Code Browser

fix(tempfile): fsync parent directory after atomic rename

fix(types): copy full conflicting block hash in LightClientAttackEvidence.Hash

docs: align SECURITY.md with cosmos/security policy

perf(state): avoid speculative proposal block construction

fix(libs/pubsub): claim the client/query pair atomically in Subscribe

fix(config): validate mempool.recheck_timeout

fix(types): bound commit signatures by MaxVotesCount in ValidateBasic

fix(state/indexer): intersect repeated range conditions on the same key

fix(rpc): release subscription write contexts

build(deps): Bump docker/build-push-action from 7.3.0 to 7.4.0

build(deps): Bump docker/setup-buildx-action from 4.3.0 to 4.4.1

build(deps): Bump docker/setup-buildx-action from 4.3.0 to 4.4.1

build(deps): Bump docker/build-push-action from 7.3.0 to 7.4.0

fix(libs/bits): reject negative sizes in BitArray.ValidateBasic

fix(rpc): cancel the per-event write context in Subscribe after each write

fix(p2p): release reactor peer state when addPeer rejects a peer

fix(node): don't close a nil blockstore when BootstrapState fails to open it

fix(lp2p): derive System.Conns from max_peers in custom limits mode

fix(evidence): commit marker and pending deletion atomically in Pool.Update

fix(state/txindex): keep successful result when a later duplicate-hash tx fails in AddBatch

fix(abci): fail in-flight socket client requests on graceful stop

fix(rpc): reject negative genesis_chunked index instead of panicking

fix(lp2p): bound idle time and allocation in StreamReadSized

fix(state/txindex): exit IndexerService worker when its subscriptions are canceled

fix(libs/autofile): unregister SIGHUP channel before closing it

fix(privval): close unconsumed connection when listener endpoint stops

fix(consensus): prevent ingest response panic during shutdown

fix(statesync): avoid panic when rejecting oversized snapshots

docs(rfc): Lib-p2p Peer Exchange (PEX)

chore: inherit org security policy