BitCanna v3.0.2 - Codename `GanjaRevolution` - security patch

Security patch version

Please update your daemon ASAP, no halt-height needed.

What's Changed

• • SDK bump v0.47.9 for security patch by @RaulBernal in #327
  • GHSA-4j93-fm92-rp4m
  • https://github.com/cosmos/cosmos-sdk/releases/tag/v0.47.9
• Bump cosmossdk.io/log from 1.3.0 to 1.3.1 by @dependabot in #315
• Bump golangci/golangci-lint-action from 3 to 4 by @dependabot in #322
• Bump github.com/cometbft/cometbft-db from 0.10.0 to 0.11.0 by @dependabot in #320

Quick instructions

git clone https://github.com/BitCannaGlobal/bcna.git # or git fetch 
cd bcna
git checkout v3.0.2
make build ## or make install 

Replace the target binary and restart the service.

Cosmovisor extra step

mv build/bcnad /home/raul/.bcna/cosmovisor/current/bin/bcnad 
sudo service cosmovisor restart && sudo journalctl -fu cosmovisor -o cat

Check the proper version is running seeking at logs:

11:10AM INF ABCI Handshake App Info hash="y�O\x14?1T�\bCנ\x14pns�����~�\x0e\x1a\x17��\x01��q" height=1xyz6632 module=consensus protocol-version=0 software-version=3.0.2

SHA256 Checksums for compiled binaries

484ddc071319ffaa6470c91ceef58c79458ec41409786d9495f41ff7fe72dee5  bcna_darwin_arm64.tar.gz
92547040144107bd71a20f7b6455ca4117f4fbd4476ad25c94721339b94fbd9a  bcna_linux_amd64.tar.gz
5196038de6f82868f1e40c12fbe329c1894e35f06fd8e597d3e356c9cc31e056  bcna_linux_arm64.tar.gz

Full Changelog: v3.0.1...v3.0.2

v3.0.2-rc1

What's Changed

• Bump Cosmos-SDK from v0.47.8 to v0.47.9
  • GHSA-4j93-fm92-rp4m
  • https://github.com/cosmos/cosmos-sdk/releases/tag/v0.47.9
• Bump cosmossdk.io/log from 1.3.0 to 1.3.1 by @dependabot in #315
• Bump golangci/golangci-lint-action from 3 to 4 by @dependabot in #322
• Bump github.com/cometbft/cometbft-db from 0.10.0 to 0.11.0 by @dependabot in #320

Full Changelog: v3.0.1...v3.0.2-rc1

v4.0.0-rc1

What's Changed

• SDK v0.50.x
• CometBFT v0.38.5
• IBC/go v8.1.0
• Refactor from app.go_v1 & root.go_v1 to v2
• Upgrade handler v0.47 to v0.50

v3.0.1 - Codename `GanjaRevolution`

What's Changed

• Cosmos-SDK v0.47.8
• IBC/go v7.3.2
• Update doc for release v3 by @RaulBernal in #290
• Bump actions/setup-go from 3 to 5 by @dependabot in #292
• Bump actions/checkout from 3 to 4 by @dependabot in #291
• V3.0.1 security patch by @RaulBernal in #307
• cometbft-db v0.10.0
  • Remove remotedb
  • Add pebbledb
• golang.org/x/net v0.20.0
  • Bump from v0.18.0 to v0.20.0 (bug fixing)
• golang.org/x/crypto v0.18.0
  • Vuln: https://github.com/BitCannaGlobal/bcna/security/dependabot/3
• jose2go v1.6.0
  • Vuln: https://github.com/BitCannaGlobal/bcna/security/dependabot/4

New Contributors

• @PolkaVio made their first contribution in #313

SHA-256-sum

ae929dc1c325faf4f26fa3632b96d9f37803791df3c96455c2fe92918e9d3dbc  bcna_darwin_arm64.tar.gz
cc07da73532271e9c4a78381792d21ca3d3c9261da545d34fb80afc9052c83cb  bcna_linux_amd64.tar.gz
b05a048c139e717c014c0ae39942f84e59bdcdedd079eb8ab919fd0d2f25a75e  bcna_linux_arm64.tar.gz

Full Changelog: v3.0.0...v3.0.1

v3.0.1-rc2 - Codename `GanjaRevolution`

What's Changed

• Cosmos-SDK v0.47.8
• IBC/go v7.3.2
• Update doc for release v3 by @RaulBernal in #290
• Bump actions/setup-go from 3 to 5 by @dependabot in #292
• Bump actions/checkout from 3 to 4 by @dependabot in #291
• V3.0.1 security patch by @RaulBernal in #307

Full Changelog: v3.0.0...v3.0.1-rc2

SHA-256-sum

364859b2cfdbb487703491a9757943e2423532407d08e016ae6384a89ab5cec8 bcna_darwin_arm64.tar.gz
22dce2ca0e2885375d0af6504ae783dc9ee9ab906f5bb10ba6628bfda983e198 bcna_linux_amd64.tar.gz

v3.0.1-rc1 - Security release - DEVNET-1

Changes

• cometbft-db v0.10.0
  • Remove remotedb
  • Add pebbledb
• golang.org/x/net v0.20.0
  • Bump from v0.18.0 to v0.20.0 (bug fixing)
• golang.org/x/crypto v0.18.0
  • Vuln: https://github.com/BitCannaGlobal/bcna/security/dependabot/3
• jose2go v1.6.0
  • Vuln: https://github.com/BitCannaGlobal/bcna/security/dependabot/4

SHA-256-SUM

51c1bee60d82c0f5095d2fb2dd2c80f6219ae3e307931e56b8c11d2d637dde7f  bcna_darwin_arm64.tar.gz
d00a1ebc603cf1234e611396f6db54499bb6bc2a74a2918ec1b78d6ed327c577  bcna_linux_amd64.tar.gz
3ca1d22a2c9f5ab3241b35fa88b2cae797255e6e56af476a65138dfc21a0de55  bcna_linux_arm64.tar.gz

Full Changelog: v3.0.0...v3.0.1-rc1

v3.0.0 - Codename `GanjaRevolution`

Important Upgrade info:

This release requires a governance proposal to start a new consensus because we bump Comos-SDK from v0.46.x to v0.47.x

Halt height: 12288420
Estimated Target Date: Thu 25 Jan 2024 16:35:00h CEST (15:35:00h UTC)
Cosmovisor (folder) Plan Name: ganjarevolution
version/tag: v3.0.0
commit: 70ed42fd9d475466245628d7dce1b1f551a46292
branch: https://github.com/BitCannaGlobal/bcna/tree/main

Key changes

• Upgrade Cosmos SDK from v0.46.14 to v0.47.7
• Upgrade IBC-Go from v6.1.1 to v7.3.1
• Upgrade CometBFT from v0.34.29 to v0.37.4
• Check for a length limit in custom modules's fields to avoid size-spam
• Changes in DISTRIBUTION: The proposer receives no extra rewards. All fees are distributed among all the bonded validators, including the proposer, in proportion to their consensus power.

What's Changed (from oldest to newest)

• Fix check Go version by @RaulBernal in #214
• Fix unit test for BitCannaID and code cleaning by @RaulBernal in #217
• core version upgrade & local snapshots / prune functions by @RaulBernal in #221
• fix CometBFT version by @RaulBernal in #222
• Chore: bump Cosmos-SDK version to v0.46.15 by @RaulBernal in #227
• bump IAVL to v0.20.1 & and set var at upgrade.go by @RaulBernal in #228
• Update custom modules simulation by @RaulBernal in #236
• Update way to marshal/unmarshal at custom modules by @RaulBernal in #260
• Feat rename marshaler to codec by @RaulBernal in #275
• Update cosmovisor_install.md by @El-Jay-Crypto in #281
• Check for a length limit in custom modules's fields by @RaulBernal in #283
• Bump Cosmos-SDK from v0.47.5 to v0.47.7 & CometBFT from v0.37.2 to … by @RaulBernal in #289
• v0.46 to v0.47 migration by @RaulBernal in #212

Quick instructions

Mandatory to compile with go1.21.x (check recent discovered vulns at Ubuntu)

Option 1. Download:

rm -rf bcna_linux_amd64.tar.gz # delete if exists
wget https://github.com/BitCannaGlobal/bcna/releases/download/v3.0.0/bcna_linux_amd64.tar.gz
sha256sum bcna_linux_amd64.tar.gz 
# Output: `f7bd61030fec97886838896f6799cfd7e7af9237447d54dce0d8fdffe93e4d27` 
tar zxvf bcna_linux_amd64.tar.gz
rm bcna_linux_amd64.tar.gz
./bcnad version # --> v3.0.0

With Cosmovisor

mkdir -p $HOME/.bcna/cosmovisor/upgrades/ganjarevolution/bin/
mv bcnad $HOME/.bcna/cosmovisor/upgrades/ganjarevolution/bin/
$HOME/.bcna/cosmovisor/upgrades/ganjarevolution/bin/bcnad version # --> v3.0.0
sudo service cosmovisor restart && sudo journalctl -fu cosmovisor -o cat   # Not necessary but desirable to make sure that everything is ok.

With BCNAD as service daemon

sudo mv bcnad $(which bcnad)
bcnad version # --> v3.0.0
#When the halt-height comes: 
sudo service bcnad restart && sudo journalctl -fu bcnad -o cat

Option 2. Compile:

cd bcna && git fetch 
git checkout v3.0.0
make build # and move the binary to the path
make install # if patch/service file  is at $GOBIN

commit: 70ed42fd9d475466245628d7dce1b1f551a46292

With Cosmovisor

mkdir -p $HOME/.bcna/cosmovisor/upgrades/ganjarevolution/bin/
mv build/bcnad $HOME/.bcna/cosmovisor/upgrades/ganjarevolution/bin/
$HOME/.bcna/cosmovisor/upgrades/ganjarevolution/bin/bcnad version # --> v3.0.0
sudo service cosmovisor restart && sudo journalctl -fu cosmovisor -o cat  # Not necessary but desirable to make sure that everything is ok.

With BCNAD as service daemon

sudo mv build/bcnad $(which bcnad)
bcnad version # --> v3.0.0
#When the halt-height comes: 
sudo service bcnad restart && sudo journalctl -fu bcnad -o cat

SHA256 Checksums

bdaacfefa034f127cf83437777b7aef87694c0605508800f6ea4e2bb612e2017  bcna_darwin_arm64.tar.gz
f7bd61030fec97886838896f6799cfd7e7af9237447d54dce0d8fdffe93e4d27  bcna_linux_amd64.tar.gz
99f9d81d683da1e8ebe8f8931b7327feb9922b4498c2c6c7cb703ecacec0ffda  bcna_linux_arm64.tar.gz

New Contributors

• @TJ-BitCanna made their first contribution in #218
• @ourlink made their first contribution in #219
• @kitkatfund made their first contribution in #246
• @arcturiano made their first contribution in #269
• @nodexone made their first contribution in #273
• @sxlmnwb made their first contribution in #274
• @blockhunters-dev made their first contribution in #276
• @alibabaedge made their first contribution in #282

Full Changelog: v3.0.0-alpha...v3.0.0

v2.0.4 - Codename: `wakeandbake`

What's Changed

• Chore: bump Cosmos-SDK version to v0.46.15 by @RaulBernal in #227
• Bump ibc/go version to v6.1.2 & deps by @RaulBernal in #264

New Contributors

• @kitkatfund made their first contribution in #246
• @arcturiano made their first contribution in #269
• @nodexone made their first contribution in #273
• @sxlmnwb made their first contribution in #274
• @blockhunters-dev made their first contribution in #276
• @alibabaedge made their first contribution in #282

Full Changelog: v2.0.3...v2.0.4

BitCanna v3.0.0-rc4 - Codename `GanjaRevolution`

Roll-up release

• You can update the binary when you are ready, no need for governance-upgrade.

What's Changed

• Check for a length limit in custom modules's fields by @RaulBernal in #283
• Bump Cosmos-SDK from v0.47.5 to v0.47.7 & CometBFT from v0.37.2 to … by @RaulBernal in #289

Quick instructions

git clone https://github.com/BitCannaGlobal/bcna.git # or git fetch 
cd bcna
git checkout v3.0.0-rc4
make build ## or make install 

Replace the target binary and restart the service.

Cosmovisor extra step

mv build/bcnad /home/raul/.bcna/cosmovisor/current/bin/bcnad 
sudo service cosmovisor restart && sudo journalctl -fu cosmovisor -o cat

Check the proper version is running seeking at logs:

11:10AM INF ABCI Handshake App Info hash="y�O\x14?1T�\bCנ\x14pns�����~�\x0e\x1a\x17��\x01��q" height=5926632 module=consensus protocol-version=0 software-version=3.0.0-rc4

Full Changelog: v3.0.0-rc3...v3.0.0-rc4

BitCanna v3.0.0-rc3 - Codename `GanjaRevolution`

What's Changed

• Update custom modules simulation by @RaulBernal in #236
• Update way to marshal/unmarshal at custom modules by @RaulBernal in #260
• Feat rename marshaler to codec by @RaulBernal in #275

Quick instructions

Mandatory to compile with go1.20.x

Option 1. Download:

rm -rf bcna_linux_amd64.tar.gz # delete if exists
wget https://github.com/BitCannaGlobal/bcna/releases/download/v3.0.0-rc3/bcna_linux_amd64.tar.gz
sha256sum bcna_linux_amd64.tar.gz 
# Output: `68764582fea71f3ff721a69fe760cbbfb22941df229b9230989e667f0c94f183` 
tar zxvf bcna_linux_amd64.tar.gz
rm bcna_linux_amd64.tar.gz
./bcnad version # --> v3.0.0-rc3

With Cosmovisor

mkdir -p $HOME/.bcna/cosmovisor/upgrades/ganjarevolution/bin/
mv bcnad $HOME/.bcna/cosmovisor/upgrades/ganjarevolution/bin/
$HOME/.bcna/cosmovisor/upgrades/ganjarevolution/bin/bcnad version # --> v3.0.0-rc3
sudo service cosmovisor restart && sudo journalctl -fu cosmovisor -o cat   # Not necessary but desirable to make sure that everything is ok.

With BCNAD as service daemon

sudo mv bcnad $(which bcnad)
bcnad version # --> v3.0.0-rc3
#When the halt-height comes: 
sudo service bcnad restart && sudo journalctl -fu bcnad -o cat

Option 2. Compile:

cd bcna
git fetch 
git checkout v3.0.0-rc3
make build # and move the binary to the path
make install # if patch/service file  is at $GOBIN

commit: 03b59633f1667ebdfe95bf057ee6d078f7181448

With Cosmovisor

mkdir -p $HOME/.bcna/cosmovisor/upgrades/ganjarevolution/bin/
mv build/bcnad $HOME/.bcna/cosmovisor/upgrades/ganjarevolution/bin/
$HOME/.bcna/cosmovisor/upgrades/ganjarevolution/bin/bcnad version # --> v3.0.0-rc3
sudo service cosmovisor restart && sudo journalctl -fu cosmovisor -o cat  # Not necessary but desirable to make sure that everything is ok.

With BCNAD as service daemon

sudo mv build/bcnad $(which bcnad)
bcnad version # --> v3.0.0-rc3
#When the halt-height comes: 
sudo service bcnad restart && sudo journalctl -fu bcnad -o cat

SHA256 Checksums

f89a4893b6ce98bd354b198ab2a63f6233caaa667f6241af485e5d4f1dadb453  bcna_darwin_arm64.tar.gz
68764582fea71f3ff721a69fe760cbbfb22941df229b9230989e667f0c94f183  bcna_linux_amd64.tar.gz

Full Changelog: v3.0.0-rc2...v3.0.0-rc3