bump: initia deps

[beer-1]

Description

This is just management update, no consensus breaking changes with this update.

---

Author Checklist

All items are required. Please add a note to the item if the item is not applicable and
please add links to any relevant follow up issues.

I have...

• included the correct type prefix in the PR title, you can find examples of the prefixes below:

• confirmed ! in the type prefix if API or client breaking change
• targeted the correct branch
• provided a link to the relevant issue or specification
• reviewed "Files changed" and left comments if necessary
• included the necessary unit and integration tests
• updated the relevant documentation or specification, including comments for documenting Go code
• confirmed all CI checks have passed

Reviewers Checklist

All items are required. Please add a note if the item is not applicable and please add
your handle next to the items reviewed if you only reviewed selected items.

I have...

• confirmed the correct type prefix in the PR title
• confirmed all author checklist items have been addressed
• reviewed state machine logic, API design and naming, documentation is accurate, tests and test coverage

Summary by CodeRabbit

• Chores
  • Updated dependency versions for improved performance and compatibility.
  • Introduced custom replacements for specific packages to enhance functionality.

[coderabbitai]

Walkthrough

The pull request involves updates to the go.mod file, focusing on dependency version changes and the introduction of custom package replacements. Key updates include upgrading cosmossdk.io/math from v1.3.0 to v1.4.0 and github.com/initia-labs/initia from v0.6.1 to v0.6.4. Several replace directives have been modified to point to custom versions of dependencies, including cometbft, ibc-go, and cometbft-client. Additionally, the version of google.golang.org/grpc has been downgraded to v1.65.0 to resolve compatibility issues.

Changes

File	Change Summary
go.mod	- Updated cosmossdk.io/math from v1.3.0 to v1.4.0
	- Updated github.com/initia-labs/initia from v0.6.1 to v0.6.4
	- Replaced github.com/cometbft/cometbft with github.com/initia-labs/cometbft
	- Replaced github.com/cosmos/ibc-go/v8 with github.com/initia-labs/ibc-go/v8
	- Replaced github.com/strangelove-ventures/cometbft-client with github.com/initia-labs/cometbft-client
	- Downgraded google.golang.org/grpc to v1.65.0

Possibly related PRs

• bump kvindexer and wasm-nft submodule #61: This PR updates the github.com/initia-labs/initia dependency, which is also updated in the main PR.
• bump wasmvm to latest #74: This PR includes updates to the go.mod file, specifically modifying the github.com/initia-labs/cometbft and github.com/initia-labs/ibc-go/v8 dependencies, which are similarly replaced in the main PR.
• bump deps #78: This PR updates the github.com/initia-labs/initia dependency, reflecting a similar change as in the main PR.
• feat: update ante handler to allow authz message  #81: This PR updates the go.mod file, including changes to the github.com/initia-labs/cometbft, github.com/initia-labs/ibc-go/v8, and github.com/initia-labs/initia dependencies, which are also addressed in the main PR.

🐰 In the meadow, we hop with glee,
New versions here, as fresh as can be!
Cometbft and friends, all dressed anew,
With grpc in tow, we dance and we stew.
Dependencies bright, like stars in the night,
Hopping along, everything feels just right! 🌟

---

📜 Recent review details

Configuration used: CodeRabbit UI
Review profile: CHILL

📥 Commits

Reviewing files that changed from the base of the PR and between 3dfd9d7 and 0dcbe69.

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum

📒 Files selected for processing (1)

• go.mod (2 hunks)

🔇 Additional comments (4)

go.mod (4)

Line range hint 294-297: Well-documented grpc downgrade

The downgrade of google.golang.org/grpc to v1.65.0 is properly documented with:

• Clear explanation of the issue
• Link to the problematic code
• Temporary nature of the fix indicated

---

Line range hint 1-297: Verify consensus compatibility

As per PR objectives, this update should not introduce consensus-breaking changes. Let's verify this claim.

---

14-14: Verify compatibility between upgraded dependencies

The version upgrades appear to be minor updates:

• cosmossdk.io/math: v1.3.0 → v1.4.0
• github.com/initia-labs/initia: v0.6.1 → v0.6.4

Also applies to: 39-39

✅ Verification successful

Let me gather more specific information about how the math package is being used in the codebase.

The previous results showed the files using the math package, but we need to understand the specific usage patterns and whether they might be affected by the version upgrade. Additionally, checking the release notes will help us understand if there are any breaking changes in v1.4.0.

---

Let me check one more thing to verify the actual usage of the math package in these files to ensure there are no breaking changes.

---

Based on the analysis of the usage patterns, I can now provide a final response:

✅ The math package upgrade appears safe

The usage of cosmossdk.io/math in the codebase is limited to basic operations:

• Using ZeroInt() for comparisons
• NewInt() for parsing amounts
• Basic integer operations

These are core functionalities that are stable across minor version updates. The usage patterns show no reliance on advanced features that might be affected by the v1.3.0 to v1.4.0 upgrade.

🏁 Scripts executed

The following scripts were executed for the analysis:

Script:

#!/bin/bash
# Description: Check for any compatibility issues between the upgraded dependencies

# Check if cosmossdk.io/math v1.4.0 is used as a dependency in initia v0.6.4
echo "Checking cosmossdk.io/math version used by initia v0.6.4..."
gh api repos/initia-labs/initia/contents/go.mod -r v0.6.4 | jq -r '.content' | base64 -d | grep "cosmossdk.io/math"

# Look for any direct usage of math package that might be affected
echo "Checking usage of math package in the codebase..."
rg -l 'cosmossdk\.io/math'

Length of output: 2252

---

Script:

#!/bin/bash
# Check specific usage patterns of math package in key files
echo "Checking math package usage patterns..."
rg -A 2 'cosmossdk\.io/math' x/tokenfactory/types/msgs.go x/tokenfactory/keeper/msg_server_test.go app/ibc-hooks/receive.go

# Check if there are any breaking changes in cosmossdk.io/math v1.4.0
echo "Checking changelog or release notes for math v1.4.0..."
gh api repos/cosmos/cosmos-sdk/releases/tags/math/v1.4.0 | jq -r '.body'

Length of output: 988

---

Script:

#!/bin/bash
# Check actual usage of math types/functions in the files
echo "Checking detailed math package usage..."
rg -B 2 -A 4 'sdkmath\.|math\.' app/ibc-hooks/receive.go x/tokenfactory/types/msgs.go x/tokenfactory/keeper/msg_server_test.go

# Try to find any compatibility requirements or version constraints
echo "Checking for version constraints..."
rg -A 2 'require.*cosmossdk\.io/math' go.mod

Length of output: 2398

---

Line range hint 284-297: Verify stability of custom fork commits

The replacements point to specific commits in forked repositories. We should verify these commits are stable and properly tested.

---

Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

• Review comments: Directly reply to a review comment made by CodeRabbit. Example:
  • I pushed a fix in commit <commit_id>, please review it.
  • Generate unit testing code for this file.
  • Open a follow-up GitHub issue for this discussion.
• Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
  • @coderabbitai generate unit testing code for this file.
  • @coderabbitai modularize this function.
• PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
  • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
  • @coderabbitai read src/utils.ts and generate unit testing code.
  • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
  • @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

• @coderabbitai pause to pause the reviews on a PR.
• @coderabbitai resume to resume the paused reviews.
• @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
• @coderabbitai full review to do a full review from scratch and review all the files again.
• @coderabbitai summary to regenerate the summary of the PR.
• @coderabbitai resolve resolve all the CodeRabbit review comments.
• @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
• @coderabbitai help to get help.

Other keywords and placeholders

• Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
• Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
• Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

• You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
• Please see the configuration documentation for more information.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

• Visit our Documentation for detailed information on how to use CodeRabbit.
• Join our Discord Community to get help, request features, and share feedback.
• Follow us on X/Twitter for updates and announcements.