build(deps): Bump github.com/cometbft/cometbft from 0.38.5 to 0.38.6 in /x/upgrade

[dependabot]

Bumps github.com/cometbft/cometbft from 0.38.5 to 0.38.6.

Release notes

Sourced from github.com/cometbft/cometbft's releases.

v0.38.6

See the CHANGELOG for this release.

Changelog

Sourced from github.com/cometbft/cometbft's changelog.

v0.38.6

March 12, 2024

This release fixes a security bug in the light client. It also introduces many improvements to the block sync in collaboration with the Osmosis team.

BUG FIXES

• [privval] Retry accepting a connection (#2047)
• [state] Fix rollback to a specific height (#2136)

FEATURES

• [e2e] Add block_max_bytes option to the manifest file. (#2362)

IMPROVEMENTS

• [blocksync] Avoid double-calling types.BlockFromProto for performance reasons (#2016)
• [e2e] Add manifest option load_max_txs to limit the number of transactions generated by the load command. (#2094)
• [jsonrpc] enable HTTP basic auth in websocket client (#2434)
• [blocksync] make the max number of downloaded blocks dynamic. Previously it was a const 600. Now it's peersCount * maxPendingRequestsPerPeer (20) #2467
• [blocksync] Request a block from peer B if we are approaching pool's height (less than 50 blocks) and the current peer A is slow in sending us the block #2475
• [blocksync] Request the block N from peer B immediately after getting NoBlockResponse from peer A #2475
• [blocksync] Sort peers by download rate (the fastest peer is picked first) #2475

Commits

• 1519562 Release v0.38.6 (#2592)
• 9db2930 fix(blocksync): use timer instead of time.After (backport #2584) (#2587)
• 6cf6978 feat(blocksync): sort peers by download rate & multiple requests for closer b...
• 6d606ce feat(blocksync): set the max number of (concurrently) downloaded blocks (back...
• d27a96e build(deps): Bump docker/build-push-action from 5.1.0 to 5.2.0 (#2567)
• 2a10503 build(deps): Bump bufbuild/buf-setup-action from 1.29.0 to 1.30.0 (#2566)
• f356b79 spec(abci): fixes the spec to inform about the presence of invalid extensions...
• 6ddf85b build(deps): Bump docker/setup-buildx-action from 3.0.0 to 3.1.0 (#2509)
• 99c1816 ci: check metrics generation in CI checks (backport #2483) (#2485)
• 91413e6 docs(changelog): add missing entry for #2136 (backport #2459) (#2464)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

The following labels could not be found: A:automerge.

[github-actions]

This pull request has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.