Bump chia-bls from 0.38.2 to 0.47.0

[dependabot]

Bumps chia-bls from 0.38.2 to 0.47.0.

Release notes

Sourced from chia-bls's releases.

0.47.0

What's Changed

• Wire serde_2026 serialization into chia_rs by @​richardkiss in Chia-Network/chia_rs#1437
• make fast forward a bit stricted by @​arvidn in Chia-Network/chia_rs#1498
• [CHIA-3823] Add INTERNED_GENERATOR consensus path + serde_2026 prefix guard by @​richardkiss in Chia-Network/chia_rs#1438
• correct transactions_generator_buffer type by @​arvidn in Chia-Network/chia_rs#1501
• New cost model by @​arvidn in Chia-Network/chia_rs#1502
• bump version to 0.47.0 by @​arvidn in Chia-Network/chia_rs#1503

Full Changelog: Chia-Network/chia_rs@0.46.0...0.47.0

0.46.0

What's Changed

• support a new version of FullBlock serialization by @​arvidn in Chia-Network/chia_rs#1456
• bump pyo3 to 0.29.0 by @​arvidn in Chia-Network/chia_rs#1472
• fix warnings issued by latest version of clippy by @​arvidn in Chia-Network/chia_rs#1473
• Update Managed Files by @​ChiaAutomation in Chia-Network/chia_rs#1469
• checkpoint ProofOfSpace patch by @​arvidn in Chia-Network/chia_rs#1476
• introduce a new serialization for the generator in UnfinishedBlock by @​arvidn in Chia-Network/chia_rs#1470
• Add InternedBlockBuilder for INTERNED_GENERATOR cost model by @​richardkiss in Chia-Network/chia_rs#1436
• bump clvmr dependency to 0.18.0 by @​arvidn in Chia-Network/chia_rs#1471
• bump crossbeam-epoch from 0.9.18 -> 0.9.20 by @​arvidn in Chia-Network/chia_rs#1485
• replace v2 plot filter constants for the new filter algorithm by @​arvidn in Chia-Network/chia_rs#1484
• bump k256 and p256 to stable releases by @​arvidn in Chia-Network/chia_rs#1486
• factor out compute_plot_group_id_v2() and expose it to python by @​arvidn in Chia-Network/chia_rs#1479
• bump version to 0.46.0 by @​arvidn in Chia-Network/chia_rs#1487

Full Changelog: Chia-Network/chia_rs@0.45.0...0.46.0

0.45.1

What's Changed

• [CHIA-4279] parse ProofOfSpace by @​arvidn in Chia-Network/chia_rs#1474
• bump version to 0.45.1 by @​arvidn in Chia-Network/chia_rs#1475

Full Changelog: Chia-Network/chia_rs@0.45.0...0.45.1

0.45.0

What's Changed

• [CHIA-4213] don't print secret keys, as a precaution to not leak it by @​arvidn in Chia-Network/chia_rs#1453
• Update Managed Files by @​ChiaAutomation in Chia-Network/chia_rs#1448
• optimize additions_and_removals() by @​arvidn in Chia-Network/chia_rs#1458
• Validation err transition by @​arvidn in Chia-Network/chia_rs#1457
• add feature to the python bindings to truncate a member vector, by name by @​arvidn in Chia-Network/chia_rs#1459
• bump version to 0.45.0 by @​arvidn in Chia-Network/chia_rs#1462

Full Changelog: Chia-Network/chia_rs@0.44.0...0.45.0

... (truncated)

Commits

• 0660466 Merge pull request #1503 from Chia-Network/bump-0.47.0
• 8612fed bump version to 0.47.0
• 6cceddf Merge pull request #1502 from Chia-Network/new-cost-model
• ddefb84 update get_flags_for_height_and_constants
• 6fb8bdb bump clvmrs
• d2f4b6a enable new cost model
• 0d3166e Merge pull request #1501 from Chia-Network/generator-buffer-type
• de58949 correct transactions_generator_buffer type to be bytes instead of list[uint8]
• 8d1fa1d [CHIA-3823] Add INTERNED_GENERATOR consensus path + serde_2026 prefix guard (...
• cdf6d64 Merge pull request #1498 from Chia-Network/fast-forward
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Note

Medium Risk
A large jump in a BLS/crypto stack dependency can change serialization or crypto behavior at runtime even without local code edits; dual versions in the lockfile add compile/link surface. Limited direct API use in chialisp lowers but does not remove that risk.

Overview
Bumps the direct chia-bls dependency from 0.38.2 to 0.47.0 in Cargo.toml, with Cargo.lock updated so chialisp resolves to the new crate set (chia-sha2, chia-traits, chia_streamable_macro at 0.47.0 and thiserror 2.x on that path).

The lockfile now carries two chia-bls versions: 0.47.0 for this package and 0.38.2 still pulled in by clvmr. There are no Rust source changes in this PR; usage stays on chia_bls::PublicKey and hash_to_g1 in the CLVM/BLS tests and type compatibility layer.

Upstream 0.47.0 includes consensus/serialization work (e.g. serde_2026, interned generator paths, cost model changes). Those affect behavior only where this crate calls into the new chia-bls APIs—not via edits here.

^{Reviewed by Cursor Bugbot for commit 0a9aae4. Bugbot is set up for automated code reviews on this repo. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/​chia-bls@​0.47.0

View full report

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 0a9aae4. Configure here.}

[cursor]

Stale wasm lockfile after bump

Low Severity

Root chia-bls is bumped to 0.47.0, but wasm/Cargo.lock still only records chia-bls 0.38.2 for the path-dependent chialisp crate. Wasm builds that honor the committed lockfile (for example with --locked) cannot resolve the new requirement, and unlocked builds silently rewrite the lockfile instead of keeping the repo reproducible.

 

^{Reviewed by Cursor Bugbot for commit 0a9aae4. Configure here.}