build(deps): bump chia-blockchain from 2.0.0 to 2.4.4

[dependabot]

Bumps chia-blockchain from 2.0.0 to 2.4.4.

Release notes

Sourced from chia-blockchain's releases.

2.4.4

Version 2.4.4 of the Chia reference client is now available for download! This update contains a variety of tweaks and enhancements, including the coin split and combine RPCs. The Rust migration is still ongoing.

2.4.4 Chia blockchain 2024-10-15

What's Changed

Added

• Build both sdist and wheel for upload to pypi
• Add a fee option to push_transactions
• Add bech32m options to some key functions
• Add --valid-at/--expires-at to all CLI transaction RPC endpoints
• Add TXConfig args to coin commands
• Add missing client endpoints for corresponding Wallet RPC endpoints
• Add version number to every log line

Changed

• Remove block_height_list from BlockGenerator
• Display sync percentage in 'chia show -s'
• Make 'chia plotnft -f fingerprint -i wallet_id' output JSON
• make Program.run() and Program.run_with_cost() default to enabling all the most recent features
• Remove soft-fork 4 special cases
• Log the rate at which blocks are added during long sync
• Rename Spend to SpendConditions
• Remove Backend* warning ignores
• Replace get_flags_for_height_and_constants() with Rust version
• Refactor get_puzzle_and_solution_for_coin() and introduce get_puzzle_and_solution_for_coin2()
• Warm up the cache once per batch in pre_validate_blocks_multiprocessing
• Cleanup and convert to a protocol for BlockchainInterface
• Update BlockGenerator type
• Extract coin splitting and combining logic from CLI and move to RPC
• Update long-reorg tests along with the reorg test chains
• Switch mempool TX prevalidation to the Rust version
• Remove initial_freeze_period from RPCs
• Introduce new AugmentedBlockchain class
• Use smarter coin selection algorithm for DAO wallet select_coins_for_asset_type
• Refactor multiprocess_validation
• Deduct block overhead from the mempool's maximum block clvm cost limit
• Update to macOS 13 for build and test
• Simplify batch pre validate blocks
• Add a configurable limit to the amount of DIDs that can be automatically added to the users wallet from transfer
• Datalayer: Revert ancestors table schema change from #18100
• Datalayer: separate DAT files in folders by store id
• Datalayer: Reduce level log spam when downloading DAT files
• Datalayer: Limit full file creation when processing subscription generations
• Bump aiohttp to 3.10.4
• Bump chia_rs to 0.14.0
• Bump chiavdf to 1.1.6

... (truncated)

Changelog

Sourced from chia-blockchain's changelog.

2.4.4 Chia blockchain 2024-10-15

What's Changed

Added

• Build both sdist and wheel for upload to pypi
• Add a fee option to push_transactions
• Add bech32m options to some key functions
• Add --valid-at/--expires-at to all CLI transaction RPC endpoints
• Add TXConfig args to coin commands
• Add missing client endpoints for corresponding Wallet RPC endpoints
• Add version number to every log line

Changed

• Remove block_height_list from BlockGenerator
• Display sync percentage in 'chia show -s'
• Make 'chia plotnft -f fingerprint -i wallet_id' output JSON
• make Program.run() and Program.run_with_cost() default to enabling all the most recent features
• Remove soft-fork 4 special cases
• Log the rate at which blocks are added during long sync
• Rename Spend to SpendConditions
• Remove Backend* warning ignores
• Replace get_flags_for_height_and_constants() with Rust version
• Refactor get_puzzle_and_solution_for_coin() and introduce get_puzzle_and_solution_for_coin2()
• Warm up the cache once per batch in pre_validate_blocks_multiprocessing
• Cleanup and convert to a protocol for BlockchainInterface
• Update BlockGenerator type
• Extract coin splitting and combining logic from CLI and move to RPC
• Update long-reorg tests along with the reorg test chains
• Switch mempool TX prevalidation to the Rust version
• Remove initial_freeze_period from RPCs
• Introduce new AugmentedBlockchain class
• Use smarter coin selection algorithm for DAO wallet select_coins_for_asset_type
• Refactor multiprocess_validation
• Deduct block overhead from the mempool's maximum block clvm cost limit
• Update to macOS 13 for build and test
• Simplify batch pre validate blocks
• Add a configurable limit to the amount of DIDs that can be automatically added to the users wallet from transfer
• Datalayer: Revert ancestors table schema change from #18100
• Datalayer: separate DAT files in folders by store id
• Datalayer: Reduce level log spam when downloading DAT files
• Datalayer: Limit full file creation when processing subscription generations
• Bump aiohttp to 3.10.4
• Bump chia_rs to 0.14.0
• Bump chiavdf to 1.1.6
• Bump cryptography to 43.0.1
• Bump dnslib to 0.9.25
• Bump pip to 24.2

... (truncated)

Commits

• 3973952 Add combine_coins Known Issue to changelog (#18702)
• ea5402f Update CHANGELOG.md
• ef11555 Update changelog for 2.4.4 (#18700)
• 08a9a4d [CHIA-1569] Fix fee behavior with chia wallet coins combine (#18679)
• b598762 Update GUI to 7e6f90e (#18671)
• 0912c37 CHIA-1567: Update aiohttp to 3.10.4 (#18663)
• 74536ba CHIA-1568: fix object has no attribute code errors (#18665)
• b353a39 stop asking for zero random bits of data (#18668)
• 0ab7291 Update GUI pin to 71bae1c072941217cde26a70e864d9add1de07f9 (#18656)
• 9109d89 CHIA-1525 Make PreValidationResult take SpendBundleConditions instead of NPCR...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

The following labels could not be found: dependencies, python, Changed.

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
pypi/[email protected]	environment, eval, filesystem, network, shell, unsafe	0	12 MB	chia-network

🚮 Removed packages: pypi/[email protected]

View full report↗︎

[socket-security]

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert	Package	Note	Source	CI
Native code	pypi/[email protected]	Location: Package overview	requirements.txt	🚫
Native code	pypi/[email protected]	Location: Package overview	requirements.txt	🚫

View full report↗︎

Next steps

Why is native code a concern?

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Verify that the inclusion of native code is expected and necessary for this package's functionality. If it is unnecessary or unexpected, consider using alternative packages without native code to mitigate potential risks.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

• @SocketSecurity ignore pypi/[email protected]