v4 release control

.github/dependabot.yml

@@ -1,45 +1,11 @@
+---
 version: 2
-updates:  
-- package-ecosystem: github-actions
-  directory: "/"
-  schedule:
-    interval: daily
-  open-pull-requests-limit: 10
-- package-ecosystem: gomod
-  directory: "/"
-  schedule:
-    interval: daily
-  open-pull-requests-limit: 10
-  ignore:
-  - dependency-name: github.com/CosmWasm/wasmvm
-    versions:
-    - 0.14.0-beta2
-    - 0.14.0-beta3
-    - 0.14.0-beta4
-    - 0.14.0-beta5
-    - 0.14.0-rc1
-  - dependency-name: github.com/cometbft/cometbft
-    versions:
-    - 0.34.10
-    - 0.34.4
-    - 0.34.7
-    - 0.34.8
-    - 0.34.9
-  - dependency-name: github.com/cosmos/cosmos-sdk
-    versions:
-    - 0.41.4
-    - 0.42.0
-    - 0.42.1
-    - 0.42.2
-    - 0.42.4
-  - dependency-name: google.golang.org/grpc
-    versions:
-    - 1.36.0
-    - 1.36.1
-    - 1.37.0
-  - dependency-name: github.com/spf13/cobra
-    versions:
-    - 1.1.2
-  - dependency-name: github.com/cometbft/cometbft-db
-    versions:
-    - 0.6.4
+updates:
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: daily
+  - package-ecosystem: gomod
+    directory: "/"
+    schedule:
+      interval: daily

.github/workflows/build.yml

@@ -11,16 +11,19 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+env:
+  GO_VERSION: 1.21.0
+
 jobs:
   build:
     runs-on: ubuntu-latest
     name: build
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Setup go
         uses: actions/setup-go@v4
         with:
-          go-version: 1.20.0
+          go-version: ${{ env.GO_VERSION }}
       - run: go build ./...
 
   test:
@@ -30,7 +33,7 @@ jobs:
       - name: Install Go
         uses: actions/setup-go@v3
         with:
-          go-version: 1.20.0
+          go-version: ${{ env.GO_VERSION }}
       - name: Checkout code
         uses: actions/checkout@v3
       - name: Test
@@ -44,7 +47,7 @@ jobs:
       - name: Setup go
         uses: actions/setup-go@v4
         with:
-          go-version: 1.20.0
+          go-version: ${{ env.GO_VERSION }}
       - run: |
           go mod tidy
           CHANGES_IN_REPO=$(git status --porcelain)

.github/workflows/build_docker.yml

@@ -16,13 +16,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@v3
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v3
       - name: Build without push
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v5
         with:
           context: .
           platforms: linux/amd64

.github/workflows/codeql.yml

@@ -1,16 +1,25 @@
-name: "Code Scanning - Action"
+---
+# THIS GITHUB ACTION LIFTED WITH LOVE FROM THE COSMOS-SDK
+name: "CodeQL"
 
 on:
   pull_request:
     paths:
       - "**.go"
   push:
-    branches: 
+    branches:
       - main
       - release/**
     paths:
       - "**.go"
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+env:
+  GO_VERSION: 1.21.0
+
 jobs:
   analyze:
     name: Analyze
@@ -22,10 +31,10 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - uses: actions/setup-go@v4
         with:
-          go-version: 1.20.0
+          go-version: ${{ env.GO_VERSION }}
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v2

.github/workflows/dependency-review.yml

@@ -0,0 +1,20 @@
+# Dependency Review Action
+#
+# This Action will scan dependency manifest files that change as part of a Pull Request, surfacing known-vulnerable versions of the packages declared or updated in the PR. Once installed, if the workflow run is marked as required, PRs introducing known-vulnerable packages will be blocked from merging.
+#
+# Source repository: https://github.com/actions/dependency-review-action
+# Public documentation: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement
+name: 'Dependency Review'
+on: [pull_request]
+
+permissions:
+  contents: read
+
+jobs:
+  dependency-review:
+    runs-on: ubuntu-latest
+    steps:
+      - name: 'Checkout Repository'
+        uses: actions/checkout@v4
+      - name: 'Dependency Review'
+        uses: actions/dependency-review-action@v2

.github/workflows/golangci-lint.yml

@@ -8,14 +8,16 @@ on:
       - master
       - main
   pull_request:
-    paths:
-      - '**.go'
+
 permissions:
   contents: read
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
+
+env:
+  GO_VERSION: 1.21.0
 
 jobs:
   golangci:
@@ -24,10 +26,10 @@ jobs:
     steps:
       - uses: actions/setup-go@v4
         with:
-          go-version: 1.20.0
-      - uses: actions/checkout@v3
+          go-version: ${{ env.GO_VERSION }}
+      - uses: actions/checkout@v4
 
-      - name: golangci-lint
+      - name: golangci-lint-terpd
         uses: golangci/golangci-lint-action@v3
         with:
           version: latest