build(deps): bump github.com/cosmos/cosmos-sdk from 0.39.3 to 0.44.0

[dependabot]

Bumps github.com/cosmos/cosmos-sdk from 0.39.3 to 0.44.0.

Release notes

Sourced from github.com/cosmos/cosmos-sdk's releases.

Cosmos SDK v0.44.0 Release Notes

v0.44 is a security release which contains a consensus breaking change. It doesn't bring any new feature and it's a logical continuation of v0.43.

Consequences:

• v0.43 is discontinued;
• all chains should upgrade to v0.44. Update from v0.43 doesn't require any migration. Chains can upgrade directly from v0.42, in that case v0.43 migrations must be executed when upgrading to v0.44;
• all previously planned features for v0.44 are going to land in v0.45, with the same release schedule.

NOTE: v0.42 release will reach end of life on September 8, 2021.

Please see Cosmos SDK v0.43.0 Release Notes.

Updates

For a comprehensive list of all breaking changes and improvements since the v0.42 "Stargate" release series, please see the CHANGELOG.

Client Breaking Changes

• Removed broadcast & encode legacy REST endpoints. Both requests should use the new gRPC-Gateway REST endpoints. Please see the REST Endpoints Migration guide to migrate to the new REST endpoints.

Cosmos SDK v0.43.0 Release Notes

This release introduces several new important updates to the Cosmos SDK. The release notes below provide an overview of the larger high-level changes introduced in the v0.43 release series.

That being said, this release does contain many more minor and module-level changes besides those mentioned below. For a comprehsive list of all breaking changes and improvements since the v0.42 "Stargate" release series, please see the CHANGELOG.

Two new modules: x/authz and x/feegrant

The v0.43 release focused on simplifying keys and fee management for SDK users, by introducing the two following modules:

• x/feegrant allows one account, the "granter" to grant another account, the "grantee" an allowance to spend the granter's account balance for fees within certain well-defined limits. It solves the problem of signing accounts needing to possess a sufficient balance in order to pay fees.
  • See ADR-029 introducing the module.
  • Read the documentation.
  • Check out its Protobuf definitions.
• x/authz provides functionality for granting arbitrary privileges from one account (the "granter") to another account (the "grantee"). These privileges, called Authorizations in the code, can for example allow grantees to execute Msgs on behalf of the granter.
  • See ADR-030 introducing the module.
  • Read the documentation.
  • Check out its Protobuf definitions.

These two modules have a slightly different folder structure compared to previously existing modules. For example, all Protobuf-generated files are generated in the module root folder instead of the types/ folder, and the module itself is defined inside a module sub-package. Moving forward, we believe this folder structure is clearer and sets a better example for module developers. To learn more about building modules following this structure, please read our building modules documentation.

ADR-028 Addresses

In the SDK versions v0.42 and earlier, addresses were all 20-bytes long, generated by truncating the first 20 bytes of the SHA-256 hash of some given bytes (e.g. the public key for normal accounts, or the module name for module accounts). Unfortunately, this significantly decreases the security of Cosmos SDK due to address space collisions.

ADR-028 introduces a new specification for deriving addresses for all kinds of addressable accounts. Following is a quick summary:

• secp256k1 public keys still have 20-byte addresses to keep backwards-compatibility,
• new public key types (e.g. ed25519) and module accounts will have 32-byte address to increase collision resistance,
• new algorithms have also been specified for composed accounts (like multisigs) or derived accounts (like module sub-accounts).

... (truncated)

Changelog

Sourced from github.com/cosmos/cosmos-sdk's changelog.

v0.44.0 - 2021-09-01

Features

• #9860 Emit transaction fee in ante handler fee decorator. The event type is tx and the attribute is fee.

Improvements

• (deps) #9956 Bump Tendermint to v0.34.12.

Deprecated

• (x/upgrade) #9906 Deprecate UpgradeConsensusState gRPC query since this functionality is only used for IBC, which now has its own IBC replacement

Bug Fixes

• #9965 Fixed simd version command output to report the right release tag.

API Breaking Changes

• (client/tx) #9421 BuildUnsignedTx, BuildSimTx, PrintUnsignedStdTx functions are moved to the Tx Factory as methods.

Client Breaking Changes

• #10041 Remove broadcast & encode legacy REST endpoints. Please see the REST Endpoints Migration guide to migrate to the new REST endpoints.

v0.43.0 - 2021-08-10

Features

• #6711 Make integration test suites reusable by apps, tests are exported in each module's client/testutil package.
• #8077 Added support for grpc-web, enabling browsers to communicate with a chain's gRPC server
• #8965 cosmos reflection now provides more information on the application such as: deliverable msgs, sdk.Config info etc (still in alpha stage).
• #8520 Add support for permanently locked vesting accounts.
• #8559 Added Protobuf compatible secp256r1 ECDSA signatures.
• #8786 Enabled secp256r1 in x/auth.
• (rosetta) #8729 Data API fully supports balance tracking. Construction API can now construct any message supported by the application.
• #8754 Added support for reverse iteration to pagination.
• (types) #9079 Add AddAmount/SubAmount methods to sdk.Coin.
• #9088 Added implementation to ADR-28 Derived Addresses.
• #9133 Added hooks for governance actions.
• (x/staking) #9214 Added new_shares attribute inside EventTypeDelegate event.
• #9382 feat: add Dec.Float64() function.
• #9457 Add amino support for x/authz and x/feegrant Msgs.
• #9498 Added Codec: codec.Codec attribute to client/Context structure.
• #9540 Add output flag for query txs command.
• (errors) #8845 Add Error.Wrap handy method
• #8518 Help users of multisig wallets debug signature issues.
• #9750 Emit events for tx signature and sequence, so clients can now query txs by signature (tx.signature='<base64_sig>') or by address and sequence combo (tx.acc_seq='<addr>/<seq>').

Client Breaking Changes

... (truncated)

Commits

• ccc5245 chore: release v0.44 (#10048)
• ce52de7 fix!: Remove onlyAminoSigners in sequence check (backport #10029) (#10034)
• c1fc2a3 fix: remove legacy REST endpoints for broadcast & encode (v0.44.x) (#10041)
• 0155244 refactor: Move some methods inside TX Factory (backport #9421) (#10039)
• 370134c fix(build): set a right version for the app (backport #9965) (#9967)
• d60c934 build(deps): bump TM to v0.34.12 (backport #9956) (#9960)
• 8dfe627 fix: Fix CLI query tx docs for acc/seq (#9942) (#9950)
• 58b40fd chore: Update STABLE_RELEASES for 0.43 (#9931) (#9943)
• c1e02c6 chore: Deprecate QueryUpgradedConsensusState (#9906) (#9909)
• 4b2b306 fix: file keyring fails to add/import/export keys when input is not stdin (fi...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #945.