b1f9a117f7
Bumps [github.com/jhump/protoreflect](https://github.com/jhump/protoreflect) from 1.10.2 to 1.10.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jhump/protoreflect/releases">github.com/jhump/protoreflect's releases</a>.</em></p> <blockquote> <h2>v1.10.3</h2> <p>This release contains several fixes to the <code>desc/protoparse</code> package and one fix to the <code>grpcreflect</code> package.</p> <h3>"github.com/jhump/protoreflect/desc/protoparse"</h3> <p>Changes/fixes:</p> <ul> <li>If a custom option value contains a message literal, <code>protoc</code> accepts identifiers <code>t</code>, <code>f</code>, <code>True</code>, and <code>False</code> as synonyms for <code>true</code> and <code>false</code>. Use of these alternate spellings would be rejected by this package. This is now fixed so that this package accepts the same values as <code>protoc</code>.</li> <li>If a custom option refers to an enum which has values named <code>true</code> or <code>false</code>, this package would reject the option, misunderstanding the <code>true</code> or <code>false</code> identifier to be a boolean literal instead of an enum value name. This has been fixed.</li> <li>There were several cases where references to a custom option or extension, in an option name or in a message literal, were resolved differently by this package than by <code>protoc</code>. This lead to some variances -- some source files that <code>protoc</code> would accept but that this package would not (because it was unable to resolve a reference), and some source files that this package would accept but that <code>protoc</code> would reject (because this package was using different lexical scoping rules during resolution). This has been fixed and this package now resolves extension names the same way as <code>protoc</code>.</li> <li>When specifying a custom option value for a message whose type is <code>google.protobuf.Any</code>, <code>protoc</code> supports a special syntax that makes it possible to use a simple text format for the contained message, instead of having to include a byte string representation of a marshaled/encoded value. This package did not previously implement that syntax, so would reject proto sources that used it. This has been remedied, and the special syntax is now supported by this package.</li> <li>This package would previously accept a <code>repeated</code> extension for a message that used message-set wire format. However, only <code>optional</code> extensions are allowed for such messages. This has been fixed, and proto sources that try to define such a <code>repeated</code> extension will be rejected.</li> <li>Extensions are not allowed to set a <code>json_name</code> option, however this package was accepting proto sources that did so. This has been fixed, and proto sources that define an extension with the <code>json_name</code> option will be rejected.</li> </ul> <h3>"github.com/jhump/protoreflect/grpcreflect"</h3> <p>Changes/fixes:</p> <ul> <li>In some cases, servers implementing the reflection service has been observed to incorrectly include extra file descriptors in response to a <code>file_containing_symbol</code> request. Also, the reflection service does not actually specify any ordering requirements for responses that choose to include more than one file. But this package mistakenly assumed an ordering (based on an older implementation of the reflection service in the official Java runtime), which could cause such cases (responses with multiple or even superfluous files) to return the incorrect file descriptor. This has been fixed. Now all responses to <code>file_containing_symbol</code>, <code>file_containing_extension</code> and <code>file_by_filename</code> requests correctly support multiple files (even superfluous ones) in any order.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="65315df2c2"><code>65315df</code></a> protoparse: message-set extensions must be optional (<a href="https://github-redirect.dependabot.com/jhump/protoreflect/issues/489">#489</a>)</li> <li><a href="4ced19e52d"><code>4ced19e</code></a> protoparse: extensions are not allowed to use json_name option (<a href="https://github-redirect.dependabot.com/jhump/protoreflect/issues/488">#488</a>)</li> <li><a href="38023d35f2"><code>38023d3</code></a> grpcreflect: handle case where server sends back multiple files (<a href="https://github-redirect.dependabot.com/jhump/protoreflect/issues/487">#487</a>)</li> <li><a href="1bb2aa9349"><code>1bb2aa9</code></a> protoparse: add support for special syntax for Any messages in message litera...</li> <li><a href="260eab9e91"><code>260eab9</code></a> protoparse: fix extension resolution in custom options to match protoc (<a href="https://github-redirect.dependabot.com/jhump/protoreflect/issues/484">#484</a>)</li> <li><a href="d4949d2b82"><code>d4949d2</code></a> improvements to protoparse's handling of message literals in custom options (...</li> <li>See full diff in <a href="https://github.com/jhump/protoreflect/compare/v1.10.2...v1.10.3">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
157 lines
7.1 KiB
Modula-2
157 lines
7.1 KiB
Modula-2
go 1.17
|
|
|
|
module github.com/cosmos/cosmos-sdk
|
|
|
|
require (
|
|
github.com/99designs/keyring v1.1.6
|
|
github.com/armon/go-metrics v0.3.10
|
|
github.com/bgentry/speakeasy v0.1.0
|
|
github.com/btcsuite/btcd v0.22.0-beta
|
|
github.com/cockroachdb/apd/v2 v2.0.2
|
|
github.com/coinbase/rosetta-sdk-go v0.7.2
|
|
github.com/confio/ics23/go v0.6.6
|
|
github.com/cosmos/btcutil v1.0.4
|
|
github.com/cosmos/cosmos-proto v1.0.0-alpha7
|
|
github.com/cosmos/cosmos-sdk/db v1.0.0-beta.1
|
|
github.com/cosmos/cosmos-sdk/errors v1.0.0-beta.2
|
|
github.com/cosmos/go-bip39 v1.0.0
|
|
github.com/cosmos/iavl v0.17.3
|
|
github.com/cosmos/ledger-cosmos-go v0.11.1
|
|
github.com/gogo/gateway v1.1.0
|
|
github.com/gogo/protobuf v1.3.3
|
|
github.com/golang/mock v1.6.0
|
|
github.com/golang/protobuf v1.5.2
|
|
github.com/gorilla/handlers v1.5.1
|
|
github.com/gorilla/mux v1.8.0
|
|
github.com/grpc-ecosystem/go-grpc-middleware v1.3.0
|
|
github.com/grpc-ecosystem/grpc-gateway v1.16.0
|
|
github.com/hashicorp/go-getter v1.5.11
|
|
github.com/hashicorp/golang-lru v0.5.5-0.20210104140557-80c98217689d
|
|
github.com/hdevalence/ed25519consensus v0.0.0-20210204194344-59a8610d2b87
|
|
github.com/improbable-eng/grpc-web v0.15.0
|
|
github.com/jhump/protoreflect v1.10.3
|
|
github.com/lazyledger/smt v0.2.1-0.20210709230900-03ea40719554
|
|
github.com/magiconair/properties v1.8.5
|
|
github.com/mattn/go-isatty v0.0.14
|
|
github.com/pkg/errors v0.9.1
|
|
github.com/prometheus/client_golang v1.12.1
|
|
github.com/prometheus/common v0.32.1
|
|
github.com/rakyll/statik v0.1.7
|
|
github.com/regen-network/cosmos-proto v0.3.1
|
|
github.com/rs/zerolog v1.26.1
|
|
github.com/spf13/cast v1.4.1
|
|
github.com/spf13/cobra v1.3.0
|
|
github.com/spf13/pflag v1.0.5
|
|
github.com/spf13/viper v1.10.1
|
|
github.com/stretchr/testify v1.7.0
|
|
github.com/tendermint/btcd v0.1.1
|
|
github.com/tendermint/crypto v0.0.0-20191022145703-50d29ede1e15
|
|
github.com/tendermint/go-amino v0.16.0
|
|
github.com/tendermint/tendermint v0.35.1
|
|
github.com/tendermint/tm-db v0.6.6
|
|
golang.org/x/crypto v0.0.0-20220112180741-5e0467b6c7ce
|
|
google.golang.org/genproto v0.0.0-20220118154757-00ab72f36ad5
|
|
google.golang.org/grpc v1.44.0
|
|
google.golang.org/protobuf v1.27.1
|
|
pgregory.net/rapid v0.4.7
|
|
sigs.k8s.io/yaml v1.3.0
|
|
)
|
|
|
|
require (
|
|
cloud.google.com/go v0.99.0 // indirect
|
|
cloud.google.com/go/storage v1.14.0 // indirect
|
|
filippo.io/edwards25519 v1.0.0-beta.2 // indirect
|
|
github.com/Workiva/go-datastructures v1.0.53 // indirect
|
|
github.com/aws/aws-sdk-go v1.40.45 // indirect
|
|
github.com/beorn7/perks v1.0.1 // indirect
|
|
github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d // indirect
|
|
github.com/cenkalti/backoff/v4 v4.1.1 // indirect
|
|
github.com/cespare/xxhash v1.1.0 // indirect
|
|
github.com/cespare/xxhash/v2 v2.1.2 // indirect
|
|
github.com/cosmos/ledger-go v0.9.2 // indirect
|
|
github.com/danieljoos/wincred v1.0.2 // indirect
|
|
github.com/davecgh/go-spew v1.1.1 // indirect
|
|
github.com/desertbit/timer v0.0.0-20180107155436-c41aec40b27f // indirect
|
|
github.com/dgraph-io/badger/v2 v2.2007.4 // indirect
|
|
github.com/dgraph-io/ristretto v0.1.0 // indirect
|
|
github.com/dgryski/go-farm v0.0.0-20200201041132-a6ae2369ad13 // indirect
|
|
github.com/dustin/go-humanize v1.0.0 // indirect
|
|
github.com/dvsekhvalnov/jose2go v0.0.0-20200901110807-248326c1351b // indirect
|
|
github.com/facebookgo/ensure v0.0.0-20200202191622-63f1cf65ac4c // indirect
|
|
github.com/facebookgo/subset v0.0.0-20200203212716-c811ad88dec4 // indirect
|
|
github.com/felixge/httpsnoop v1.0.1 // indirect
|
|
github.com/fsnotify/fsnotify v1.5.1 // indirect
|
|
github.com/go-kit/kit v0.12.0 // indirect
|
|
github.com/godbus/dbus v0.0.0-20190726142602-4481cbc300e2 // indirect
|
|
github.com/golang/glog v1.0.0 // indirect
|
|
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
|
|
github.com/golang/snappy v0.0.4 // indirect
|
|
github.com/google/btree v1.0.1 // indirect
|
|
github.com/google/go-cmp v0.5.7 // indirect
|
|
github.com/google/orderedcode v0.0.1 // indirect
|
|
github.com/google/uuid v1.3.0 // indirect
|
|
github.com/googleapis/gax-go/v2 v2.1.1 // indirect
|
|
github.com/gorilla/websocket v1.4.2 // indirect
|
|
github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 // indirect
|
|
github.com/gsterjov/go-libsecret v0.0.0-20161001094733-a6f4afe4910c // indirect
|
|
github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
|
|
github.com/hashicorp/go-immutable-radix v1.3.1 // indirect
|
|
github.com/hashicorp/go-safetemp v1.0.0 // indirect
|
|
github.com/hashicorp/go-version v1.2.1 // indirect
|
|
github.com/hashicorp/hcl v1.0.0 // indirect
|
|
github.com/inconshreveable/mousetrap v1.0.0 // indirect
|
|
github.com/jmespath/go-jmespath v0.4.0 // indirect
|
|
github.com/jmhodges/levigo v1.0.0 // indirect
|
|
github.com/keybase/go-keychain v0.0.0-20190712205309-48d3d31d256d // indirect
|
|
github.com/klauspost/compress v1.13.6 // indirect
|
|
github.com/lib/pq v1.10.4 // indirect
|
|
github.com/libp2p/go-buffer-pool v0.0.2 // indirect
|
|
github.com/matttproud/golang_protobuf_extensions v1.0.1 // indirect
|
|
github.com/minio/highwayhash v1.0.2 // indirect
|
|
github.com/mitchellh/go-homedir v1.1.0 // indirect
|
|
github.com/mitchellh/go-testing-interface v1.0.0 // indirect
|
|
github.com/mitchellh/mapstructure v1.4.3 // indirect
|
|
github.com/mtibben/percent v0.2.1 // indirect
|
|
github.com/oasisprotocol/curve25519-voi v0.0.0-20210609091139-0a56a4bca00b // indirect
|
|
github.com/pelletier/go-toml v1.9.4 // indirect
|
|
github.com/petermattis/goid v0.0.0-20180202154549-b0b1615b78e5 // indirect
|
|
github.com/pmezard/go-difflib v1.0.0 // indirect
|
|
github.com/prometheus/client_model v0.2.0 // indirect
|
|
github.com/prometheus/procfs v0.7.3 // indirect
|
|
github.com/rcrowley/go-metrics v0.0.0-20200313005456-10cdbea86bc0 // indirect
|
|
github.com/rs/cors v1.8.2 // indirect
|
|
github.com/sasha-s/go-deadlock v0.2.1-0.20190427202633-1595213edefa // indirect
|
|
github.com/spf13/afero v1.8.0 // indirect
|
|
github.com/spf13/jwalterweatherman v1.1.0 // indirect
|
|
github.com/subosito/gotenv v1.2.0 // indirect
|
|
github.com/syndtr/goleveldb v1.0.1-0.20210819022825-2ae1ddf74ef7 // indirect
|
|
github.com/tecbot/gorocksdb v0.0.0-20191217155057-f0fad39f321c // indirect
|
|
github.com/ulikunitz/xz v0.5.8 // indirect
|
|
github.com/zondax/hid v0.9.0 // indirect
|
|
go.etcd.io/bbolt v1.3.6 // indirect
|
|
go.opencensus.io v0.23.0 // indirect
|
|
golang.org/x/net v0.0.0-20211208012354-db4efeb81f4b // indirect
|
|
golang.org/x/oauth2 v0.0.0-20211104180415-d3ed0bb246c8 // indirect
|
|
golang.org/x/sync v0.0.0-20210220032951-036812b2e83c // indirect
|
|
golang.org/x/sys v0.0.0-20220114195835-da31bd327af9 // indirect
|
|
golang.org/x/term v0.0.0-20210927222741-03fcf44c2211 // indirect
|
|
golang.org/x/text v0.3.7 // indirect
|
|
golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1 // indirect
|
|
google.golang.org/api v0.63.0 // indirect
|
|
google.golang.org/appengine v1.6.7 // indirect
|
|
gopkg.in/ini.v1 v1.66.3 // indirect
|
|
gopkg.in/yaml.v2 v2.4.0 // indirect
|
|
gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b // indirect
|
|
nhooyr.io/websocket v1.8.6 // indirect
|
|
)
|
|
|
|
replace github.com/gogo/protobuf => github.com/regen-network/protobuf v1.3.3-alpha.regen.1
|
|
|
|
replace github.com/99designs/keyring => github.com/cosmos/keyring v1.1.7-0.20210622111912-ef00f8ac3d76
|
|
|
|
// Fix upstream GHSA-h395-qcrw-5vmq vulnerability.
|
|
// TODO Remove it: https://github.com/cosmos/cosmos-sdk/issues/10409
|
|
replace github.com/gin-gonic/gin => github.com/gin-gonic/gin v1.7.0
|
|
|
|
replace github.com/cosmos/cosmos-sdk/db => ./db
|