From f4de4bf24d0f0f523a65f819a204476c6387cbec Mon Sep 17 00:00:00 2001 From: John Letey Date: Fri, 23 Jan 2026 17:26:50 +0100 Subject: [PATCH 1/2] fix: bump comet for tachyon advisory --- .changelog/v11.2.0/dependencies/622-bump-comet.md | 1 + .changelog/v11.2.0/summary.md | 3 +++ CHANGELOG.md | 10 ++++++++++ e2e/go.mod | 2 +- e2e/go.sum | 4 ++-- go.mod | 2 +- go.sum | 4 ++-- 7 files changed, 20 insertions(+), 6 deletions(-) create mode 100644 .changelog/v11.2.0/dependencies/622-bump-comet.md create mode 100644 .changelog/v11.2.0/summary.md diff --git a/.changelog/v11.2.0/dependencies/622-bump-comet.md b/.changelog/v11.2.0/dependencies/622-bump-comet.md new file mode 100644 index 00000000..4bb37044 --- /dev/null +++ b/.changelog/v11.2.0/dependencies/622-bump-comet.md @@ -0,0 +1 @@ +- Bump CometBFT to [`v0.38.21`](https://github.com/cometbft/cometbft/releases/tag/v0.38.21) to resolve [CSA-2026-001](https://github.com/cometbft/cometbft/security/advisories/GHSA-c32p-wcqj-j677) security advisory. ([#622](https://github.com/noble-assets/noble/pull/622)) diff --git a/.changelog/v11.2.0/summary.md b/.changelog/v11.2.0/summary.md new file mode 100644 index 00000000..ea5646aa --- /dev/null +++ b/.changelog/v11.2.0/summary.md @@ -0,0 +1,3 @@ +*Jan 23, 2026* + +This is a minor release to the v11 Flux line. diff --git a/CHANGELOG.md b/CHANGELOG.md index 5c6ac4e0..021dcef1 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,15 @@ # CHANGELOG +## v11.2.0 + +*Jan 23, 2026* + +This is a minor release to the v11 Flux line. + +### DEPENDENCIES + +- Bump CometBFT to [`v0.38.21`](https://github.com/cometbft/cometbft/releases/tag/v0.38.21) to resolve [CSA-2026-001](https://github.com/cometbft/cometbft/security/advisories/GHSA-c32p-wcqj-j677) security advisory. ([#622](https://github.com/noble-assets/noble/pull/622)) + ## v11.1.0 *Nov 19, 2025* diff --git a/e2e/go.mod b/e2e/go.mod index 1dc9e2bc..40615406 100644 --- a/e2e/go.mod +++ b/e2e/go.mod @@ -76,7 +76,7 @@ require ( github.com/cockroachdb/pebble v1.1.5 // indirect github.com/cockroachdb/redact v1.1.6 // indirect github.com/cockroachdb/tokenbucket v0.0.0-20230807174530-cc333fc44b06 // indirect - github.com/cometbft/cometbft v0.38.19 // indirect + github.com/cometbft/cometbft v0.38.21 // indirect github.com/cometbft/cometbft-db v0.14.1 // indirect github.com/consensys/gnark-crypto v0.18.0 // indirect github.com/containerd/log v0.1.0 // indirect diff --git a/e2e/go.sum b/e2e/go.sum index 63a9e26b..f7b217ee 100644 --- a/e2e/go.sum +++ b/e2e/go.sum @@ -818,8 +818,8 @@ github.com/cockroachdb/redact v1.1.6/go.mod h1:BVNblN9mBWFyMyqK1k3AAiSxhvhfK2oOZ github.com/cockroachdb/tokenbucket v0.0.0-20230807174530-cc333fc44b06 h1:zuQyyAKVxetITBuuhv3BI9cMrmStnpT18zmgmTxunpo= github.com/cockroachdb/tokenbucket v0.0.0-20230807174530-cc333fc44b06/go.mod h1:7nc4anLGjupUW/PeY5qiNYsdNXj7zopG+eqsS7To5IQ= github.com/codahale/hdrhistogram v0.0.0-20161010025455-3a0bb77429bd/go.mod h1:sE/e/2PUdi/liOCUjSTXgM1o87ZssimdTWN964YiIeI= -github.com/cometbft/cometbft v0.38.19 h1:vNdtCkvhuwUlrcLPAyigV7lQpmmo+tAq8CsB8gZjEYw= -github.com/cometbft/cometbft v0.38.19/go.mod h1:UCu8dlHqvkAsmAFmWDRWNZJPlu6ya2fTWZlDrWsivwo= +github.com/cometbft/cometbft v0.38.21 h1:qcIJSH9LiwU5s6ZgKR5eRbsLNucbubfraDs5bzgjtOI= +github.com/cometbft/cometbft v0.38.21/go.mod h1:UCu8dlHqvkAsmAFmWDRWNZJPlu6ya2fTWZlDrWsivwo= github.com/cometbft/cometbft-db v0.14.1 h1:SxoamPghqICBAIcGpleHbmoPqy+crij/++eZz3DlerQ= github.com/cometbft/cometbft-db v0.14.1/go.mod h1:KHP1YghilyGV/xjD5DP3+2hyigWx0WTp9X+0Gnx0RxQ= github.com/consensys/gnark-crypto v0.18.0 h1:vIye/FqI50VeAr0B3dx+YjeIvmc3LWz4yEfbWBpTUf0= diff --git a/go.mod b/go.mod index f2b168ff..82582aeb 100644 --- a/go.mod +++ b/go.mod @@ -19,7 +19,7 @@ require ( github.com/bcp-innovations/hyperlane-cosmos v1.0.1 github.com/circlefin/noble-cctp v0.0.0-20241031192117-4285c94ec194 github.com/circlefin/noble-fiattokenfactory v0.0.0-20250123235012-5f9bd9dd2c5b - github.com/cometbft/cometbft v0.38.19 + github.com/cometbft/cometbft v0.38.21 github.com/cosmos/cosmos-db v1.1.1 github.com/cosmos/cosmos-sdk v0.50.14 github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v8 v8.2.0 diff --git a/go.sum b/go.sum index fa7861fc..4d3a9f6d 100644 --- a/go.sum +++ b/go.sum @@ -456,8 +456,8 @@ github.com/cockroachdb/redact v1.1.6/go.mod h1:BVNblN9mBWFyMyqK1k3AAiSxhvhfK2oOZ github.com/cockroachdb/tokenbucket v0.0.0-20230807174530-cc333fc44b06 h1:zuQyyAKVxetITBuuhv3BI9cMrmStnpT18zmgmTxunpo= github.com/cockroachdb/tokenbucket v0.0.0-20230807174530-cc333fc44b06/go.mod h1:7nc4anLGjupUW/PeY5qiNYsdNXj7zopG+eqsS7To5IQ= github.com/codahale/hdrhistogram v0.0.0-20161010025455-3a0bb77429bd/go.mod h1:sE/e/2PUdi/liOCUjSTXgM1o87ZssimdTWN964YiIeI= -github.com/cometbft/cometbft v0.38.19 h1:vNdtCkvhuwUlrcLPAyigV7lQpmmo+tAq8CsB8gZjEYw= -github.com/cometbft/cometbft v0.38.19/go.mod h1:UCu8dlHqvkAsmAFmWDRWNZJPlu6ya2fTWZlDrWsivwo= +github.com/cometbft/cometbft v0.38.21 h1:qcIJSH9LiwU5s6ZgKR5eRbsLNucbubfraDs5bzgjtOI= +github.com/cometbft/cometbft v0.38.21/go.mod h1:UCu8dlHqvkAsmAFmWDRWNZJPlu6ya2fTWZlDrWsivwo= github.com/cometbft/cometbft-db v0.14.1 h1:SxoamPghqICBAIcGpleHbmoPqy+crij/++eZz3DlerQ= github.com/cometbft/cometbft-db v0.14.1/go.mod h1:KHP1YghilyGV/xjD5DP3+2hyigWx0WTp9X+0Gnx0RxQ= github.com/containerd/continuity v0.3.0 h1:nisirsYROK15TAMVukJOUyGJjz4BNQJBVsNvAXZJ/eg= From ebedbfaec30a0d846091dab0eab73f121632e6e5 Mon Sep 17 00:00:00 2001 From: John Letey Date: Fri, 23 Jan 2026 18:41:12 +0100 Subject: [PATCH 2/2] chore: build cl --- .../improvements/621-recover-clients.md | 0 CHANGELOG.md | 4 ++++ 2 files changed, 4 insertions(+) rename .changelog/{unreleased => v11.2.0}/improvements/621-recover-clients.md (100%) diff --git a/.changelog/unreleased/improvements/621-recover-clients.md b/.changelog/v11.2.0/improvements/621-recover-clients.md similarity index 100% rename from .changelog/unreleased/improvements/621-recover-clients.md rename to .changelog/v11.2.0/improvements/621-recover-clients.md diff --git a/CHANGELOG.md b/CHANGELOG.md index 021dcef1..03829752 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -10,6 +10,10 @@ This is a minor release to the v11 Flux line. - Bump CometBFT to [`v0.38.21`](https://github.com/cometbft/cometbft/releases/tag/v0.38.21) to resolve [CSA-2026-001](https://github.com/cometbft/cometbft/security/advisories/GHSA-c32p-wcqj-j677) security advisory. ([#622](https://github.com/noble-assets/noble/pull/622)) +### IMPROVEMENTS + +- Recover expired IBC light clients for `haqq_11235-1`, `migaloo-1`, and `omniflixhub-1` ([#621](https://github.com/noble-assets/noble/pull/621)) + ## v11.1.0 *Nov 19, 2025*