v0.53.8

This release contains important security fixes. We recommend all chains upgrade to this patch release as soon as possible using a coordinated upgrade

This release is state breaking

What's Changed

• chore: delete auto release github actions (backport #26303 ) by @mergify [bot] in #26308

• build(deps): Bump github.com/cometbft/cometbft from 0.38.21 to 0.38.22 by @dependabot [bot] in #26292

• fix(distribution): add strict + fallback behavior when withdrawing delegator rewards (backport #26406 ) by @mergify [bot] in #26410

• fix(store/cachemulti): isolate traceContext map across branched stores by @ozpool in #26427

• build(deps): Bump github.com/cometbft/cometbft from 0.38.22 to 0.38.23 by @dependabot [bot] in #26405

• fix: update simapp, tests, systemtests go.mod to cometbft v0.38.23 by @aljo242 in #26499

• ci: add setup-go to test-system and test-system-legacy jobs by @aljo242 in #26498

• fix(x/staking): handle redelegation when unbonded source is removed (backport #26408 ) by @mergify [bot] in #26417

• chore(x/auth): human-readable error (backport #26567 ) by @mergify [bot] in #26578

• fix(x/auth/tx): avoid nil pointer panic in GetSigningTxData (backport #26527 ) by @mergify [bot] in #26661

• fix: bound multisig signature and pubkey indexing by slice lengths (backport #26515 ) by @mergify [bot] in #26651

• fix(x/distribution): return errors for missing historical rewards internally (backport #26518 ) by @mergify [bot] in #26655

• fix(x/auth/tx): avoid nil pointer panic in GetSigningTxData for multisig ModeInfo with a nil Multi or nil Bitarray (backport #26571 ) by @mergify [bot] in #26664

• fix: reject tx with mismatched signer info and signature counts (backport #26517 ) by @mergify [bot] in #26653

• fix(x/auth/ante): reject tx with extra SignerInfos in SetPubKeyDecorator (backport #26573 ) by @mergify [bot] in #26663

• fix: bound compact bit array index by elems length (backport #26509 ) by @mergify [bot] in #26662

• fix(crypto): validate secp256k1 pubkey SEC1 tag byte (backport #26529 ) by @mergify [bot] in #26665

• chore: [email protected] changelog by @swift1337 in #26674

Full Changelog : v0.53.7...v0.53.8