Callum Waters
8e8de2b2fb
node: use db provider instead of mem db ( #6362 )
4 years ago
Sam Kleinman
0c2c0afaf8
db: migration script for key format change ( #6355 )
4 years ago
Tess Rinearson
281b5234b2
changelog: update for 0.34.10 ( #6358 )
4 years ago
Sam Kleinman
4d03d7516b
test/e2e: produce structured reporting from benchmarks ( #6343 )
4 years ago
Aleksandr Bezobchuk
47b28fd6aa
p2p: minor cleanup + update router options ( #6353 )
4 years ago
JayT106
ca7dbea05b
Set cache control in the HTTP-RPC response header ( #6265 )
4 years ago
dependabot[bot]
c9125a6625
build(deps): Bump actions/cache from v2.1.4 to v2.1.5 ( #6350 )
Bumps [actions/cache](https://github.com/actions/cache ) from v2.1.4 to v2.1.5.
- [Release notes](https://github.com/actions/cache/releases )
- [Commits](https://github.com/actions/cache/compare/v2.1.4...1a9e2138d905efd099035b49d8b7a3888c653ca8 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marko <marbar3778@yahoo.com>
4 years ago
Aleksandr Bezobchuk
570e24f902
adr: ADR 065: Custom Event Indexing ( #6307 )
4 years ago
Callum Waters
2b8aa65e4f
e2e: tx load to use broadcast sync instead of commit ( #6347 )
4 years ago
Tess Rinearson
3761aa6904
docs: remove RFC section and s/RFC001/ADR066 ( #6345 )
Per conversations earlier today, we'll consider all proposed implementation changes part of the ADR process rather than the RFC process (which will remain, for now, on the spec; this may get incorporated instead into the burgeoning "CIPS" process).
This change renames RFC 1 to ADR 66, leaving space for the not-yet-merged ADR 65.
4 years ago
Callum Waters
d4d2b66067
light: handle too high errors correctly ( #6346 )
4 years ago
Cyrus Goh
be48602c6b
docs: bump vuepress-theme-cosmos ( #6344 )
4 years ago
dependabot[bot]
0dde4826e7
build(deps): Bump styfle/cancel-workflow-action from 0.8.0 to 0.9.0 ( #6341 )
Bumps [styfle/cancel-workflow-action](https://github.com/styfle/cancel-workflow-action ) from 0.8.0 to 0.9.0.
- [Release notes](https://github.com/styfle/cancel-workflow-action/releases )
- [Commits](https://github.com/styfle/cancel-workflow-action/compare/0.8.0...89f242ee29e10c53a841bfe71cc0ce7b2f065abc )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sam Kleinman <garen@tychoish.com>
4 years ago
Nate Williams
b517dd5685
Expose getter for txIndexer ( #6327 )
4 years ago
gotjoshua
f563bd4ff1
RPC: don't cap page size in unsafe mode ( #6329 )
4 years ago
Shahan Khatchadourian
d0828f3454
Minor update to security.md ( #6337 )
4 years ago
Tess Rinearson
b13b7620b4
security: update policy after latest security release ( #6336 )
4 years ago
Sam Kleinman
3a690568ae
p2p: make peer scoring test more resilient ( #6322 )
4 years ago
Tess Rinearson
8b7a53bdb2
changelog: update to reflect 0.34.9 ( #6334 )
4 years ago
dependabot[bot]
ae2646a371
build(deps): Bump google.golang.org/grpc from 1.36.1 to 1.37.0 ( #6330 )
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.36.1 to 1.37.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/grpc/grpc-go/releases ">google.golang.org/grpc's releases</a>.</em></p>
<blockquote>
<h2>Release 1.37.0</h2>
<h1>API Changes</h1>
<ul>
<li>balancer: Add UpdateAddresses() to balancer.ClientConn interface (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4215 ">#4215</a>)
<ul>
<li><strong>NOTICE</strong>: balancer.SubConn.UpdateAddresses() is now deprecated and will be <strong>REMOVED</strong> in gRPC-Go 1.39</li>
</ul>
</li>
</ul>
<h1>Behavior Changes</h1>
<ul>
<li>balancer/base: keep address attributes for pickers (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4253 ">#4253</a>)
<ul>
<li>Special Thanks: <a href="https://github.com/longXboy "><code>@longXboy</code></a></li>
</ul>
</li>
</ul>
<h1>New Features</h1>
<ul>
<li>xds: add support for csds (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4226 ">#4226</a>, <a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4217 ">#4217</a>, <a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4243 ">#4243</a>)</li>
<li>admin: create admin package for conveniently registering standard admin services (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4274 ">#4274</a>)</li>
<li>xds: add support for HTTP filters (gRFC A39) (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4206 ">#4206</a>, <a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4221 ">#4221</a>)</li>
<li>xds: implement fault injection HTTP filter (A33) (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4236 ">#4236</a>)</li>
<li>xds: enable timeout, circuit breaking, and fault injection by default (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4286 ">#4286</a>)</li>
<li>xds: implement a priority based load balancer (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4070 ">#4070</a>)</li>
<li>xds/creds: support all SAN matchers on client-side (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4246 ">#4246</a>)</li>
</ul>
<h1>Bug Fixes</h1>
<ul>
<li>xds: add env var protection for client-side security (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4247 ">#4247</a>)</li>
<li>circuit breaking: update picker inline when there's a counter update (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4212 ">#4212</a>)</li>
<li>server: fail RPCs without POST HTTP method (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4241 ">#4241</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="daba805838
"><code>daba805</code></a> Change version to 1.37.0 (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4304 ">#4304</a>)</li>
<li><a href="03fa67a523
"><code>03fa67a</code></a> xds/interop: register admin services and reflection (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4307 ">#4307</a>) (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4320 ">#4320</a>)</li>
<li><a href="4a19753e9d
"><code>4a19753</code></a> interop: add a flag to clients to statically configure grpclb (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4290 ">#4290</a>)</li>
<li><a href="2456c5cff0
"><code>2456c5c</code></a> Allow using interop client for making Traffic Director RPCs (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4291 ">#4291</a>)</li>
<li><a href="80e380eff4
"><code>80e380e</code></a> balancer/base: keep address attributes for pickers (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4253 ">#4253</a>)</li>
<li><a href="702608ffae
"><code>702608f</code></a> xds: enable timeout, circuit breaking, and fault injection by default (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4286 ">#4286</a>)</li>
<li><a href="faf4e1c777
"><code>faf4e1c</code></a> xds: rename proto import to grpc (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4287 ">#4287</a>)</li>
<li><a href="46da49ca60
"><code>46da49c</code></a> xds: use different proto import for grpc services (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4285 ">#4285</a>)</li>
<li><a href="b331a48e06
"><code>b331a48</code></a> alts: re-add vmOnGCP and once globals for easier testing (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4284 ">#4284</a>)</li>
<li><a href="d26af8e391
"><code>d26af8e</code></a> admin: implement admin services (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4274 ">#4274</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/grpc/grpc-go/compare/v1.36.1...v1.37.0 ">compare view</a></li>
</ul>
</details>
<br />
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=google.golang.org/grpc&package-manager=go_modules&previous-version=1.36.1&new-version=1.37.0 )](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
4 years ago
Callum Waters
a818f914ab
fix deadlock in light tests ( #6332 )
4 years ago
Callum Waters
b272746444
Merge pull request from GHSA-f3w5-v9xx-rp8p
* add time warping lunatic attack test
* create too high and connecton refused errors and add to the light client provider
* add height check to provider
* introduce block lag
* add detection logic for processing forward lunatic attack
* add node-side verification logic
* clean up tests and formatting
* update adr's
* update testing
* fix fetching the latest block
* format
* update changelog
* implement suggestions
* modify ADR's
* format
* clean up node evidence verification
4 years ago
Sam Kleinman
0f41f7465c
p2p: extend e2e tests for new p2p framework ( #6323 )
4 years ago
dependabot[bot]
0b770870c9
build(deps): Bump docker/setup-buildx-action from v1 to v1.1.2 ( #6324 )
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) from v1 to v1.1.2.
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](https://github.com/docker/setup-buildx-action/compare/v1...2a4b53665e15ce7d7049afb11ff1f70ff1610609 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years ago
Sam Kleinman
dbfd6fc613
consensus: reduce shared state in tests ( #6313 )
4 years ago
Callum Waters
845efdb76e
remove event bus from evidence reactor ( #6320 )
4 years ago
dependabot[bot]
cae3a75121
build(deps): Bump JamesIves/github-pages-deploy-action ( #6316 )
Bumps [JamesIves/github-pages-deploy-action](https://github.com/JamesIves/github-pages-deploy-action ) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/JamesIves/github-pages-deploy-action/releases )
- [Commits](https://github.com/JamesIves/github-pages-deploy-action/compare/4.1.0...164583b9e44b4fc5910e78feb607ea7c98d3c7b9 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years ago
dependabot[bot]
d3570c6734
build(deps): Bump codecov/codecov-action from v1.3.1 to v1.3.2 ( #6319 )
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from v1.3.1 to v1.3.2.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/master/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/v1.3.1...9b0b9bbe2c64e9ed41413180dd7398450dfeee14 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years ago
dependabot[bot]
10f4b7de64
build(deps): Bump golangci/golangci-lint-action from v2.5.1 to v2.5.2 ( #6317 )
4 years ago
Sam Kleinman
6d9372bd39
test: improve cleanup for data and disk use ( #6311 )
4 years ago
Sam Kleinman
bcdf923cb8
p2p: improve router test stability ( #6310 )
4 years ago
Sam Kleinman
1c4dbe30d4
abci: change client to use multi-reader mutexes ( #6306 )
4 years ago
Aleksandr Bezobchuk
46e06c9732
state: fix block event indexing reserved key check ( #6314 )
copy 🍝 bug when porting similar logic from the tx indexing code.
4 years ago
Lanie Hei
053651160f
Adds missing line break ( #6309 )
Adds small fix to the docs. Line 67 specifies "two key changes". I think this is where the second bullet point was meant to start.
4 years ago
Callum Waters
358d1a28b8
node: remove mode defaults. Make node mode explicit ( #6282 )
4 years ago
Sam Kleinman
f2f085c7a3
fix: test fixture peer manager in mempool reactor tests ( #6308 )
4 years ago
Sam Kleinman
19393f0c28
test: clean up databases in tests ( #6304 )
4 years ago
Sam Kleinman
0811c7be99
fix: theoretical leak in clisit.Init ( #6302 )
4 years ago
Sam Kleinman
d0b513c182
p2p: filter peers by IP address and ID ( #6300 )
4 years ago
Sam Kleinman
3ed8f14bf9
p2p: connect max inbound peers configuration to new router ( #6296 )
4 years ago
dependabot[bot]
70ea675f38
build(deps): Bump github.com/Workiva/go-datastructures ( #6298 )
Bumps [github.com/Workiva/go-datastructures](https://github.com/Workiva/go-datastructures ) from 1.0.52 to 1.0.53.
- [Release notes](https://github.com/Workiva/go-datastructures/releases )
- [Commits](https://github.com/Workiva/go-datastructures/compare/v1.0.52...v1.0.53 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marko <marbar3778@yahoo.com>
4 years ago
dependabot[bot]
e2dc241c9d
build(deps): Bump github.com/golang/protobuf from 1.5.1 to 1.5.2 ( #6299 )
Bumps [github.com/golang/protobuf](https://github.com/golang/protobuf ) from 1.5.1 to 1.5.2.
- [Release notes](https://github.com/golang/protobuf/releases )
- [Commits](https://github.com/golang/protobuf/compare/v1.5.1...v1.5.2 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years ago
Sam Kleinman
c62e320ffd
p2p: rate-limit incoming connections by IP ( #6286 )
4 years ago
Sam Kleinman
91506bf25d
p2p: simple peer scoring ( #6277 )
4 years ago
Callum Waters
cbae3613dd
e2e: add evidence generation and testing ( #6276 )
4 years ago
Marko
32ee737d42
change index block log to info ( #6290 )
## Description
Change log from error to info for indexing blocks
4 years ago
Marko
6a34fd8fc3
ci: add janitor ( #6292 )
* add janitor
* add workflow ids
* add comment
4 years ago
Frojdi Dymylja
9ecfcc93a6
fix: jsonrpc url parsing and dial function ( #6264 )
This PR fixes how the jsonrpc parses the URL, and how the dial function connects to the RPC.
Closes: https://github.com/tendermint/tendermint/issues/6260
4 years ago
Callum Waters
63f6c26072
update tm command from node to start ( #6283 )
4 years ago
dependabot[bot]
d988cd6101
build(deps): Bump github.com/minio/highwayhash from 1.0.1 to 1.0.2 ( #6280 )
Bumps [github.com/minio/highwayhash](https://github.com/minio/highwayhash ) from 1.0.1 to 1.0.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/minio/highwayhash/releases ">github.com/minio/highwayhash's releases</a>.</em></p>
<blockquote>
<h2>Version v1.0.2</h2>
<h2>Changelog</h2>
<h3>Fixed</h3>
<p>Issue <a href="https://github-redirect.dependabot.com/minio/highwayhash/issues/17 ">#17</a> - on arm64 (on Go 1.16) wrong hash values got computed due to incorrectly naming asm constants like regular Go functions. This probably confused the linker and caused the arm64 implementation to compute incorrect hash values. Fixed by 08ce0b4</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="08ce0b4fa7
"><code>08ce0b4</code></a> Fix ARM64 assembly (<a href="https://github-redirect.dependabot.com/minio/highwayhash/issues/19 ">#19</a>)</li>
<li><a href="5311fe963f
"><code>5311fe9</code></a> disable arm64 assembler and update CI to Go 1.16 (<a href="https://github-redirect.dependabot.com/minio/highwayhash/issues/18 ">#18</a>)</li>
<li>See full diff in <a href="https://github.com/minio/highwayhash/compare/v1.0.1...v1.0.2 ">compare view</a></li>
</ul>
</details>
<br />
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/minio/highwayhash&package-manager=go_modules&previous-version=1.0.1&new-version=1.0.2 )](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
4 years ago