build(deps): bump github.com/cosmos/cosmos-sdk from 0.39.3 to 0.42.5

[dependabot]

Bumps github.com/cosmos/cosmos-sdk from 0.39.3 to 0.42.5.

Release notes

Sourced from github.com/cosmos/cosmos-sdk's releases.

v0.42.5

Cosmos SDK v0.42.5 "Stargate" Release Notes

This release includes various minor bugfixes and improvments, including:

• Fix support for building the Cosmos SDK on ARM architectures,
• Fix the [appd] keys show/list CLI subcommands for multisigs,
• Internal code performance improvment.

It also introduces one new feature: adding the [appd] config subcommand back to the SDK.

See the Cosmos SDK v0.42.5 milestone on our issue tracker for the exhaustive list of all changes.

The config Subcommand

One new feature introduced in the Stargate series was the merging of the two CLI binaries [appd] and [appcli] into one single application binary. In this process, the [appcli] config subcommand, which was used to save client-side configuration into a TOML file, was removed.

Due to popular demand, we have introduced this feature back to the SDK, under the [appd] config subcommand. The functionality is as follows:

• [appd] config: Output all client-side configuration.
• [appd] config [config-name]: Get the given configuration (e.g. keyring-backend or node-id).
• [appd] config [config-name] [config-value]: Set and persist the given configuration with the new value.

All configurations are persisted to the filesystem, under the path $APP_HOME/config/client.toml. For the list of all possible client-side configurations, please have a look at this client.toml file, as it is heavily commented.

Environment variables binding to client-side configuration also works. For example, the command KEYRING_BACKEND=os [appd] tx bank send ... will bind ENV variable to the keyring-backend config. The order or precedence for config is: flags > env vars > client.toml file.

v0.42.4

Cosmos SDK v0.42.4 "Stargate" Release Notes

This release includes an important Tendermint update that fixes a security issue with Tendermint light clients. For more information, see Tendermint v0.34.9 release notes.

See the Cosmos SDK v0.42.4 milestone on our issue tracker for further details.

v0.42.3

Cosmos SDK v0.42.3 "Stargate" Release Notes

This release fixes a security vulnerability identified in x/bank.

v0.42.2

Cosmos SDK v0.42.2 "Stargate" Release Notes

This maintenance release includes various bugfixes and performance improvements, and it does not introduce any breaking changes.

See the Cosmos SDK v0.42.2 milestone on our issue tracker for further details.

Keyring UX improvement

A number of macOS users have reported that their operating system's keychain prompt them for password to unlock the keyring when using the os backend before executing any action. This release includes a small fix that automatically

... (truncated)

Changelog

Sourced from github.com/cosmos/cosmos-sdk's changelog.

v0.42.5 - 2021-05-18

Bug Fixes

• #9235 CreateMembershipProof/CreateNonMembershipProof now returns an error if input key is empty, or input data contains empty key.
• #9108 Fixed the bug with querying multisig account, which is not showing threshold and public_keys.
• #9345 Fix ARM support.
• #9040 Fix ENV variables binding to CLI flags for client config.

Features

• #8953 Add the config CLI subcommand back to the SDK, which saves client-side configuration in a client.toml file.

v0.42.4 - 2021-04-08

Client Breaking Changes

• #9026 By default, the tx sign and tx sign-batch CLI commands use SIGN_MODE_DIRECT to sign transactions for local pubkeys. For multisigs and ledger keys, the default LEGACY_AMINO_JSON is used.

Bug Fixes

• (gRPC) #9015 Fix invalid status code when accessing gRPC endpoints.
• #9026 Fixed the bug that caused the gentx command to fail for Ledger keys.

Improvements

• #9081 Upgrade Tendermint to v0.34.9 that includes a security issue fix for Tendermint light clients.

v0.42.3 - 2021-03-24

This release fixes a security vulnerability identified in x/bank.

v0.42.2 - 2021-03-19

Improvements

• (grpc) #8815 Add orderBy parameter to TxsByEvents endpoint.
• (cli) #8826 Add trust to macOS Keychain for caller app by default.
• (store) #8811 store/cachekv: use typed types/kv.List instead of container/list.List

Bug Fixes

• (crypto) #8841 Fix legacy multisig amino marshaling, allowing migrations to work between v0.39 and v0.40+.
• (cli) #8873 add --output-document to multisign-batch.

v0.42.1 - 2021-03-10

This release fixes security vulnerability identified in the simapp.

... (truncated)

Commits

• 842b060 fix: add missing nil check in store.GetStore (#9354) (#9359)
• 9fe61a7 fix client config don't take effect (backport #9211) (#9360)
• 1327224 Update Changelog and RL for v0.42.5 (#9350)
• 5531aaf Add env variable to cmd flags (backport #9040) (#9318)
• 4aef38b fix SA5011 static check in ibc/../chain.go (#9333)
• be34d52 Add client config subcommand to CLI (backport #8953) (#9255)
• 7c21653 fix arm (#9345)
• 29db772 Update IBC overview document to latest ICS-24 link (backport #9044) (#9316)
• f9d13e6 Update chain migration docs to use v0.42 (#9090) (#9317)
• 81b1049 store/internal: validate keys before calling ProofsFromMap (backport #9235) (...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #902.