FirmaChain v0.5.1-patch2 for colosseum mainnet (Official Release)

[haryunio]

Pull Request for Firmachain v0.5.1-patch2 Release

Updates

Chain Binary

• Upgrade: v0.5.1-patch → v0.5.1-patch2
• Since this patch is a non-breaking, non-governance upgrade, the chain version stays at v0.5.1

Patches

CometBFT Security Fix

• Issue: A security vulnerability was identified in CometBFT, a core module of Cosmos.
• Solution: Applied the upstream fix in v0.5.1-patch2 to mitigate the vulnerability.
• CometBFT (Consensus) : v0.38.18 -> v0.38.21

Requirements

• Go: v1.21 (same as v0.5.1)

Tests

• Local: Unit Tests, CLI Commands
• Devnet: Unit Tests, CLI Commands, E2E Tests
• Testnet (Imperium-4): Unit Tests, CLI Commands, E2E Tests, Smart Contract Transactions (state-sync validation)

Detailed Description

This patch addresses a security vulnerability in CometBFT, a core module of Cosmos.

Key improvements:

• Mitigates the CometBFT security issue in the Firmachain binary.
• Improves node safety without changing consensus or governance.

Who Should Upgrade

• Required:

  • All node operators and validators (patch highly recommended)

• Recommended:

  • All validators and full nodes (upgrading improves overall safety)