backstop-protocol / BCompound

19 stars 5 forks source link

Bump flat, hardhat, mocha and truffle #131

Open dependabot[bot] opened 1 year ago

dependabot[bot] commented 1 year ago

Bumps flat to 5.0.2 and updates ancestor dependencies flat, hardhat, mocha and truffle. These dependencies need to be updated together.

Updates flat from 4.1.1 to 5.0.2

Commits
  • e5ffd66 Release 5.0.2
  • fdb79d5 Update dependencies, refresh lockfile, format with standard.
  • e52185d Test against node 14 in CI.
  • 0189cb1 Avoid arrow function syntax.
  • f25d3a1 Release 5.0.1
  • 54cc7ad use standard formatting
  • 779816e drop dependencies
  • 2eea6d3 Bump lodash from 4.17.15 to 4.17.19
  • a61a554 Bump acorn from 7.1.0 to 7.4.0
  • 20ef0ef Fix prototype pollution on unflatten
  • Additional commits viewable in compare view


Updates hardhat from 2.0.6 to 2.16.1

Release notes

Sourced from hardhat's releases.

Hardhat v2.16.1

This release fixes an issue in the compiler download that happens when Hardhat is used with node v18.16.x (the latest versions of node v18).

Hardhat v2.16.0 - Extendable providers

This version of Hardhat adds a new extensibility point: you can now wrap Hardhat's network provider with your own logic.

This is done by using the new extendProvider configuration function:

extendProvider(async (provider, config, network) => {
  const newProvider = new MyProviderWrapper(provider);
  return newProvider;
});

Doing this means that all the JSON-RPC calls will go through your custom provider wrapper. You can use this to intercept and handle some requests while forwarding the rest to the original provider.

To learn more about this, read the "Extending the Hardhat provider" section in our docs. If you have questions about how to use this, please open a new discussion.

Other changes

Besides this new feature, this version includes the following changes:

  • console.sol is now memory-safe (thanks @​ZumZoom!)
  • Added optional params to some compilation subtasks to make them more flexible (thanks @​adjisb!)
  • Added a HARDHAT_DISABLE_TELEMETRY_PROMPT environment variable that can be set to true to prevent Hardhat from showing the telemetry consent prompt
  • The opt-in telemetry is now done using Google Analytics 4

Hardhat v2.15.0

This new version of Hardhat uses the new ethers v6 based Toolbox when initializing a project. Check the release notes of the Toolbox to learn more.

Hardhat v2.14.1

This release adds better information to Hardhat about which block numbers correspond to which hardforks. Most users won't be affected by this, but it fixes some issues for certain edge cases.

Hardhat v2.14.0 — Shanghai

This release sets Shanghai as the default hardfork used by the Hardhat Network.

If for some reason you want to keep using the previous hardfork, set it explicitly in your config:

module.exports = {
  networks: {
    hardhat: {
      hardfork: "merge"
    }
  }
}

Hardhat v2.13.1

... (truncated)

Commits
  • b05660b Version Packages
  • 176f268 Merge pull request #4075 from NomicFoundation/compiler-download-issue
  • 68cf2a2 Create tricky-parents-warn.md
  • 45025fb Consume downloads instead of piping them
  • 8bec18b Merge pull request #4071 from NomicFoundation/hardhat-ethers-on
  • a1e37a4 Create three-yaks-reply.md
  • 942f406 Remove duplicated test
  • 223b09c Remove --exit from test script
  • ba24025 Add support for contract.on
  • 4c39c2c Add tests for provider and contract events
  • Additional commits viewable in compare view


Updates mocha from 7.2.0 to 10.2.0

Release notes

Sourced from mocha's releases.

v10.2.0

10.2.0 / 2022-12-11

:tada: Enhancements

  • #4945: API: add possibility to decorate ESM name before import (@​j0tunn)

:bug: Fixes

:book: Documentation

v10.1.0

10.1.0 / 2022-10-16

:tada: Enhancements

:nut_and_bolt: Other

v10.0.0

10.0.0 / 2022-05-01

:boom: Breaking Changes

:nut_and_bolt: Other

... (truncated)

Changelog

Sourced from mocha's changelog.

10.2.0 / 2022-12-11

:tada: Enhancements

  • #4945: API: add possibility to decorate ESM name before import (@​j0tunn)

:bug: Fixes

:book: Documentation

10.1.0 / 2022-10-16

:tada: Enhancements

:nut_and_bolt: Other

10.0.0 / 2022-05-01

:boom: Breaking Changes

:nut_and_bolt: Other

... (truncated)

Commits


Updates truffle from 5.2.2 to 5.10.2

Release notes

Sourced from truffle's releases.

v5.10.2 — Icebox cake

How to upgrade

Welcome to another Truffle release!

This week we have a small set of updates, focused on improving the decoding and debugging experience. 🚈 Our Decoder's input interfaces are now more flexible; 🤸 it accepts both string's and bigint's in places where only number's were accepted. Additionally, address value now has a contractClass interpretation field that may provide additional information like contract name and payability. 📚

We also updated our source fetcher 🧲 to support the layer-2 Rollux blockchain mainnet and testnet.

Stay tuned for more next week! Enjoy the rest of your week. 🦆

We recommend upgrading to the latest version of Truffle by running:

npm uninstall -g truffle
npm install -g truffle

Changelog

New feature

Enhancements

v5.10.1 — Rum baba

Hey everybody! Here's a Truffle release that will end your Friday with joy. 👨‍🍳

If you're using Truffle Test, Debugger, or Decoder, you'll be happy to know that our event decoding is improved to support contracts that use Solidity >= 0.8.20. 🕺 And if you're a fan of Yul, our Decoder can now properly decode internal function pointers from contracts compiled with viaIR enabled. 👟 With these cases covered, it means decoding everywhere inside Truffle is hardened to give you a more stable experience.

Thanks to @​calebyouki for bringing our attention to an issue related to the programmatic usage of @truffle/test. 🪂 We've gone ahead and fixed that. Additionally, thank you to @​73alexstep, @​vlasov-hub, @​BIOtrice, @​elenaqi, and @​HelenCodePro for looking after our readme's, cheers and welcome! 🐣

As per usual, our fetchers are kept up to date to reflect what Etherscan and Sourcify currently support. 🏌️ We also made an improvement to a codec component.

Try a rum baba if you can find one. 🥃 If not, well, still have a good weekend! We'll be back next week with more.

How to upgrade

We recommend upgrading to the latest version of Truffle by running:

npm uninstall -g truffle
npm install -g truffle

Changelog

Enhancements

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by cliffoo, a new releaser for truffle since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/backstop-protocol/BCompound/network/alerts).