Bump github.com/cosmos/cosmos-sdk from 0.53.6 to 0.54.2

[dependabot]

Bumps github.com/cosmos/cosmos-sdk from 0.53.6 to 0.54.2.

Release notes

Sourced from github.com/cosmos/cosmos-sdk's releases.

v0.54.2

Cosmos SDK v0.54.2 Release Notes

🚀 Highlights

Announcing Cosmos SDK v0.54

We are pleased to announce the release of Cosmos SDK v0.54! Cosmos SDK v0.54 is part of the 2026.1 release family. This release introduces order of magnitude improvements to network stability and throughput.

See the full v0.54 release notes for more details on what's included in this release.

Upgrading to this verison of the Cosmos SDK from any v0.50.x release will require a coordinated chain upgrade.

For more information on upgrading, please see our upgrade guide.

📝 Changelog

Check out the changelog for an exhaustive list of changes or compare changes from the last release.

v0.53.7

Cosmos SDK v0.53.7 Release Notes

🚀 Highlights

This patch release includes minor functionality additions.

📝 Changelog

Check out the changelog for an exhaustive list of changes or compare changes from the last release.

Changelog

Sourced from github.com/cosmos/cosmos-sdk's changelog.

v0.54.2 - 2026-04-15

This patch release contains only minor dependency bumps.

v0.54.1 - 2026-04-14

Improvements

• (x/auth) #26297 Cap pagination limit at number of txs within block during GetBlockWithTxs instead of 100.

v0.54.0 - 2026-04-10

Breaking Changes

• (x/consensus) #25607 Add AuthorityParams to consensus params. When set, the consensus params authority takes precedence over per-keeper authority for all module parameter updates. Keeper constructor signatures are unchanged.
• (x/staking) #25724 Validate BondDenom in MsgUpdateParams to prevent setting non-existent or zero-supply denoms.
• #25778 Update log to log v2.
• #25090 Moved deprecated modules to ./contrib. These modules are still available but will no longer be actively maintained or supported in the Cosmos SDK Bug Bounty program.
  • x/group
  • x/nft
  • x/circuit
  • x/crisis
• (crypto) #24414 Remove sr25519 support, since it was removed in CometBFT v1.x (see: CometBFT #3646).
• (x/mint) #25599 Add max supply param.
• (x/gov) #25615 Decouple x/gov from x/staking by making CalculateVoteResultsAndVotingPowerFn a required parameter to keeper.NewKeeper instead of StakingKeeper. BondedTokens has been renamed to ValidatorPower and TotalBondedTokens has been renamed to TotalValidatorPower to allow for multiple validator power representations.
• (x/gov) #25617 AfterProposalSubmission hook now includes proposer address as a parameter.
• (x/gov) #25616 DistrKeeper x/distribution is now optional. Genesis validation ensures distrKeeper is set if distribution module is used as proposal cancel destination.
• (systemtests) [#25930]cosmos/cosmos-sdk#25930) Move systemtests into testutil and no longer under its own go.mod.
• (baseapp) #26060 Remove BaseApp.SetStoreMetrics. The StoreMetrics interface never worked, so removing dead code.
• (store) #26061 Remove store tracing API and all related plumbing:
  • Remove SetTracer, SetTracingContext, and TracingEnabled from MultiStore interface.
  • Remove CacheWrapWithTrace from CacheWrapper interface.
  • Remove BaseApp.SetCommitMultiStoreTracer and tracing context logic from BaseApp.cacheTxContext and FinalizeBlock.
  • Remove io.Writer parameter from servertypes.AppCreator and traceWriter io.Writer from servertypes.AppExporter.
  • Remove traceStore io.Writer parameter from simapp.NewSimApp and all enterprise simapp constructors.
  • Remove traceStore io.Writer from all testutil/simsx app factory signatures.
• (store) #26042 We are now importing github.com/cosmos/cosmos-sdk/store/v2 as the store package instead of cosmossdk.io/store and all import paths have changed.
• (baseapp) #26138 Default block gas meter to disabled. Adds checking to ensure block gas meter is not enabled while bstm parallel execution is configured and panics in these scenarios during parameter assignment.

Features

• #25471 Full BLS 12-381 support enabled.
• #24872 Support BLS 12-381 for cli init, gentx, collect-gentx
• (crypto) #24919 add NewPubKeyFromBytes function to the secp256r1 package to create PubKey from bytes
• (server) #24720 add verbose_log_level flag for configuring the log level when switching to verbose logging mode during sensitive operations (such as chain upgrades).
• (crypto) #24861 add PubKeyFromCometTypeAndBytes helper function to convert from comet/v2 PubKeys to the cryptotypes.Pubkey interface.
• (abci_utils) #25008 add the ability to assign a custom signer extraction adapter in DefaultProposalHandler.
• (x/distribution) #25650 Add new gRPC query endpoints and CLI commands for DelegatorStartingInfo, ValidatorHistoricalRewards, and ValidatorCurrentRewards.
• #25745 Add DiskIO telemetry via gopsutil.

... (truncated)

Commits

• d15e815 Merge pull request #26313 from cosmos/ma/changelog-v0.54.02
• 4bb5bfc Update CHANGELOG.md
• f7dd2fe changelog
• 115fd1e Merge pull request #26305 from cosmos/dependabot/go_modules/release/v0.54.x/g...
• 60efa95 tidy
• 366174e Merge branch 'release/v0.54.x' into dependabot/go_modules/release/v0.54.x/git...
• e1f6ef5 Merge pull request #26235 from cosmos/mergify/bp/release/v0.54.x/pr-26216
• 3d0e919 tidy all
• 3b6df7f update
• 78e6bcd tidy
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)