fix: bump comet for tachyon advisory

[johnletey]

No description provided.

[coderabbitai]

Walkthrough

This PR adds v11.2.0 changelog entries (dated Jan 23, 2026) documenting a CometBFT dependency upgrade to v0.38.21 to address CSA-2026-001 and notes minor recovery improvements for several IBC light clients.

Changes

Cohort / File(s)	Summary
Changelog entries .changelog/v11.2.0/dependencies/622-bump-comet.md, .changelog/v11.2.0/summary.md, CHANGELOG.md	Add v11.2.0 release notes (Jan 23, 2026): bump CometBFT to v0.38.21 for CSA-2026-001 and document recovery of expired IBC light clients for several chains.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Suggested reviewers

• boojamya
• g-luca
• MalteHerrmann

Poem

🐰 A tiny hop, a careful note,
CometBFT warmed to stay afloat,
v11.2.0 penned with safety bright,
Changelogs tidy, snug at night. ✨

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Description check	❓ Inconclusive	No pull request description was provided by the author, making it impossible to assess whether it relates to the changeset.	Add a description explaining the security advisory (CSA-2026-001), why the CometBFT bump is necessary, and the impact of the changes.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately reflects the main change: bumping CometBFT to address a security advisory (CSA-2026-001), which is the primary objective of the PR.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

🤖 Fix all issues with AI agents

In @.changelog/v11.2.0/dependencies/622-bump-comet.md:
- Line 1: The changelog entry wrongly references the security advisory
"CSA-2026-001" for the CometBFT bump; update the line that mentions v0.38.21 and
the advisory so it no longer cites CSA-2026-001—either remove the advisory
reference entirely or replace it with the correct CometBFT advisory identifier
(if one exists) that corresponds to v0.38.21; ensure the text mentioning
"v0.38.21" and the advisory string is edited, and verify go.mod and go.sum
remain unchanged.

[coderabbitai]

Actionable comments posted: 1

🤖 Fix all issues with AI agents

In `@CHANGELOG.md`:
- Line 5: Replace the emphasized date string "*Jan 23, 2026*" with
non-emphasized text (either plain text "Jan 23, 2026" or a proper Markdown
heading like "## Jan 23, 2026") to eliminate emphasis-as-heading formatting;
locate the exact token "*Jan 23, 2026*" in CHANGELOG.md and remove the
surrounding asterisks or convert it to the desired heading level.