build(deps): bump github.com/cosmos/cosmos-sdk from 0.46.11 to 0.47.5

[dependabot]

Bumps github.com/cosmos/cosmos-sdk from 0.46.11 to 0.47.5.

Release notes

Sourced from github.com/cosmos/cosmos-sdk's releases.

v0.47.5

Cosmos SDK v0.47.5 Release Notes

💬 Release Discussion

🚀 Highlights

Get ready for v0.50.0 and start integrating with the next Cosmos SDK release.

For this 5th patch release of the v0.47.x line, some of the notable changes include:

• A new command for importing private keys encoded in hex. This complements the existing import command that supports mnemonic and key files. Use <appd> keys import <name> <hex> to import a private key encoded in hex.
• A new command, rpc.QueryEventForTxCmd for querying a transaction by its hash and blocking until the transaction is included in a block. It is useful as an alternative to the legacy --sync block.

Check out the changelog for an exhaustive list of changes or compare changes from last release.

Refer to the upgrading guide when migrating from v0.46.x to v0.47.0.

v0.47.4

Cosmos SDK v0.47.4 Release Notes

💬 Release Discussion

🚀 Highlights

Missed the v0.47.0 announcement? Read it here. For this fourth patch release of the v0.47.x line, some of the notable changes include:

• An improvement in <appd> prune UX.
• Improving the error handling when there is a snapshot creation failure.

Check out the changelog for an exhaustive list of changes or compare changes from last release.

Refer to the upgrading guide when migrating from v0.46.x to v0.47.0.

v0.47.3

Cosmos SDK v0.47.3 Release Notes

💬 Release Discussion

🚀 Highlights

Missed the v0.47.0 announcement? Read it here. For this third patch release of the v0.47.x line, some of the notable changes include:

• The barberry security vulnerability is resolved. All chains using Cosmos SDK v0.47.0-v0.47.2 are advised to upgrade to v0.47.3 immediately. A chain is not affected by the vulnerability as soon as 33%+1 of the voting power has upgraded. A chain is safe from halting as soon as 66%+1 of the voting power has upgraded. Coordinate with your validators to upgrade as soon as possible. The upgrade can be applied as a rolling upgrade across the validators or as a coordinated upgrade. Networks should decide which option gets them upgraded quicker.
• A command to be able to bootstrap comet from a local snapshot with <app> comet bootstrap-state.
• Commands to manage snapshots: Add snapshot.Cmd(appCreator) to your chain root command for using them.

... (truncated)

Changelog

Sourced from github.com/cosmos/cosmos-sdk's changelog.

v0.47.5 - 2023-09-01

Features

• (client/rpc) #17274 Add QueryEventForTxCmd cmd to subscribe and wait event for transaction by hash.
• (keyring) #17424 Allows to import private keys encoded in hex.

Improvements

• (x/gov) #17387 Add MsgSubmitProposal SetMsgs method.
• (x/gov) #17354 Emit VoterAddr in proposal_vote event.
• (x/group, x/gov) #17220 Add --skip-metadata flag in draft-proposal to skip metadata prompt.
• (x/genutil) #17296 Add MigrateHandler to allow reuse migrate genesis related function.
  • In v0.46, v0.47 this function is additive to the genesis migrate command. However in v0.50+, adding custom migrations to the genesis migrate command is directly possible.

Bug Fixes

• (server) #17181 Fix db_backend lookup fallback from config.toml.
• (runtime) #17284 Properly allow to combine depinject-enabled modules and non-depinject-enabled modules in app v2.
• (baseapp) #17159 Validators can propose blocks that exceed the gas limit.
• (baseapp) #16547 Ensure a transaction's gas limit cannot exceed the block gas limit.
• (x/gov,x/group) #17220 Do not try validate msgURL as web URL in draft-proposal command.
• (cli) #17188 Fix --output-document flag in tx multi-sign.
• (x/auth) #17209 Internal error on AccountInfo when account's public key is not set.

v0.47.4 - 2023-07-17

Features

• (sims) #16656 Add custom max gas for block for sim config with unlimited as default.

Improvements

• (cli) #16856 Improve simd prune UX by using the app default home directory and set pruning method as first variable argument (defaults to default). pruning.PruningCmd rest unchanged for API compability, use pruning.Cmd instead.
• (testutil) #16704 Make app config configurator for testing configurable with external modules.
• (deps) #16565 Bump CometBFT to v0.37.2.

Bug Fixes

• (x/auth) #16994 Fix regression where querying transactions events with <= or >= would not work.
• (server) #16827 Properly use --trace flag (before it was setting the trace level instead of displaying the stacktraces).
• (x/auth) #16554 ModuleAccount.Validate now reports a nil .BaseAccount instead of panicking.
• #16588 Propogate snapshotter failures to the caller, (it would create an empty snapshot silently before).
• (x/slashing) #16784 Emit event with the correct reason in SlashWithInfractionReason.

v0.47.3 - 2023-06-08

Features

• (baseapp) #16290 Add circuit breaker setter in baseapp.

... (truncated)

Commits

• 2e9e5d6 chore: prepare v0.47.5 (#17407)
• 273bb7d docs: improve DeductFeeDecorator godoc (backport #17559) (#17590)
• c9144f0 build(deps): Bump cosmossdk.io/log from 1.2.0 to 1.2.1 (#17557)
• 4bba75e docs(x/group): fix submit-proposal help json example (backport #17546) (#17551)
• dea01dd docs: update x/group create-proposal to submit-proposal (backport #17544) (#1...
• bdbc1d6 fix(x/authz): GetAuthorizations (backport #17334) (#17524)
• dffcde2 chore(docs): remove deprecated prop type (#17510)
• 2db1247 build(deps): Bump cosmossdk.io/math from 1.0.1 to 1.1.2 (#17492)
• 32b23f5 feat: add event-query-tx-for cmd to subscribe and wait for transaction (backp...
• 612f0fe feat: import hex keys (backport #17424) (#17433)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

This pull request has been automatically marked as stale because it has not had recent activity. It will be closed in 7 days-before-close if no further activity occurs.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.