diff --git a/.fossa.yml b/.fossa.yml
new file mode 100644
index 00000000000..cb80534e571
--- /dev/null
+++ b/.fossa.yml
@@ -0,0 +1,5 @@
+version: 3
+
+paths:
+  exclude:
+    - ./misc/
diff --git a/.github/workflows/gnoland.yml b/.github/workflows/gnoland.yml
index 9fdfa3011cc..09896aaee7b 100644
--- a/.github/workflows/gnoland.yml
+++ b/.github/workflows/gnoland.yml
@@ -74,14 +74,22 @@ jobs:
           export GOPATH=$HOME/go
           export GOTEST_FLAGS="-v -p 1 -timeout=30m -coverprofile=coverage.out -covermode=atomic"
           make ${{ matrix.args }}
+
+      # NOTE: Using retry action to manage occasional upload failures to codecov.io, due to API limits.
+      # Refer to issue#3954: https://community.codecov.com/t/upload-issues-unable-to-locate-build-via-github-actions-api/3954
       - if: ${{ runner.os == 'Linux' && matrix.goversion == '1.21.x' }}
-        uses: codecov/codecov-action@v3
+        name: Upload coverage to Codecov.io
+        uses: Wandalen/wretry.action@v1.3.0
         with:
-          token: ${{ secrets.CODECOV_TOKEN }}
-          name: gno.land
-          flags: gno.land-${{matrix.args}}
-          files: ./gno.land/coverage.out
-          fail_ci_if_error: ${{ github.repository == 'gnolang/gno' }}
+          attempt_limit: 3
+          attempt_delay: 30000
+          action: codecov/codecov-action@v3
+          with: |
+            token: ${{ secrets.CODECOV_TOKEN }}
+            name: gno.land
+            flags: gno.land-${{matrix.args}}
+            files: ./gno.land/coverage.out
+            fail_ci_if_error: ${{ github.repository == 'gnolang/gno' }}
 
   docker-integration:
     strategy:
diff --git a/.github/workflows/gnovm.yml b/.github/workflows/gnovm.yml
index 034aa109767..5ac11805fae 100644
--- a/.github/workflows/gnovm.yml
+++ b/.github/workflows/gnovm.yml
@@ -78,12 +78,20 @@ jobs:
           export GOPATH=$HOME/go
           export GOTEST_FLAGS="-v -p 1 -timeout=30m -coverprofile=coverage.out -covermode=atomic"
           make ${{ matrix.args }}
+
+      # NOTE: Using retry action to manage occasional upload failures to codecov.io, due to API limits.
+      # Refer to issue#3954: https://community.codecov.com/t/upload-issues-unable-to-locate-build-via-github-actions-api/3954
       - if: ${{ runner.os == 'Linux' && matrix.goversion == '1.21.x' }}
-        uses: codecov/codecov-action@v3
+        name: Upload coverage to Codecov.io
+        uses: Wandalen/wretry.action@v1.3.0
         with:
-          token: ${{ secrets.CODECOV_TOKEN }}
-          name: gnovm
-          verbose: true
-          flags: gnovm-${{matrix.args}}
-          files: ./gnovm/coverage.out
-          fail_ci_if_error: ${{ github.repository == 'gnolang/gno' }}
+          attempt_limit: 3
+          attempt_delay: 30000
+          action: codecov/codecov-action@v3
+          with: |
+            token: ${{ secrets.CODECOV_TOKEN }}
+            name: gnovm
+            verbose: true
+            flags: gnovm-${{matrix.args}}
+            files: ./gnovm/coverage.out
+            fail_ci_if_error: ${{ github.repository == 'gnolang/gno' }}
diff --git a/.github/workflows/tm2.yml b/.github/workflows/tm2.yml
index fc744ccc2ef..2c116d80f87 100644
--- a/.github/workflows/tm2.yml
+++ b/.github/workflows/tm2.yml
@@ -68,12 +68,20 @@ jobs:
           export GOTEST_FLAGS="-v -p 1 -timeout=30m -coverprofile=coverage.out -covermode=atomic"
           make ${{ matrix.args }}
           touch coverage.out
+
+      # NOTE: Using retry action to manage occasional upload failures to codecov.io, due to API limits.
+      # Refer to issue#3954: https://community.codecov.com/t/upload-issues-unable-to-locate-build-via-github-actions-api/3954
       - if: ${{ runner.os == 'Linux' && matrix.goversion == '1.21.x' }}
-        uses: codecov/codecov-action@v3
+        name: Upload coverage to Codecov.io
+        uses: Wandalen/wretry.action@v1.3.0
         with:
-          token: ${{ secrets.CODECOV_TOKEN }}
-          name: tm2
-          verbose: true
-          flags: tm2-${{matrix.args}}
-          files: ./tm2/coverage.out
-          fail_ci_if_error: ${{ github.repository == 'gnolang/gno' }}
+          attempt_limit: 3
+          attempt_delay: 30000
+          action: codecov/codecov-action@v3
+          with: |
+            token: ${{ secrets.CODECOV_TOKEN }}
+            name: tm2
+            verbose: true
+            flags: tm2-${{matrix.args}}
+            files: ./tm2/coverage.out
+            fail_ci_if_error: ${{ github.repository == 'gnolang/gno' }}
diff --git a/go.mod b/go.mod
index d7544ddcdf5..06329b2f02d 100644
--- a/go.mod
+++ b/go.mod
@@ -27,7 +27,7 @@ require (
 	github.com/peterbourgon/ff/v3 v3.4.0
 	github.com/pmezard/go-difflib v1.0.0
 	github.com/rogpeppe/go-internal v1.11.0
-	github.com/rs/cors v1.10.0
+	github.com/rs/cors v1.10.1
 	github.com/stretchr/testify v1.8.4
 	github.com/tecbot/gorocksdb v0.0.0-20191217155057-f0fad39f321c
 	go.etcd.io/bbolt v1.3.7
diff --git a/go.sum b/go.sum
index b038376393c..77c72cfab69 100644
--- a/go.sum
+++ b/go.sum
@@ -150,8 +150,8 @@ github.com/rivo/uniseg v0.2.0 h1:S1pD9weZBuJdFmowNwbpi7BJ8TNftyUImj/0WQi72jY=
 github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc=
 github.com/rogpeppe/go-internal v1.11.0 h1:cWPaGQEPrBb5/AsnsZesgZZ9yb1OQ+GOISoDNXVBh4M=
 github.com/rogpeppe/go-internal v1.11.0/go.mod h1:ddIwULY96R17DhadqLgMfk9H9tvdUzkipdSkR5nkCZA=
-github.com/rs/cors v1.10.0 h1:62NOS1h+r8p1mW6FM0FSB0exioXLhd/sh15KpjWBZ+8=
-github.com/rs/cors v1.10.0/go.mod h1:XyqrcTp5zjWr1wsJ8PIRZssZ8b/WMcMf71DJnit4EMU=
+github.com/rs/cors v1.10.1 h1:L0uuZVXIKlI1SShY2nhFfo44TYvDPQ1w4oFkUJNfhyo=
+github.com/rs/cors v1.10.1/go.mod h1:XyqrcTp5zjWr1wsJ8PIRZssZ8b/WMcMf71DJnit4EMU=
 github.com/russross/blackfriday v1.5.2/go.mod h1:JO/DiYxRf+HjHt06OyowR9PTA263kcR/rfWxYHBV53g=
 github.com/spaolacci/murmur3 v0.0.0-20180118202830-f09979ecbc72/go.mod h1:JwIasOWyU6f++ZhiEuf87xNszmSA2myDM2Kzu9HwQUA=
 github.com/spaolacci/murmur3 v1.1.0 h1:7c1g84S4BPRrfL5Xrdp6fOJ206sU9y293DDHaoy0bLI=