gongbell / ContractFuzzer

The Ethereum Smart Contract Fuzzer for Security Vulnerability Detection (ASE 2018)
226 stars 85 forks source link

Bump minimatch, truffle-compile and truffle in /contract_tester #23

Open dependabot[bot] opened 1 year ago

dependabot[bot] commented 1 year ago

Bumps minimatch to 3.0.4 and updates ancestor dependencies minimatch, truffle-compile and truffle. These dependencies need to be updated together.

Updates minimatch from 0.3.0 to 3.0.4

Commits
Maintainer changes

This version was pushed to npm by isaacs, a new releaser for minimatch since your current version.


Updates truffle-compile from 1.1.2 to 4.2.3

Release notes

Sourced from truffle-compile's releases.

v5.3.13 – Life is like...

I guess it's true: you never know what you're going to get! 💝

This release fixes a bug to truffle unbox that caused community Truffle Boxes to fail to download. Thanks @​CaleTeeter and @​patrickalphac for identifying this problem.

Apologies to anyone who ran into this bug... hope this fixes things for you! 🙇

How to upgrade

We recommend upgrading to the latest version of Truffle by running:

npm uninstall -g truffle
npm install -g truffle

Changelog

Bug fixes

Internal improvements

  • Allow a few missing values in artifactor/compile-common internals (#4126 by @​bergarces)

v5.3.11 – Mrs. Malinda Russell's Rich Black Cake 🍰

Salutations and happy Friday! 👋🏾

We have another release for you! This week offers a couple of bug fixes, internal improvements and version updates. truffle unbox will now recognize branches that have slashes, like truffle unbox <orgOrName>/repo#branch/with/slashes. In case you didn't know you can create your own Truffle boxes which is a great way to bootstrap your Truffle project: hooray! :tada:

Enjoy, and as always please feel free to reach out through one of these resources.

Changelog

Fixes

Dependency updates

Internal improvements

Commits
  • 22c8978 Publish
  • 1c0d3d5 Update yarn.lock
  • 6f78745 Merge pull request #2341 from trufflesuite/update-packages
  • f96f2b4 Rename truffle-require to @​truffle/require
  • d867f6f Rename truffle-workflow-compile to @​truffle/workflow-compile
  • a5b121e Merge pull request #2331 from trufflesuite/update-packages
  • d0b177d Merge pull request #2335 from trufflesuite/distReleaseScript
  • 433ae41 Merge pull request #2320 from trufflesuite/console-update
  • f0c98bb Merge in develop branch
  • 4945973 Merge pull request #2332 from trufflesuite/more-update-packages
  • Additional commits viewable in compare view


Updates truffle from 2.1.2 to 5.6.4

Release notes

Sourced from truffle's releases.

v5.6.4 — Peanut Panna Cotta

Hello there 👋

Back at it with our weekly Truffle release. Celebrate the enhancements and bug fixes with a jiggly peanut panna cotta.

To start, let's put our hands 👏 🎊 together for the new e command in Debugger CLI. This command prints recently emitted events, including what emitted them and whether they've been reverted. By default, it prints three events, but it also allows printing more.

Next up, good news for Layer 2 builders; we've added Arbitrum Nova support in truffle debug --fetch-external. There's no stopping us from debugging those verified contracts on the growing L2 networks. 🚀 Bonus tip, in case you didn't know, you can also use the Truffle debugger with Arbitrum Nitro and Optimism!

And thank you so much @​eltociear, for helping us catch and fix a typo! 🙇 Your contributions are much appreciated.

That's all for now. See you next week and always happy building!! 🍂

How to upgrade

We recommend upgrading to the latest version of Truffle by running:

npm uninstall -g truffle
npm install -g truffle

Changelog

Enhancements

Bug fix

Internal improvements

Dependency updates

... (truncated)

Commits
  • 495e923 Publish
  • 0a16e15 remove db from dev deps in truffle
  • bbafe36 bump some truffle packages
  • 47249b6 add another test and prevent db integration test from running when running CI...
  • 63fd9cb only start Ganache when not testing using Geth
  • bce7533 revert changes to server utility and manually manage ganache in tests
  • ab9f9fd take first crack at rewriting db test
  • ab76f31 wip - make first attempt at moving db integration test into truffle scenario ...
  • d8f27f3 truffle: instrument commandRunner
  • 6fa0a2c Update ganache to 7.5.0
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by lsqproduction, a new releaser for truffle since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/gongbell/ContractFuzzer/network/alerts).