Code Browser

fix(store): bound decompressed snapshot chunk size to prevent decompression-bomb DoS

fix(server): lower default gRPC MaxSendMsgSize from ~2GB to 10MB

chore(docs): update readme

fix(blockstm): count validation tasks before advancing validationIdx to prevent lost updates

build(deps): Bump github.com/pelletier/go-toml/v2 from 2.3.1 to 2.4.3 in /tools/cosmovisor

build(deps): Bump golang.org/x/crypto from 0.51.0 to 0.52.0 in /store in the go_modules group across 1 directory

ci: bump go to 1.26.5 and ignore GO-2026-5932 in vulncheck

build(deps): Bump github.com/pelletier/go-toml/v2 from 2.3.1 to 2.4.3 in /tools/confix

chore(x/auth): human-readable error (backport #26567)

chore(x/auth): human-readable error (backport #26567)

build(deps): Bump google.golang.org/grpc from 1.81.1 to 1.82.0 in /errors

fix(math): bound Unmarshal input length to prevent superlinear big.Int parse

fix(types/query): cap pagination limit to prevent unbounded store iteration DoS

fix(x/auth/ante): reject tx with extra SignerInfos in SetPubKeyDecorator

docs(server/config): warn that query-gas-limit = 0 is unbounded by default

fix(x/auth/tx): avoid nil pointer panic in GetSigningTxData for multisig ModeInfo with a nil Multi or nil Bitarray

fix(baseapp): enforce MaxBlockGas in ProcessProposal with NoOpMempool, guard gas overflow in tx selection

build(deps): Bump google.golang.org/grpc from 1.81.1 to 1.82.0 in /store

build(deps): Bump google.golang.org/grpc from 1.81.1 to 1.82.0 in /tools/cosmovisor

chore(x/auth): human-readable error

build(deps): Bump google.golang.org/grpc from 1.81.1 to 1.82.0 in /core

build(deps): Bump github.com/shirou/gopsutil/v4 from 4.26.5 to 4.26.6

build(deps): Bump github.com/RoaringBitmap/roaring/v2 from 2.18.2 to 2.19.0

ci(mergify): upgrade configuration to current format

fix(baseapp): make BaseApp.Close idempotent (#26558)

fix(store): delete stale commit-info metadata on prune (#26551)

build(deps): Bump github.com/pelletier/go-toml/v2 from 2.3.1 to 2.4.2 in /tools/confix

fix(baseapp): make Close idempotent to avoid double-close panic on shutdown

baseapp: BaseApp.Close is not idempotent — double app.Close() on shutdown panics with PebbleDB ("pebble: closed")

ci: Update workflow to reduce time on depot