build(deps): bump github.com/cometbft/cometbft from 0.37.2 to 0.38.2

[dependabot]

Bumps github.com/cometbft/cometbft from 0.37.2 to 0.38.2.

Release notes

Sourced from github.com/cometbft/cometbft's releases.

v0.38.2

See the CHANGELOG for this release.

v0.38.1

See the CHANGELOG for this release.

v0.38.0

See the CHANGELOG for this release.

v0.38.0-rc3

See the CHANGELOG for changes available in this pre-release, but not yet officially released.

v0.38.0-rc2

See the CHANGELOG for changes available in this pre-release, but not yet officially released.

v0.38.0-rc1

See the CHANGELOG for changes available in this pre-release, but not yet officially released.

v0.38.0-alpha.2

See the CHANGELOG for changes available in this pre-release, but not yet officially released.

v0.38.0-alpha.1

See the CHANGELOG for changes available in this pre-release, but not yet officially released.

v0.37.4

See the CHANGELOG for this release.

v0.37.3

See the CHANGELOG for this release.

Changelog

Sourced from github.com/cometbft/cometbft's changelog.

v0.38.2

November 27, 2023

This release provides the nop mempool for applications that want to build their own mempool. Using this mempool effectively disables all mempool functionality in CometBFT, including transaction dissemination and the broadcast_tx_* endpoints.

Also fixes a small bug in the mempool for an experimental feature.

BUG FIXES

• [mempool] Avoid infinite wait in transaction sending routine when using experimental parameters to limiting transaction gossiping to peers (#1654)

FEATURES

• [mempool] Add nop mempool (#1643)

  If you want to use it, change mempool's type to nop:

  [mempool]
  The type of mempool for this node to use.
  
  Possible types:
  - "flood" : concurrent linked list mempool with flooding gossip protocol
  (default)
  - "nop"   : nop-mempool (short for no operation; the ABCI app is responsible
  for storing, disseminating and proposing txs). "create_empty_blocks=false"
  is not supported.
  type = "nop"

v0.38.1

November 17, 2023

This release contains, among other things, an opt-in, experimental feature to help reduce the bandwidth consumption associated with the mempool's transaction gossip.

BUG FIXES

• [state/indexer] Respect both height params while querying for events (#1529)

FEATURES

... (truncated)

Commits

• 2aacfbe Release v0.38.2 (#1700)
• 3a73c3f Do not block indefinitely on the semaphore (backport #1654) (#1688)
• 5490f51 docs: various small improvements (part 2) (backport #1683) (#1685)
• 9431a4a mempool: add nop mempool (backport #1643) (#1680)
• a4194e2 test: respect P2PConfig fuzzing configuration in MultiplexTransport (#1414) (...
• 52547bd build(deps): Bump bufbuild/buf-setup-action from 1.28.0 to 1.28.1 (#1661)
• 9d844cd build(deps): Bump docker/build-push-action from 5.0.0 to 5.1.0 (#1660)
• 0d5afde proto: Update README (#1648) (#1651)
• 1ebfc97 proto: Prepare for publishing v0.38.x protos to Buf registry (#1647)
• 9e1f2f0 Release v0.38.1 (#1639)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[p-offtermatt]

Should we tell it to ignore this dependency? I think we will never update cometbft via dependabot, unless maybe we would for minor versions?

[MSalopek]

Should we tell it to ignore this dependency? I think we will never update cometbft via dependabot, unless maybe we would for minor versions?

Don't think dependabot is configurable that way. It also spams us with docs dep updates that we cannot use etc.

[mpoke]

Closing as comet updated are handle manually

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

[p-offtermatt]

Yes it's possible to make dependabot not notify about cometbft again, I think it should be
@dependabot ignore this dependency

[dependabot]

OK, I won't notify you about github.com/cometbft/cometbft again, unless you re-open this PR.