bump version to v0.54

Author: pwnfoo

.circleci/config.yml

@@ -5,7 +5,7 @@ orbs:
 executors:
   golang:
     docker:
-      - image: cimg/go:1.21
+      - image: cimg/go:1.23
 
 commands:
   make:
@@ -61,15 +61,31 @@ jobs:
           paths:
             - ".git"
 
+  tidy-go:
+    executor: golang
+    steps:
+      - checkout
+      - run:
+          name: Check go mod tidy
+          # Use --diff when available (Go 1.23)
+          # https://github.com/golang/go/issues/27005
+          command: |
+            go mod tidy
+            CHANGES_IN_REPO=$(git status --porcelain)
+            if [[ -n "$CHANGES_IN_REPO" ]]; then
+              echo "Repository is dirty. Showing 'git status' and 'git --no-pager diff' for debugging now:"
+              git status && git --no-pager diff
+              exit 1
+            fi
+
   lint:
     docker:
-      - image: golangci/golangci-lint:v1.54.2
+      - image: golangci/golangci-lint:v1.60.3
     steps:
       - checkout
       - run:
           name: Lint
           command: |
-            golangci-lint run --version
             golangci-lint run --tests=false --timeout=5m0s
 
   test-cover:
@@ -227,31 +243,17 @@ jobs:
 
   release-tagged:
     executor: golang
-    environment:
-      BUILD_DIR: /tmp/workspace
     steps:
-      - attach_workspace:
-          at: /tmp/workspace
       - checkout
-      - setup_remote_docker:
-          docker_layer_caching: true
-      - run:
-          name: Fetch static artifact
-          command: docker create --name wasmd_temp "cosmwasm/wasmd:${CIRCLE_TAG}"; docker cp wasmd_temp:/usr/bin/wasmd ${BUILD_DIR};  docker rm -f wasmd_temp
-      - run:
-          name: gzip
-          command: tar -zcvf ${BUILD_DIR}/wasmd-${CIRCLE_TAG}-linux-amd64.tar.gz -C ${BUILD_DIR} wasmd
       - gh/setup:
-          token: GITHUB_CREDS
+          token: WASMD_GITHUB_RELEASES_TOKEN
       - run:
           name: Create release
           command: |
-            gh release create ${CIRCLE_TAG} ${BUILD_DIR}/wasmd-${CIRCLE_TAG}-linux-amd64.tar.gz \
+            gh release create ${CIRCLE_TAG} \
             --title "$CIRCLE_TAG" \
             --draft \
-            --notes "# Wasmd ${CIRCLE_TAG} Release
-            See the [CHANGELOG](https://github.com/CosmWasm/wasmd/blob/${CIRCLE_TAG}/CHANGELOG.md) for details on the changes in this version.
-            "
+            --notes "See the [CHANGELOG](https://github.com/CosmWasm/wasmd/blob/${CIRCLE_TAG}/CHANGELOG.md) for details on the changes in this version."
 
 workflows:
   test-suite:
@@ -275,6 +277,9 @@ workflows:
             tags:
               only:
                 - /^v.*/
+      - tidy-go:
+          requires:
+            - setup-dependencies
       - lint:
           requires:
             - setup-dependencies
@@ -294,8 +299,6 @@ workflows:
           requires:
             - setup-dependencies
       - release-tagged:
-          requires:
-            - docker-tagged
           filters:
             tags:
               only:

.github/workflows/autofix.yml

@@ -0,0 +1,27 @@
+name: autofix.ci # needed to securely identify the workflow
+
+on:
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  autofix-protobuf:
+    runs-on: ubuntu-latest
+    container:
+      image: ghcr.io/cosmos/proto-builder:0.14.0
+      options: --user root # workaround for a problem during actions/checkout, see https://github.com/actions/checkout/issues/1014
+    steps:
+      - uses: actions/checkout@v4
+      - name: Fix permissions # needed because of root user fix above
+        run: git config --global --add safe.directory "$PWD"
+      - name: Format protobuf
+        run: find ./ -name "*.proto" -exec clang-format -i {} \;
+      - name: Generate protobuf
+        run: sh ./scripts/protocgen.sh
+      - name: Format
+        run: make format
+
+      # Get latest version from https://autofix.ci/setup
+      - uses: autofix-ci/action@ff86a557419858bb967097bfc916833f5647fa8c

.github/workflows/proto-buf-linter.yml

@@ -0,0 +1,22 @@
+name: Protobuf Linting
+# run buf lint (https://buf.build/)
+# This workflow is only run when a .proto file has been changed
+on:
+  pull_request:
+    paths:
+      - "proto/**"
+
+permissions:
+  contents: read
+
+jobs:
+  buf-lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: bufbuild/[email protected]
+
+      # lint checks
+      - uses: bufbuild/buf-lint-action@v1
+        with:
+          input: "proto"

.github/workflows/proto-buf-publisher.yml

@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: bufbuild/buf-setup-action@v1.30.1
+      - uses: bufbuild/buf-setup-action@v1.47.2
 
       # lint checks
       - uses: bufbuild/buf-lint-action@v1

.github/workflows/typo-check.yml

@@ -0,0 +1,19 @@
+name: Check for typos
+
+on:
+  merge_group:
+  pull_request:
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+
+jobs:
+  check-typos:
+    name: "Spell-check repository source"
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Run spell-check
+        uses: crate-ci/typos@master