Merge releases/v0.6x to main (#2305)

* Make validateAddress cheaper if canonicalization fails (#2193)

(cherry picked from commit cdb72b1)

* feat(data): Make sure Aliases in DenomUnit is not nil

(cherry picked from commit 69c38a5)

* chore(comment): Add code comments

(cherry picked from commit 1eaf666)

* chore(test): Add test

(cherry picked from commit 8473fea)

* chore(comment): Improve comment clarity in query_plugins.go

(cherry picked from commit e3df21e)

* Restore file permission

(cherry picked from commit 9eb5dd8)

* Rename message args 💅 (#2207)

* Rename args to `msg` consistently in WasmEngine interface

* Rename file to wasm_engine.go

"Wasmer" is an implementation detail that can change at any time

(cherry picked from commit 1756d2d)

* Use gas overflow error for ToWasmVMGas

(cherry picked from commit dda8ea3)

* Streamline Stargate/gRPC querier interfaces (#2093)

* Change RejectStargateQuerier from factory function to free function

* Clarify error message to help contract developers

* Streamline and improve documentation for RejectGrpcQuerier

* Pull out function signatures

* [autofix.ci] apply automated fixes

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 146cdea)

* Lower `DefaultMaxCallDepth` (#2244)

* Lower DefaultMaxCallDepth

* Add changelog entry

* Fix test

* Bump cosmos-sdk v0.53.0 (#2250)

* Bump cosmos-sdk v0.53.0

* remove crisis module

* fix simulations

* Suppress lint errors

* Fix golangci-lint warnings

* Remove unnecessary loop copy

* Updates

* [autofix.ci] apply automated fixes

* fix: Disable IAVL prunning to prevent dangling goroutines in tests

* fix: Try to use newer golangci

* Increase resources for lint

* Update golangci-lint (#2269)

* Remove deprecated golangci-lint configs

* Update golangci-lint

* Apply linter fixes

---------

Co-authored-by: Christoph Otter <[email protected]>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Tomasz Kulik <[email protected]>

* Prepare changelog for release (#2274)

* Prepare changelog for release

* Update

* Update wasmvm

(cherry picked from commit d5d9860)

* Fix tests

(cherry picked from commit 8404057)

* Update dockerfile

(cherry picked from commit c51b4e4)

* Fix

* Improve readability

* Fix

* Restructure error handling

* Add comments

* Add setup cost for IBC operations

* Fix tests

* Use ExpectedJSONSize function

---------

Co-authored-by: Christoph Otter <[email protected]>
Co-authored-by: BigtoC <[email protected]>
Co-authored-by: Simon Warta <[email protected]>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Tomasz Kulik <[email protected]>

Author: 6 people

CHANGELOG.md

@@ -2,7 +2,18 @@
 
 ## [Unreleased](https://github.com/CosmWasm/wasmd/tree/HEAD)
 
-[Full Changelog](https://github.com/CosmWasm/wasmd/compare/v0.55.0...HEAD)
+[Full Changelog](https://github.com/CosmWasm/wasmd/compare/v0.60.0...HEAD)
+
+## [v0.60.0](https://github.com/CosmWasm/wasmd/tree/v0.60.0) (2025-05-26)
+
+[Full Changelog](https://github.com/CosmWasm/wasmd/compare/v0.55.0...v0.60.0)
+
+- Bump cosmos-sdk [v0.53.0](https://github.com/CosmWasm/wasmd/pull/2250)
+- Streamline Stargate/gRPC querier interfaces [\#2249](https://github.com/CosmWasm/wasmd/pull/2249)
+- Use gas overflow error for `ToWasmVMGas` [\#2248](https://github.com/CosmWasm/wasmd/pull/2248)
+- Make sure Aliases in DenomUnit is not nil [\#2246](https://github.com/CosmWasm/wasmd/pull/2246)
+- Make validateAddress cheaper if canonicalization fails [\#2245](https://github.com/CosmWasm/wasmd/pull/2245)
+- Lower `DefaultMaxCallDepth` [\#2244](https://github.com/CosmWasm/wasmd/pull/2244)
 
  - chore: Change port prefix for IBCv2 messages to "wasm2" [\#2229](https://github.com/CosmWasm/wasmd/pull/2229)
  - feat: IBCv2 timeout handler [\#2226](https://github.com/CosmWasm/wasmd/pull/2226)

tests/system/cli.go

@@ -519,6 +519,11 @@ var (
 		const oogMsg = "out of gas"
 		return expErrWithMsg(t, err, args, oogMsg)
 	}
+	// ErrMaxCallDepthMatcher requires error with "max call depth exceeded" message
+	ErrMaxCallDepthMatcher RunErrorAssert = func(t assert.TestingT, err error, args ...interface{}) bool {
+		const expMsg = "max call depth exceeded"
+		return expErrWithMsg(t, err, args, expMsg)
+	}
 	// ErrTimeoutMatcher requires time out message
 	ErrTimeoutMatcher RunErrorAssert = func(t assert.TestingT, err error, args ...interface{}) bool {
 		const expMsg = "timed out waiting for tx to be included in a block"

tests/system/fraud_test.go

@@ -29,7 +29,7 @@ func TestRecursiveMsgsExternalTrigger(t *testing.T) {
 	}{
 		"simulation": {
 			gas:           "auto",
-			expErrMatcher: ErrOutOfGasMatcher,
+			expErrMatcher: ErrMaxCallDepthMatcher,
 		},
 	}
 	for name, spec := range specs {

tests/system/go.mod

@@ -26,8 +26,10 @@ require (
 require (
 	cosmossdk.io/math v1.5.3
 	github.com/cometbft/cometbft v0.38.17
+	github.com/gogo/protobuf v1.3.2
 	github.com/tidwall/gjson v1.14.2
 	github.com/tidwall/sjson v1.2.5
+	google.golang.org/protobuf v1.36.6
 )
 
 require (
@@ -82,7 +84,6 @@ require (
 	github.com/go-viper/mapstructure/v2 v2.2.1 // indirect
 	github.com/godbus/dbus v0.0.0-20190726142602-4481cbc300e2 // indirect
 	github.com/gogo/googleapis v1.4.1 // indirect
-	github.com/gogo/protobuf v1.3.2 // indirect
 	github.com/golang/glog v1.2.4 // indirect
 	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
 	github.com/golang/snappy v0.0.4 // indirect
@@ -156,7 +157,6 @@ require (
 	golang.org/x/text v0.24.0 // indirect
 	google.golang.org/genproto/googleapis/api v0.0.0-20250324211829-b45e905df463 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20250422160041-2d3770c4ea7f // indirect
-	google.golang.org/protobuf v1.36.6 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 	gotest.tools/v3 v3.5.2 // indirect
 	nhooyr.io/websocket v1.8.6 // indirect

x/wasm/types/wasm_engine.go

@@ -10,7 +10,7 @@ import (
 // DefaultMaxQueryStackSize maximum size of the stack of recursive queries a contract can make
 const DefaultMaxQueryStackSize uint32 = 10
 
-const DefaultMaxCallDepth uint32 = 500
+const DefaultMaxCallDepth uint32 = 100
 
 // WasmEngine defines the WASM contract runtime engine.
 type WasmEngine interface {