Scrt 46

.github/CODEOWNERS

@@ -4,5 +4,4 @@
 # most precedence.
 
 # Primary repo maintainers
-*       @aaronc @alexanderbez
-
+*       @cosmos/sdk-core-dev

.github/ISSUE_TEMPLATE/module-readiness-checklist.md

@@ -10,13 +10,13 @@ This checklist is to be used for tracking the final internal audit of new Cosmos
 
 ### Release Candidate Checklist
 
-The following checklist should be gone through once the module has been fully implemented. This audit should be performed directly on `master`, or preferably on a `alpha` or `beta` release tag that includes the module.
+The following checklist should be gone through once the module has been fully implemented. This audit should be performed directly on `main`, or preferably on a `alpha` or `beta` release tag that includes the module.
 
 The module **should not** be included in any Release Candidate tag until it has passed this checklist.
 
 - [ ] API audit (at least 1 person) (@assignee)
   - [ ] Are Msg and Query methods and types well-named and organized?
-  - [ ] Is everything well documented (inline godoc as well as [`/spec/` folder](https://github.com/cosmos/cosmos-sdk/blob/master/docs/spec/SPEC-SPEC.md) in module directory)
+  - [ ] Is everything well documented (inline godoc as well as [`/spec/` folder](https://github.com/cosmos/cosmos-sdk/blob/main/docs/spec/SPEC-SPEC.md) in module directory)
 - [ ] State machine audit (at least 2 people) (@assignee1, @assignee2)
   - [ ] Read through MsgServer code and verify correctness upon visual inspection
   - [ ] Ensure all state machine code which could be confusing is properly commented

.github/PULL_REQUEST_TEMPLATE.md

@@ -23,10 +23,10 @@ I have...
 
 - [ ] included the correct [type prefix](https://github.com/commitizen/conventional-commit-types/blob/v3.0.0/index.json) in the PR title
 - [ ] added `!` to the type prefix if API or client breaking change
-- [ ] targeted the correct branch (see [PR Targeting](https://github.com/cosmos/cosmos-sdk/blob/master/CONTRIBUTING.md#pr-targeting))
+- [ ] targeted the correct branch (see [PR Targeting](https://github.com/cosmos/cosmos-sdk/blob/main/CONTRIBUTING.md#pr-targeting))
 - [ ] provided a link to the relevant issue or specification
-- [ ] followed the guidelines for [building modules](https://github.com/cosmos/cosmos-sdk/blob/master/docs/building-modules)
-- [ ] included the necessary unit and integration [tests](https://github.com/cosmos/cosmos-sdk/blob/master/CONTRIBUTING.md#testing)
+- [ ] followed the guidelines for [building modules](https://github.com/cosmos/cosmos-sdk/blob/main/docs/building-modules)
+- [ ] included the necessary unit and integration [tests](https://github.com/cosmos/cosmos-sdk/blob/main/CONTRIBUTING.md#testing)
 - [ ] added a changelog entry to `CHANGELOG.md`
 - [ ] included comments for [documenting Go code](https://blog.golang.org/godoc)
 - [ ] updated the relevant documentation or specification
@@ -47,4 +47,4 @@ I have...
 - [ ] reviewed API design and naming
 - [ ] reviewed documentation is accurate
 - [ ] reviewed tests and test coverage
-- [ ] manually tested (if applicable)
+- [ ] manually tested (if applicable)

.github/PULL_REQUEST_TEMPLATE/docs.md

@@ -15,9 +15,9 @@ please add links to any relevant follow up issues.*
 I have...
 
 - [ ] included the correct `docs:` prefix in the PR title
-- [ ] targeted the correct branch (see [PR Targeting](https://github.com/cosmos/cosmos-sdk/blob/master/CONTRIBUTING.md#pr-targeting))
+- [ ] targeted the correct branch (see [PR Targeting](https://github.com/cosmos/cosmos-sdk/blob/main/CONTRIBUTING.md#pr-targeting))
 - [ ] provided a link to the relevant issue or specification
-- [ ] followed the [documentation writing guidelines](https://github.com/cosmos/cosmos-sdk/blob/master/docs/DOC_WRITING_GUIDELINES.md)
+- [ ] followed the [documentation writing guidelines](https://github.com/cosmos/cosmos-sdk/blob/main/docs/DOC_WRITING_GUIDELINES.md)
 - [ ] reviewed "Files changed" and left comments if necessary
 - [ ] confirmed all CI checks have passed
 

.github/PULL_REQUEST_TEMPLATE/other.md

@@ -15,7 +15,7 @@ please add links to any relevant follow up issues.*
 I have...
 
 - [ ] included the correct [type prefix](https://github.com/commitizen/conventional-commit-types/blob/v3.0.0/index.json) in the PR title
-- [ ] targeted the correct branch (see [PR Targeting](https://github.com/cosmos/cosmos-sdk/blob/master/CONTRIBUTING.md#pr-targeting))
+- [ ] targeted the correct branch (see [PR Targeting](https://github.com/cosmos/cosmos-sdk/blob/main/CONTRIBUTING.md#pr-targeting))
 - [ ] provided a link to the relevant issue or specification
 - [ ] reviewed "Files changed" and left comments if necessary
 - [ ] confirmed all CI checks have passed
@@ -29,4 +29,4 @@ I have...
 
 - [ ] confirmed the correct [type prefix](https://github.com/commitizen/conventional-commit-types/blob/v3.0.0/index.json) in the PR title
 - [ ] confirmed all author checklist items have been addressed
-- [ ] confirmed that this PR does not change production code
+- [ ] confirmed that this PR does not change production code

.github/dependabot.yml

@@ -5,21 +5,58 @@ updates:
   schedule:
     interval: daily
   open-pull-requests-limit: 10
+- package-ecosystem: npm
+  directory: "/docs"
+  schedule:
+    interval: daily
+  open-pull-requests-limit: 10
+  reviewers:
+  - fadeev
 - package-ecosystem: gomod
   directory: "/"
   schedule:
     interval: daily
   open-pull-requests-limit: 10
-  reviewers:
-  - alexanderbez
-  - fedekunze
   labels:
-  - automerge
+  - "A:automerge"
   - dependencies
-- package-ecosystem: npm
-  directory: "/docs"
+- package-ecosystem: gomod
+  directory: "/db"
   schedule:
     interval: daily
   open-pull-requests-limit: 10
-  reviewers:
-  - fadeev
+  labels:
+  - "A:automerge"
+  - dependencies
+- package-ecosystem: gomod
+  directory: "/api"
+  schedule:
+    interval: daily
+  open-pull-requests-limit: 10
+  labels:
+  - "A:automerge"
+  - dependencies
+- package-ecosystem: gomod
+  directory: "/orm"
+  schedule:
+    interval: daily
+  open-pull-requests-limit: 10
+  labels:
+  - "A:automerge"
+  - dependencies
+- package-ecosystem: gomod
+  directory: "/container"
+  schedule:
+    interval: daily
+  open-pull-requests-limit: 10
+  labels:
+  - "A:automerge"
+  - dependencies
+- package-ecosystem: gomod
+  directory: "/cosmovisor"
+  schedule:
+    interval: daily
+  open-pull-requests-limit: 10
+  labels:
+  - "A:automerge"
+  - dependencies

.github/labeler.yml

@@ -18,8 +18,12 @@
   - x/genutil/**/*
 "C:x/gov":
   - x/gov/**/*
+"C:x/group":
+  - x/group/**/*
 "C:x/mint":
   - x/mint/**/*
+"C:x/nft":
+  - x/nft/**/*
 "C:x/params":
   - x/params/**/*
 "C:Simulations":
@@ -52,3 +56,10 @@
   - x/*/client/**/*
 "Type: ADR":
   - docs/architecture/**/*
+"C:container":
+  - container/**/*
+"C:Store":
+  - store/**/*
+  - db/**/*
+"C:orm":
+  - orm/**/*

.github/workflows/atlas.yml

@@ -3,7 +3,7 @@ name: Atlas
 on:
   push:
     branches:
-      - master
+      - main
     paths:
       - "x/**/atlas/*"
   pull_request:
@@ -14,8 +14,8 @@ jobs:
   auth:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: technote-space/get-diff-action@v4
+      - uses: actions/checkout@v3
+      - uses: technote-space/get-diff-action@v6.0.1
         id: git_diff
         with:
           PATTERNS: |
@@ -29,8 +29,8 @@ jobs:
   bank:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: technote-space/get-diff-action@v4
+      - uses: actions/checkout@v3
+      - uses: technote-space/get-diff-action@v6.0.1
         id: git_diff
         with:
           PATTERNS: |
@@ -44,8 +44,8 @@ jobs:
   evidence:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: technote-space/get-diff-action@v4
+      - uses: actions/checkout@v3
+      - uses: technote-space/get-diff-action@v6.0.1
         id: git_diff
         with:
           PATTERNS: |

.github/workflows/check-docs.yml

@@ -4,6 +4,8 @@ name: Check docs build
 on:
   pull_request:
     types: [ labeled ]
+    paths: 
+    - "docs/**"
 
 jobs:
   check-docs-build:
@@ -13,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout 🛎️
-        uses: actions/checkout@v2.3.1
+        uses: actions/checkout@v3
         with:
           persist-credentials: false
           fetch-depth: 0

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,57 @@
+name: "CodeQL"
+
+on:
+  pull_request:
+    paths:
+      - "**.go"
+  push:
+    branches:
+      - main
+      - release/**
+    paths:
+      - "**.go"
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+      - uses: actions/setup-go@v3
+        with:
+          go-version: 1.18
+      # Initializes the CodeQL tools for scanning.
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v2
+        with:
+          languages: "go"
+          queries: crypto-com/cosmos-sdk-codeql@main,security-and-quality
+          # If you wish to specify custom queries, you can do so here or in a config file.
+          # By default, queries listed here will override any specified in a config file.
+          # Prefix the list here with "+" to use these queries and those in the config file.
+          # queries: ./path/to/local/query, your-org/your-repo/queries@main
+
+      # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
+      # If this step fails, then you should remove it and run the build manually (see below)
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v2
+
+      # ℹ️ Command-line programs to run using the OS shell.
+      # 📚 https://git.io/JvXDl
+
+      # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
+      #    and modify them (or add more) to build your code if your project
+      #    uses a compiled language
+
+      #- run: |
+      #   make bootstrap
+      #   make release
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v2

.github/workflows/cosmovisor-release.yml

@@ -0,0 +1,35 @@
+name: Release Cosmovisor
+
+on:
+  push:
+    tags:
+      - "cosmovisor/v*.*.*"
+jobs:
+  goreleaser:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-go@v3
+        with:
+          go-version: 1.18
+      # get 'v*.*.*' part from 'cosmovisor/v*.*.*' and save to $GITHUB_ENV
+      - name: Set env
+        run: echo "RELEASE_VERSION=${GITHUB_REF#refs/*/cosmovisor/}" >> $GITHUB_ENV
+      # remove the possible pre-existing same tag for cosmos-sdk related tags instead of cosmovisor tags
+      # Because goreleaser enforces semantic versioning and will error on non compliant tags.(https://goreleaser.com/limitations/semver/)
+      - name: Tag without prefix locally to avoid error in goreleaser
+        run: |-
+          git tag -d ${{ env.RELEASE_VERSION }} || echo "No such a tag exists before"
+          git tag ${{ env.RELEASE_VERSION }} HEAD
+      - name: Run GoReleaser
+        uses: goreleaser/goreleaser-action@v3
+        with:
+          # stick to version v0.179.0(https://github.com/cosmos/cosmos-sdk/issues/11125)
+          version: v0.179.0
+          args: release --rm-dist --skip-validate
+          workdir: cosmovisor
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GORELEASER_CURRENT_TAG: cosmovisor/${{ env.RELEASE_VERSION }}

.github/workflows/dependencies-review.yml

@@ -0,0 +1,14 @@
+name: "Dependency Review"
+on: [pull_request]
+
+permissions:
+  contents: read
+
+jobs:
+  dependency-review:
+    runs-on: ubuntu-latest
+    steps:
+      - name: "Checkout Repository"
+        uses: actions/checkout@v3
+      - name: "Dependency Review"
+        uses: actions/dependency-review-action@v1

.github/workflows/deploy-docs.yml

@@ -0,0 +1,37 @@
+name: Deploy docs
+# This job builds and deploys documenation to github pages.
+# It runs on every push to main with a change in the docs folder.
+on:
+  push:
+    branches:
+      - main
+      - "release/**"
+    paths:
+      - "docs/**"
+      - "x/**/*.md"
+
+jobs:
+  build-and-deploy:
+    permissions:
+      contents: write # for JamesIves/github-pages-deploy-action to push changes in repo
+    runs-on: ubuntu-latest
+    container:
+      image: tendermintdev/docker-website-deployment
+    steps:
+      - name: Checkout 🛎️
+        uses: actions/checkout@v3
+        with:
+          persist-credentials: false
+          fetch-depth: 0
+
+      - name: Install and Build 🔧
+        run: |
+          apk add rsync
+          make build-docs LEDGER_ENABLED=false
+
+      - name: Deploy 🚀
+        uses: JamesIves/[email protected]
+        with:
+          branch: gh-pages
+          folder: ~/output
+          single-commit: true