Summary

Block-SDK v2.0.0 is our first release officially supporting Cosmos SDK v0.50.x. This release also contains code and features that were reviewed as part of the Ottersec Audit conducted on Sept 9th, as well as specific remediations of findings in the audit report.

Specifically:

• OS-SBLK-ADV-00: Remediated in b9d67617762c5159a531309f4b6ee7bdd548cfe3 (#126)
• OS-SBLK-ADV-01: Remediated in d495b389542fe78b5f3c95a8e40dca4e677734f7 (#134)
• OS-SBLK-ADV-02: Remediated in 339b92732377cbc77852d7b6eeba1077b1af3ea8 (#156)
• OS-SBLK-ADV-03: Remediated in 3374203c3901e26253f7f4fa8ec3f92098042f34 (#135)

What's Changed

• feat(Block SDK): We live by @davidterpay in https://github.com/skip-mev/block-sdk/pull/1
• chore(SDK): Deprecating notions of POB by @davidterpay in https://github.com/skip-mev/block-sdk/pull/2
• chore(CI): Setting up basics for CI on the SDK by @davidterpay in https://github.com/skip-mev/block-sdk/pull/5
• chore(SDK): Moving ValidateBasic to be called after init by @davidterpay in https://github.com/skip-mev/block-sdk/pull/6
• chore(mempool): Logging for mempool distribution (backport #9) by @mergify in https://github.com/skip-mev/block-sdk/pull/11
• chore(logging): Better logs (backport #12) by @mergify in https://github.com/skip-mev/block-sdk/pull/14
• chore(readme): Removing broken tags (backport #16) by @mergify in https://github.com/skip-mev/block-sdk/pull/18
• chore(FS): Moving Types to Base Subdirectory (backport #19) by @mergify in https://github.com/skip-mev/block-sdk/pull/21
• feat(img): New Logo (backport #22) by @mergify in https://github.com/skip-mev/block-sdk/pull/24
• feat(logo): Formatting fix (backport #25) by @mergify in https://github.com/skip-mev/block-sdk/pull/27
• chore(docs): Release V2 doc update by @davidterpay in https://github.com/skip-mev/block-sdk/pull/29
• docs: update minor typo (backport #32) by @mergify in https://github.com/skip-mev/block-sdk/pull/34
• chore: tools (backport #35) by @mergify in https://github.com/skip-mev/block-sdk/pull/37
• chore: format (backport #38) by @mergify in https://github.com/skip-mev/block-sdk/pull/40
• chore(deps): bump actions/checkout from 3 to 4 (backport #41) by @mergify in https://github.com/skip-mev/block-sdk/pull/48
• chore(dependabot): Adding dep to release branches (backport #67) by @mergify in https://github.com/skip-mev/block-sdk/pull/82
• chore(deps): bump cosmossdk.io/store from 1.0.0-alpha.1 to 1.0.0-rc.0 by @dependabot in https://github.com/skip-mev/block-sdk/pull/80
• chore(deps): bump google.golang.org/grpc from 1.57.0 to 1.58.0 by @dependabot in https://github.com/skip-mev/block-sdk/pull/77
• chore(deps): bump golang.org/x/tools from 0.12.0 to 0.13.0 by @dependabot in https://github.com/skip-mev/block-sdk/pull/74
• chore(deps): bump cosmossdk.io/log from 1.2.0 to 1.2.1 by @dependabot in https://github.com/skip-mev/block-sdk/pull/72
• chore(deps): bump github.com/cosmos/cosmos-sdk from 0.50.0-beta.0 to 0.50.0-rc.0 by @dependabot in https://github.com/skip-mev/block-sdk/pull/70
• chore(deps): bump github.com/cometbft/cometbft from 0.38.0-rc3 to 0.38.0 by @dependabot in https://github.com/skip-mev/block-sdk/pull/94
• feat(docs): rename x/builder -> x/auction (backport #55) by @mergify in https://github.com/skip-mev/block-sdk/pull/89
• chore(deps): bump cosmossdk.io/x/tx from 0.9.1 to 0.10.0 by @dependabot in https://github.com/skip-mev/block-sdk/pull/97
• chore(deps): bump cosmossdk.io/api from 0.7.0 to 0.7.1 by @dependabot in https://github.com/skip-mev/block-sdk/pull/102
• chore(deps): bump google.golang.org/grpc from 1.58.0 to 1.58.1 by @dependabot in https://github.com/skip-mev/block-sdk/pull/101
• feat(e2e): add integration tests (backport #100) by @mergify in https://github.com/skip-mev/block-sdk/pull/110
• chore(lint): Ignore out of bounds error by @davidterpay in https://github.com/skip-mev/block-sdk/pull/112
• chore(deps): bump google.golang.org/grpc from 1.58.1 to 1.58.2 by @dependabot in https://github.com/skip-mev/block-sdk/pull/120
• feat(adapters): Add SignerExtractionAdapter [ENG-1916] (backport #114) by @mergify in https://github.com/skip-mev/block-sdk/pull/130
• feat(ABCI): New Proposal Struct with Associated Metadata (backport #126) by @mergify in https://github.com/skip-mev/block-sdk/pull/133
• feat(MEV): Updating MEV Lane with Testing + Cleaner Implementation (backport #134) by @mergify in https://github.com/skip-mev/block-sdk/pull/139
• chore(auction): Moving bid extraction to from msg handler to ante handler (backport #135) by @mergify in https://github.com/skip-mev/block-sdk/pull/141
• chore(docs): Updating Build-Your-Own Lane docs (backport #136) by @mergify in https://github.com/skip-mev/block-sdk/pull/143
• chore(verifytx): Updating VerifyTx to Cache between Transactions (backport #137) by @mergify in https://github.com/skip-mev/block-sdk/pull/145
• chore(deps): bump golang.org/x/tools from 0.13.0 to 0.14.0 by @dependabot in https://github.com/skip-mev/block-sdk/pull/147
• chore(deps): bump github.com/spf13/viper from 1.16.0 to 1.17.0 by @dependabot in https://github.com/skip-mev/block-sdk/pull/150
• chore(deps): bump google.golang.org/grpc from 1.58.2 to 1.58.3 by @dependabot in https://github.com/skip-mev/block-sdk/pull/152
• fix(auction): Adding extra check on bundler timeouts (backport #156) by @mergify in https://github.com/skip-mev/block-sdk/pull/158
• fix(compare): Adding Sequence Number check on Compare Priority (backport #159) by @mergify in https://github.com/skip-mev/block-sdk/pull/166
• chore(deps): bump google.golang.org/grpc from 1.58.3 to 1.59.0 by @dependabot in https://github.com/skip-mev/block-sdk/pull/167
• chore(deps): bump cosmossdk.io/x/tx from 0.10.0 to 0.11.0 by @dependabot in https://github.com/skip-mev/block-sdk/pull/163
• chore(deps): bump cosmossdk.io/store from 1.0.0-rc.0 to 1.0.0 by @dependabot in https://github.com/skip-mev/block-sdk/pull/180
• chore: update all deps (backport #184) by @mergify in https://github.com/skip-mev/block-sdk/pull/186
• chore(deps): bump cosmossdk.io/x/tx from 0.11.0 to 0.12.0 by @dependabot in https://github.com/skip-mev/block-sdk/pull/189
• chore: module assertions for x/auction (backport #191) by @mergify in https://github.com/skip-mev/block-sdk/pull/197
• chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 by @dependabot in https://github.com/skip-mev/block-sdk/pull/213
• chore(deps): bump github.com/gorilla/mux from 1.8.0 to 1.8.1 by @dependabot in https://github.com/skip-mev/block-sdk/pull/212
• chore(deps): bump golang.org/x/tools from 0.14.0 to 0.15.0 (backport #207) by @mergify in https://github.com/skip-mev/block-sdk/pull/217
• chore(deps): bump cosmossdk.io/tools/confix from 0.0.0-20230724130706-5442197d6bcd to 0.1.0 (backport #208) by @mergify in https://github.com/skip-mev/block-sdk/pull/216
• chore(deps): bump cosmossdk.io/x/circuit from 0.0.0-20230724130706-5442197d6bcd to 0.1.0 by @dependabot in https://github.com/skip-mev/block-sdk/pull/214
• chore: Add Ottersec Audit to Repo (backport #220) by @mergify in https://github.com/skip-mev/block-sdk/pull/222
• chore: update README for audit (backport #223) by @mergify in https://github.com/skip-mev/block-sdk/pull/225
• chore(deps): bump github.com/cometbft/cometbft from 0.38.0 to 0.38.1 (backport #230) by @mergify in https://github.com/skip-mev/block-sdk/pull/232
• chore(deps): bump cosmossdk.io/x/upgrade from 0.0.0-20230724130706-5442197d6bcd to 0.1.0 (backport #231) by @mergify in https://github.com/skip-mev/block-sdk/pull/234

Full Changelog: https://github.com/skip-mev/block-sdk/commits/v2.0.0