Passage v4.0.2

Scheduled upgrade following the v4.0.1 emergency fix.

Changes

CometBFT v0.38.12 → v0.38.23

• Restores working transaction reindexing (passage tendermint reindex-event).
• Includes all accumulated fixes from the v0.38.x release line.

IAVL v1.2.2 → v1.2.3

• Fixes a significant performance regression (iavl#1018).
• getFirstVersion() now correctly caches its result on chains using legacy-format versions (which includes every chain upgraded through v4.0.0).
• Applied to the vendored iavl-fork on top of the existing empty-store load fix.

x/group

Introduces the new x/group module (new store), enabling:

• On-chain multisig-style groups.
• Weighted group members.
• Decision policies.
• Proposal execution.

Coordination

This is a consensus-breaking upgrade because it introduces a new store.

The upgrade is activated through a governance software-upgrade proposal:

• Plan name: v4.0.2
• Activation: Governance proposal (not a flag-day upgrade)

Validators should either:

• Stage the new binary for Cosmovisor:

upgrades/v4.0.2/bin/passage

• Or be prepared to manually swap the binary at the upgrade halt.

Important: The upgrade handler name must be exactly:

v4.0.2

Verification

Validated using real-broadcast fork testing against forked mainnet state.

Verified successfully:

• Governance software upgrade applied:

  applying upgrade "v4.0.2"
  

• Module version map includes:

  group: 2
  

• Regression transactions for:

  • bank
  • staking
  • distribution

  all returned:

  code: 0
  

• Complete x/group lifecycle tested successfully:

  1. Create group with policy
  2. Fund policy account
  3. Submit group proposal executing a MsgSend
  4. Vote
  5. Execute proposal

All transactions completed with:

code: 0

Balances updated correctly throughout the workflow.

Checksums (SHA256)

e46174f14a72efe8be5bdd004144e8e8122cf620a1736b710310bb5f1acc30a7  passage-4.0.2-linux-amd64
b6e139d44d14141cc3aa1e424ba4ecaf35af01cb5af1912b6e98e930fcb9aa77  passage-4.0.2-linux-arm64

Reproducible Builds

Static (musl) builds were produced using:

• cosmossdk/rbuilder
• Commit:

  6bfe7c412a4dead6bb2f74d5fabfd0a1f7de6fa3
  

• Tag:

  v4.0.2
  

Build From Source

Requires Go 1.22+.

git checkout v4.0.2
make build