This is a security patch release to the CometBFT v0.38.x family that fixes GHSA-hrhf-2vcr-ghch

What's Changed

• chore: fix test docker image by @aljo242 in #5299
• chore: refactor changelogs by @aljo242 in #5303
• chore: update and fix mockery tooling on v0.38 by @aljo242 in #5301
• chore: fix the linter by @aljo242 in #5304
• fix(store): Properly prune extended commits (backport #5276) by @mergify[bot] in #5313
• chore: clean up the repo by @aljo242 in #5315
• fix: remove exposed dockertest port to unblock postgres test by @almk-dev in #5325
• fix(consensus/reactor): reject oversized proposals (backport #5324) by @mergify[bot] in #5407
• GHSA-hrhf-2vcr-ghch

Full Changelog: v0.38.18...v0.38.19

This is a security patch release to the CometBFT v0.37.x family that fixes GHSA-hrhf-2vcr-ghch.

What's Changed

• build(deps): Bump docker/login-action from 3.3.0 to 3.6.0 by @dependabot[bot] in #5439
• GHSA-hrhf-2vcr-ghch

Full Changelog: v0.37.15...v0.37.16

What's Changed

• fix: remove redundant error check for PubKeyToProto by @islishude in #4917
• ci: remove govulncheck (backport #4946) by @mergify[bot] in #4961
• build(deps): Bump docker/setup-buildx-action from 3.8.0 to 3.9.0 by @dependabot[bot] in #4936
• fix(ci): Fix docker builds (backport #4949) by @mergify[bot] in #4963
• build(deps): Bump docker/build-push-action from 6.13.0 to 6.14.0 by @dependabot[bot] in #4972
• build(deps): Bump docker/setup-buildx-action from 3.9.0 to 3.10.0 by @dependabot[bot] in #5008
• build(deps): Bump docker/build-push-action from 6.14.0 to 6.15.0 by @dependabot[bot] in #5009
• build(deps): Bump golang.org/x/sync from 0.10.0 to 0.11.0 by @dependabot[bot] in #4990
• build(deps): Bump github.com/spf13/cobra from 1.8.1 to 1.9.1 by @dependabot[bot] in #4992
• build(deps): Bump golang.org/x/net from 0.34.0 to 0.35.0 by @dependabot[bot] in #4998
• build(deps): Bump github.com/decred/dcrd/dcrec/secp256k1/v4 from 4.3.0 to 4.4.0 by @dependabot[bot] in #4997
• build(deps): Bump google.golang.org/protobuf from 1.36.4 to 1.36.5 by @dependabot[bot] in #4994
• build(deps): Bump github.com/prometheus/client_golang from 1.20.5 to 1.21.0 by @dependabot[bot] in #4995
• chore: fix typo in workflow_dispatch (backport #5164) by @mergify[bot] in #5166
• ci(testapp-docker): release two images, not one (backport #5014) by @mergify[bot] in #5168
• chore: add supported version to e2e image tag (backport #5169) by @mergify[bot] in #5171
• chore: remove tag from individual builds (backport #5173) by @mergify[bot] in #5174
• refactor: e2e-node docker build (backport #5176) by @mergify[bot] in #5178
• refactor: cometbft image build (backport #5179) by @mergify[bot] in #5181
• fix: add git to docker ignore (backport #5214) by @mergify[bot] in #5216
• fix: do multistage builds for e2e-node (backport #5220) by @mergify[bot] in #5222
• fix: add libs to e2e tests v0.38.x by @zrbecker in #5234
• chore: reindex to event sink from cli (backport #5209) by @mergify[bot] in #5240
• feat: precommit metrics by @technicallyty in #5251
• chore: prep release for v0.38.18 by @technicallyty in #5253

Full Changelog: v0.38.17...v0.38.18

See the CHANGELOG for this release.

See the CHANGELOG for this release.

See the CHANGELOG for this release.

See the CHANGELOG for this release.

See the CHANGELOG for this release.

See the CHANGELOG for changes available in this release.

Please see more information on the Upgrading from CometBFT v0.38 to v1.0 guide.

See the CHANGELOG for changes available in this pre-release, but not yet officially released.