Bump chia-bls from 0.38.2 to 0.46.0

[dependabot]

Bumps chia-bls from 0.38.2 to 0.46.0.

Release notes

Sourced from chia-bls's releases.

0.46.0

What's Changed

• support a new version of FullBlock serialization by @​arvidn in Chia-Network/chia_rs#1456
• bump pyo3 to 0.29.0 by @​arvidn in Chia-Network/chia_rs#1472
• fix warnings issued by latest version of clippy by @​arvidn in Chia-Network/chia_rs#1473
• Update Managed Files by @​ChiaAutomation in Chia-Network/chia_rs#1469
• checkpoint ProofOfSpace patch by @​arvidn in Chia-Network/chia_rs#1476
• introduce a new serialization for the generator in UnfinishedBlock by @​arvidn in Chia-Network/chia_rs#1470
• Add InternedBlockBuilder for INTERNED_GENERATOR cost model by @​richardkiss in Chia-Network/chia_rs#1436
• bump clvmr dependency to 0.18.0 by @​arvidn in Chia-Network/chia_rs#1471
• bump crossbeam-epoch from 0.9.18 -> 0.9.20 by @​arvidn in Chia-Network/chia_rs#1485
• replace v2 plot filter constants for the new filter algorithm by @​arvidn in Chia-Network/chia_rs#1484
• bump k256 and p256 to stable releases by @​arvidn in Chia-Network/chia_rs#1486
• factor out compute_plot_group_id_v2() and expose it to python by @​arvidn in Chia-Network/chia_rs#1479
• bump version to 0.46.0 by @​arvidn in Chia-Network/chia_rs#1487

Full Changelog: Chia-Network/chia_rs@0.45.0...0.46.0

0.45.1

What's Changed

• [CHIA-4279] parse ProofOfSpace by @​arvidn in Chia-Network/chia_rs#1474
• bump version to 0.45.1 by @​arvidn in Chia-Network/chia_rs#1475

Full Changelog: Chia-Network/chia_rs@0.45.0...0.45.1

0.45.0

What's Changed

• [CHIA-4213] don't print secret keys, as a precaution to not leak it by @​arvidn in Chia-Network/chia_rs#1453
• Update Managed Files by @​ChiaAutomation in Chia-Network/chia_rs#1448
• optimize additions_and_removals() by @​arvidn in Chia-Network/chia_rs#1458
• Validation err transition by @​arvidn in Chia-Network/chia_rs#1457
• add feature to the python bindings to truncate a member vector, by name by @​arvidn in Chia-Network/chia_rs#1459
• bump version to 0.45.0 by @​arvidn in Chia-Network/chia_rs#1462

Full Changelog: Chia-Network/chia_rs@0.44.0...0.45.0

0.44.0

What's Changed

• Expose generator_interned_weight() to Python by @​richardkiss in Chia-Network/chia_rs#1435
• add testnet to ConsensusConstants by @​arvidn in Chia-Network/chia_rs#1449
• bump version to 0.44.0 by @​arvidn in Chia-Network/chia_rs#1450

Full Changelog: Chia-Network/chia_rs@0.43.0...0.44.0

0.43.0

What's Changed

... (truncated)

Commits

• 7d48790 Merge pull request #1487 from Chia-Network/bump-0.46.0
• 7fcb1dd bump version to 0.46.0
• 1ad07eb Merge pull request #1479 from Chia-Network/compute_plot_group_id_v2
• 181b487 Merge pull request #1486 from Chia-Network/p256-k256-stable
• 2fd5715 Merge pull request #1484 from Chia-Network/v2-plot-filter-constants
• 495cc15 bump k256 and p256 to stable releases
• c2b167c Merge pull request #1485 from Chia-Network/update-crossbeam
• f87ecc3 bump crossbeam-epoch from 0.9.18 -> 0.9.20
• 176b28d replace v2 plot filter constants for the new filter algorithm
• ea43272 Merge pull request #1471 from Chia-Network/bump-clvmr-0.18.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Note

Medium Risk
Upgrading a cryptographic BLS dependency across several minor releases can change behavior or APIs; dual versions in the lockfile add compile-time surface until clvmr aligns.

Overview
Dependabot bumps the direct chia-bls dependency from 0.38.2 to 0.46.0 in Cargo.toml, with the matching lockfile refresh in Cargo.lock.

The lockfile now pins chialisp to chia-bls 0.46.0 (and its chia-sha2 / chia-traits / chia_streamable_macro 0.46.0 tree, including thiserror 2.x on that branch). clvmr is unchanged and still pulls chia-bls 0.38.2, so both BLS crate versions coexist until clvmr is upgraded. There are no application source edits in this PR.

^{Reviewed by Cursor Bugbot for commit eea8970. Bugbot is set up for automated code reviews on this repo. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/​chia-bls@​0.46.0

View full report

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit eea8970. Configure here.}

[cursor]

Stale wasm lockfile after bump

Medium Severity

chia-bls is bumped to 0.46.0 in the root manifests, but wasm/Cargo.lock still resolves chialisp against chia-bls 0.38.2. The wasm package path-depends on this crate, so locked or freshly checked-out wasm builds can fail or keep an inconsistent BLS resolution until that lockfile is regenerated.

Additional Locations (1)

• Cargo.lock#L146-L161

 

^{Reviewed by Cursor Bugbot for commit eea8970. Configure here.}