-s/go-deadlock#23</a></li> <li>deadlock: Add TryLock wrappers by <a href="https://github.com/jrajahalme"><code>@jrajahalme</code></a> in <a href="https://redirect.github.com/sasha-s/go-deadlock/pull/30">sasha-s/go-deadlock#30</a></li> <li>Reuse timers with sync.Pool by <a href="https://github.com/millfort"><code>@millfort</code></a> in <a href="https://redirect.github.com/sasha-s/go-deadlock/pull/31">sasha-s/go-deadlock#31</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/ncw"><code>@ncw</code></a> made their first contribution in <a href="https://redirect.github.com/sasha-s/go-deadlock/pull/22">sasha-s/go-deadlock#22</a></li> <li><a href="https://github.com/h3n4l"><code>@h3n4l</code></a> made their first contribution in <a href="https://redirect.github.com/sasha-s/go-deadlock/pull/23">sasha-s/go-deadlock#23</a></li> <li><a href="https://github.com/jrajahalme"><code>@jrajahalme</code></a> made their first contribution in <a href="https:…

* build(deps): Bump github.com/minio/highwayhash from 1.0.2 to 1.0.3 (#3914) Bumps [github.com/minio/highwayhash](https://github.com/minio/highwayhash) from 1.0.2 to 1.0.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/minio/highwayhash/releases">github.com/minio/highwayhash's releases</a>.</em></p> <blockquote> <h2>Version v1.0.3</h2> <p>Added support for ARM SVE instructions, resulting in performance improvements over existing NEON implementation.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/minio/highwayhash/commit/030a8b332625f1501d534324055b1de810fe9233"><code>030a8b3</code></a> Disable SVE2 support until tested on real hardware (not just emulator)</li> <li><a href="https://github.com/minio/highwayhash/commit/b2d40df9d11faf657708d4b24a24b7b92c5b23d9"><code>b2d40df</code></a> Fix build on non-ARM architectures</li> <li><a href="https://github.com/minio/highwayhash/commit/ff8131595115a8e3d2af219b1ded0d11658baf2a"><code>ff81315</code></a> Update function for SVE2</li> <li><a href="https://github.com/minio/highwayhash/commit/a48b3f20491775094a4cbb7d93da8ab945c7ecbf"><code>a48b3f2</code></a> Add separate test case for Update function</li> <li><a href="https://github.com/minio/highwayhash/commit/3346a584da73836f01ab720398a8d61999ff35e4"><code>3346a58</code></a> ARM SVE code for update method</li> <li><a href="https://github.com/minio/highwayhash/commit/6a9c19b1156f8704d73a73a2d8ba2ef653988f25"><code>6a9c19b</code></a> Update ARM performance on Graviton3</li> <li><a href="https://github.com/minio/highwayhash/commit/1304c103e59f69c73f8b461d5c65a6bce0b11395"><code>1304c10</code></a> > Warning: 1 issue was detected with this workflow: git checkout HEAD^2 is no...</li> <li><a href="https://github.com/minio/highwayhash/commit/b6f6ef7b89a1265fd1e2cf0ec1c513ec5027de0f"><code>b6f6ef7</code></a> Upgrade CI versions</li> <li><a href="https://github.com/minio/highwayhash/commit/1a96f281b5c687cf18030f723e303c6093a3c3d0"><code>1a96f28</code></a> Bump golang.org/x/sys from 0.0.0-20190130150945-aca44879d564 to 0.1.0</li> <li><a href="https://github.com/minio/highwayhash/commit/9cb37b8cb4e3ed1cf7e0fda944dce3e64c35bddc"><code>9cb37b8</code></a> Fix build tags for newer Go.</li> <li>Additional commits viewable in <a href="https://github.com/minio/highwayhash/compare/v1.0.2...v1.0.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/minio/highwayhash&package-manager=go_modules&previous-version=1.0.2&new-version=1.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> * build(deps): Bump github.com/prometheus/common from 0.55.0 to 0.57.0 (#3911) Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.55.0 to 0.57.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/prometheus/common/releases">github.com/prometheus/common's releases</a>.</em></p> <blockquote> <h2>v0.57.0</h2> <h2>What's Changed</h2> <ul> <li>feat: new promslog and promslog/flag packages to wrap log/slog by <a href="https://github.com/tjhop"><code>@tjhop</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/677">prometheus/common#677</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/tjhop"><code>@tjhop</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/common/pull/677">prometheus/common#677</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/common/compare/v0.56.0...v0.57.0">https://github.com/prometheus/common/compare/v0.56.0...v0.57.0</a></p> <h2>v0.56.0</h2> <h2>What's Changed</h2> <ul> <li>Don't always fetch a OAuth2 token, if the secret from a file didn't change by <a href="https://github.com/multani"><code>@multani</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/647">prometheus/common#647</a></li> <li>remove dependency to github.com/prometheus/client_golang by <a href="https://github.com/ilius"><code>@ilius</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/662">prometheus/common#662</a></li> <li>Bump github.com/aws/aws-sdk-go from 1.54.7 to 1.54.11 in /sigv4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/661">prometheus/common#661</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@prombot</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/664">prometheus/common#664</a></li> <li>Revert <a href="https://redirect.github.com/prometheus/common/issues/576">#576</a> and add deprecation notice by <a href="https://github.com/SuperQ"><code>@SuperQ</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/665">prometheus/common#665</a></li> <li>Bump golang.org/x/net from 0.26.0 to 0.27.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/667">prometheus/common#667</a></li> <li>use basic string in IsValidLegacyMetricName by <a href="https://github.com/ywwg"><code>@ywwg</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/668">prometheus/common#668</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@prombot</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/672">prometheus/common#672</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@prombot</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/674">prometheus/common#674</a></li> <li>Bump github.com/aws/aws-sdk-go from 1.54.19 to 1.55.5 in /sigv4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/671">prometheus/common#671</a></li> <li>sigv4: support nil body by <a href="https://github.com/roidelapluie"><code>@roidelapluie</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/673">prometheus/common#673</a></li> <li>Fix overflows of untyped int constants on 32-bit by <a href="https://github.com/dswarbrick"><code>@dswarbrick</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/675">prometheus/common#675</a></li> <li>Update client_golang by <a href="https://github.com/SuperQ"><code>@SuperQ</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/676">prometheus/common#676</a></li> <li>Update golangci lint by <a href="https://github.com/roidelapluie"><code>@roidelapluie</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/679">prometheus/common#679</a></li> <li>expfmt: Add UTF-8 syntax support in text_parse.go by <a href="https://github.com/fedetorres93"><code>@fedetorres93</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/670">prometheus/common#670</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@prombot</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/681">prometheus/common#681</a></li> <li>fix(utf8): provide a method for explicitly checking label names for legacy validity by <a href="https://github.com/ywwg"><code>@ywwg</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/682">prometheus/common#682</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/multani"><code>@multani</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/common/pull/647">prometheus/common#647</a></li> <li><a href="https://github.com/ilius"><code>@ilius</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/common/pull/662">prometheus/common#662</a></li> <li><a href="https://github.com/dswarbrick"><code>@dswarbrick</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/common/pull/675">prometheus/common#675</a></li> <li><a href="https://github.com/fedetorres93"><code>@fedetorres93</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/common/pull/670">prometheus/common#670</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/common/compare/v0.55.0...v0.56.0">https://github.com/prometheus/common/compare/v0.55.0...v0.56.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/prometheus/common/commit/9bbc9cb5e3685e0dbb85461dde3385509a507550"><code>9bbc9cb</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/common/issues/677">#677</a> from tjhop/feat/add-promslog-pkg</li> <li><a href="https://github.com/prometheus/common/commit/6ea2584af7f3a2c136ccf2f7844d9d7015680479"><code>6ea2584</code></a> feat: new promslog and promslog/flag packages to wrap log/slog</li> <li><a href="https://github.com/prometheus/common/commit/6623230f2fa6d06f840b03469d6d786172c4a74f"><code>6623230</code></a> Provide a method for explicitly checking label names for legacy validity. (<a href="https://redirect.github.com/prometheus/common/issues/682">#682</a>)</li> <li><a href="https://github.com/prometheus/common/commit/19d07967696b0039bc5b76fc1e72f2be289961e1"><code>19d0796</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/common/issues/681">#681</a> from prometheus/repo_sync</li> <li><a href="https://github.com/prometheus/common/commit/29a2d2c75f018a6b6da1309e44b8210a7c48406e"><code>29a2d2c</code></a> Update common Prometheus files</li> <li><a href="https://github.com/prometheus/common/commit/8968b6c1d012c44709ce098644b57d681a5eb571"><code>8968b6c</code></a> expfmt: Add UTF-8 syntax support in text_parse.go (<a href="https://redirect.github.com/prometheus/common/issues/670">#670</a>)</li> <li><a href="https://github.com/prometheus/common/commit/cd4bcc02f4479542b7b360049c2ce7db52d3163d"><code>cd4bcc0</code></a> Update golangci lint (<a href="https://redirect.github.com/prometheus/common/issues/679">#679</a>)</li> <li><a href="https://github.com/prometheus/common/commit/2cac84e1490776cacb3f46f14e7adbaf8dcb4596"><code>2cac84e</code></a> Update client_golang (<a href="https://redirect.github.com/prometheus/common/issues/676">#676</a>)</li> <li><a href="https://github.com/prometheus/common/commit/79c0459359c4f5fa2113241540dca24054c1b348"><code>79c0459</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/common/issues/675">#675</a> from dswarbrick/fix-32bit-overflows</li> <li><a href="https://github.com/prometheus/common/commit/008d7b8628857284ef9162e41a8734f1e479dd80"><code>008d7b8</code></a> Fix overflows of untyped int constants on 32-bit</li> <li>Additional commits viewable in <a href="https://github.com/prometheus/common/compare/v0.55.0...v0.57.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/prometheus/common&package-manager=go_modules&previous-version=0.55.0&new-version=0.57.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> * build(deps): Bump bufbuild/buf-setup-action from 1.38.0 to 1.39.0 (#3938) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.38.0 to 1.39.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bufbuild/buf-setup-action/releases">bufbuild/buf-setup-action's releases</a>.</em></p> <blockquote> <h2>v1.39.0</h2> <p>Release v1.39.0</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/54abbed4fe8d8d45173eca4798b0c39a53a7b658"><code>54abbed</code></a> Release v1.39.0 (<a href="https://redirect.github.com/bufbuild/buf-setup-action/issues/221">#221</a>)</li> <li>See full diff in <a href="https://github.com/bufbuild/buf-setup-action/compare/v1.38.0...v1.39.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bufbuild/buf-setup-action&package-manager=github_actions&previous-version=1.38.0&new-version=1.39.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> * build(deps): Bump slackapi/slack-github-action from 1.26.0 to 1.27.0 (#3939) Bumps [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) from 1.26.0 to 1.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/slackapi/slack-github-action/releases">slackapi/slack-github-action's releases</a>.</em></p> <blockquote> <h2>Slack Send V1.27.0</h2> <h2>What's changed</h2> <p>This release introduces an optional <code>payload-delimiter</code> parameter for flattening nested objects with a customized delimiter before the payload is sent to Slack Workflow Builder when using workflow webhook triggers.</p> <pre lang="diff"><code> - name: Send a custom flattened payload uses: slackapi/slack-github-action@v1.27.0 + with: + payload-delimiter: "_" env: SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }} </code></pre> <p>Setting this value to an underscore (<code>_</code>) is recommended when using nested inputs within Workflow Builder to match expected input formats of Workflow Builder, but the actual value can be changed to something else! This "flattening" behavior <strong>did</strong> exist prior to this version, but used a period (<code>.</code>) which is not valid for webook inputs in Workflow Builder.</p>  <p>The resulting output of flattened objects is not always clear, but the following can hopefully serve as a quick reference as well as <a href="https://github.com/slackapi/slack-github-action/blob/5d1fb07d3c4f410b8d278134c714edff31264beb/test/slack-send-test.js#L264-L319">these specs</a> when using <code>_</code> as the delimiter:</p> <p><strong>Input</strong>:</p> <pre lang="json"><code>{ "apples": "tree", "bananas": { "truthiness": true } } </code></pre> <p><strong>Output</strong>:</p> <pre lang="json"><code>{ "apples": "tree", "bananas_truthiness": "true" } </code></pre> <p>Notice that <code>bananas_truthiness</code> is also stringified in this process, as part of updating values to match the expected inputs of Workflow Builder!</p>  <h2>Changes</h2> <p>In addition to the changes above, the following lists all of the changes since the prior version with the <strong>complete changelog</strong> changes found here: <a href="https://github.com/slackapi/slack-github-action/compare/v1.26.0...v1.27.0">https://github.com/slackapi/slack-github-action/compare/v1.26.0...v1.27.0</a></p> <h4>🎁 Enhancements</h4>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/slackapi/slack-github-action/commit/37ebaef184d7626c5f204ab8d3baff4262dd30f0"><code>37ebaef</code></a> Automatic compilation</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/5d1fb07d3c4f410b8d278134c714edff31264beb"><code>5d1fb07</code></a> chore(release): tag version 1.27.0</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/3bc06716971bb1dc2899ccd0332da69b8b778356"><code>3bc0671</code></a> chore(deps): bump axios to 1.7.5 (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/332">#332</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/b452451af72f751bd902edfbbc084a8b2e6e5031"><code>b452451</code></a> feat: make the payload delimiter configurable for workflow webhook triggers (...</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/c50e848fe18b1da5665e19286e3c9b86ad1b3bf5"><code>c50e848</code></a> build(deps-dev): bump mocha from 10.5.2 to 10.7.0 (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/328">#328</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/e4a9c4b6853f8b64ba9fee848d3f30198f9427c1"><code>e4a9c4b</code></a> build(deps): bump <code>@slack/web-api</code> from 7.2.0 to 7.3.2 (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/327">#327</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/9a7f0fa18816ae797b801ec2c27a04499fc2381b"><code>9a7f0fa</code></a> build(deps-dev): bump chai from 4.4.1 to 4.5.0 (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/326">#326</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/73b7062b8dccf12c0d62626d19953ea628e418ba"><code>73b7062</code></a> build(deps-dev): bump eslint-plugin-jsdoc from 48.5.0 to 48.10.2 (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/325">#325</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/3d5207b5cf109bd2640ec20613ed7f29ab46e853"><code>3d5207b</code></a> build(deps): bump https-proxy-agent from 7.0.4 to 7.0.5 (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/320">#320</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/4e15b6a964ca554d1a7b7a56850baa97e8316be2"><code>4e15b6a</code></a> build(deps): bump <code>@slack/web-api</code> from 7.0.4 to 7.2.0 (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/323">#323</a>)</li> <li>Additional commits viewable in <a href="https://github.com/slackapi/slack-github-action/compare/v1.26.0...v1.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=slackapi/slack-github-action&package-manager=github_actions&previous-version=1.26.0&new-version=1.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> * build(deps): Bump bufbuild/buf-setup-action from 1.39.0 to 1.40.1 (#4024) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.39.0 to 1.40.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bufbuild/buf-setup-action/releases">bufbuild/buf-setup-action's releases</a>.</em></p> <blockquote> <h2>v1.40.1</h2> <p>Release v1.40.1</p> <h2>v1.40.0</h2> <p>Release v1.40.0</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/2dbfb63c8b0cc4f1707ba5dd23017e998a25b2f0"><code>2dbfb63</code></a> Release v1.40.1 (<a href="https://redirect.github.com/bufbuild/buf-setup-action/issues/223">#223</a>)</li> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/51c53201f0da34af376e0b998c889ebb2813d479"><code>51c5320</code></a> Release v1.40.0 (<a href="https://redirect.github.com/bufbuild/buf-setup-action/issues/222">#222</a>)</li> <li>See full diff in <a href="https://github.com/bufbuild/buf-setup-action/compare/v1.39.0...v1.40.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bufbuild/buf-setup-action&package-manager=github_actions&previous-version=1.39.0&new-version=1.40.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore: Bump go toolchain to `1.22.7` on `v0.38.x` (#4065) * feat(mempool/metrics): Add new `evicted_txs` metric and call unused `rejected_txs` (backport #4019) (#4052) #### PR checklist - [ ] Tests written/updated - [x] Changelog entry added in `.changelog` (we use [unclog](https://github.com/informalsystems/unclog) to manage our changelog) - [X] Updated relevant documentation (`docs/` or `spec/`) and code comments <hr>This is an automatic backport of pull request #4019 done by [Mergify](https://mergify.com). --------- Co-authored-by: Hernán Vanzetto <15466498+hvanz@users.noreply.github.com> Co-authored-by: hvanz <hernan.vanzetto@gmail.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> * build(deps): Bump Go to 1.22 (backport #4059) (#4073) ### Context We are updating CometBFT dependencies to fix new CVE vulnerabilities. Cometbft-db v0.9.5 updates its Go version to 1.22 and updates some of its dependencies vulnerable to CVEs. See its [CHANGELOG](https://github.com/cometbft/cometbft-db/blob/v0.9.x/CHANGELOG.md#v095) ### This Change This PR updates cometbft-db to v0.9.5. --- #### PR checklist ~- [ ] Tests written/updated~ - [ ] Changelog entry added in `.changelog` (we use [unclog](https://github.com/informalsystems/unclog) to manage our changelog) ~- [ ] Updated relevant documentation (`docs/` or `spec/`) and code comments~ <hr>This is an automatic backport of pull request #4059 done by [Mergify](https://mergify.com).<hr>This is an automatic backport of pull request #4072 done by [Mergify](https://mergify.com). --------- Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com> * misc(tools)!: remove `tools` package (backport #2046) (#2073) This is an automatic backport of pull request #2046 done by [Mergify](https://mergify.com). Cherry-pick of 2bbb5c1095e38ad81eff9bff024e8f3f0e054d78 has failed: ``` On branch mergify/bp/v0.38.x/pr-2046 Your branch is up to date with 'origin/v0.38.x'. You are currently cherry-picking commit 2bbb5c109. (fix conflicts and run "git cherry-pick --continue") (use "git cherry-pick --skip" to skip this patch) (use "git cherry-pick --abort" to cancel the cherry-pick operation) Changes to be committed: modified: scripts/mockery_generate.sh deleted: tools/proto/Dockerfile deleted: tools/tools.go modified: types/params.go Unmerged paths: (use "git add/rm <file>..." as appropriate to mark resolution) both modified: go.mod both modified: go.sum deleted by them: tools/README.md ``` To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/github/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally --- <details> <summary>Mergify commands and options</summary> <br /> More conditions and actions can be found in the [documentation](https://docs.mergify.com/). You can also trigger Mergify actions by commenting on this pull request: - `@Mergifyio refresh` will re-evaluate the rules - `@Mergifyio rebase` will rebase this PR on its base branch - `@Mergifyio update` will merge the base branch into this PR - `@Mergifyio backport <destination>` will backport this PR on `<destination>` branch Additionally, on Mergify [dashboard](https://dashboard.mergify.com) you can: - look at your merge queues - generate the Mergify configuration with the config editor. Finally, you can contact us on https://mergify.com </details> --------- Co-authored-by: Jacob Gadikian <jacobgadikian@gmail.com> Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com> * build(deps): Bump gonum.org/v1/gonum from 0.12.0 to 0.15.1 (#3910) Bumps [gonum.org/v1/gonum](https://github.com/gonum/gonum) from 0.12.0 to 0.15.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/gonum/gonum/releases">gonum.org/v1/gonum's releases</a>.</em></p> <blockquote> <h2>v0.15.1</h2> <p>Release v0.15.1 is a bug fix release in th 10000 e v0.15 branch.</p> <p>Fixes since v0.15.0:</p> <p>b6147192 stat/distuv: correct Gamma Mode() and LogProb(0)/Prob(0) for alpha <= 1 5bc3fec2 mat: fix dst matrix shape check in QR.RTo 354eb431 mat: calculate Q elements lazily when calling QR.At</p> <h2>v0.15.0</h2> <p>Release v0.15.0 is a minor release in the v0.15 branch.</p> <p>Bug fixes/improvements since v0.14.0:</p> <p>269815f0 spatial/curve: new package to constuct 2-, 3- and 4-D Hilbert curves b27ae13f lapack/gonum: add Dptcon 55edfc1d lapack/testlapack: add dlanst 3462e90a lapack/gonum: add Dptsv 44d84c93 lapack/gonum: add Dpttrs c4e3bfbe lapack/gonum: add Dpttrf fa306f21 lapack/gonum: handle NaN and Inf input to Dgecon db43f45c graph/path: do not keep duplicate paths in YenKShortestPaths 5e05b179 lapack/gonum: fix accumulation in Dlassq 606793d4 stat/distmv: add EigenSym interface ff24a548 stat/distmv: add special case in NormalRandCov for mat.EigenSym 83fd3a6d mat: add RawValues and RawQ to EigenSym 999e48d0 mat: make EigenSym satisfy Matrix 71ca02b7 mat: delegate to SolveTo method in *Dense.Solve f560d5cb stat/distmv: add NormalRandCov b2722176 mat: make LQ satisfy Matrix 78bc3a48 mat: add VecDense.Permute 6e2f5c58 lapack/gonum: require exact length of tau in QR routines bd767ae5 mat: don't panic in Dims on zero Cholesky types 45b74210 mat: make QR satisfy Matrix aef3c5f3 mat: make LU satisfy Matrix 2d1137f1 mat: add LU.RowPivots and deprecate LU.Pivot ef75f4dd mat: return U and ColumnPivots from PivotedCholesky 5f74663e mat: add Dense.PermuteRows and PermuteCols ff3e3209 lapack/lapack64: add Geqp3 and clean up docs 7df15c33 lapack/gonum: clean up Dgghrd and its test f0a57a45 lapack/gonum: add Dgghrd and its test 7bed099d lapack/gonum: clean up Dlanhs and its test aa92aa08 spatial/kdtree: update value in place in NKeeper.Keep</p> <h2>v0.14.0</h2> <p>Release v0.14.0 is a minor release in the v0.14 branch.</p> <p>API breaking changes:</p> <p>9e7bb936 graph/path: allow cost-based Yen shortest path calculation</p>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/gonum/gonum/commit/bdcda9a453049449163d160b98285b64ec8093a1"><code>bdcda9a</code></a> graph: use slices package for sorting and reversing slices</li> <li><a href="https://github.com/gonum/gonum/commit/a9b228ed6bdcfafd52ce8ba413595310823a0004"><code>a9b228e</code></a> A+C: add Tristan Nicholls</li> <li><a href="https://github.com/gonum/gonum/commit/1f29d7b1d1724243c9f4a156cb1e16c9cbb15de1"><code>1f29d7b</code></a> mat: calculate Q elements lazily when calling QR.At</li> <li><a href="https://github.com/gonum/gonum/commit/f1a62e187e273b2d99f9c2a04fa8931df9c22947"><code>f1a62e1</code></a> mat: fix dst matrix shape check in QR.RTo</li> <li><a href="https://github.com/gonum/gonum/commit/4cb1c6f4a863dd4bde148d9b8736b7d69af4b75b"><code>4cb1c6f</code></a> ci,mod: update to go1.23</li> <li><a href="https://github.com/gonum/gonum/commit/0c62273e338b91cd9578ed93572c693ba55e1eaa"><code>0c62273</code></a> A+C: add Dirk Müller</li> <li><a href="https://github.com/gonum/gonum/commit/0efa2841bf9d1f6ad3b4f5638089c8d6cc72f51e"><code>0efa284</code></a> A+C: add Tom Payne</li> <li><a href="https://github.com/gonum/gonum/commit/f48364e31d40fb9c3b6de7b7d20223edd6d49779"><code>f48364e</code></a> interp: increase speed of findSegment</li> <li><a href="https://github.com/gonum/gonum/commit/1dd194f95b64cda4727b9548bcd2471b4372c7c8"><code>1dd194f</code></a> stat/distuv: correct Gamma Mode doc comment</li> <li><a href="https://github.com/gonum/gonum/commit/35bb474ac513c77971be8e1e9ab2bd1eaca07c79"><code>35bb474</code></a> stat/distuv: correct Gamma Mode() and LogProb(0)/Prob(0) for alpha <= 1</li> <li>Additional commits viewable in <a href="https://github.com/gonum/gonum/compare/v0.12.0...v0.15.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gonum.org/v1/gonum&package-manager=go_modules&previous-version=0.12.0&new-version=0.15.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): Bump bufbuild/buf-setup-action from 1.40.1 to 1.41.0 (#4096) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.40.1 to 1.41.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bufbuild/buf-setup-action/releases">bufbuild/buf-setup-action's releases</a>.</em></p> <blockquote> <h2>v1.41.0</h2> <p>Release v1.41.0</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/2881ede27923557cb71f4ddc8954905c2639d1fb"><code>2881ede</code></a> Release v1.41.0 (<a href="https://redirect.github.com/bufbuild/buf-setup-action/issues/224">#224</a>)</li> <li>See full diff in <a href="https://github.com/bufbuild/buf-setup-action/compare/v1.40.1...v1.41.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bufbuild/buf-setup-action&package-manager=github_actions&previous-version=1.40.1&new-version=1.41.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix(mempool): change "mempool is full" log level to debug (backport #4123) (#4145) it happens in benchmark or production when traffic is high, the log frequency is very high because it's triggered by p2p tx propagation message. Solution: - change it to debug level <hr>This is an automatic backport of pull request #4123 done by [Mergify](https://mergify.com). --------- Co-authored-by: yihuang <yi.codeplayer@gmail.com> Co-authored-by: Andy Nogueira <me@andynogueira.dev> * build(deps): Bump bufbuild/buf-setup-action from 1.41.0 to 1.42.0 (#4160) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.41.0 to 1.42.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bufbuild/buf-setup-action/releases">bufbuild/buf-setup-action's releases</a>.</em></p> <blockquote> <h2>v1.42.0</h2> <p>Release v1.42.0</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/a8b4a18369a5feb07d4bf9cb2b24f81d105d7bab"><code>a8b4a18</code></a> Release v1.42.0 (<a href="https://redirect.github.com/bufbuild/buf-setup-action/issues/225">#225</a>)</li> <li>See full diff in <a href="https://github.com/bufbuild/buf-setup-action/compare/v1.41.0...v1.42.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bufbuild/buf-setup-action&package-manager=github_actions&previous-version=1.41.0&new-version=1.42.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): Bump docker/build-push-action from 6.7.0 to 6.8.0 (#4194) Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.7.0 to 6.8.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/build-push-action/releases">docker/build-push-action's releases</a>.</em></p> <blockquote> <h2>v6.8.0</h2> <ul> <li>Bump <code>@docker/actions-toolkit</code> from 0.37.1 to 0.38.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1230">docker/build-push-action#1230</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push-action/compare/v6.7.0...v6.8.0">https://github.com/docker/build-push-action/compare/v6.7.0...v6.8.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/build-push-action/commit/32945a339266b759abcbdc89316275140b0fc960"><code>32945a3</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/1230">#1230</a> from docker/dependabot/npm_and_yarn/docker/actions-t...</li> <li><a href="https://github.com/docker/build-push-action/commit/e0fe9cf0f26132beab7b62929bd647eef9e7df31"><code>e0fe9cf</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/build-push-action/commit/8f1ff6bf9a836299c21b10f942be49efb52a832c"><code>8f1ff6b</code></a> chore(deps): Bump <code>@docker/actions-toolkit</code> from 0.37.1 to 0.38.0</li> <li>See full diff in <a href="https://github.com/docker/build-push-action/compare/v6.7.0...v6.8.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/build-push-action&package-manager=github_actions&previous-version=6.7.0&new-version=6.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): Bump github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0 (#4207) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.11.0 to 5.12.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/go-git/go-git/releases">github.com/go-git/go-git/v5's releases</a>.</em></p> <blockquote> <h2>v5.12.0</h2> <h2>What's Changed</h2> <ul> <li>git: Worktree.AddWithOptions: add skipStatus option when providing a specific path by <a href="https://github.com/moranCohen26"><code>@moranCohen26</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/994">go-git/go-git#994</a></li> <li>git: Signer: fix usage of crypto.Signer interface by <a href="https://github.com/wlynch"><code>@wlynch</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/1029">go-git/go-git#1029</a></li> <li>git: Remote, fetch, adds the prune option. by <a href="https://github.com/juliens"><code>@juliens</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/366">go-git/go-git#366</a></li> <li>git: Add crypto.Signer option to CommitOptions. by <a href="https://github.com/wlynch"><code>@wlynch</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/996">go-git/go-git#996</a></li> <li>git: Worktree checkout tag hash id (<a href="https://redirect.github.com/go-git/go-git/issues/959">#959</a>) by <a href="https://github.com/aymanbagabas"><code>@aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/966">go-git/go-git#966</a></li> <li>git: Worktree, Don't panic on empty or root path when checking if it is valid by <a href="https://github.com/tim775"><code>@tim775</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/1042">go-git/go-git#1042</a></li> <li>git: Add commit validation for Reset by <a href="https://github.com/pjbgf"><code>@pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/1048">go-git/go-git#1048</a></li> <li>git: worktree_commit, Fix amend commit to apply changes. Fixes <a href="https://redirect.github.com/go-git/go-git/issues/1024">#1024</a> by <a href="https://github.com/onee-only"><code>@onee-only</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/1045">go-git/go-git#1045</a></li> <li>git: Implement Merge function with initial <code>FastForwardMerge</code> support by <a href="https://github.com/pjbgf"><code>@pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/1044">go-git/go-git#1044</a></li> <li>plumbing: object, Make first commit visible on logs filtered with filename. Fixes <a href="https://redirect.github.com/go-git/go-git/issues/191">#191</a> by <a href="https://github.com/onee-only"><code>@onee-only</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/1036">go-git/go-git#1036</a></li> <li>plumbing: no panic in printStats function. Fixes <a href="https://redirect.github.com/go-git/go-git/issues/177">#177</a> by <a href="https://github.com/nodivbyzero"><code>@nodivbyzero</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/971">go-git/go-git#971</a></li> <li>plumbing: object, Optimize logging with file. by <a href="https://github.com/onee-only"><code>@onee-only</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/1046">go-git/go-git#1046</a></li> <li>plumbing: object, check legitimacy in (*Tree).Encode by <a href="https://github.com/niukuo"><code>@niukuo</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/967">go-git/go-git#967</a></li> <li>plumbing: format/gitattributes, close file in ReadAttributesFile by <a href="https://github.com/prskr"><code>@prskr</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/1018">go-git/go-git#1018</a></li> <li>plumbing: check setAuth error. Fixes <a href="https://redirect.github.com/go-git/go-git/issues/185">#185</a> by <a href="https://github.com/nodivbyzero"><code>@nodivbyzero</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/969">go-git/go-git#969</a></li> <li>plumbing: object, fix variable defaultUtf8CommitMessageEncoding name spell error by <a href="https://github.com/Jerry-yz"><code>@Jerry-yz</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/987">go-git/go-git#987</a></li> <li>utils: merkletrie, calculate filesystem node's hash lazily. by <a href="https://github.com/candid82"><code>@candid82</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/825">go-git/go-git#825</a></li> <li>utils: update comment in node.go's Hash() by <a href="https://github.com/codablock"><code>@codablock</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/992">go-git/go-git#992</a></li> <li>_example: fix 404 link and added ssh-agent clone link by <a href="https://github.com/grinish21"><code>@grinish21</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/1022">go-git/go-git#1022</a></li> <li>_example: checkout-branch example by <a href="https://github.com/dlambda"><code>@dlambda</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/446">go-git/go-git#446</a></li> <li>_example: example for git clone using ssh-agent by <a href="https://github.com/pjbgf"><code>@pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/998">go-git/go-git#998</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/candid82"><code>@candid82</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/825">go-git/go-git#825</a></li> <li><a href="https://github.com/codablock"><code>@codablock</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/992">go-git/go-git#992</a></li> <li><a href="https://github.com/Jerry-yz"><code>@Jerry-yz</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/987">go-git/go-git#987</a></li> <li><a href="https://github.com/wlynch"><code>@wlynch</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/996">go-git/go-git#996</a></li> <li><a href="https://github.com/moranCohen26"><code>@moranCohen26</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/994">go-git/go-git#994</a></li> <li><a href="https://github.com/grinish21"><code>@grinish21</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/1022">go-git/go-git#1022</a></li> <li><a href="https://github.com/prskr"><code>@prskr</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/1018">go-git/go-git#1018</a></li> <li><a href="https://github.com/dlambda"><code>@dlambda</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/446">go-git/go-git#446</a></li> <li><a href="https://github.com/juliens"><code>@juliens</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/366">go-git/go-git#366</a></li> <li><a href="https://github.com/onee-only"><code>@onee-only</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/1036">go-git/go-git#1036</a></li> <li><a href="https://github.com/tim775"><code>@tim775</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/1042">go-git/go-git#1042</a></li> <li><a href="https://github.com/niukuo"><code>@niukuo</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/967">go-git/go-git#967</a></li> <li><a href="https://github.com/avoidalone"><code>@avoidalone</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/1047">go-git/go-git#1047</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/go-git/go-git/compare/v5.11.0...v5.12.0">https://github.com/go-git/go-git/compare/v5.11.0...v5.12.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/go-git/go-git/commit/302dddeda962e4bb3477a8e4080bc6f5a253e2bb"><code>302ddde</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/1060">#1060</a> from go-git/dependabot/go_modules/github.com/gliderl...</li> <li><a href="https://github.com/go-git/go-git/commit/6bba34deab858ad5d74733686f0a8b4c2940f388"><code>6bba34d</code></a> build: bump github.com/gliderlabs/ssh from 0.3.6 to 0.3.7</li> <li><a href="https://github.com/go-git/go-git/commit/feaeb36df2438dd5f861be2c1041f4e07c126233"><code>feaeb36</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/937">#937</a> from matejrisek/feature/rename-short-fields</li> <li><a href="https://github.com/go-git/go-git/commit/7959a42552a99b2e2df21a6aacafc97b2b5c7457"><code>7959a42</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/1052">#1052</a> from go-git/dependabot/go_modules/github.com/skeema/...</li> <li><a href="https://github.com/go-git/go-git/commit/4c17ce7c6a7936a61cea17bee56daf5d9c2b21e4"><code>4c17ce7</code></a> build: bump github.com/skeema/knownhosts from 1.2.1 to 1.2.2</li> <li><a href="https://github.com/go-git/go-git/commit/3f77e6f0292bdabb6368a42ef0f5fa925ed42f60"><code>3f77e6f</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/1048">#1048</a> from pjbgf/fix-reset-validation</li> <li><a href="https://github.com/go-git/go-git/commit/6af38e000608a795320cd17c99491853f0b8ad3a"><code>6af38e0</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/1047">#1047</a> from avoidalone/master</li> <li><a href="https://github.com/go-git/go-git/commit/e6c3e58198d176c497bb2dba1a2adb9302597676"><code>e6c3e58</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/1044">#1044</a> from pjbgf/ff-merge</li> <li><a href="https://github.com/go-git/go-git/commit/04f7b23cbb85040a276ab2b7d6879223779451fd"><code>04f7b23</code></a> *: fix some comments</li> <li><a href="https://github.com/go-git/go-git/commit/f4f1a876e622c45ed51d05df1298d421a6868fcc"><code>f4f1a87</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/971">#971</a> from nodivbyzero/fix-177-diff-print-file-stats</li> <li>Additional commits viewable in <a href="https://github.com/go-git/go-git/compare/v5.11.0...v5.12.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/go-git/go-git/v5&package-manager=go_modules&previous-version=5.11.0&new-version=5.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): Bump github.com/sasha-s/go-deadlock from 0.3.1 to 0.3.5 (#4205) Bumps [github.com/sasha-s/go-deadlock](https://github.com/sasha-s/go-deadlock) from 0.3.1 to 0.3.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sasha-s/go-deadlock/releases">github.com/sasha-s/go-deadlock's releases</a>.</em></p> <blockquote> <h2>v0.3.3</h2> <h2>What's Changed</h2> <ul> <li>Add missing sync.NewCond wrapper by <a href="https://github.com/ncw"><code>@ncw</code></a> in <a href="https://redirect.github.com/sasha-s/go-deadlock/pull/22">sasha-s/go-deadlock#22</a></li> <li>fixed the comment of Opts.DeadlockTimeout in deadlock.go by <a href="https://github.com/h3n4l"><code>@h3n4l</code></a> in <a href="https://redirect.github.com/sasha-s/go-deadlock/pull/23">sasha-s/go-deadlock#23</a></li> <li>deadlock: Add TryLock wrappers by <a href="https://github.com/jrajahalme"><code>@jrajahalme</code></a> in <a href="https://redirect.github.com/sasha-s/go-deadlock/pull/30">sasha-s/go-deadlock#30</a></li> <li>Reuse timers with sync.Pool by <a href="https://github.com/millfort"><code>@millfort</code></a> in <a href="https://redirect.github.com/sasha-s/go-deadlock/pull/31">sasha-s/go-deadlock#31</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/ncw"><code>@ncw</code></a> made their first contribution in <a href="https://redirect.github.com/sasha-s/go-deadlock/pull/22">sasha-s/go-deadlock#22</a></li> <li><a href="https://github.com/h3n4l"><code>@h3n4l</code></a> made their first contribution in <a href="https://redirect.github.com/sasha-s/go-deadlock/pull/23">sasha-s/go-deadlock#23</a></li> <li><a href="https://github.com/jrajahalme"><code>@jrajahalme</code></a> made their first contribution in <a href="https://…

* build(deps): Bump github.com/minio/highwayhash from 1.0.2 to 1.0.3 (#3914) Bumps [github.com/minio/highwayhash](https://github.com/minio/highwayhash) from 1.0.2 to 1.0.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/minio/highwayhash/releases">github.com/minio/highwayhash's releases</a>.</em></p> <blockquote> <h2>Version v1.0.3</h2> <p>Added support for ARM SVE instructions, resulting in performance improvements over existing NEON implementation.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/minio/highwayhash/commit/030a8b332625f1501d534324055b1de810fe9233"><code>030a8b3</code></a> Disable SVE2 support until tested on real hardware (not just emulator)</li> <li><a href="https://github.com/minio/highwayhash/commit/b2d40df9d11faf657708d4b24a24b7b92c5b23d9"><code>b2d40df</code></a> Fix build on non-ARM architectures</li> <li><a href="https://github.com/minio/highwayhash/commit/ff8131595115a8e3d2af219b1ded0d11658baf2a"><code>ff81315</code></a> Update function for SVE2</li> <li><a href="https://github.com/minio/highwayhash/commit/a48b3f20491775094a4cbb7d93da8ab945c7ecbf"><code>a48b3f2</code></a> Add separate test case for Update function</li> <li><a href="https://github.com/minio/highwayhash/commit/3346a584da73836f01ab720398a8d61999ff35e4"><code>3346a58</code></a> ARM SVE code for update method</li> <li><a href="https://github.com/minio/highwayhash/commit/6a9c19b1156f8704d73a73a2d8ba2ef653988f25"><code>6a9c19b</code></a> Update ARM performance on Graviton3</li> <li><a href="https://github.com/minio/highwayhash/commit/1304c103e59f69c73f8b461d5c65a6bce0b11395"><code>1304c10</code></a> > Warning: 1 issue was detected with this workflow: git checkout HEAD^2 is no...</li> <li><a href="https://github.com/minio/highwayhash/commit/b6f6ef7b89a1265fd1e2cf0ec1c513ec5027de0f"><code>b6f6ef7</code></a> Upgrade CI versions</li> <li><a href="https://github.com/minio/highwayhash/commit/1a96f281b5c687cf18030f723e303c6093a3c3d0"><code>1a96f28</code></a> Bump golang.org/x/sys from 0.0.0-20190130150945-aca44879d564 to 0.1.0</li> <li><a href="https://github.com/minio/highwayhash/commit/9cb37b8cb4e3ed1cf7e0fda944dce3e64c35bddc"><code>9cb37b8</code></a> Fix build tags for newer Go.</li> <li>Additional commits viewable in <a href="https://github.com/minio/highwayhash/compare/v1.0.2...v1.0.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/minio/highwayhash&package-manager=go_modules&previous-version=1.0.2&new-version=1.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> * build(deps): Bump github.com/prometheus/common from 0.55.0 to 0.57.0 (#3911) Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.55.0 to 0.57.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/prometheus/common/releases">github.com/prometheus/common's releases</a>.</em></p> <blockquote> <h2>v0.57.0</h2> <h2>What's Changed</h2> <ul> <li>feat: new promslog and promslog/flag packages to wrap log/slog by <a href="https://github.com/tjhop"><code>@tjhop</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/677">prometheus/common#677</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/tjhop"><code>@tjhop</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/common/pull/677">prometheus/common#677</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/common/compare/v0.56.0...v0.57.0">https://github.com/prometheus/common/compare/v0.56.0...v0.57.0</a></p> <h2>v0.56.0</h2> <h2>What's Changed</h2> <ul> <li>Don't always fetch a OAuth2 token, if the secret from a file didn't change by <a href="https://github.com/multani"><code>@multani</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/647">prometheus/common#647</a></li> <li>remove dependency to github.com/prometheus/client_golang by <a href="https://github.com/ilius"><code>@ilius</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/662">prometheus/common#662</a></li> <li>Bump github.com/aws/aws-sdk-go from 1.54.7 to 1.54.11 in /sigv4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/661">prometheus/common#661</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@prombot</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/664">prometheus/common#664</a></li> <li>Revert <a href="https://redirect.github.com/prometheus/common/issues/576">#576</a> and add deprecation notice by <a href="https://github.com/SuperQ"><code>@SuperQ</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/665">prometheus/common#665</a></li> <li>Bump golang.org/x/net from 0.26.0 to 0.27.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/667">prometheus/common#667</a></li> <li>use basic string in IsValidLegacyMetricName by <a href="https://github.com/ywwg"><code>@ywwg</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/668">prometheus/common#668</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@prombot</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/672">prometheus/common#672</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@prombot</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/674">prometheus/common#674</a></li> <li>Bump github.com/aws/aws-sdk-go from 1.54.19 to 1.55.5 in /sigv4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/671">prometheus/common#671</a></li> <li>sigv4: support nil body by <a href="https://github.com/roidelapluie"><code>@roidelapluie</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/673">prometheus/common#673</a></li> <li>Fix overflows of untyped int constants on 32-bit by <a href="https://github.com/dswarbrick"><code>@dswarbrick</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/675">prometheus/common#675</a></li> <li>Update client_golang by <a href="https://github.com/SuperQ"><code>@SuperQ</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/676">prometheus/common#676</a></li> <li>Update golangci lint by <a href="https://github.com/roidelapluie"><code>@roidelapluie</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/679">prometheus/common#679</a></li> <li>expfmt: Add UTF-8 syntax support in text_parse.go by <a href="https://github.com/fedetorres93"><code>@fedetorres93</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/670">prometheus/common#670</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@prombot</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/681">prometheus/common#681</a></li> <li>fix(utf8): provide a method for explicitly checking label names for legacy validity by <a href="https://github.com/ywwg"><code>@ywwg</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/682">prometheus/common#682</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/multani"><code>@multani</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/common/pull/647">prometheus/common#647</a></li> <li><a href="https://github.com/ilius"><code>@ilius</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/common/pull/662">prometheus/common#662</a></li> <li><a href="https://github.com/dswarbrick"><code>@dswarbrick</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/common/pull/675">prometheus/common#675</a></li> <li><a href="https://github.com/fedetorres93"><code>@fedetorres93</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/common/pull/670">prometheus/common#670</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/common/compare/v0.55.0...v0.56.0">https://github.com/prometheus/common/compare/v0.55.0...v0.56.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/prometheus/common/commit/9bbc9cb5e3685e0dbb85461dde3385509a507550"><code>9bbc9cb</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/common/issues/677">#677</a> from tjhop/feat/add-promslog-pkg</li> <li><a href="https://github.com/prometheus/common/commit/6ea2584af7f3a2c136ccf2f7844d9d7015680479"><code>6ea2584</code></a> feat: new promslog and promslog/flag packages to wrap log/slog</li> <li><a href="https://github.com/prometheus/common/commit/6623230f2fa6d06f840b03469d6d786172c4a74f"><code>6623230</code></a> Provide a method for explicitly checking label names for legacy validity. (<a href="https://redirect.github.com/prometheus/common/issues/682">#682</a>)</li> <li><a href="https://github.com/prometheus/common/commit/19d07967696b0039bc5b76fc1e72f2be289961e1"><code>19d0796</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/common/issues/681">#681</a> from prometheus/repo_sync</li> <li><a href="https://github.com/prometheus/common/commit/29a2d2c75f018a6b6da1309e44b8210a7c48406e"><code>29a2d2c</code></a> Update common Prometheus files</li> <li><a href="https://github.com/prometheus/common/commit/8968b6c1d012c44709ce098644b57d681a5eb571"><code>8968b6c</code></a> expfmt: Add UTF-8 syntax support in text_parse.go (<a href="https://redirect.github.com/prometheus/common/issues/670">#670</a>)</li> <li><a href="https://github.com/prometheus/common/commit/cd4bcc02f4479542b7b360049c2ce7db52d3163d"><code>cd4bcc0</code></a> Update golangci lint (<a href="https://redirect.github.com/prometheus/common/issues/679">#679</a>)</li> <li><a href="https://github.com/prometheus/common/commit/2cac84e1490776cacb3f46f14e7adbaf8dcb4596"><code>2cac84e</code></a> Update client_golang (<a href="https://redirect.github.com/prometheus/common/issues/676">#676</a>)</li> <li><a href="https://github.com/prometheus/common/commit/79c0459359c4f5fa2113241540dca24054c1b348"><code>79c0459</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/common/issues/675">#675</a> from dswarbrick/fix-32bit-overflows</li> <li><a href="https://github.com/prometheus/common/commit/008d7b8628857284ef9162e41a8734f1e479dd80"><code>008d7b8</code></a> Fix overflows of untyped int constants on 32-bit</li> <li>Additional commits viewable in <a href="https://github.com/prometheus/common/compare/v0.55.0...v0.57.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/prometheus/common&package-manager=go_modules&previous-version=0.55.0&new-version=0.57.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> * build(deps): Bump bufbuild/buf-setup-action from 1.38.0 to 1.39.0 (#3938) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.38.0 to 1.39.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bufbuild/buf-setup-action/releases">bufbuild/buf-setup-action B41A 's releases</a>.</em></p> <blockquote> <h2>v1.39.0</h2> <p>Release v1.39.0</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/54abbed4fe8d8d45173eca4798b0c39a53a7b658"><code>54abbed</code></a> Release v1.39.0 (<a href="https://redirect.github.com/bufbuild/buf-setup-action/issues/221">#221</a>)</li> <li>See full diff in <a href="https://github.com/bufbuild/buf-setup-action/compare/v1.38.0...v1.39.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bufbuild/buf-setup-action&package-manager=github_actions&previous-version=1.38.0&new-version=1.39.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> * build(deps): Bump slackapi/slack-github-action from 1.26.0 to 1.27.0 (#3939) Bumps [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) from 1.26.0 to 1.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/slackapi/slack-github-action/releases">slackapi/slack-github-action's releases</a>.</em></p> <blockquote> <h2>Slack Send V1.27.0</h2> <h2>What's changed</h2> <p>This release introduces an optional <code>payload-delimiter</code> parameter for flattening nested objects with a customized delimiter before the payload is sent to Slack Workflow Builder when using workflow webhook triggers.</p> <pre lang="diff"><code> - name: Send a custom flattened payload uses: slackapi/slack-github-action@v1.27.0 + with: + payload-delimiter: "_" env: SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }} </code></pre> <p>Setting this value to an underscore (<code>_</code>) is recommended when using nested inputs within Workflow Builder to match expected input formats of Workflow Builder, but the actual value can be changed to something else! This "flattening" behavior <strong>did</strong> exist prior to this version, but used a period (<code>.</code>) which is not valid for webook inputs in Workflow Builder.</p>  <p>The resulting output of flattened objects is not always clear, but the following can hopefully serve as a quick reference as well as <a href="https://github.com/slackapi/slack-github-action/blob/5d1fb07d3c4f410b8d278134c714edff31264beb/test/slack-send-test.js#L264-L319">these specs</a> when using <code>_</code> as the delimiter:</p> <p><strong>Input</strong>:</p> <pre lang="json"><code>{ "apples": "tree", "bananas": { "truthiness": true } } </code></pre> <p><strong>Output</strong>:</p> <pre lang="json"><code>{ "apples": "tree", "bananas_truthiness": "true" } </code></pre> <p>Notice that <code>bananas_truthiness</code> is also stringified in this process, as part of updating values to match the expected inputs of Workflow Builder!</p>  <h2>Changes</h2> <p>In addition to the changes above, the following lists all of the changes since the prior version with the <strong>complete changelog</strong> changes found here: <a href="https://github.com/slackapi/slack-github-action/compare/v1.26.0...v1.27.0">https://github.com/slackapi/slack-github-action/compare/v1.26.0...v1.27.0</a></p> <h4>🎁 Enhancements</h4>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/slackapi/slack-github-action/commit/37ebaef184d7626c5f204ab8d3baff4262dd30f0"><code>37ebaef</code></a> Automatic compilation</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/5d1fb07d3c4f410b8d278134c714edff31264beb"><code>5d1fb07</code></a> chore(release): tag version 1.27.0</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/3bc06716971bb1dc2899ccd0332da69b8b778356"><code>3bc0671</code></a> chore(deps): bump axios to 1.7.5 (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/332">#332</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/b452451af72f751bd902edfbbc084a8b2e6e5031"><code>b452451</code></a> feat: make the payload delimiter configurable for workflow webhook triggers (...</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/c50e848fe18b1da5665e19286e3c9b86ad1b3bf5"><code>c50e848</code></a> build(deps-dev): bump mocha from 10.5.2 to 10.7.0 (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/328">#328</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/e4a9c4b6853f8b64ba9fee848d3f30198f9427c1"><code>e4a9c4b</code></a> build(deps): bump <code>@slack/web-api</code> from 7.2.0 to 7.3.2 (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/327">#327</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/9a7f0fa18816ae797b801ec2c27a04499fc2381b"><code>9a7f0fa</code></a> build(deps-dev): bump chai from 4.4.1 to 4.5.0 (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/326">#326</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/73b7062b8dccf12c0d62626d19953ea628e418ba"><code>73b7062</code></a> build(deps-dev): bump eslint-plugin-jsdoc from 48.5.0 to 48.10.2 (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/325">#325</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/3d5207b5cf109bd2640ec20613ed7f29ab46e853"><code>3d5207b</code></a> build(deps): bump https-proxy-agent from 7.0.4 to 7.0.5 (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/320">#320</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/4e15b6a964ca554d1a7b7a56850baa97e8316be2"><code>4e15b6a</code></a> build(deps): bump <code>@slack/web-api</code> from 7.0.4 to 7.2.0 (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/323">#323</a>)</li> <li>Additional commits viewable in <a href="https://github.com/slackapi/slack-github-action/compare/v1.26.0...v1.27.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=slackapi/slack-github-action&package-manager=github_actions&previous-version=1.26.0&new-version=1.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> * build(deps): Bump bufbuild/buf-setup-action from 1.39.0 to 1.40.1 (#4024) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.39.0 to 1.40.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bufbuild/buf-setup-action/releases">bufbuild/buf-setup-action's releases</a>.</em></p> <blockquote> <h2>v1.40.1</h2> <p>Release v1.40.1</p> <h2>v1.40.0</h2> <p>Release v1.40.0</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/2dbfb63c8b0cc4f1707ba5dd23017e998a25b2f0"><code>2dbfb63</code></a> Release v1.40.1 (<a href="https://redirect.github.com/bufbuild/buf-setup-action/issues/223">#223</a>)</li> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/51c53201f0da34af376e0b998c889ebb2813d479"><code>51c5320</code></a> Release v1.40.0 (<a href="https://redirect.github.com/bufbuild/buf-setup-action/issues/222">#222</a>)</li> <li>See full diff in <a href="https://github.com/bufbuild/buf-setup-action/compare/v1.39.0...v1.40.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bufbuild/buf-setup-action&package-manager=github_actions&previous-version=1.39.0&new-version=1.40.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore: Bump go toolchain to `1.22.7` on `v0.38.x` (#4065) * feat(mempool/metrics): Add new `evicted_txs` metric and call unused `rejected_txs` (backport #4019) (#4052) #### PR checklist - [ ] Tests written/updated - [x] Changelog entry added in `.changelog` (we use [unclog](https://github.com/informalsystems/unclog) to manage our changelog) - [X] Updated relevant documentation (`docs/` or `spec/`) and code comments <hr>This is an automatic backport of pull request #4019 done by [Mergify](https://mergify.com). --------- Co-authored-by: Hernán Vanzetto <15466498+hvanz@users.noreply.github.com> Co-authored-by: hvanz <hernan.vanzetto@gmail.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> * build(deps): Bump Go to 1.22 (backport #4059) (#4073) ### Context We are updating CometBFT dependencies to fix new CVE vulnerabilities. Cometbft-db v0.9.5 updates its Go version to 1.22 and updates some of its dependencies vulnerable to CVEs. See its [CHANGELOG](https://github.com/cometbft/cometbft-db/blob/v0.9.x/CHANGELOG.md#v095) ### This Change This PR updates cometbft-db to v0.9.5. --- #### PR checklist ~- [ ] Tests written/updated~ - [ ] Changelog entry added in `.changelog` (we use [unclog](https://github.com/informalsystems/unclog) to manage our changelog) ~- [ ] Updated relevant documentation (`docs/` or `spec/`) and code comments~ <hr>This is an automatic backport of pull request #4059 done by [Mergify](https://mergify.com).<hr>This is an automatic backport of pull request #4072 done by [Mergify](https://mergify.com). --------- Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com> * misc(tools)!: remove `tools` package (backport #2046) (#2073) This is an automatic backport of pull request #2046 done by [Mergify](https://mergify.com). Cherry-pick of 2bbb5c1095e38ad81eff9bff024e8f3f0e054d78 has failed: ``` On branch mergify/bp/v0.38.x/pr-2046 Your branch is up to date with 'origin/v0.38.x'. You are currently cherry-picking commit 2bbb5c109. (fix conflicts and run "git cherry-pick --continue") (use "git cherry-pick --skip" to skip this patch) (use "git cherry-pick --abort" to cancel the cherry-pick operation) Changes to be committed: modified: scripts/mockery_generate.sh deleted: tools/proto/Dockerfile deleted: tools/tools.go modified: types/params.go Unmerged paths: (use "git add/rm <file>..." as appropriate to mark resolution) both modified: go.mod both modified: go.sum deleted by them: tools/README.md ``` To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/github/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally --- <details> <summary>Mergify commands and options</summary> <br /> More conditions and actions can be found in the [documentation](https://docs.mergify.com/). You can also trigger Mergify actions by commenting on this pull request: - `@Mergifyio refresh` will re-evaluate the rules - `@Mergifyio rebase` will rebase this PR on its base branch - `@Mergifyio update` will merge the base branch into this PR - `@Mergifyio backport <destination>` will backport this PR on `<destination>` branch Additionally, on Mergify [dashboard](https://dashboard.mergify.com) you can: - look at your merge queues - generate the Mergify configuration with the config editor. Finally, you can contact us on https://mergify.com </details> --------- Co-authored-by: Jacob Gadikian <jacobgadikian@gmail.com> Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com> * build(deps): Bump gonum.org/v1/gonum from 0.12.0 to 0.15.1 (#3910) Bumps [gonum.org/v1/gonum](https://github.com/gonum/gonum) from 0.12.0 to 0.15.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/gonum/gonum/releases">gonum.org/v1/gonum's releases</a>.</em></p> <blockquote> <h2>v0.15.1</h2> <p>Release v0.15.1 is a bug fix release in the v0.15 branch.</p> <p>Fixes since v0.15.0:</p> <p>b6147192 stat/distuv: correct Gamma Mode() and LogProb(0)/Prob(0) for alpha <= 1 5bc3fec2 mat: fix dst matrix shape check in QR.RTo 354eb431 mat: calculate Q elements lazily when calling QR.At</p> <h2>v0.15.0</h2> <p>Release v0.15.0 is a minor release in the v0.15 branch.</p> <p>Bug fixes/improvements since v0.14.0:</p> <p>269815f0 spatial/curve: new package to constuct 2-, 3- and 4-D Hilbert curves b27ae13f lapack/gonum: add Dptcon 55edfc1d lapack/testlapack: add dlanst 3462e90a lapack/gonum: add Dptsv 44d84c93 lapack/gonum: add Dpttrs c4e3bfbe lapack/gonum: add Dpttrf fa306f21 lapack/gonum: handle NaN and Inf input to Dgecon db43f45c graph/path: do not keep duplicate paths in YenKShortestPaths 5e05b179 lapack/gonum: fix accumulation in Dlassq 606793d4 stat/distmv: add EigenSym interface ff24a548 stat/distmv: add special case in NormalRandCov for mat.EigenSym 83fd3a6d mat: add RawValues and RawQ to EigenSym 999e48d0 mat: make EigenSym satisfy Matrix 71ca02b7 mat: delegate to SolveTo method in *Dense.Solve f560d5cb stat/distmv: add NormalRandCov b2722176 mat: make LQ satisfy Matrix 78bc3a48 mat: add VecDense.Permute 6e2f5c58 lapack/gonum: require exact length of tau in QR routines bd767ae5 mat: don't panic in Dims on zero Cholesky types 45b74210 mat: make QR satisfy Matrix aef3c5f3 mat: make LU satisfy Matrix 2d1137f1 mat: add LU.RowPivots and deprecate LU.Pivot ef75f4dd mat: return U and ColumnPivots from PivotedCholesky 5f74663e mat: add Dense.PermuteRows and PermuteCols ff3e3209 lapack/lapack64: add Geqp3 and clean up docs 7df15c33 lapack/gonum: clean up Dgghrd and its test f0a57a45 lapack/gonum: add Dgghrd and its test 7bed099d lapack/gonum: clean up Dlanhs and its test aa92aa08 spatial/kdtree: update value in place in NKeeper.Keep</p> <h2>v0.14.0</h2> <p>Release v0.14.0 is a minor release in the v0.14 branch.</p> <p>API breaking changes:</p> <p>9e7bb936 graph/path: allow cost-based Yen shortest path calculation</p>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/gonum/gonum/commit/bdcda9a453049449163d160b98285b64ec8093a1"><code>bdcda9a</code></a> graph: use slices package for sorting and reversing slices</li> <li><a href="https://github.com/gonum/gonum/commit/a9b228ed6bdcfafd52ce8ba413595310823a0004"><code>a9b228e</code></a> A+C: add Tristan Nicholls</li> <li><a href="https://github.com/gonum/gonum/commit/1f29d7b1d1724243c9f4a156cb1e16c9cbb15de1"><code>1f29d7b</code></a> mat: calculate Q elements lazily when calling QR.At</li> <li><a href="https://github.com/gonum/gonum/commit/f1a62e187e273b2d99f9c2a04fa8931df9c22947"><code>f1a62e1</code></a> mat: fix dst matrix shape check in QR.RTo</li> <li><a href="https://github.com/gonum/gonum/commit/4cb1c6f4a863dd4bde148d9b8736b7d69af4b75b"><code>4cb1c6f</code></a> ci,mod: update to go1.23</li> <li><a href="https://github.com/gonum/gonum/commit/0c62273e338b91cd9578ed93572c693ba55e1eaa"><code>0c62273</code></a> A+C: add Dirk Müller</li> <li><a href="https://github.com/gonum/gonum/commit/0efa2841bf9d1f6ad3b4f5638089c8d6cc72f51e"><code>0efa284</code></a> A+C: add Tom Payne</li> <li><a href="https://github.com/gonum/gonum/commit/f48364e31d40fb9c3b6de7b7d20223edd6d49779"><code>f48364e</code></a> interp: increase speed of findSegment</li> <li><a href="https://github.com/gonum/gonum/commit/1dd194f95b64cda4727b9548bcd2471b4372c7c8"><code>1dd194f</code></a> stat/distuv: correct Gamma Mode doc comment</li> <li><a href="https://github.com/gonum/gonum/commit/35bb474ac513c77971be8e1e9ab2bd1eaca07c79"><code>35bb474</code></a> stat/distuv: correct Gamma Mode() and LogProb(0)/Prob(0) for alpha <= 1</li> <li>Additional commits viewable in <a href="https://github.com/gonum/gonum/compare/v0.12.0...v0.15.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gonum.org/v1/gonum&package-manager=go_modules&previous-version=0.12.0&new-version=0.15.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): Bump bufbuild/buf-setup-action from 1.40.1 to 1.41.0 (#4096) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.40.1 to 1.41.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bufbuild/buf-setup-action/releases">bufbuild/buf-setup-action's releases</a>.</em></p> <blockquote> <h2>v1.41.0</h2> <p>Release v1.41.0</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/2881ede27923557cb71f4ddc8954905c2639d1fb"><code>2881ede</code></a> Release v1.41.0 (<a href="https://redirect.github.com/bufbuild/buf-setup-action/issues/224">#224</a>)</li> <li>See full diff in <a href="https://github.com/bufbuild/buf-setup-action/compare/v1.40.1...v1.41.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bufbuild/buf-setup-action&package-manager=github_actions&previous-version=1.40.1&new-version=1.41.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix(mempool): change "mempool is full" log level to debug (backport #4123) (#4145) it happens in benchmark or production when traffic is high, the log frequency is very high because it's triggered by p2p tx propagation message. Solution: - change it to debug level <hr>This is an automatic backport of pull request #4123 done by [Mergify](https://mergify.com). --------- Co-authored-by: yihuang <yi.codeplayer@gmail.com> Co-authored-by: Andy Nogueira <me@andynogueira.dev> * build(deps): Bump bufbuild/buf-setup-action from 1.41.0 to 1.42.0 (#4160) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.41.0 to 1.42.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bufbuild/buf-setup-action/releases">bufbuild/buf-setup-action's releases</a>.</em></p> <blockquote> <h2>v1.42.0</h2> <p>Release v1.42.0</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/a8b4a18369a5feb07d4bf9cb2b24f81d105d7bab"><code>a8b4a18</code></a> Release v1.42.0 (<a href="https://redirect.github.com/bufbuild/buf-setup-action/issues/225">#225</a>)</li> <li>See full diff in <a href="https://github.com/bufbuild/buf-setup-action/compare/v1.41.0...v1.42.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bufbuild/buf-setup-action&package-manager=github_actions&previous-version=1.41.0&new-version=1.42.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): Bump docker/build-push-action from 6.7.0 to 6.8.0 (#4194) Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.7.0 to 6.8.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/build-push-action/releases">docker/build-push-action's releases</a>.</em></p> <blockquote> <h2>v6.8.0</h2> <ul> <li>Bump <code>@docker/actions-toolkit</code> from 0.37.1 to 0.38.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1230">docker/build-push-action#1230</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push-action/compare/v6.7.0...v6.8.0">https://github.com/docker/build-push-action/compare/v6.7.0...v6.8.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/build-push-action/commit/32945a339266b759abcbdc89316275140b0fc960"><code>32945a3</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/1230">#1230</a> from docker/dependabot/npm_and_yarn/docker/actions-t...</li> <li><a href="https://github.com/docker/build-push-action/commit/e0fe9cf0f26132beab7b62929bd647eef9e7df31"><code>e0fe9cf</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/build-push-action/commit/8f1ff6bf9a836299c21b10f942be49efb52a832c"><code>8f1ff6b</code></a> chore(deps): Bump <code>@docker/actions-toolkit</code> from 0.37.1 to 0.38.0</li> <li>See full diff in <a href="https://github.com/docker/build-push-action/compare/v6.7.0...v6.8.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/build-push-action&package-manager=github_actions&previous-version=6.7.0&new-version=6.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): Bump github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0 (#4207) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.11.0 to 5.12.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/go-git/go-git/releases">github.com/go-git/go-git/v5's releases</a>.</em></p> <blockquote> <h2>v5.12.0</h2> <h2>What's Changed</h2> <ul> <li>git: Worktree.AddWithOptions: add skipStatus option when providing a specific path by <a href="https://github.com/moranCohen26"><code>@moranCohen26</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/994">go-git/go-git#994</a></li> <li>git: Signer: fix usage of crypto.Signer interface by <a href="https://github.com/wlynch"><code>@wlynch</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/1029">go-git/go-git#1029</a></li> <li>git: Remote, fetch, adds the prune option. by <a href="https://github.com/juliens"><code>@juliens</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/366">go-git/go-git#366</a></li> <li>git: Add crypto.Signer option to CommitOptions. by <a href="https://github.com/wlynch"><code>@wlynch</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/996">go-git/go-git#996</a></li> <li>git: Worktree checkout tag hash id (<a href="https://redirect.github.com/go-git/go-git/issues/959">#959</a>) by <a href="https://github.com/aymanbagabas"><code>@aymanbagabas</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/966">go-git/go-git#966</a></li> <li>git: Worktree, Don't panic on empty or root path when checking if it is valid by <a href="https://github.com/tim775"><code>@tim775</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/1042">go-git/go-git#1042</a></li> <li>git: Add commit validation for Reset by <a href="https://github.com/pjbgf"><code>@pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/1048">go-git/go-git#1048</a></li> <li>git: worktree_commit, Fix amend commit to apply changes. Fixes <a href="https://redirect.github.com/go-git/go-git/issues/1024">#1024</a> by <a href="https://github.com/onee-only"><code>@onee-only</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/1045">go-git/go-git#1045</a></li> <li>git: Implement Merge function with initial <code>FastForwardMerge</code> support by <a href="https://github.com/pjbgf"><code>@pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/1044">go-git/go-git#1044</a></li> <li>plumbing: object, Make first commit visible on logs filtered with filename. Fixes <a href="https://redirect.github.com/go-git/go-git/issues/191">#191</a> by <a href="https://github.com/onee-only"><code>@onee-only</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/1036">go-git/go-git#1036</a></li> <li>plumbing: no panic in printStats function. Fixes <a href="https://redirect.github.com/go-git/go-git/issues/177">#177</a> by <a href="https://github.com/nodivbyzero"><code>@nodivbyzero</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/971">go-git/go-git#971</a></li> <li>plumbing: object, Optimize logging with file. by <a href="https://github.com/onee-only"><code>@onee-only</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/1046">go-git/go-git#1046</a></li> <li>plumbing: object, check legitimacy in (*Tree).Encode by <a href="https://github.com/niukuo"><code>@niukuo</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/967">go-git/go-git#967</a></li> <li>plumbing: format/gitattributes, close file in ReadAttributesFile by <a href="https://github.com/prskr"><code>@prskr</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/1018">go-git/go-git#1018</a></li> <li>plumbing: check setAuth error. Fixes <a href="https://redirect.github.com/go-git/go-git/issues/185">#185</a> by <a href="https://github.com/nodivbyzero"><code>@nodivbyzero</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/969">go-git/go-git#969</a></li> <li>plumbing: object, fix variable defaultUtf8CommitMessageEncoding name spell error by <a href="https://github.com/Jerry-yz"><code>@Jerry-yz</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/987">go-git/go-git#987</a></li> <li>utils: merkletrie, calculate filesystem node's hash lazily. by <a href="https://github.com/candid82"><code>@candid82</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/825">go-git/go-git#825</a></li> <li>utils: update comment in node.go's Hash() by <a href="https://github.com/codablock"><code>@codablock</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/992">go-git/go-git#992</a></li> <li>_example: fix 404 link and added ssh-agent clone link by <a href="https://github.com/grinish21"><code>@grinish21</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/1022">go-git/go-git#1022</a></li> <li>_example: checkout-branch example by <a href="https://github.com/dlambda"><code>@dlambda</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/446">go-git/go-git#446</a></li> <li>_example: example for git clone using ssh-agent by <a href="https://github.com/pjbgf"><code>@pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/998">go-git/go-git#998</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/candid82"><code>@candid82</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/825">go-git/go-git#825</a></li> <li><a href="https://github.com/codablock"><code>@codablock</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/992">go-git/go-git#992</a></li> <li><a href="https://github.com/Jerry-yz"><code>@Jerry-yz</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/987">go-git/go-git#987</a></li> <li><a href="https://github.com/wlynch"><code>@wlynch</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/996">go-git/go-git#996</a></li> <li><a href="https://github.com/moranCohen26"><code>@moranCohen26</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/994">go-git/go-git#994</a></li> <li><a href="https://github.com/grinish21"><code>@grinish21</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/1022">go-git/go-git#1022</a></li> <li><a href="https://github.com/prskr"><code>@prskr</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/1018">go-git/go-git#1018</a></li> <li><a href="https://github.com/dlambda"><code>@dlambda</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/446">go-git/go-git#446</a></li> <li><a href="https://github.com/juliens"><code>@juliens</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/3 B6F2 66">go-git/go-git#366</a></li> <li><a href="https://github.com/onee-only"><code>@onee-only</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/1036">go-git/go-git#1036</a></li> <li><a href="https://github.com/tim775"><code>@tim775</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/1042">go-git/go-git#1042</a></li> <li><a href="https://github.com/niukuo"><code>@niukuo</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/967">go-git/go-git#967</a></li> <li><a href="https://github.com/avoidalone"><code>@avoidalone</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/1047">go-git/go-git#1047</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/go-git/go-git/compare/v5.11.0...v5.12.0">https://github.com/go-git/go-git/compare/v5.11.0...v5.12.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/go-git/go-git/commit/302dddeda962e4bb3477a8e4080bc6f5a253e2bb"><code>302ddde</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/1060">#1060</a> from go-git/dependabot/go_modules/github.com/gliderl...</li> <li><a href="https://github.com/go-git/go-git/commit/6bba34deab858ad5d74733686f0a8b4c2940f388"><code>6bba34d</code></a> build: bump github.com/gliderlabs/ssh from 0.3.6 to 0.3.7</li> <li><a href="https://github.com/go-git/go-git/commit/feaeb36df2438dd5f861be2c1041f4e07c126233"><code>feaeb36</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/937">#937</a> from matejrisek/feature/rename-short-fields</li> <li><a href="https://github.com/go-git/go-git/commit/7959a42552a99b2e2df21a6aacafc97b2b5c7457"><code>7959a42</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/1052">#1052</a> from go-git/dependabot/go_modules/github.com/skeema/...</li> <li><a href="https://github.com/go-git/go-git/commit/4c17ce7c6a7936a61cea17bee56daf5d9c2b21e4"><code>4c17ce7</code></a> build: bump github.com/skeema/knownhosts from 1.2.1 to 1.2.2</li> <li><a href="https://github.com/go-git/go-git/commit/3f77e6f0292bdabb6368a42ef0f5fa925ed42f60"><code>3f77e6f</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/1048">#1048</a> from pjbgf/fix-reset-validation</li> <li><a href="https://github.com/go-git/go-git/commit/6af38e000608a795320cd17c99491853f0b8ad3a"><code>6af38e0</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/1047">#1047</a> from avoidalone/master</li> <li><a href="https://github.com/go-git/go-git/commit/e6c3e58198d176c497bb2dba1a2adb9302597676"><code>e6c3e58</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/1044">#1044</a> from pjbgf/ff-merge</li> <li><a href="https://github.com/go-git/go-git/commit/04f7b23cbb85040a276ab2b7d6879223779451fd"><code>04f7b23</code></a> *: fix some comments</li> <li><a href="https://github.com/go-git/go-git/commit/f4f1a876e622c45ed51d05df1298d421a6868fcc"><code>f4f1a87</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/971">#971</a> from nodivbyzero/fix-177-diff-print-file-stats</li> <li>Additional commits viewable in <a href="https://github.com/go-git/go-git/compare/v5.11.0...v5.12.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/go-git/go-git/v5&package-manager=go_modules&previous-version=5.11.0&new-version=5.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * build(deps): Bump github.com/sasha-s/go-deadlock from 0.3.1 to 0.3.5 (#4205) Bumps [github.com/sasha-s/go-deadlock](https://github.com/sasha-s/go-deadlock) from 0.3.1 to 0.3.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sasha-s/go-deadlock/releases">github.com/sasha-s/go-deadlock's releases</a>.</em></p> <blockquote> <h2>v0.3.3</h2> <h2>What's Changed</h2> <ul> <li>Add missing sync.NewCond wrapper by <a href="https://github.com/ncw"><code>@ncw</code></a> in <a href="https://redirect.github.com/sasha-s/go-deadlock/pull/22">sasha-s/go-deadlock#22</a></li> <li>fixed the comment of Opts.DeadlockTimeout in deadlock.go by <a href="https://github.com/h3n4l"><code>@h3n4l</code></a> in <a href="https://redirect.github.com/sasha-s/go-deadlock/pull/23">sasha-s/go-deadlock#23</a></li> <li>deadlock: Add TryLock wrappers by <a href="https://github.com/jrajahalme"><code>@jrajahalme</code></a> in <a href="https://redirect.github.com/sasha-s/go-deadlock/pull/30">sasha-s/go-deadlock#30</a></li> <li>Reuse timers with sync.Pool by <a href="https://github.com/millfort"><code>@millfort</code></a> in <a href="https://redirect.github.com/sasha-s/go-deadlock/pull/31">sasha-s/go-deadlock#31</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/ncw"><code>@ncw</code></a> made their first contribution in <a href="https://redirect.github.com/sasha-s/go-deadlock/pull/22">sasha-s/go-deadlock#22</a></li> <li><a href="https://github.com/h3n4l"><code>@h3n4l</code></a> made their first contribution in <a href="https://redirect.github.com/sasha-s/go-deadlock/pull/23">sasha-s/go-deadlock#23</a></li> <li><a href="https://github.com/jrajahalme"><code>@jrajahalme</code></a> made their first contribution in <a href="https://redirect…

faddat added 2 commits January 16, 2024 10:37

1) protos are now built with the sdk's proto builder

a179938

2) go tools methodology just bloats .mod and .sum making comet harder to work with

tidy

8dd93dc

faddat requested review from a team as code owners January 16, 2024 02:39

don't have non-comet code in comet

b227a2a

faddat mentioned this pull request Jan 16, 2024

misc(go.mod): remove unused peg dependency #2044

Merged

melekes approved these changes Jan 16, 2024

View reviewed changes

melekes added backport-to-v0.38.x Tell Mergify to backport the PR to v0.38.x backport-to-v1.x Tell Mergify to backport the PR to v1.x labels Jan 16, 2024

melekes changed the title ~~fix: go tools methodology accomplishes nothing at high cost~~ misc(tools)!: remove tools package Jan 16, 2024

adizere reviewed Jan 16, 2024

View reviewed changes

tools/README.md Show resolved Hide resolved

adizere added this to the 2024-Q1 milestone Jan 16, 2024

Merge branch 'main' into go-tools-methodology-is-bad-idea-because-sec…

593d2e1

…ure-means-less-deps

Merge remote-tracking branch 'origin/main' into go-tools-methodology-…

3e24a86

…is-bad-idea-because-secure-means-less-deps

sergio-mena reviewed Jan 17, 2024

View reviewed changes

scripts/mockery_generate.sh Outdated Show resolved Hide resolved

mzabaluev approved these changes Jan 18, 2024

View reviewed changes

faddat and others added 2 commits January 20, 2024 02:15

Update scripts/mockery_generate.sh

72e49d2

Co-authored-by: Sergio Mena <sergio@informal.systems>

Merge branch 'main' into go-tools-methodology-is-bad-idea-because-sec…

b8176e6

…ure-means-less-deps

faddat mentioned this pull request Jan 19, 2024

fix: unflake the majority of flaky tests #2005

Closed

3 tasks

fix lint

8085c6a

melekes added this pull request to the merge queue Jan 20, 2024

Merged via the queue into cometbft:main with commit 2bbb5c1 Jan 20, 2024

This was referenced Jan 20, 2024

misc(tools)!: remove tools package (backport #2046) #2072

Merged

misc(tools)!: remove tools package (backport #2046) #2073

Merged

lasarojc mentioned this pull request Mar 12, 2024

chore(spec): merge main into spec/consensus-gossip #2594

Merged

mergify bot mentioned this pull request Aug 20, 2024

feat(tools): remove tools package (backport #2046) #3760

Merged

3 tasks

mergify bot mentioned this pull request Sep 11, 2024

misc(tools)!: remove tools package (backport #2046) #4070

Merged

3 tasks

mergify bot mentioned this pull request Sep 11, 2024

misc(tools)!: remove tools package (backport #2046) (backport #2073) #4075

Merged

faddat mentioned this pull request Oct 15, 2024

chore: use latest cometbft-db in v0.38.x #4296

Closed

3 tasks

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

misc(tools)!: remove `tools` package #2046

misc(tools)!: remove `tools` package #2046

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

misc(tools)!: remove tools package #2046

misc(tools)!: remove tools package #2046

Uh oh!

Conversation

Uh oh!

PR checklist

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

✅ Backports have been created

Uh oh!

Uh oh!

Uh oh!

✅ Backports have been created

Uh oh!

Uh oh!

misc(tools)!: remove `tools` package #2046

misc(tools)!: remove `tools` package #2046