From a3487192060b5c297bad733aa062e578e64df208 Mon Sep 17 00:00:00 2001 From: Shahan Khatchadourian Date: Wed, 17 Feb 2021 20:50:52 -0500 Subject: [PATCH 1/4] Getting ready to bump sdk and tendermint --- CHANGELOG.md | 10 +++++++++- go.mod | 4 ++-- 2 files changed, 11 insertions(+), 3 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 9b860652492..662fcd13d27 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -36,6 +36,13 @@ Ref: https://keepachangelog.com/en/1.0.0/ ## [Unreleased] +## [v4.0.2] - 2021-02-17 + +### Bug Fixes + +* (sdk) Bump SDK version to [v0.41.2](https://github.com/cosmos/cosmos-sdk/releases/tag/v0.41.2). +* (tendermint) Bump Tendermint version to [v0.34.6](https://github.com/tendermint/tendermint/releases/tag/v0.34.6). + ## [v4.0.1] - 2021-02-17 ### Bug Fixes @@ -235,7 +242,8 @@ Ref: https://keepachangelog.com/en/1.0.0/ -[Unreleased]: https://github.com/cosmos/gaia/compare/v4.0.1...HEAD +[Unreleased]: https://github.com/cosmos/gaia/compare/v4.0.2...HEAD +[v4.0.2]: https://github.com/cosmos/gaia/releases/tag/v4.0.2 [v4.0.1]: https://github.com/cosmos/gaia/releases/tag/v4.0.1 [v4.0.0]: https://github.com/cosmos/gaia/releases/tag/v4.0.0 [v3.0.1]: https://github.com/cosmos/gaia/releases/tag/v3.0.1 diff --git a/go.mod b/go.mod index f2d17f0b6f1..d45f7473db1 100644 --- a/go.mod +++ b/go.mod @@ -5,7 +5,7 @@ go 1.15 require ( github.com/btcsuite/btcd v0.21.0-beta github.com/btcsuite/btcutil v1.0.2 - github.com/cosmos/cosmos-sdk v0.41.1 + github.com/cosmos/cosmos-sdk v0.41.2 github.com/ethereum/go-ethereum v1.9.25 github.com/gorilla/mux v1.8.0 github.com/pkg/errors v0.9.1 @@ -13,7 +13,7 @@ require ( github.com/spf13/cast v1.3.1 github.com/spf13/cobra v1.1.3 github.com/stretchr/testify v1.7.0 - github.com/tendermint/tendermint v0.34.4 + github.com/tendermint/tendermint v0.34.6 github.com/tendermint/tm-db v0.6.4 ) From d200bc9c05c5dfae3c013a4253b3151cab353045 Mon Sep 17 00:00:00 2001 From: Shahan Khatchadourian Date: Wed, 17 Feb 2021 20:59:39 -0500 Subject: [PATCH 2/4] Added PR number --- CHANGELOG.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 662fcd13d27..ebafa43790b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -40,8 +40,8 @@ Ref: https://keepachangelog.com/en/1.0.0/ ### Bug Fixes -* (sdk) Bump SDK version to [v0.41.2](https://github.com/cosmos/cosmos-sdk/releases/tag/v0.41.2). -* (tendermint) Bump Tendermint version to [v0.34.6](https://github.com/tendermint/tendermint/releases/tag/v0.34.6). +* (sdk) [\#640](https://github.com/cosmos/gaia/pull/640) Bump SDK version to [v0.41.2](https://github.com/cosmos/cosmos-sdk/releases/tag/v0.41.2). +* (tendermint) [\#640](https://github.com/cosmos/gaia/pull/640) Bump Tendermint version to [v0.34.6](https://github.com/tendermint/tendermint/releases/tag/v0.34.6). ## [v4.0.1] - 2021-02-17 From 38d41e2c99234d535bcb6217786c204dd05f74a6 Mon Sep 17 00:00:00 2001 From: Shahan Khatchadourian Date: Wed, 17 Feb 2021 21:12:57 -0500 Subject: [PATCH 3/4] update changelog --- CHANGELOG.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index ebafa43790b..5a46df21065 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -36,12 +36,15 @@ Ref: https://keepachangelog.com/en/1.0.0/ ## [Unreleased] -## [v4.0.2] - 2021-02-17 +## [v4.0.2] - 2021-02-18 ### Bug Fixes +This release fixes a downstream security issue which impacts Cosmos SDK users. +See the [Tendermint v0.34.7 SDK changelog](https://github.com/tendermint/tendermint/blob/v0.34.x/CHANGELOG.md#v0347) for details. + * (sdk) [\#640](https://github.com/cosmos/gaia/pull/640) Bump SDK version to [v0.41.2](https://github.com/cosmos/cosmos-sdk/releases/tag/v0.41.2). -* (tendermint) [\#640](https://github.com/cosmos/gaia/pull/640) Bump Tendermint version to [v0.34.6](https://github.com/tendermint/tendermint/releases/tag/v0.34.6). +* (tendermint) [\#640](https://github.com/cosmos/gaia/pull/640) Bump Tendermint version to [v0.34.7](https://github.com/tendermint/tendermint/releases/tag/v0.34.7). ## [v4.0.1] - 2021-02-17 From 7c436a1b9a3c190c947c3a07ad18f0db96674eb6 Mon Sep 17 00:00:00 2001 From: Shahan Khatchadourian Date: Wed, 17 Feb 2021 21:38:04 -0500 Subject: [PATCH 4/4] go.mod and go.sum --- go.mod | 2 +- go.sum | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/go.mod b/go.mod index d45f7473db1..79fadc817ef 100644 --- a/go.mod +++ b/go.mod @@ -13,7 +13,7 @@ require ( github.com/spf13/cast v1.3.1 github.com/spf13/cobra v1.1.3 github.com/stretchr/testify v1.7.0 - github.com/tendermint/tendermint v0.34.6 + github.com/tendermint/tendermint v0.34.7 github.com/tendermint/tm-db v0.6.4 ) diff --git a/go.sum b/go.sum index 726e09d1d87..7da44e9d147 100644 --- a/go.sum +++ b/go.sum @@ -124,8 +124,8 @@ github.com/coreos/go-systemd v0.0.0-20180511133405-39ca1b05acc7/go.mod h1:F5haX7 github.com/coreos/go-systemd v0.0.0-20190321100706-95778dfbb74e/go.mod h1:F5haX7vjVVG0kc13fIWeqUViNPyEJxv/OmvnBo0Yme4= github.com/coreos/pkg v0.0.0-20160727233714-3ac0863d7acf/go.mod h1:E3G3o1h8I7cfcXa63jLwjI0eiQQMgzzUDFVpN/nH/eA= github.com/coreos/pkg v0.0.0-20180928190104-399ea9e2e55f/go.mod h1:E3G3o1h8I7cfcXa63jLwjI0eiQQMgzzUDFVpN/nH/eA= -github.com/cosmos/cosmos-sdk v0.41.1 h1:QatVRc8EaEObHtOFDNYHoF6di/jvSFVkXBK3I3SQ+/4= -github.com/cosmos/cosmos-sdk v0.41.1/go.mod h1:mCaJm2k+fqY7+qwvwd7WDHZZFG3avW4+I6c4lizAkIY= +github.com/cosmos/cosmos-sdk v0.41.2 h1:tDJIBJ4dCsqg24kC4UPFHecatfw16SIa05mRml/7ju8= +github.com/cosmos/cosmos-sdk v0.41.2/go.mod h1:yKN705My5fGGT93DrdoeZ96GPFLCVZrzDBciGf8/Ldo= github.com/cosmos/go-bip39 v0.0.0-20180819234021-555e2067c45d/go.mod h1:tSxLoYXyBmiFeKpvmq4dzayMdCjCnu8uqmCysIGBT2Y= github.com/cosmos/go-bip39 v1.0.0 h1:pcomnQdrdH22njcAatO0yWojsUnCO3y2tNoV1cb6hHY= github.com/cosmos/go-bip39 v1.0.0/go.mod h1:RNJv0H/pOIVgxw6KS7QeX2a0Uo0aKUlfhZ4xuwvCdJw= @@ -637,8 +637,8 @@ github.com/tendermint/go-amino v0.16.0/go.mod h1:TQU0M1i/ImAo+tYpZi73AU3V/dKeCoM github.com/tendermint/tendermint v0.34.0-rc4/go.mod h1:yotsojf2C1QBOw4dZrTcxbyxmPUrT4hNuOQWX9XUwB4= github.com/tendermint/tendermint v0.34.0-rc6/go.mod h1:ugzyZO5foutZImv0Iyx/gOFCX6mjJTgbLHTwi17VDVg= github.com/tendermint/tendermint v0.34.0/go.mod h1:Aj3PIipBFSNO21r+Lq3TtzQ+uKESxkbA3yo/INM4QwQ= -github.com/tendermint/tendermint v0.34.4 h1:E7qkvFGx27d8ugVLiAY2iWP6DL5cep3l/mpTaWKHyBA= -github.com/tendermint/tendermint v0.34.4/go.mod h1:JVuu3V1ZexOaZG8VJMRl8lnfrGw6hEB2TVnoUwKRbss= +github.com/tendermint/tendermint v0.34.7 h1:lvBJFNqpDuEzKfLZKtUXOL5dMOpqHonHlO6LCujyl6E= +github.com/tendermint/tendermint v0.34.7/go.mod h1:JVuu3V1ZexOaZG8VJMRl8lnfrGw6hEB2TVnoUwKRbss= github.com/tendermint/tm-db v0.6.2/go.mod h1:GYtQ67SUvATOcoY8/+x6ylk8Qo02BQyLrAs+yAcLvGI= github.com/tendermint/tm-db v0.6.3 h1:ZkhQcKnB8/2jr5EaZwGndN4owkPsGezW2fSisS9zGbg= github.com/tendermint/tm-db v0.6.3/go.mod h1:lfA1dL9/Y/Y8wwyPp2NMLyn5P5Ptr/gvDFNWtrCWSf8=