chore: upgrade mayachain to v1.127.0

[kaladinlight]

Summary by CodeRabbit

Release Notes

• Chores
  • Updated and adjusted core dependencies to optimize build configuration and system compatibility.
  • Removed unnecessary indirect dependencies to streamline the dependency graph.

[coderabbitai]

📝 Walkthrough

Walkthrough

Two Go module files are updated with dependency version adjustments. Cosmos-SDK and Tendermint are downgraded to earlier versions, mayanode is updated to v1.127.0, several indirect dependencies are removed from the require block, and version replacement directives for btcd, cosmos-sdk, and tendermint are cleared from the replace block.

Changes

Cohort / File(s)	Summary
Go Module Dependencies go/coinstacks/mayachain/go.mod, go/pkg/mayachain/go.mod	Downgrade cosmos-sdk (v0.53.4→v0.45.9), tendermint (v0.35.9→v0.34.21), update mayanode to v1.127.0, remove indirect dependencies (kr/pretty, kr/text, gopkg.in/check.v1, rogpeppe/go-internal), and clear replace directives for btcd and cosmos-sdk.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

Possibly related PRs

• chore: upgrade cosmos to v25.3.2 #1259: Modifies the same Go module dependency declarations for Cosmos SDK and related replace mappings, but upgrades versions instead of downgrading them—opposite direction of changes in this PR.

Poem

🐰 Down the dependency tree we hop,
Older versions make the upgrades stop,
Cosmos and Tendermint take a step back,
Replace rules vanish from our pack,
Cleaner modules on our woodland track! 🌲

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the main change: upgrading mayanode from v1.124.0 to v1.127.0 across both go.mod files.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch mayachain-v1.127.0

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

🤖 Fix all issues with AI agents

In `@go/coinstacks/mayachain/go.mod`:
- Line 6: The go.mod currently pins github.com/cosmos/cosmos-sdk to v0.45.9
which is vulnerable; update go.mod to a patched release (at minimum v0.47.17 or
newer) or to the smallest safe versions covering the listed GHSA advisories,
then run module sync (go get / go mod tidy) and rebuild to verify no breakages;
inspect which x/* modules your code imports (e.g., x/group, x/distribution,
mempool/PrepareProposalHandler, SenderNonceMempool) and, if upgrading the entire
SDK is not feasible, apply targeted backports/patches or upgrade only the
affected modules to versions that fix GHSA-2557, GHSA-86h5, GHSA-8wcc,
GHSA-x5vx, GHSA-47ww and GHSA-p22h as appropriate.