v30

.github/codeql/codeql-config.yml

@@ -2,3 +2,20 @@ paths:
   - "."
 paths-ignore:
   - "api/**"
+  # Auto-generated protobuf code — alerts here cannot be fixed in-tree
+  # (regenerated by `make proto-gen` from .proto sources).
+  - "**/*.pb.go"
+  - "**/*.pb.gw.go"
+  - "**/*_grpc.pb.go"
+  # Non-consensus runtime layers. The cosmos-sdk-codeql pack's
+  # non-determinism rules (map-iteration, clock-use) are tuned for
+  # state-machine code; the CLI builders, websocket handlers, and
+  # in-memory subscription cache below sit outside the consensus
+  # boundary and intentionally use wall-clock timeouts and
+  # unordered fan-out.
+  - "cmd/junod/cmd/stream/**"
+  - "app/endpoints/websocket/**"
+  - "x/stream/types/stream.go"
+  - "x/stream/types/subscription_registry.go"
+  - "x/stream/types/log_sanitize.go"
+  - "x/stream/types/encoding/**"

.github/workflows/build.yml

@@ -12,7 +12,7 @@ concurrency:
   cancel-in-progress: true
 
 env:
-  GO_VERSION: 1.23.9
+  GO_VERSION: 1.25.2
 
 jobs:
   build:

.github/workflows/codeql.yml

@@ -18,7 +18,7 @@ concurrency:
   cancel-in-progress: true
 
 env:
-  GO_VERSION: 1.23.9
+  GO_VERSION: 1.25.2
 
 jobs:
   analyze:

.github/workflows/golangci-lint.yml

@@ -17,7 +17,7 @@ concurrency:
   cancel-in-progress: true
 
 env:
-  GO_VERSION: 1.23.9
+  GO_VERSION: 1.25.2
 
 jobs:
   golangci:
@@ -28,7 +28,10 @@ jobs:
       - uses: actions/setup-go@v5
         with:
           go-version: ${{ env.GO_VERSION }}
-      - name: golangci-lint-junod
-        uses: golangci/golangci-lint-action@v8
-        with:
-          version: v2.1.6
+      # Use `make lint` (which invokes `go tool golangci-lint`) so the
+      # linter is compiled with our Go 1.25 toolchain and matches the
+      # version pinned in go.mod (v2.5.0). The standalone
+      # golangci-lint-action ships pre-built binaries that lag the Go
+      # release cycle and break on go.mod files declaring 1.25+.
+      - name: lint
+        run: make lint

.github/workflows/interchaintest-E2E.yml

@@ -14,7 +14,7 @@ permissions:
   packages: write
 
 env:
-  GO_VERSION: 1.23.9
+  GO_VERSION: 1.25.2
   TAR_PATH: /tmp/juno-docker-image.tar
   IMAGE_NAME: juno-docker-image
 
@@ -42,7 +42,12 @@ jobs:
         uses: docker/build-push-action@v6
         with:
           context: .
-          tags: juno:local
+          # Tag must match the repo string in
+          # interchaintest/suite/ci_integration.go's GetDockerImageInfo
+          # (and the IMAGE var in the root Makefile's local-image target),
+          # otherwise the e2e jobs will try to pull from registry and
+          # hit "manifest unknown."
+          tags: ghcr.io/cosmoscontracts/juno:local
           outputs: type=docker,dest=${{ env.TAR_PATH }}
 
       - name: Upload artifact
@@ -57,23 +62,22 @@ jobs:
     strategy:
       matrix:
         # names of `make` commands to run tests
+        # Must match the ictest-* targets in the root Makefile.
         test:
           - "ictest-basic"
-          - "ictest-statesync"
-          - "ictest-ibchooks"
-          - "ictest-tokenfactory"
-          - "ictest-feeshare"
+          - "ictest-burn"
+          - "ictest-cw"
+          - "ictest-drip"
+          - "ictest-feemarket"
+          - "ictest-fees"
+          - "ictest-fixes"
+          - "ictest-ibc"
+          - "ictest-ibc-hooks"
+          - "ictest-node"
           - "ictest-pfm"
-          - "ictest-globalfee"
+          - "ictest-tokenfactory"
           - "ictest-upgrade"
-          - "ictest-ibc"
-          - "ictest-unity-deploy"
-          - "ictest-drip"
-          - "ictest-feepay"
-          - "ictest-burn"
-          - "ictest-cwhooks"
-          - "ictest-clock"
-          - "ictest-gov-fix"
+          - "ictest-dao-dao"
       fail-fast: false
 
     steps:

.github/workflows/push-docker-images.yml

@@ -8,12 +8,6 @@
 # cosmoscontracts/juno:X        # is updated to X.Y.Z
 # cosmoscontracts/juno:latest   # is updated to X.Y.Z
 #
-# cosmoscontracts/juno-e2e:vX.Y.Z   # is pushed
-# cosmoscontracts/juno-e2e:X.Y.Z    # is pushed
-# cosmoscontracts/juno-e2e:X.Y      # is updated to X.Y.Z
-# cosmoscontracts/juno-e2e:X        # is updated to X.Y.Z
-# cosmoscontracts/juno-e2e:latest   # is updated to X.Y.Z
-#
 # All the images above have support for linux/amd64 and linux/arm64.
 #
 # Due to QEMU virtualization used to build multi-platform docker images

.github/workflows/release-dispatch.yml

@@ -3,59 +3,113 @@ name: Dispatch Release to juno-std
 on:
   release:
     types: [released]
-  push:
-    tags:
-    - 'v[0-9]+.[0-9]+.[0-9]+'
-
 env:
   JUNO_REPO: "https://github.com/CosmosContracts/juno.git"
-  JUNO_DIR: "../dependencies/juno/"
+  JUNO_DIR: "proto"
   COSMOS_SDK_REPO: "https://github.com/cosmos/cosmos-sdk.git"
-  COSMOS_SDK_REV: "v0.50.13"
-  COSMOS_SDK_DIR: "../dependencies/cosmos-sdk/"
+  COSMOS_SDK_REV: "v0.53.4"
+  COSMOS_SDK_DIR: "proto"
   WASMD_REPO: "https://github.com/CosmWasm/wasmd.git"
-  WASMD_REV: "v0.54.0"
-  WASMD_DIR: "../dependencies/wasmd/"
+  WASMD_REV: "v0.54.2"
+  WASMD_DIR: "proto"
   COMETBFT_REPO: "https://github.com/cometbft/cometbft.git"
-  COMETBFT_REV: "v0.38.17"
-  COMETBFT_DIR: "../dependencies/cometbft/"
+  COMETBFT_REV: "v0.38.19"
+  COMETBFT_DIR: "proto"
   IBC_GO_REPO: "https://github.com/cosmos/ibc-go.git"
   IBC_GO_REV: "v8.7.0"
-  IBC_GO_DIR: "../dependencies/ibc-go/"
+  IBC_GO_DIR: "proto"
   ICS23_REPO: "https://github.com/cosmos/ics23.git"
   ICS23_REV: "go/v0.11.0"
-  ICS23_DIR: "../dependencies/ics23/"
+  ICS23_DIR: "proto"
 
 jobs:
   dispatch:
     runs-on: ubuntu-latest
     steps:
-      - name: Build repo_config JSON
-        id: build_repo_config
-        env:
-          GITHUB_EVENT_RELEASE_TAG: ${{ github.event.release.tag_name }}
-        run: |
-          printf '[\n  {"name": "juno", "repo": "%s", "rev": "%s", "dir": "%s", "exclude_mods": [], "is_main": true},\n  {"name": "cosmos-sdk", "repo": "%s", "rev": "%s", "dir": "%s", "exclude_mods": ["reflection", "autocli"], "is_main": false},\n  {"name": "wasmd", "repo": "%s", "rev": "%s", "dir": "%s", "exclude_mods": [], "is_main": false},\n  {"name": "cometbft", "repo": "%s", "rev": "%s", "dir": "%s", "exclude_mods": [], "is_main": false},\n  {"name": "ibc-go", "repo": "%s", "rev": "%s", "dir": "%s", "exclude_mods": [], "is_main": false},\n  {"name": "ics23", "repo": "%s", "rev": "%s", "dir": "%s", "exclude_mods": [], "is_main": false}\n]\n' \
-            "$JUNO_REPO" "$GITHUB_EVENT_RELEASE_TAG" "$JUNO_DIR" \
-            "$COSMOS_SDK_REPO" "$COSMOS_SDK_REV" "$COSMOS_SDK_DIR" \
-            "$WASMD_REPO" "$WASMD_REV" "$WASMD_DIR" \
-            "$COMETBFT_REPO" "$COMETBFT_REV" "$COMETBFT_DIR" \
-            "$IBC_GO_REPO" "$IBC_GO_REV" "$IBC_GO_DIR" \
-            "$ICS23_REPO" "$ICS23_REV" "$ICS23_DIR" > repo_config.json
-          cat repo_config.json
-          echo "json=$(cat repo_config.json)" >> $GITHUB_OUTPUT
-        shell: bash
-
-      - name: Dispatch release event with repo_config
-        uses: peter-evans/repository-dispatch@v3
+      - name: Dispatch release event
+        uses: actions/github-script@v8
         with:
-          token: ${{ secrets.DISPATCH_TOKEN }}
-          repository: CosmosContracts/juno-std
-          event-type: juno-release
-          client-payload: |
-            {
-              "is_draft": "${{ github.event.release.draft }}",
-              "is_prerelease": "${{ github.event.release.prerelease }}",
-              "release_tag": "${{ github.event.release.tag_name }}",
-              "repo_config": "${{ steps.build_repo_config.outputs.json }}"
+          github-token: ${{ secrets.DISPATCH_TOKEN }}
+          script: |
+            const { context, core, github } = require('@actions/github-script');
+
+            // Resolve target repository (owner/repo) from env
+            const repoStr = "CosmosContracts/juno-std";
+            if (!repoStr.includes('/')) {
+              core.setFailed(`Invalid repository: '${repoStr}'`);
+              return;
+            }
+            const [targetOwner, targetRepo] = "CosmosContracts/juno-std".split('/', 2);
+
+            // Determine release_tag and flags based on event type or manual inputs
+            const inputs = (context.payload && context.payload.inputs) || {};
+            const releaseTag = inputs.release_tag || '';
+            const isDraft = String(inputs.is_draft || '').toLowerCase() === 'true';
+            const isPrerelease = String(inputs.is_prerelease || '').toLowerCase() === 'true';
+
+            if (!releaseTag) {
+              core.setFailed('Unable to determine release_tag');
+              return;
             }
+
+            // Build 'repos' as a structured JSON object keyed by name
+            const repos = {
+              juno: {
+                name: 'juno',
+                repo: process.env.JUNO_REPO,
+                rev: releaseTag,
+                dir: process.env.JUNO_DIR,
+                exclude_mods: [],
+              },
+              cosmos_sdk: {
+                name: 'cosmos',
+                repo: process.env.COSMOS_SDK_REPO,
+                rev: process.env.COSMOS_SDK_REV,
+                dir: process.env.COSMOS_SDK_DIR,
+                exclude_mods: ['cosmos/benchmark', 'cosmos/counter', 'cosmos/epochs', 'cosmos/protocolpool],
+              },
+              wasmd: {
+                name: 'wasm',
+                repo: process.env.WASMD_REPO,
+                rev: process.env.WASMD_REV,
+                dir: process.env.WASMD_DIR,
+                exclude_mods: [],
+              },
+              cometbft: {
+                name: 'cometbft',
+                repo: process.env.COMETBFT_REPO,
+                rev: process.env.COMETBFT_REV,
+                dir: process.env.COMETBFT_DIR,
+                exclude_mods: [],
+              },
+              ibc_go: {
+                name: 'ibc-go',
+                repo: process.env.IBC_GO_REPO,
+                rev: process.env.IBC_GO_REV,
+                dir: process.env.IBC_GO_DIR,
+                exclude_mods: [],
+              },
+              ics23: {
+                name: 'ics23',
+                repo: process.env.ICS23_REPO,
+                rev: process.env.ICS23_REV,
+                dir: process.env.ICS23_DIR,
+                exclude_mods: [],
+              },
+            };
+
+            const payload = {
+              is_draft: isDraft,
+              is_prerelease: isPrerelease,
+              release_tag: releaseTag,
+              repos,
+            };
+
+            core.info(`Dispatching to ${targetOwner}/${targetRepo} with payload: ${JSON.stringify(payload)}`);
+            await github.rest.repos.createDispatchEvent({
+              owner: targetOwner,
+              repo: targetRepo,
+              event_type: "juno-release",
+              client_payload: payload,
+            });
+            core.info('Repository dispatch event sent successfully.');

.gitignore

@@ -1,5 +1,17 @@
+# build artifacts
 bin
+
+# IDEs
 .vscode
+.cursor
+.claude
+
+# OS
 .DS_Store
+
+# Heighliner
 heighliner*
-!scripts/heighliner
+!scripts/heighliner
+
+# random stuff
+x/feemarket/fuzz/testdata

.golangci.yml

@@ -22,7 +22,25 @@ linters:
     - unused
     - unparam
     - revive
+    - containedctx
+    - copyloopvar
+    - decorder
+    - dupl
+    - dupword
+    - err113
+    - errchkjson
+    - errname
+    - errorlint
+    - exhaustive
+    - exptostd
+    - fatcontext
+    - funcorder
+    - ginkgolinter
   settings:
+    staticcheck:
+      checks:
+        - "all"
+        - "-ST1000" # Disable required package comment
     revive:
       enable-all-rules: true
       rules:
@@ -62,6 +80,8 @@ linters:
           disabled: true
         - name: deep-exit
           disabled: true
+        - name: "var-naming"
+          disabled: true
     gosec:
       excludes:
         - G404
@@ -94,6 +114,11 @@ formatters:
         - prefix(github.com/cosmos/cosmos-sdk)
         - prefix(github.com/CosmosContracts/juno)
       custom-order: true
+  exclusions:
+    paths:
+      - ".*.pb.go"
+      - ".*.pb.gw.go"
+      - "./api/*.*"
 
 issues:
   max-issues-per-linter: 0