fix(deps): update dependency @cosmjs/stargate to ^0.38.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@cosmjs/stargate (source)	^0.32.4 → ^0.38.1

---

Release Notes

cosmos/cosmjs (@​cosmjs/stargate)

v0.38.1

Compare Source

v0.38.0

Compare Source

Added

• @​cosmjs/encoding: Add fixUint8Array which takes an
  Uint8Array<ArrayBufferLike> and returns Uint8Array<ArrayBuffer>. This can
  be used in cases where a data source returns an Uint8Array without
  specifying the buffer type but you need an ArrayBuffer. Internally it might
  perform a copy but in the vast majority of cases it will just change the type
  after ensuring ArrayBuffer is used. (#​1883)
• @​cosmjs/math: Add Decimal.adjustFractionalDigits which allows you to change
  the fractional digits of a Decimal without changing its value. (#​1916)
• @​cosmjs/stargate, @​cosmjs/cosmwasm-stargate: Add option to configure dynamic
  gas price in SigningCosmWasmClientOptions and SigningStargateClientOptions
  using the DynamicGasPriceConfig interface for gasPrice. This then uses
  Osmosis' EIP-1559 implementation or the Skip fee market module to get the gas
  price from the chain. (#​1926)
• @​cosmjs/cosmwasm-stargate: Add the ability to specify a custom account parser
  for CosmWasmClient. (#​1928)
• Add support for Cosmos EVM key handling and signing. (#​1932)
• @​cosmjs/proto-signing: Add support for ts-proto v2 through the newly added
  TsProto2GeneratedType interface. As long as the existing
  TsProtoGeneratedType is not removed, ts-proto v1 remains supported.
  (#​1613)

Changed

• all: return Uint8Array<ArrayBuffer> instead of
  Uint8Array = Uint8Array<ArrayBufferLike> whenever CosmJS creates binary data
  for users. This allows users to stick it into APIs that require ArrayBuffer
  such as many APIs from Subtle crypto. You can still assign
  Uint8Array<ArrayBuffer> to any Uint8Array in an existing codebase like
  this:

  const myVar: Uint8Array = fromHex("aabb");

  That's the easy way and probably good for many use cases. However, this way
  you lose information which buffer type is in use and you cannot trivially pass
  it to an API requiring Uint8Array<ArrayBuffer> later on.

  The other option is to preserve the information you are getting from CosmJS by
  using Uint8Array<ArrayBuffer> too:

  const myVar: Uint8Array<ArrayBuffer> = fromHex("aabb");
  
  // or inferred
  const myVar = fromHex("aabb"); // Uint8Array<ArrayBuffer>

  This change requires users to use TypeScript 5.7 or newer. (#​1883)

• all: Migrate from readonly-date to readonly-date-esm ^2 which is an ESM
  package but otherwise equal to the previous version. If you are using
  ReadonlyDate in your codebase it is recommended to also update like this to
  avoid type mismatches:

  -import { ReadonlyDate } from "readonly-date";
  +import { ReadonlyDate } from "readonly-date-esm";

• @​cosmjs/tendermint-rpc: Remove union type TendermintClient. Use
  CometClient or just Tendermint37Client instead. (#​1866)

• @​cosmjs/tendermint-rpc: Remove isTendermint34Client. Remove
  Tendermint34Client from CometClient union type. Remove
  Tendermint34Client. Remove module tendermint34. (#​1866)

• @​cosmjs/tendermint-rpc: Remove top-level exports broadcastTxCommitSuccess,
  broadcastTxSyncSuccess, AbciInfoRequest, AbciInfoResponse,
  AbciQueryParams, AbciQueryRequest, AbciQueryResponse, Attribute,
  Block, BlockchainRequest, BlockchainResponse, BlockGossipParams,
  BlockId, BlockMeta, BlockParams, BlockRequest, BlockResponse,
  BlockResultsRequest, BlockResultsResponse, BroadcastTxAsyncResponse,
  BroadcastTxCommitResponse, BroadcastTxParams, BroadcastTxRequest,
  BroadcastTxSyncResponse, Commit, CommitRequest, CommitResponse,
  ConsensusParams, Event, Evidence, EvidenceParams, GenesisRequest,
  GenesisResponse, Header, HealthRequest, HealthResponse, Method,
  NewBlockEvent, NewBlockHeaderEvent, NodeInfo,
  NumUnconfirmedTxsRequest, NumUnconfirmedTxsResponse, ProofOp,
  QueryProof, QueryTag, Request, Response, StatusRequest,
  StatusResponse, SubscriptionEventType, SyncInfo, TxData, TxEvent,
  TxParams, TxProof, TxRequest, TxResponse, TxSearchParams,
  TxSearchRequest, TxSearchResponse, TxSizeParams, Validator,
  ValidatorsParams, ValidatorsRequest, ValidatorsResponse, Version,
  Vote, VoteType which all came from tendermint34.

  If you need any of those you can import them from a version specific module,
  such as comet1.Version or

  import { comet1, comet38, tendermint37 } from "@​cosmjs/tendermint-rpc";
  
  function convertEvent(e: tendermint37.Event | comet38.Event | comet1.Event);

  in case you want to support multiple versions. (#​1866)

• @​cosmjs/crypto: Make
  Secp256k1.verifySignature/.createSignature/.makeKeypair synchronous and
  let them not return a Promise.

• @​cosmjs/cosmwasm-stargate: Rename package to @​cosmjs/cosmwasm. (#​1903)

• @​cosmjs/math: Decimal.fromAtomics now accepts atomics as string | bigint
  such that you can pass in BigInts directly. This is more performant than going
  through strings in cases where you have a BitInt already. Strings remain
  supported for convenient usage with coins.

• @​cosmjs/math: Decimal now supports negative values. (#​1930)

• @​cosmjs/proto-signing: Remove isTelescopeGeneratedType,
  isTsProtoGeneratedType and isPbjsGeneratedType because they are
  unreliable. E.g. the typeUrl in Telescope may or may not exist depending on
  the configuration. The newly added hasFromPartial/hasCreate allow you to
  check for TelescopeGeneratedType | TsProtoGeneratedType/PbjsGeneratedType
  such that you can create instanes through
  MyMessage.fromPartial()/MyMessage.create().

v0.37.1

Compare Source

v0.37.0

Compare Source

Added

• @​cosmjs/tendermint-rpc: Add dedicated Comet1Client for compatibility with
  CometBFT 1.x RPC. The module comet1 contains all CometBFT 1.x specific
  types. connectComet now uses this client automatically when connecting to a
  1.x RPC backend. Before CosmJS 0.37 the Comet38Client was used for both 0.38
  and 1.0 backends. However it turned out that there are breaking API changes
  between those versions. (#​1787)

Changed

• all: The package.jsons now all use the modern exports field instead of the
  classic main/types to define the entry points. This ensures only symbols
  from the top level module can be imported (like
  import { toBech32 } from "@​cosmjs/encoding"). Other import paths like
  import { toBech32 } from "@​cosmjs/encoding/src/bech32" are not allowed
  anymore. As all public interfaces used to be exported from the top level for a
  long time, this should not affect most users. However, if you accidentally
  imported a subpath before you will get an error now. This can typically be
  resolved like this:

  -import { toBech32 } from "@​cosmjs/encoding/src/bech32"
  +import { toBech32 } from "@​cosmjs/encoding"

  If you are using the TypeScript setting moduleResolution with value
  node10/node/classic in your project, this will lead to errors. Please
  consider upgrading to a supported value like node16 or nodenext.
  moduleResolution is implied by module if unset. See
  https://www.typescriptlang.org/tsconfig/#moduleResolution and
  https://www.typescriptlang.org/docs/handbook/modules/reference.html#the-moduleresolution-compiler-option.
  If this is not possible, please comment in
  #​1917.

  (#​1819)

• Replace bech32 implementation by @​scure/base. This changes a bunch of error
  messages but is otherwise not breaking user code. (#​1825)

• Replace bip39 implementation by @​scure/bip39. This changes a bunch of error
  messages but is otherwise not breaking user code. (#​1843)

• @​cosmjs/tendermint-rpc: connectComet now returns a Comet1Client when a
  CometBFT 1.x RPC is found. CometClient now includes Comet1Client.
  (#​1827)

• @​cosmjs/cosmwasm-stargate: use native compression APIs instead of pako for
  gzip. (#​1764)

Deprecated

• The use of encrypted wallet storage is deprecated. In particular this means:

  • Secp256k1HdWallet.serialize/.serializeWithEncryptionKey (since 0.36.0)
  • Secp256k1HdWallet.deserialize/.deserializeWithEncryptionKey (since
    0.36.0)
  • DirectSecp256k1HdWallet.serialize/.serializeWithEncryptionKey (since
    0.36.0)
  • DirectSecp256k1HdWallet.deserialize/.deserializeWithEncryptionKey (since
    0.36.0)
  • executeKdf from @​cosmjs/amino and @​cosmjs/proto-signing (since
    0.36.0/0.37.0)

  If you are using any of those methods, please comment at
  #​1796.

• @​cosmjs/tendermint-rpc: Deprecate the Tendermint/CometBFT 0.34 client
  (isTendermint34Client/Tendermint34Client as well as all related types).
  This will be removed in the next version of CosmJS:
  #​1866

v0.36.2

Compare Source

Fixed

• @​cosmjs/crypto: Set min version of @​noble/hashes to 1.8.0 to avoid errors like

  Cannot find module '@​noble/hashes/legacy' from
  '../../node_modules/@​cosmjs/crypto/build/ripemd.js'

  We use @noble/hashes/legacy for ripemd which is only available in ^1.8.0.

v0.36.1

Compare Source

Fixed

• @​cosmjs/crypto: Fix import path of @​noble/hashes to avoid bundling issue

  Error [ERR_PACKAGE_PATH_NOT_EXPORTED]: Package subpath './sha2.js' is not
  defined by "exports" in …

  In @​noble/hashes version >=1.0.0 <1.8.0 the import paths must not contain the
  .js suffix. This issue was introduced in CosmJS 0.35.0 but only affects users
  who have @​noble/hashes lower than 1.8.0 in their lockfile. (#​1817)

v0.36.0

Compare Source

Changed

• Migrate from libsodium to different implementation in order to reduce bundle
  size and improve compatibility.

  • ed25519 now uses @​noble/curves
  • xchacha20poly1305 now uses @​noble/ciphers
  • Argon2 now uses hash-wasm

  (#​1722)

Deprecated

• The use of encrypted wallet storage is deprecated. In particular this means:

  • Secp256k1HdWallet.serialize/.serializeWithEncryptionKey
  • Secp256k1HdWallet.deserialize/.deserializeWithEncryptionKey
  • DirectSecp256k1HdWallet.serialize/.serializeWithEncryptionKey
  • DirectSecp256k1HdWallet.deserialize/.deserializeWithEncryptionKey

  If you are using any of those methods, please comment at
  #​1796.

  A scream test was established which slows down the key derivation function a
  lot. This simulates the use of a pure-JS implementation of Argon2 which we
  will use on one of the next releases. If this causes problems for your app,
  switch back to ^0.35.0 and comment in the issue.

  (#​1797)

v0.35.2

Compare Source

Fixed

• @​cosmjs/crypto: Set min version of @​noble/hashes to 1.8.0 to avoid errors like

  Cannot find module '@​noble/hashes/legacy.js' from
  '../../node_modules/@​cosmjs/crypto/build/ripemd.js'

  We use @noble/hashes/legacy.js for ripemd which is only available in ^1.8.0.

v0.35.1

Compare Source

Deprecated

• The use of encrypted wallet storage is deprecated. In particular this means:

  • Secp256k1HdWallet.serialize/.serializeWithEncryptionKey
  • Secp256k1HdWallet.deserialize/.deserializeWithEncryptionKey
  • DirectSecp256k1HdWallet.serialize/.serializeWithEncryptionKey
  • DirectSecp256k1HdWallet.deserialize/.deserializeWithEncryptionKey
  • executeKdf from @​cosmjs/amino and @​cosmjs/proto-signing

  If you are using any of those methods, please comment at
  #​1796.

v0.35.0

Compare Source

Added

• @​cosmjs/tendermint-rpc: Add timeout option for HTTP requests in HttpClient
  and HttpBatchClient. (#​1660)

Changed

• all: Drop support for Node.js < 20.
• all: All JS output is now es2022.
• all: Upgrade cosmjs-types to ^0.10.1 (Cosmos SDK 0.50 series)
• @​cosmjs/cli: package got removed with no replacement
• @​cosmjs/tendermint-rpc: Make constructor functions
  Tendermint34Client.create, Tendermint37Client.create and
  Comet38Client.create non-async. (#​1597)
• @​cosmjs/tendermint-rpc, @​cosmjs/faucet-client: Remove cross-fetch polyfilling.
• @​cosmjs/tendermint-rpc: Avoid unnecessary status request when connecting a
  Comet38Client, Tendermint37Client or Tendermint34Client. (#​1772)
• @​cosmjs/tendermint-rpc: The fields in interface ConsensusParams are now
  optional as Tendermint RPC might omit them.
• @​cosmjs/stargate: Make constructor functions {Signing,}StargateClient.create
  and SigningStargateClient.createWithSigner non-async. (#​1597)
• @​cosmjs/cosmwasm: Make constructor functions {Signing,}CosmWasmClient.create
  and SigningCosmWasmClient.createWithSigner non-async. (#​1597)
• replace bn.js dependency with bigint (#​1720)
• @​cosmjs/stargate: the GasPrice constructor now enforces a non-empty denom.
  (#​1761)
• @​cosmjs/amino: parseCoins now supports denoms with colons, periods,
  underscores and dashes (#​1763)
• @​cosmjs/crypto: Remove obsolete pbkdf2 fallback on Node's implementation from
  import("crypto"). We can just use subtle crypto on all supported Node
  versions. (#​1753)

v0.34.1

Compare Source

Deprecated

• The use of encrypted wallet storage is deprecated. In particular this means:

  • Secp256k1HdWallet.serialize/.serializeWithEncryptionKey
  • Secp256k1HdWallet.deserialize/.deserializeWithEncryptionKey
  • DirectSecp256k1HdWallet.serialize/.serializeWithEncryptionKey
  • DirectSecp256k1HdWallet.deserialize/.deserializeWithEncryptionKey
  • executeKdf from @​cosmjs/amino and @​cosmjs/proto-signing

  If you are using any of those methods, please comment at
  #​1796.

v0.34.0

Compare Source

Fixed

• @​cosmjs/faucet: isValidAddress now accepts addresses up to 128 bytes (e.g.
  for Penumbra). (#​1674)
• @​cosmjs/tendermint-rpc: Fix decodeCommit to allow decoding height 0 commits
  with block hash set but empty signatures. (#​1590)

Added

• @​cosmjs/tendermint-rpc: Comet38Client is now used to connect to CometBFT
  0.38 and 1.x backends (#​1679)

Changed

• Replace axios with cross-fetch (#​1645)
• Fix block events in CometBFT 0.38 API (begin_block_events/end_block_events
  -> finalize_block_events) in RpcBlockResultsResponse and
  BlockResultsResponse (#​1612)
• @​cosmjs/crypto: Migrate from elliptic to noble-curves (#​1272).

v0.33.1

Compare Source

Fixed

• @​cosmjs/crypto: Bump elliptic version to ^6.6.1 due to
  GHSA-vjh7-7g9h-fjfh.

v0.33.0

Compare Source

Changed

• Upgrade to yarn 4 and drop Node.js 16 support (#​1552)
• @​cosmjs/stargate: Removed support for verified queries. This feature depends
  on a JavaScript implementation of ICS-23 but
  @​confio/ics23 is unmaintained
  without replacement.
• @​cosmjs/proto-signing: Upgrade protobufjs to 7.4.

---

Configuration

📅 Schedule: Branch creation - "before 5am on friday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}