Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Oct 13, 2025

Bumps github.com/cosmos/ibc-go/v10 from 10.1.1 to 10.4.0.

Release notes

Sourced from github.com/cosmos/ibc-go/v10's releases.

v10.4.0

ibc-go v10.4.0 Release Notes

Notable changes introduced in ibc-go v10.4.0 are highlighted below. View the full changelog for more details.

Add support for non-bech32 addresses in transfer with custom address codec

This release backports a non-API-breaking version of address codec support in transfer.

The primary purpose of this feature is to enable receiving IBC transfer to EVM-style addresses (e.g. 0x....). By setting a custom address codec with the transfer keeper's new SetAddressCodec(addressCodec address.Codec), you can create a codec that supports both bech32 and EVM-style addresses.

Migration Guide

This version does not contain any breaking changes to any API, but it is state-breaking and can be migrated to with a coordinated chain upgrade. If you are upgrading from v8 or earlier, see the migration documentation below.

Migration documentation is found here.

v10.3.0 rc.0

No release notes provided.

v10.3.0

ibc-go v10.3.0 Release Notes

Notable changes introduced in ibc-go v10.3.0 are highlighted below, view the full changelog for more details.

Prefix-based routing in the IBC v2 router

This release adds the capability for the IBC v2 router to associate port ID prefixes with modules, not only exact port IDs like it was in the case in previous versions.

Parse IBC v2 packet from ABCI events in tests

Parsing IBC packets from ABCI events in tests has been a much-used feature of the ibc-go testing library, and in this release we're adding support for parsing IBC v2 packets as well from the ABCI events in unit and e2e tests.

⚠️ Note: the previous function names for parsing packets from ABCI events have been deprecated and will be removed in a future major release of ibc-go.

Migration Guide

This version does not contain any breaking changes to any API, but it is state breaking, and can be migrated to with a coordinated chain upgrade. If you are upgrading from v8 or earlier, see the migration documentation below.

Migration documentation is found here.

v10.2.0

ibc-go v10.2.0 Release Notes

Notable changes introduced in ibc-go v10.2.0 are highlighted below, view the full changelog for more details.

Cosmos SDK v0.53.0

This release features an upgrade of the Cosmos SDK to the latest version: v0.53.0. To see more details on the v0.53.0 release, view the Cosmos SDK v0.53.0 Release Notes

... (truncated)

Changelog

Sourced from github.com/cosmos/ibc-go/v10's changelog.

v10.4.0 - 2025-10-10

Improvements

  • #8615 Support custom address codecs in transfer.

v10.3.0 - 2025-06-06

Features

Dependencies

  • #8369 Bump github.com/CosmWasm/wasmvm to 2.2.4
  • #8369 Bump github.com/ethereum/go-ethereum to 1.15.11

API Breaking

State Machine Breaking

Improvements

  • (core/api) #8303 Prefix-based routing in IBCv2 Router
  • (apps/callbacks) #8353 Add field in callbacks data for custom calldata

Bug Fixes

Testing API

  • #8371 e2e: Create only necessary number of chains for e2e suite.
  • #8375 feat: parse IBC v2 packets from ABCI events

v10.2.0 - 2025-04-30

Features

  • (light-clients/07-tendermint) #8185 Allow scaling of trusting period for client upgrades

Dependencies

  • #8254 Bump github.com/cosmos/cosmos-sdk to 0.53.0
  • #8326 Bump cosmossdk.io/x/upgrade to 0.2.0
  • #8326 Bump cosmossdk.io/api to 0.9.2
  • #8293 Bump cosmossdk.io/math to 1.5.3
  • #8254 Bump cosmossdk.io/core to 0.11.3
  • #8254 Bump cosmossdk.io/store to 1.1.2
  • #8254 Bump cosmossdk.io/x/tx to 0.14.0
  • #8253 Bump cosmossdk.io/errors to 1.0.2
  • #8253 Bump cosmossdk.io/log to 1.5.1
  • #8253 Bump github.com/cometbft/cometbft to 0.38.17
  • #8264 Bump github.com/prysmaticlabs/prysm to v5.3.0

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 13, 2025
@dependabot dependabot bot requested a review from a team as a code owner October 13, 2025 10:44
@dependabot dependabot bot requested review from JayT106 and XinyuCRO and removed request for a team October 13, 2025 10:44
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 13, 2025
@socket-security
Copy link

socket-security bot commented Oct 13, 2025

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedgolang/​github.com/​spf13/​cobra@​v1.9.1 ⏵ v1.10.195 +1100100100100
Updatedgolang/​github.com/​cosmos/​ibc-go/​v10@​v10.1.1 ⏵ v10.4.096 +1100100100100
Updatedgolang/​cosmossdk.io/​collections@​v1.2.0 ⏵ v1.2.1100 +1100100100100

View full report

@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/cosmos/ibc-go/v10-10.4.0 branch from eea0178 to ae4ced9 Compare October 24, 2025 04:11
@github-actions
Copy link

✅ Updated gomod2nix.toml automatically via nix develop -c gomod2nix

Bumps [github.com/cosmos/ibc-go/v10](https://github.com/cosmos/ibc-go) from 10.1.1 to 10.4.0.
- [Release notes](https://github.com/cosmos/ibc-go/releases)
- [Changelog](https://github.com/cosmos/ibc-go/blob/main/CHANGELOG.md)
- [Commits](cosmos/ibc-go@v10.1.1...v10.4.0)

---
updated-dependencies:
- dependency-name: github.com/cosmos/ibc-go/v10
  dependency-version: 10.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/cosmos/ibc-go/v10-10.4.0 branch from e6bfa72 to 55c18b4 Compare October 29, 2025 04:58
@github-actions
Copy link

✅ Updated gomod2nix.toml automatically via nix develop -c gomod2nix

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant