Code Browser

build(deps): Bump github.com/creachadair/atomicfile from 0.4.1 to 0.4.2 in /tools/confix

Declarative internal-only messages (governance/module dispatch only, reject direct submission)

test(blockstm): add property-based fuzz harness for parallel execution

chore(blockstm): validate ExecuteBlock inputs instead of panicking

fix(blockstm): normalize non-positive worker count in STMRunner.Run

feat(enterprise/poa): consensus key rotations

fix(x/staking): propagate AfterUnbondingInitiated hook error instead of swallowing it

fix(x/authz): cap expired grant pruning per BeginBlocker to 200, matching feegrant

fix(codec,x/tx): lower nested Any depth cap from 10000 to 64 to reduce DoS amplification

fix(store): bound decompressed snapshot chunk size to prevent decompression-bomb DoS

fix(server): lower default gRPC MaxSendMsgSize from ~2GB to 10MB

chore(docs): update readme

fix(blockstm): count validation tasks before advancing validationIdx to prevent lost updates

build(deps): Bump github.com/pelletier/go-toml/v2 from 2.3.1 to 2.4.3 in /tools/cosmovisor

build(deps): Bump golang.org/x/crypto from 0.51.0 to 0.52.0 in /store in the go_modules group across 1 directory

ci: bump go to 1.26.5 and ignore GO-2026-5932 in vulncheck

build(deps): Bump github.com/pelletier/go-toml/v2 from 2.3.1 to 2.4.3 in /tools/confix

chore(x/auth): human-readable error (backport #26567)

chore(x/auth): human-readable error (backport #26567)

build(deps): Bump google.golang.org/grpc from 1.81.1 to 1.82.0 in /errors

fix(math): bound Unmarshal input length to prevent superlinear big.Int parse

fix(types/query): cap pagination limit to prevent unbounded store iteration DoS

fix(x/auth/ante): reject tx with extra SignerInfos in SetPubKeyDecorator

docs(server/config): warn that query-gas-limit = 0 is unbounded by default

fix(x/auth/tx): avoid nil pointer panic in GetSigningTxData for multisig ModeInfo with a nil Multi or nil Bitarray

fix(baseapp): enforce MaxBlockGas in ProcessProposal with NoOpMempool, guard gas overflow in tx selection

build(deps): Bump google.golang.org/grpc from 1.81.1 to 1.82.0 in /store

build(deps): Bump google.golang.org/grpc from 1.81.1 to 1.82.0 in /tools/cosmovisor

chore(x/auth): human-readable error

build(deps): Bump google.golang.org/grpc from 1.81.1 to 1.82.0 in /core