What's Changed

• Create NOTICE (backport #5495) by @mergify[bot] in #5496
• chore: add voting power validation (v0.38.x) by @technicallyty in #5520

Full Changelog: v0.38.19...v0.38.20

What's Changed

• build(deps): Bump actions/upload-artifact from 4 to 5 by @dependabot[bot] in #5471
• build(deps): Bump golangci/golangci-lint-action from 6 to 9 by @dependabot[bot] in #5489
• build(deps): Bump actions/checkout from 4 to 6 by @dependabot[bot] in #5504
• chore: remove panic by @technicallyty in #5525

Full Changelog: v0.37.16...v0.37.17

This is a security patch release to the CometBFT v0.38.x family that fixes GHSA-hrhf-2vcr-ghch

What's Changed

• chore: fix test docker image by @aljo242 in #5299
• chore: refactor changelogs by @aljo242 in #5303
• chore: update and fix mockery tooling on v0.38 by @aljo242 in #5301
• chore: fix the linter by @aljo242 in #5304
• fix(store): Properly prune extended commits (backport #5276) by @mergify[bot] in #5313
• chore: clean up the repo by @aljo242 in #5315
• fix: remove exposed dockertest port to unblock postgres test by @almk-dev in #5325
• fix(consensus/reactor): reject oversized proposals (backport #5324) by @mergify[bot] in #5407
• GHSA-hrhf-2vcr-ghch

Full Changelog: v0.38.18...v0.38.19

This is a security patch release to the CometBFT v0.37.x family that fixes GHSA-hrhf-2vcr-ghch.

What's Changed

• build(deps): Bump docker/login-action from 3.3.0 to 3.6.0 by @dependabot[bot] in #5439
• GHSA-hrhf-2vcr-ghch

Full Changelog: v0.37.15...v0.37.16

What's Changed

• fix: remove redundant error check for PubKeyToProto by @islishude in #4917
• ci: remove govulncheck (backport #4946) by @mergify[bot] in #4961
• build(deps): Bump docker/setup-buildx-action from 3.8.0 to 3.9.0 by @dependabot[bot] in #4936
• fix(ci): Fix docker builds (backport #4949) by @mergify[bot] in #4963
• build(deps): Bump docker/build-push-action from 6.13.0 to 6.14.0 by @dependabot[bot] in #4972
• build(deps): Bump docker/setup-buildx-action from 3.9.0 to 3.10.0 by @dependabot[bot] in #5008
• build(deps): Bump docker/build-push-action from 6.14.0 to 6.15.0 by @dependabot[bot] in #5009
• build(deps): Bump golang.org/x/sync from 0.10.0 to 0.11.0 by @dependabot[bot] in #4990
• build(deps): Bump github.com/spf13/cobra from 1.8.1 to 1.9.1 by @dependabot[bot] in #4992
• build(deps): Bump golang.org/x/net from 0.34.0 to 0.35.0 by @dependabot[bot] in #4998
• build(deps): Bump github.com/decred/dcrd/dcrec/secp256k1/v4 from 4.3.0 to 4.4.0 by @dependabot[bot] in #4997
• build(deps): Bump google.golang.org/protobuf from 1.36.4 to 1.36.5 by @dependabot[bot] in #4994
• build(deps): Bump github.com/prometheus/client_golang from 1.20.5 to 1.21.0 by @dependabot[bot] in #4995
• chore: fix typo in workflow_dispatch (backport #5164) by @mergify[bot] in #5166
• ci(testapp-docker): release two images, not one (backport #5014) by @mergify[bot] in #5168
• chore: add supported version to e2e image tag (backport #5169) by @mergify[bot] in #5171
• chore: remove tag from individual builds (backport #5173) by @mergify[bot] in #5174
• refactor: e2e-node docker build (backport #5176) by @mergify[bot] in #5178
• refactor: cometbft image build (backport #5179) by @mergify[bot] in #5181
• fix: add git to docker ignore (backport #5214) by @mergify[bot] in #5216
• fix: do multistage builds for e2e-node (backport #5220) by @mergify[bot] in #5222
• fix: add libs to e2e tests v0.38.x by @zrbecker in #5234
• chore: reindex to event sink from cli (backport #5209) by @mergify[bot] in #5240
• feat: precommit metrics by @technicallyty in #5251
• chore: prep release for v0.38.18 by @technicallyty in #5253

Full Changelog: v0.38.17...v0.38.18

See the CHANGELOG for this release.

See the CHANGELOG for this release.

See the CHANGELOG for this release.

See the CHANGELOG for this release.

See the CHANGELOG for this release.