This release contains important security fixes. We recommend all chains upgrade to this patch release as soon as possible using a coordinated upgrade

This release is state breaking

What's Changed

• chore: delete auto release github actions (backport #26303) by @mergify[bot] in https://github.com/cosmos/cosmos-sdk/pull/26308
• build(deps): Bump github.com/cometbft/cometbft from 0.38.21 to 0.38.22 by @dependabot[bot] in https://github.com/cosmos/cosmos-sdk/pull/26292
• fix(distribution): add strict + fallback behavior when withdrawing delegator rewards (backport #26406) by @mergify[bot] in https://github.com/cosmos/cosmos-sdk/pull/26410
• fix(store/cachemulti): isolate traceContext map across branched stores by @ozpool in https://github.com/cosmos/cosmos-sdk/pull/26427
• build(deps): Bump github.com/cometbft/cometbft from 0.38.22 to 0.38.23 by @dependabot[bot] in https://github.com/cosmos/cosmos-sdk/pull/26405
• fix: update simapp, tests, systemtests go.mod to cometbft v0.38.23 by @aljo242 in https://github.com/cosmos/cosmos-sdk/pull/26499
• ci: add setup-go to test-system and test-system-legacy jobs by @aljo242 in https://github.com/cosmos/cosmos-sdk/pull/26498
• fix(x/staking): handle redelegation when unbonded source is removed (backport #26408) by @mergify[bot] in https://github.com/cosmos/cosmos-sdk/pull/26417
• chore(x/auth): human-readable error (backport #26567) by @mergify[bot] in https://github.com/cosmos/cosmos-sdk/pull/26578
• fix(x/auth/tx): avoid nil pointer panic in GetSigningTxData (backport #26527) by @mergify[bot] in https://github.com/cosmos/cosmos-sdk/pull/26661
• fix: bound multisig signature and pubkey indexing by slice lengths (backport #26515) by @mergify[bot] in https://github.com/cosmos/cosmos-sdk/pull/26651
• fix(x/distribution): return errors for missing historical rewards internally (backport #26518) by @mergify[bot] in https://github.com/cosmos/cosmos-sdk/pull/26655
• fix(x/auth/tx): avoid nil pointer panic in GetSigningTxData for multisig ModeInfo with a nil Multi or nil Bitarray (backport #26571) by @mergify[bot] in https://github.com/cosmos/cosmos-sdk/pull/26664
• fix: reject tx with mismatched signer info and signature counts (backport #26517) by @mergify[bot] in https://github.com/cosmos/cosmos-sdk/pull/26653
• fix(x/auth/ante): reject tx with extra SignerInfos in SetPubKeyDecorator (backport #26573) by @mergify[bot] in https://github.com/cosmos/cosmos-sdk/pull/26663
• fix: bound compact bit array index by elems length (backport #26509) by @mergify[bot] in https://github.com/cosmos/cosmos-sdk/pull/26662
• fix(crypto): validate secp256k1 pubkey SEC1 tag byte (backport #26529) by @mergify[bot] in https://github.com/cosmos/cosmos-sdk/pull/26665
• chore: sdk@v0.53.8 changelog by @swift1337 in https://github.com/cosmos/cosmos-sdk/pull/26674

Full Changelog: https://github.com/cosmos/cosmos-sdk/compare/v0.53.7...v0.53.8