Skip to content

build(deps): bump chia-blockchain from 2.4.4 to 2.7.5 - #506

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/chia-blockchain-2.7.5
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/chia-blockchain-2.7.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026 •

Copy link
Copy Markdown
Contributor

Bumps chia-blockchain from 2.4.4 to 2.7.5.

Release notes

Sourced from chia-blockchain's releases.

2.7.5

What's Changed

Added

  • Add configurable timelord inactivity chain reset timeout (max_allowed_inactivity_time in config)
  • Limit PlotNFT v2 singleton discovery

Changed

  • Help the query planner for partial spent_index_index

Fixed

  • Fix block viewer regression and navigation in GUI
  • Add backwards compatibility for v1 pool /PUT farmer signing

2.7.5-rc1

What's Changed

Added

Changed

Fixed

Full Changelog: Chia-Network/chia-blockchain@2.7.4...2.7.5-rc1

2.7.4

What's Changed

Added

  • Add PlotNFT v2 wallet, CLI/RPC integration, and farmer support
  • Add V2 predictable plot filter primitives, signage point wiring, and activation
  • Add harvester protocol 0.0.38 with V2 plot metadata
  • Add new full block format and cost model
  • Add canonical CLVM serialization
  • Add rate limits v3 for request_transaction and respond_transaction
  • Add max limit for wallet processing of coin state updates
  • Add automatic reorg testing to WalletTestFramework
  • Add systemd logging support
  • Add NFT media pipeline: preview verification & hardening, video playback controls, looping & gallery UX, IPFS gateway fetch, download timeout recovery, gallery filter by preview availability (thanks @​jlobue10)
  • Add user-selectable IPFS gateway for NFT resource fetching in GUI
  • Add Chia theme variants and overview in GUI (thanks @​twinedge39-web)

... (truncated)

Changelog

Sourced from chia-blockchain's changelog.

2.7.5 Chia blockchain 2026-10-14

What's Changed

Added

  • Add configurable timelord inactivity chain reset timeout (max_allowed_inactivity_time in config)
  • Limit PlotNFT v2 singleton discovery

Changed

  • Help the query planner for partial spent_index_index

Fixed

  • Fix block viewer regression and navigation in GUI
  • Add backwards compatibility for v1 pool /PUT farmer signing

2.7.4 Chia blockchain 2026-09-10

What's Changed

Added

  • Add PlotNFT v2 wallet, CLI/RPC integration, and farmer support
  • Add V2 predictable plot filter primitives, signage point wiring, and activation
  • Add harvester protocol 0.0.38 with V2 plot metadata
  • Add new full block format and cost model
  • Add canonical CLVM serialization
  • Add rate limits v3 for request_transaction and respond_transaction
  • Add max limit for wallet processing of coin state updates
  • Add automatic reorg testing to WalletTestFramework
  • Add systemd logging support
  • Add NFT media pipeline: preview verification & hardening, video playback controls, looping & gallery UX, IPFS gateway fetch, download timeout recovery, gallery filter by preview availability (thanks @​jlobue10)
  • Add user-selectable IPFS gateway for NFT resource fetching in GUI
  • Add Chia theme variants and overview in GUI (thanks @​twinedge39-web)

Changed

  • Bump chia_rs to 0.46.0
  • Bump chialisp from 0.4.6 to 0.5.0
  • Increase NFT offer limit to 20 from 10
  • Refactor pre_sp_tx_block
  • Factor out the sync pipeline
  • Improve mempool atom- and pair-count awareness
  • Improve mempool robustness
  • Improve UnfinishedBlock cache
  • Improve error handling when adding block batches
  • Harden RespondBlocks handling for incomplete responses
  • Block validation fast fail

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note

Medium Risk
Large dependency jump on a core runtime with no accompanying code changes; API or protocol mismatches could break pool operation until tested.

Overview
Pins chia-blockchain to 2.7.5 (from 2.4.4) in both requirements.txt and setup.py install_requires. No application or pool-server code changes in this PR.

Because this reference pool depends heavily on chia.* (consensus, pool protocol, RPC clients, puzzles), the effective change is adopting upstream 2.5–2.7 behavior—including PlotNFT v2, protocol/block-format updates, and pool-related fixes such as v1 /PUT farmer signing compatibility—without local code updates. Validate installs and pool flows against a matching chia-blockchain node version.

Reviewed by Cursor Bugbot for commit 4948570. Bugbot is set up for automated code reviews on this repo. Configure here.

Bumps [chia-blockchain](https://github.com/Chia-Network/chia-blockchain) from 2.4.4 to 2.7.5.
- [Release notes](https://github.com/Chia-Network/chia-blockchain/releases)
- [Changelog](https://github.com/Chia-Network/chia-blockchain/blob/main/CHANGELOG.md)
- [Commits](Chia-Network/chia-blockchain@2.4.4...2.7.5)

---
updated-dependencies:
- dependency-name: chia-blockchain
  dependency-version: 2.7.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added Changed Required label for PR that categorizes merge commit message as "Changed" for changelog dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 21, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedpypi/​chia-blockchain@​2.4.4 ⏵ 2.7.575 +1100100100100

View full report

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 4948570. Configure here.

Comment thread setup.py

dependencies = [
"chia-blockchain==2.4.4",
"chia-blockchain==2.7.5",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Partial quality API no longer matches

High Severity

calculate_iterations_quality in chia-blockchain 2.7.5 now takes ConsensusConstants, a PlotParam size, and a required keyword height. The pool still passes DIFFICULTY_CONSTANT_FACTOR and omits height, so every POST /partial will raise instead of scoring proofs.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 4948570. Configure here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Changed Required label for PR that categorizes merge commit message as "Changed" for changelog dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants