build(deps): bump github.com/cosmos/cosmos-sdk from 0.39.3 to 0.44.4

[dependabot]

Bumps github.com/cosmos/cosmos-sdk from 0.39.3 to 0.44.4.

Release notes

Sourced from github.com/cosmos/cosmos-sdk's releases.

Cosmos SDK v0.44.4 Release Notes

This release introduces bug fixes and improvements in the Cosmos SDK v0.44 series.

SDK v0.44.0-v0.44.3 x/auth migration have a vesting account bug, which vanishes delegated_vesting field from BaseVestingAccount. Recovery, unfortunately, is complicated and either involves manually overwriting it or querying an old state. We had to change the order of module migration by pushing x/auth to the end. Auth module state depends on x/stake and should be run last. We have updated the documentation to provide more details how to change module migration order. This is technically a breaking change, but only impacts updates between the major version change, hence migrating from the previous patch release (0.44.x) doesn't cause new migration and doesn't break the state.

Other bug fixes:

• grpc-gateway query account balance by IBC denom had an incorrect endpoint (correct one is "/cosmos/bank/v1beta1/balances/{address}/by_denom")
• use sdk.GetConfig().GetFullBIP44Path() instead sdk.FullFundraiserPath to generate key - this correctly resets hdpath when running app testnet.

This release enables Auto Download feature for Cosmovisor >= v1.0.0. Now, you will be able to use Auto Download with the latest Cosmovisor when you will plan the next upgrade to the next major release (v0.45.0),

Finally, we updated the IAVL to v0.17.2 and take a benefit of the new IAVL iterator, which improves the iteration performance.

See the Cosmos SDK v0.44.4 Changelog for the exhaustive list of all changes.

Full Diff: cosmos/cosmos-sdk@v0.44.3...v0.44.4

v0.44.3

Cosmos SDK v0.44.3 Release Notes

This release introduces bug fixes and improvements on the Cosmos SDK v0.44 series.

The main performance improvement concerns gRPC queries, which are now able to run concurrently on the node (#10045). To benefit from this performance boost, make sure to send your gRPC queries to the gRPC server directly (default port 9090) instead of using the Tendermint RPC abci_query endpoint (default port 26657).

This release notably also:

• bumps Tendermint to v0.34.14.
• bumps the gin-gonic/gin version to 1.7.0 to fix the upstream security vulnerability.
• adds a null guard with a user-friendly error message for possible nil Amount in tx fee Coins.

See the Cosmos SDK v0.44.3 milestone on our issue tracker for the exhaustive list of all changes.

Cosmos SDK v0.44.2 Release Notes

Recently, the Cosmos-SDK team became aware of a high-severity security vulnerability that impacts Cosmos-SDK v0.43.x and v0.44.x and can result in a consensus halt. User funds are NOT at risk; however, the vulnerability can result in a chain halt. This vulnerability does not impact the current Cosmos Hub, though other Cosmos-SDK based blockchains using v0.43.x or v0.44.x may be affected and are advised to update to v0.44.2 immediately.

Nodes can update their software independently of each other (no coordinated chain restart necessary), but should do so as soon as they are able.

A full disclosure will be published a week after the release.

Cosmos SDK v0.44.1 Release Notes

This release introduces bug fixes and improvements on the Cosmos SDK v0.44 series.

The main bug fix concerns all users performing in-place store migrations from v0.42 to v0.44. A source of non-determinism in the upgrade process has been detected and fixed in this release, causing consensus errors. As such, v0.44.0 is not safe to use when performing v0.42->v0.44 in-place store upgrades, please use this release v0.44.1 instead. This does not impact genesis JSON dump upgrades nor fresh chains starting with v0.44.

Another bug fix concerns calling the ABCI Query method using client.Context. We modified ABCI queries to use abci.QueryRequest's Height field if it is non-zero, otherwise continue using client.Context's height. This is a minor client-breaking change for users of the client.Context.

Some CLI fixes are also included, such as:

... (truncated)

Changelog

Sourced from github.com/cosmos/cosmos-sdk's changelog.

v0.44.4 - 2021-11-25

Improvements

• (x/upgrade) #10532 Add keeper.DumpUpgradeInfoWithInfoToDisk to include Plan.Info in the upgrade-info file.
• (store) #10544 Use the new IAVL iterator structure which significantly improves iterator performance.

Bug Fixes

• #10414 Use sdk.GetConfig().GetFullBIP44Path() instead sdk.FullFundraiserPath to generate key
• (bank) #10394 Fix: query account balance by ibc denom.
• \10608 Change the order of module migration by pushing x/auth to the end. Auth module depends on other modules and should be run last. We have updated the documentation to provide more details how to change module migration order. This is technically a breaking change, but only impacts updates between the upgrades with version change, hence migrating from the previous patch release doesn't cause new migration and doesn't break the state.

v0.44.3 - 2021-10-21

Improvements

• #10262 Remove unnecessary logging in x/feegrant simulation.
• #10327 Add null guard for possible nil Amount in tx fee Coins
• #10339 Improve performance of removeZeroCoins by only allocating memory when necessary
• #10045 Revert #8549. Do not route grpc queries through Tendermint.
• (deps) #10375 Bump Tendermint to v0.34.14.
• #10024 store/cachekv performance improvement by reduced growth factor for iterator ranging by using binary searches to find dirty items when unsorted key count >= 1024.

Bug Fixes

• (client) #10226 Fix --home flag parsing.
• (rosetta) #10340 Use GenesisChunked(ctx) instead Genesis(ctx) to get genesis block height
• #10394 Fixes issue related to grpc-gateway of account balance by ibc-denom.

v0.44.2 - 2021-10-12

Security Release. No breaking changes related to 0.44.x.

v0.44.1 - 2021-09-29

Improvements

• (store) #10040 Bump IAVL to v0.17.1 which includes performance improvements on a batch load.
• (types) #10021 Speedup coins.AmountOf(), by removing many intermittent regex calls.
• #10077 Remove telemetry on GasKV and CacheKV store Get/Set operations, significantly improving their performance.
• (store) #10026 Improve CacheKVStore datastructures / algorithms, to no longer take O(N^2) time when interleaving iterators and insertions.

Bug Fixes

• #9969 fix: use keyring in config for add-genesis-account cmd.
• (x/genutil) #10104 Ensure the init command reads the --home flag value correctly.
• (x/feegrant) #10049 Fixed the error message when period or period-limit flag is not set on a feegrant grant transaction.

Client Breaking Changes

... (truncated)

Commits

• 59d7dc4 chore: 0.44.4 release notes (#10613)
• ecab606 fix: always move auth module migration to the end (#10608)
• 792f388 chore: Iavl iterator (backport #10544) (#10545)
• 3ae5e0c build: fix build environment for the liveness test (backport #10551) (#10552)
• 6a46c95 feat: update x/upgrade keeper.DumpUpgradeInfoToDisk to support Plan.Info (#10...
• 2bbec7a fix: delete ru docs (#10549)
• e443fb7 fix: query account balance by ibc denom (backport #10394) (#10523)
• a359079 fix: use sdk.config hdpath (backport #10414) (#10445)
• 8a9589a style: lint go and markdown (backport #10060) (#10473)
• 0ac1f6d chore: Add "Since:" on proto doc comments (backport #10434) (#10449)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)