Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add missing dependabot changelog entries 1864, 1863, 1858, 1857, 1850. #1870

Merged
merged 8 commits into from
Mar 11, 2024
Merged

Add missing dependabot changelog entries 1864, 1863, 1858, 1857, 1850. #1870

merged 8 commits into from
Mar 11, 2024

Conversation

SpicyLemon
Copy link
Contributor

@SpicyLemon SpicyLemon commented Mar 7, 2024 •
edited by coderabbitai bot
Loading

Description

This PR adds the dependabot changelog entries that got missed.

The fix for that action is in #1860.

Before we can merge this PR, please make sure that all the following items have been
checked off. If any of the checklist items are not applicable, please leave them but
write a little note why.

  • Targeted PR against correct branch (see CONTRIBUTING.md)
  • Linked to Github issue with discussion and accepted design OR link to spec that describes this work.
  • Wrote unit and integration tests
  • Updated relevant documentation (docs/) or specification (x/<module>/spec/)
  • Added relevant godoc comments.
  • Added a relevant changelog entry to the Unreleased section in CHANGELOG.md
  • Re-reviewed Files changed in the Github PR explorer
  • Review Codecov Report in the comment section below once CI passes

Summary by CodeRabbit

  • Bug Fixes

    • Enhanced validation for MarkerTransferAuthorization to ensure all coins and addresses are valid.

  • Chores

    • Updated various dependencies for better performance and security.

@SpicyLemon SpicyLemon requested a review from a team as a code owner March 7, 2024 18:25
@coderabbitai coderabbitai
Copy link
Contributor

coderabbitai bot commented Mar 7, 2024 •
edited
Loading

Walkthrough

The changes involve fixing the validation for MarkerTransferAuthorization to ensure the correctness of coins and addresses. Additionally, dependencies like google.golang.org/grpc, cosmossdk.io/math, peter-evans/create-pull-request, and github.com/golang/protobuf have been updated for improved functionality.

Changes

Files Change Summary
CHANGELOG.md Fixed MarkerTransferAuthorization validation; updated dependencies

🐇🔍
Coins checked, addresses right,
Dependencies updated, shining light.
Rabbit code leaps, errors fade,
Through the digital glade, a joyful cascade.
🌌🌱

Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?

Share
Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>.
    • Generate unit-tests for this file.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
    • @coderabbitai generate unit tests for this file.
    • @coderabbitai modularize this function.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai generate interesting stats about this repository and render them as a table.
    • @coderabbitai show all the console.log statements in this repository.
    • @coderabbitai read src/utils.ts and generate unit tests.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (invoked as PR comments)

  • @coderabbitai pause to pause the reviews on a PR.
  • @coderabbitai resume to resume the paused reviews.
  • @coderabbitai review to trigger a review. This is useful when automatic reviews are disabled for the repository.
  • @coderabbitai resolve resolve all the CodeRabbit review comments.
  • @coderabbitai help to get help.

Additionally, you can add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.

CodeRabbit Configration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • The JSON schema for the configuration file is available here.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/coderabbit-overrides.v2.json

CodeRabbit Discord Community

Join our Discord Community to get help, request features, and share feedback.

Taztingo
Taztingo previously approved these changes Mar 7, 2024
View reviewed changes
coderabbitai[bot]
coderabbitai bot reviewed Mar 7, 2024
View reviewed changes
Copy link
Contributor

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Review Status

Actionable comments generated: 0

Configuration used: CodeRabbit UI

Commits Files that changed from the base of the PR and between b6a4398 and 6103ed0.
Files selected for processing (2)
  • .github/workflows/changelog.yml (1 hunks)
  • CHANGELOG.md (1 hunks)
Additional comments: 3
.github/workflows/changelog.yml (1)
  • 39-39: The correction of the activationLabels parameter from singular to plural is noted and aligns with the PR objectives to fix the automatic changelog entry generation. This change is crucial for the workflow's correct functioning.
CHANGELOG.md (2)
  • 50-53: Dependency updates are crucial for maintaining the project's security, performance, and compatibility. Ensure thorough testing and compatibility checks are performed to prevent potential issues.
  • 46-46: Fixing the MarkerTransferAuthorization validation is critical for ensuring the integrity of marker transfers. Ensure comprehensive testing and review to cover all edge cases and prevent new vulnerabilities.

@SpicyLemon SpicyLemon changed the title Fix dependabot changelog Add missing dependabot changelog entries 1864, 1863, 1858, 1857, 1850. Mar 7, 2024
Taztingo
Taztingo previously approved these changes Mar 7, 2024
View reviewed changes
@SpicyLemon SpicyLemon enabled auto-merge (squash) March 7, 2024 18:37
coderabbitai[bot]
coderabbitai bot reviewed Mar 7, 2024
View reviewed changes
Copy link
Contributor

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Review Status

Actionable comments generated: 0

Configuration used: CodeRabbit UI

Commits Files that changed from the base of the PR and between 6103ed0 and 656c48b.
Files selected for processing (1)
  • CHANGELOG.md (1 hunks)
Files skipped from review as they are similar to previous changes (1)
  • CHANGELOG.md

Taztingo
Taztingo previously approved these changes Mar 7, 2024
View reviewed changes
iramiller
iramiller previously approved these changes Mar 10, 2024
View reviewed changes
@iramiller iramiller dismissed stale reviews from Taztingo and themself via c1f2b89 March 10, 2024 05:13
coderabbitai[bot]
coderabbitai bot reviewed Mar 10, 2024
View reviewed changes
Copy link
Contributor

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Review Status

Actionable comments generated: 0

Configuration used: CodeRabbit UI

Commits Files that changed from the base of the PR and between 656c48b and c1f2b89.
Files selected for processing (1)
  • CHANGELOG.md (1 hunks)
Files skipped from review as they are similar to previous changes (1)
  • CHANGELOG.md

@SpicyLemon SpicyLemon merged commit 94b1b13 into main Mar 11, 2024
18 checks passed
@SpicyLemon SpicyLemon deleted the dwedul/fix-dependabot-changelogs branch March 11, 2024 02:35
coderabbitai[bot]
coderabbitai bot reviewed Mar 11, 2024
View reviewed changes
Copy link
Contributor

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Review Status

Actionable comments generated: 0

Configuration used: CodeRabbit UI

Commits Files that changed from the base of the PR and between c1f2b89 and c0b133c.
Files selected for processing (1)
  • CHANGELOG.md (1 hunks)
Files skipped from review as they are similar to previous changes (1)
  • CHANGELOG.md

SpicyLemon added a commit that referenced this pull request Mar 18, 2024
@SpicyLemon
Add missing dependabot changelog entries 1864, 1863, 1858, 1857, 1850. (
f0c5d00 
#1870)

* Use activationLabels (instead of the deprecated activationLabel) in the changelog github action.

* Add dependabot changelog entries that were missed previously.

* Add missing # from a changelog entry link.

* Undo the changelog github action change and let it be done in a different PR.

* Combine the Dependencies sections (for some reason the merge from main didn't go as expected and it ended up with two).
SpicyLemon added a commit that referenced this pull request Mar 18, 2024
@SpicyLemon @dependabot
@nullpointer0x00 @iramiller
Backport: Dependabot bumps: 1850, 1857, 1858, 1860, 1863, 1864, 1871,…
96259c6 
… 1872. (#1875)

* Bump cosmossdk.io/math from 1.2.0 to 1.3.0 (#1857)

Bumps [cosmossdk.io/math](https://github.com/cosmos/cosmos-sdk) from 1.2.0 to 1.3.0.
- [Release notes](https://github.com/cosmos/cosmos-sdk/releases)
- [Changelog](https://github.com/cosmos/cosmos-sdk/blob/main/CHANGELOG.md)
- [Commits](cosmos/cosmos-sdk@log/v1.2.0...log/v1.3.0)

---
updated-dependencies:
- dependency-name: cosmossdk.io/math
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump peter-evans/create-pull-request from 6.0.0 to 6.0.1 (#1858)

Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 6.0.0 to 6.0.1.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@v6.0.0...v6.0.1)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Carlton N Hanna <nullpointer0x00@gmail.com>

* Bump google.golang.org/grpc from 1.61.1 to 1.62.0 (#1850)

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.61.1 to 1.62.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.61.1...v1.62.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ira Miller <72319+iramiller@users.noreply.github.com>

* Bump github.com/golang/protobuf from 1.5.3 to 1.5.4 (#1863)

Bumps [github.com/golang/protobuf](https://github.com/golang/protobuf) from 1.5.3 to 1.5.4.
- [Release notes](https://github.com/golang/protobuf/releases)
- [Commits](golang/protobuf@v1.5.3...v1.5.4)

---
updated-dependencies:
- dependency-name: github.com/golang/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump google.golang.org/grpc from 1.62.0 to 1.62.1 (#1864)

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.62.0 to 1.62.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.62.0...v1.62.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (#1860)

* Bump github.com/stretchr/testify from 1.8.4 to 1.9.0

Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.4 to 1.9.0.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.8.4...v1.9.0)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Switch the changelog action to use activationLabels (instead of the deprecated and maybe broken activationLabel).

* Updated Changelog

* Fix placement of new Dependencies section in the changelog.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Daniel Wedul <github@wedul.com>
Co-authored-by: SpicyLemon <SpicyLemon@users.noreply.github.com>

* Bump bufbuild/buf-setup-action from 1.29.0 to 1.30.0 (#1871)

* Bump bufbuild/buf-setup-action from 1.29.0 to 1.30.0

Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.29.0 to 1.30.0.
- [Release notes](https://github.com/bufbuild/buf-setup-action/releases)
- [Commits](bufbuild/buf-setup-action@v1.29.0...v1.30.0)

---
updated-dependencies:
- dependency-name: bufbuild/buf-setup-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Updated Changelog

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: dependabot[bot] <dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ira Miller <72319+iramiller@users.noreply.github.com>

* Add missing dependabot changelog entries 1864, 1863, 1858, 1857, 1850. (#1870)

* Use activationLabels (instead of the deprecated activationLabel) in the changelog github action.

* Add dependabot changelog entries that were missed previously.

* Add missing # from a changelog entry link.

* Undo the changelog github action change and let it be done in a different PR.

* Combine the Dependencies sections (for some reason the merge from main didn't go as expected and it ended up with two).

* Bump peter-evans/create-pull-request from 6.0.1 to 6.0.2 (#1872)

* Bump peter-evans/create-pull-request from 6.0.1 to 6.0.2

Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 6.0.1 to 6.0.2.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@v6.0.1...v6.0.2)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Updated Changelog

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: dependabot[bot] <dependabot[bot]@users.noreply.github.com>

* Remove extra changelog entries that haven't been backported yet.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Carlton N Hanna <nullpointer0x00@gmail.com>
Co-authored-by: Ira Miller <72319+iramiller@users.noreply.github.com>
Co-authored-by: SpicyLemon <SpicyLemon@users.noreply.github.com>
Co-authored-by: dependabot[bot] <dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@coderabbitai coderabbitai coderabbitai left review comments

@iramiller iramiller iramiller approved these changes

@Taztingo Taztingo Taztingo approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@SpicyLemon @iramiller @Taztingo