feat: dorado upgrade (ECO-965)

.deepsource.toml

@@ -0,0 +1,20 @@
+version = 1
+
+test_patterns = [
+    "tests/**",
+    "**_test.go"
+]
+
+exclude_patterns = [
+    "third_party/proto/**",
+    "testutil/**",
+    "proto/cosmos/**",
+    "contrib/**"
+]
+
+[[analyzers]]
+name = "go"
+enabled = true
+
+  [analyzers.meta]
+  import_paths = ["github.com/cosmos/cosmos-sdk"]

.github/ISSUE_TEMPLATE/module-readiness-checklist.md

@@ -0,0 +1,40 @@
+---
+name: Module Readiness Checklist
+about: Pre-flight checklist that modules must pass in order to be included in a release of the Cosmos SDK
+labels: 'module-readiness-checklist'
+---
+
+## x/{MODULE_NAME} Module Readiness Checklist
+
+This checklist is to be used for tracking the final internal audit of new Cosmos SDK modules prior to inclusion in a published release.
+
+### Release Candidate Checklist
+
+The following checklist should be gone through once the module has been fully implemented. This audit should be performed directly on `master`, or preferably on a `alpha` or `beta` release tag that includes the module.
+
+The module **should not** be included in any Release Candidate tag until it has passed this checklist.
+
+- [ ] API audit (at least 1 person) (@assignee)
+  - [ ] Are Msg and Query methods and types well-named and organized?
+  - [ ] Is everything well documented (inline godoc as well as [`/spec/` folder](https://github.com/cosmos/cosmos-sdk/blob/master/docs/spec/SPEC-SPEC.md) in module directory)
+- [ ] State machine audit (at least 2 people) (@assignee1, @assignee2)
+  - [ ] Read through MsgServer code and verify correctness upon visual inspection
+  - [ ] Ensure all state machine code which could be confusing is properly commented
+  - [ ] Make sure state machine logic matches Msg method documentation
+  - [ ] Ensure that all state machine edge cases are covered with tests and that test coverage is sufficient (at least 90% coverage on module code)
+  - [ ] Assess potential threats for each method including spam attacks and ensure that threats have been addressed sufficiently. This should be done by writing up threat assessment for each method
+  - [ ] Assess potential risks of any new third party dependencies and decide whether a dependency audit is needed
+- [ ] Completeness audit, fully implemented with tests (at least 1 person) (@assignee)
+  - [ ] Genesis import and export of all state
+  - [ ] Query services
+  - [ ] CLI methods
+  - [ ] All necessary migration scripts are present (if this is an upgrade of existing module)
+
+### Published Release Checklist
+
+After the above checks have been audited and the module is included in a tagged Release Candidate, the following additional checklist should be undertaken for live testing, and potentially a 3rd party audit (if deemed necessary):
+
+- [ ] Testnet / devnet testing (2-3 people) (@assignee1, @assignee2, @assignee3)
+  - [ ] All Msg methods have been tested especially in light of any potential threats identified
+  - [ ] Genesis import and export has been tested
+- [ ] Nice to have (and needed in some cases if threats could be high): Official 3rd party audit

.github/labeler.yml

@@ -0,0 +1,54 @@
+"C:x/auth":
+  - x/auth/**/*
+"C:x/authz":
+  - x/authz/**/*
+"C:x/bank":
+  - x/bank/**/*
+"C:x/capability":
+  - x/capability/**/*
+"C:x/crisis":
+  - x/crisis/**/*
+"C:x/distribution":
+  - x/distribution/**/*
+"C:x/evidence":
+  - x/evidence/**/*
+"C:x/feegrant":
+  - x/feegrant/**/*
+"C:x/genutil":
+  - x/genutil/**/*
+"C:x/gov":
+  - x/gov/**/*
+"C:x/mint":
+  - x/mint/**/*
+"C:x/params":
+  - x/params/**/*
+"C:Simulations":
+  - x/simulation/**/*
+  - x/*/simulation/**/*
+"C:x/slashing":
+  - x/slashing/**/*
+"C:x/staking":
+  - x/staking/**/*
+"C:x/upgrade":
+  - x/upgrade/**/*
+"C:Cosmovisor":
+  - cosmovisor/**/*
+"C:Rosetta":
+  - contrib/rosetta/**/*
+"C:Keys":
+  - client/keys/**/*
+"Type: Build":
+  - Makefile
+  - Dockerfile
+  - docker-compose.yml
+  - scripts/*
+"Type: CI":
+  - .github/**/*.yml
+  - buf.yaml
+  - .mergify.yml
+  - .golangci.yml
+"C:CLI":
+  - client/**/*
+  - x/*/client/**/*
+"Type: ADR":
+  - docs/architecture/**/*

.github/workflows/atlas.yml

@@ -0,0 +1,58 @@
+name: Atlas
+# Atlas checks if a modules atlas manifest has been touched, if so it publishes the updated version
+on:
+  push:
+    branches:
+      - master
+    paths:
+      - "x/**/atlas/*"
+  pull_request:
+    paths:
+      - "x/**/atlas/*"
+
+jobs:
+  auth:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: technote-space/get-diff-action@v4
+        id: git_diff
+        with:
+          PATTERNS: |
+            x/auth/atlas/**
+      - uses: marbar3778/atlas_action@main
+        with:
+          token: ${{ secrets.ATLAS_TOKEN }}
+          path: ./x/auth/atlas/atlas.toml
+          dry-run: ${{ github.event_name != 'pull_request' }}
+        if: env.GIT_DIFF
+  bank:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: technote-space/get-diff-action@v4
+        id: git_diff
+        with:
+          PATTERNS: |
+            x/bank/atlas/**
+      - uses: marbar3778/atlas_action@main
+        with:
+          token: ${{ secrets.ATLAS_TOKEN }}
+          path: ./x/bank/atlas/atlas.toml
+          dry-run: ${{ github.event_name != 'pull_request' }}
+        if: env.GIT_DIFF
+  evidence:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: technote-space/get-diff-action@v4
+        id: git_diff
+        with:
+          PATTERNS: |
+            x/evidence/atlas/**
+      - uses: marbar3778/atlas_action@main
+        with:
+          token: ${{ secrets.ATLAS_TOKEN }}
+          path: ./x/evidence/atlas/manifest.toml
+          dry-run: ${{ github.event_name != 'pull_request' }}
+        if: env.GIT_DIFF

.github/workflows/check-docs.yml

@@ -0,0 +1,25 @@
+name: Check docs build
+# This workflow runs when a PR is labeled with `docs`
+# This will check if the docs build successfully by running `npm run build`
+on:
+  pull_request:
+    types: [ labeled ]
+
+jobs:
+  check-docs-build:
+    if: ${{ github.event.label.name == 'docs' }}
+
+    name: Check docs build
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout 🛎️
+        uses: actions/[email protected]
+        with:
+          persist-credentials: false
+          fetch-depth: 0
+
+      - name: Install dependencies and build docs 🧱
+        run: |
+          cd docs
+          npm install
+          npm run build

.github/workflows/janitor.yml

@@ -0,0 +1,16 @@
+name: Janitor
+# Janitor cleans up previous runs of various workflows
+# Cancels Sims and Tests
+on:
+  pull_request:
+
+jobs:
+  cancel:
+    name: "Cancel Previous Runs"
+    runs-on: ubuntu-latest
+    timeout-minutes: 3
+    steps:
+      - uses: styfle/[email protected]
+        with:
+          workflow_id: 872925,1013614,1134055
+          access_token: ${{ github.token }}

.github/workflows/labeler.yml

@@ -0,0 +1,11 @@
+name: "Pull Request Labeler"
+on:
+  - pull_request_target
+
+jobs:
+  labeler:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/labeler@main
+        with:
+          repo-token: "${{ secrets.GITHUB_TOKEN }}"

.github/workflows/lint-pr.yml

@@ -0,0 +1,16 @@
+name: "Lint PR"
+
+on:
+  pull_request_target:
+    types:
+      - opened
+      - edited
+      - synchronize
+
+jobs:
+  main:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: amannn/[email protected]
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/lint.yml

@@ -11,19 +11,17 @@ jobs:
   golangci:
     name: golangci-lint
     runs-on: ubuntu-latest
-    timeout-minutes: 6
     steps:
-      - uses: actions/checkout@v2
-      - uses: technote-space/get-diff-action@v4
+      - uses: actions/[email protected]
+        with:
+          go-version: 1.16
+      - uses: technote-space/get-diff-action@v5
+        id: git_diff
         with:
           PATTERNS: |
             **/**.go
             go.mod
             go.sum
-      - uses: golangci/golangci-lint-action@master
-        with:
-          # Required: the version of golangci-lint is required and must be specified without patch version: we always use the latest patch version.
-          version: v1.39
-          args: --timeout 10m
-          github-token: ${{ secrets.github_token }}
+      - name: run go linters
+        run: make lint-go
         if: env.GIT_DIFF

.github/workflows/proto.yml

@@ -3,20 +3,17 @@ name: Protobuf
 # This workflow is only run when a .proto file has been changed
 on:
   pull_request:
-    paths:
-      - "**.proto"
+
 jobs:
   lint:
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
       - uses: actions/checkout@master
+      - uses: technote-space/get-diff-action@v4
+        with:
+          PATTERNS: |
+            **/**.proto
       - name: lint
         run: make proto-lint
-  # disabled until stargate land on master
-  # breakage:
-  #   runs-on: ubuntu-latest
-  #   steps:
-  #     - uses: actions/checkout@master
-  #     - name: check-breakage
-  #       run: make proto-check-breaking
+        if: env.GIT_DIFF

.github/workflows/release-sims.yml

@@ -7,14 +7,6 @@ on:
       - "rc**"
 
 jobs:
-  cleanup-runs:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: rokroskar/workflow-run-cleanup-action@master
-        env:
-          GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
-    if: "!startsWith(github.ref, 'refs/tags/') && github.ref != 'refs/heads/master'"
-
   build:
     runs-on: ubuntu-latest
     if: "!contains(github.event.head_commit.message, 'skip-sims')"
@@ -30,7 +22,7 @@ jobs:
       - name: install runsim
         run: |
           export GO111MODULE="on" && go get github.com/cosmos/tools/cmd/[email protected]
-      - uses: actions/[email protected].3
+      - uses: actions/[email protected].6
         with:
           path: ~/go/bin
           key: ${{ runner.os }}-go-runsim-binary
@@ -40,7 +32,7 @@ jobs:
     needs: [build, install-runsim]
     steps:
       - uses: actions/checkout@v2
-      - uses: actions/[email protected].3
+      - uses: actions/[email protected].6
         with:
           path: ~/go/bin
           key: ${{ runner.os }}-go-runsim-binary