Code Browser

fix(codec,x/tx): lower nested Any depth cap from 10000 to 64 to reduce DoS amplification

fix(store): bound decompressed snapshot chunk size to prevent decompression-bomb DoS

fix(server): lower default gRPC MaxSendMsgSize from ~2GB to 10MB

chore(docs): update readme

build(deps): bump golang.org/x/mod from 0.34.0 to 0.38.0

feat(ratelimit): backport of ratelimit to v11

chore: add v11.2.x release branch to mergify and e2e-compat

build(deps): bump golang.org/x/crypto from 0.50.0 to 0.52.0

imp(ratelimit): `v2ToV1Packet` version validation

fix(blockstm): count validation tasks before advancing validationIdx to prevent lost updates

build(deps): Bump github.com/pelletier/go-toml/v2 from 2.3.1 to 2.4.3 in /tools/cosmovisor

build(deps): Bump golang.org/x/crypto from 0.51.0 to 0.52.0 in /store in the go_modules group across 1 directory

chore(deps): bump golang.org/x/mod from 0.37.0 to 0.38.0 in /e2e

fix: reject EVM txs below base fee at mempool

chore(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0

ci: bump go to 1.26.5 and ignore GO-2026-5932 in vulncheck

fix: prevent delay period arithmetic overflow

fix(erc20): propagate conversion ack in v2 ibc OnRecvPacket

Update README wasmvm compatibility information

!chore: bump wasmd to v0.60.8

imp(ratelimit): use collections for pending markers

ci(mergify): upgrade configuration to current format (backport #4074)

build(deps): Bump github.com/pelletier/go-toml/v2 from 2.3.1 to 2.4.3 in /tools/confix

chore(x/auth): human-readable error (backport #26567)

chore(x/auth): human-readable error (backport #26567)

chore(deps): bump the go_modules group across 5 directories with 2 updates

chore(deps): bump DavidAnson/markdownlint-cli2-action from 23 to 24

build(deps): Bump github.com/opencontainers/runc from 1.2.8 to 1.3.6 in the go_modules group across 1 directory

build(deps): Bump github.com/adlio/schema from 1.4.0 to 1.5.1

build(deps): Bump google.golang.org/grpc from 1.81.1 to 1.82.0