This release contains important security fixes. We recommend all chains upgrade to this patch release as soon as possible using a coordinated upgrade
This release is state breaking
What's Changed
- chore: delete auto release github actions (backport #26303) by @mergify[bot] in #26308
- build(deps): Bump github.com/cometbft/cometbft from 0.38.21 to 0.38.22 by @dependabot[bot] in #26292
- fix(distribution): add strict + fallback behavior when withdrawing delegator rewards (backport #26406) by @mergify[bot] in #26410
- fix(store/cachemulti): isolate traceContext map across branched stores by @ozpool in #26427
- build(deps): Bump github.com/cometbft/cometbft from 0.38.22 to 0.38.23 by @dependabot[bot] in #26405
- fix: update simapp, tests, systemtests go.mod to cometbft v0.38.23 by @aljo242 in #26499
- ci: add setup-go to test-system and test-system-legacy jobs by @aljo242 in #26498
- fix(x/staking): handle redelegation when unbonded source is removed (backport #26408) by @mergify[bot] in #26417
- chore(x/auth): human-readable error (backport #26567) by @mergify[bot] in #26578
- fix(x/auth/tx): avoid nil pointer panic in GetSigningTxData (backport #26527) by @mergify[bot] in #26661
- fix: bound multisig signature and pubkey indexing by slice lengths (backport #26515) by @mergify[bot] in #26651
- fix(x/distribution): return errors for missing historical rewards internally (backport #26518) by @mergify[bot] in #26655
- fix(x/auth/tx): avoid nil pointer panic in GetSigningTxData for multisig ModeInfo with a nil Multi or nil Bitarray (backport #26571) by @mergify[bot] in #26664
- fix: reject tx with mismatched signer info and signature counts (backport #26517) by @mergify[bot] in #26653
- fix(x/auth/ante): reject tx with extra SignerInfos in SetPubKeyDecorator (backport #26573) by @mergify[bot] in #26663
- fix: bound compact bit array index by elems length (backport #26509) by @mergify[bot] in #26662
- fix(crypto): validate secp256k1 pubkey SEC1 tag byte (backport #26529) by @mergify[bot] in #26665
- chore: sdk@v0.53.8 changelog by @swift1337 in #26674
Full Changelog: v0.53.7...v0.53.8