bump: opinit to v0.6.2 & cometbft & use latest ilvl #135
Conversation
WalkthroughThis pull request focuses on updating dependency versions across two Changes
Possibly related PRs
Poem
📜 Recent review detailsConfiguration used: CodeRabbit UI ⛔ Files ignored due to path filters (2)
📒 Files selected for processing (2)
🔇 Additional comments (6)integration-tests/go.mod (3)
The update of both
The CometBFT version has been updated in both the direct dependency and replace directive:
Also applies to: 271-271
A new indirect dependency ✅ Verification successfulLet me check the actual usage of this dependency to ensure it's properly integrated. Indirect dependency is properly imported and no security issues found The dependency
🏁 Scripts executedThe following scripts were executed for the analysis: Script: #!/bin/bash
# Description: Check the new dependency's impact
# Check if the dependency is used in the codebase
rg -l "kvindexer/submodules/evm-nft"
# Look for any security advisories
gh api graphql -f query='
{
securityVulnerabilities(first: 5, ecosystem: GO, package: "github.com/initia-labs/kvindexer") {
nodes {
advisory {
summary
severity
publishedAt
}
vulnerableVersionRange
firstPatchedVersion {
identifier
}
}
}
}'
Length of output: 480 Script: #!/bin/bash
# Check the actual usage in app/indexer.go
rg -C 3 "kvindexer/submodules/evm-nft" app/indexer.go
# Check if there are any other dependencies on this module
ast-grep --pattern 'import (
$$$
"github.com/initia-labs/kvindexer/submodules/evm-nft"
$$$
)'
Length of output: 560 go.mod (3)
The OPinit version update to v0.6.2 is consistent with the changes in integration-tests/go.mod. Also applies to: 182-182 Line range hint The replace directives for CometBFT and other dependencies match those in integration-tests/go.mod.
Multiple related dependencies have been updated:
Also applies to: 18-18, 21-21, 22-22, 24-24 ✅ Verification successfulLet me search for any upgrade guides or compatibility information for these specific versions. Let me try another search to find any compatibility information or version constraints. Based on the search results, I can see that these versions are being used together in several Cosmos SDK-based projects, including Gaia (the Cosmos Hub), IrisHub, Noble, and others. The GitHub search shows 43 repositories using this combination of versions, indicating good compatibility. Additionally, I found that these versions are part of the v0.50.x series of Cosmos SDK which maintains compatibility between its components. The key findings:
The updated dependency versions are compatible and safe to use together. 🏁 Scripts executedThe following scripts were executed for the analysis: Script: #!/bin/bash
# Description: Check for compatibility issues between updated versions
# Search for version constraints or compatibility requirements
rg -i "require.*cosmos|compatible.*with" --type md
# Look for any upgrade guides
rg -i "upgrade.*guide|migration.*guide" --type md
# Check if these versions are used together in other projects
gh api search/code -X GET \
-f q='filename:go.mod "cosmossdk.io/api v0.7.6" "github.com/cosmos/cosmos-sdk v0.50.11"'
Length of output: 127144 Script: #!/bin/bash
# Look for upgrade guides and compatibility info in docs directory
fd -e md -e rst . docs 2>/dev/null | xargs rg -i "upgrade|migration|compatibility" -A 2
# Check CHANGELOG.md for relevant version info
fd "CHANGELOG" | xargs rg -i "v0.7.6|v0.50.11|v0.38.15|v1.1.0" -A 3
# Look for version constraints in any docs
rg -i "require.*version|compatible.*version" --type md
Length of output: 81503 Script: #!/bin/bash
# Check for version constraints in go.mod
rg -A 3 "require.*cosmos|github.com/cometbft/cometbft|github.com/cosmos/cosmos-db" go.mod
# Look for any upgrade/migration docs
fd -e md . docs 2>/dev/null | xargs rg -i "upgrade|migration|breaking.?changes"
# Check for version compatibility info in README
rg -i "version|compatibility" README.md
Length of output: 113143 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
beer-1
changed the title
Description
Closes: #XXXX
Author Checklist
All items are required. Please add a note to the item if the item is not applicable and
please add links to any relevant follow up issues.
I have...
!in the type prefix if API or client breaking changeReviewers Checklist
All items are required. Please add a note if the item is not applicable and please add
your handle next to the items reviewed if you only reviewed selected items.
I have...
Summary by CodeRabbit
New Features
Dependency Updates