Code Browser

build(deps): Bump google.golang.org/grpc from 1.82.0 to 1.82.1 in /core

build(deps): Bump github.com/bits-and-blooms/bitset from 1.24.5 to 1.24.6

build(deps): Bump golang.org/x/sync from 0.21.0 to 0.22.0

build(deps): Bump github.com/prometheus/common from 0.68.1 to 0.70.0

build(deps): Bump actions/setup-node from 6 to 7

ci: improve workflow 'Build simd Nightlies'

fix(x/bank): scale amount when ResolveDenom converts base to display denom

fix(x/feegrant): honor pagination in Allowances and AllowancesByGranter

build(deps): Bump github.com/creachadair/atomicfile from 0.4.1 to 0.4.2 in /tools/confix

chore(blockstm): validate ExecuteBlock inputs instead of panicking

fix(blockstm): normalize non-positive worker count in STMRunner.Run

feat(enterprise/poa): consensus key rotations

fix(x/staking): propagate AfterUnbondingInitiated hook error instead of swallowing it

fix(x/authz): cap expired grant pruning per BeginBlocker to 200, matching feegrant

fix(codec,x/tx): lower nested Any depth cap from 10000 to 64 to reduce DoS amplification

fix(store): bound decompressed snapshot chunk size to prevent decompression-bomb DoS

fix(server): lower default gRPC MaxSendMsgSize from ~2GB to 10MB

chore(docs): update readme

fix(blockstm): count validation tasks before advancing validationIdx to prevent lost updates

build(deps): Bump github.com/pelletier/go-toml/v2 from 2.3.1 to 2.4.3 in /tools/cosmovisor

build(deps): Bump golang.org/x/crypto from 0.51.0 to 0.52.0 in /store in the go_modules group across 1 directory

ci: bump go to 1.26.5 and ignore GO-2026-5932 in vulncheck

build(deps): Bump github.com/pelletier/go-toml/v2 from 2.3.1 to 2.4.3 in /tools/confix

chore(x/auth): human-readable error (backport #26567)

chore(x/auth): human-readable error (backport #26567)

build(deps): Bump google.golang.org/grpc from 1.81.1 to 1.82.0 in /errors

fix(math): bound Unmarshal input length to prevent superlinear big.Int parse

fix(types/query): cap pagination limit to prevent unbounded store iteration DoS

fix(x/auth/ante): reject tx with extra SignerInfos in SetPubKeyDecorator

docs(server/config): warn that query-gas-limit = 0 is unbounded by default