sirenmarkets / core

SIREN Core Smart Contracts
https://sirenmarkets.com/
GNU General Public License v3.0
42 stars 12 forks source link

Bump minimatch, hardhat, truffle and recursive-readdir #187

Open dependabot[bot] opened 2 years ago

dependabot[bot] commented 2 years ago

Bumps minimatch to 3.1.2 and updates ancestor dependencies minimatch, hardhat, truffle and recursive-readdir. These dependencies need to be updated together.

Updates minimatch from 3.0.4 to 3.1.2

Commits


Updates hardhat from 2.6.2 to 2.12.2

Release notes

Sourced from hardhat's releases.

Hardhat v2.12.2

  • Fixed an issue when forking networks like Arbitrum Nitro that use non-standard transaction types (#2995, #3194).
  • Fixed an issue that was causing build-info file names to not be deterministic.

Hardhat v2.12.1

Fixed a problem that was preventing Hardhat from being used in Alpine Linux.

Hardhat v2.12.0

This new minor version sets the merge hardfork as the default hardfork used by the Hardhat Network. Most users shouldn't be affected by this change.

Besides that, this version fixes a couple of issues related to our compilation pipeline.

Hardhat v2.11.2

This new version of Hardhat brings several fixes and improvements:

  • Solidity 0.8.17 is now supported and used by default in the sample projects.
  • When forking a network, the disk cache is always used (thanks @​bernard-wagner!)
  • Stack traces are shown by default in CI servers
  • We fixed a problem related to the validation of the eth_getStorageAt being too restrictive (thanks @​aathan!)
  • Reverted an unintentional breaking change in the type of the resolved config
  • Improved the heuristic for detecting that a contract deployment failed because the code size was too large

Hardhat v2.11.1

This release fixes a couple of bugs in v2.11.0:

  • Some chains, like Polygon, were causing issues when they were forked
  • The WASM version of the solidity compiler, which is used in some machines, was not being correctly downloaded.

Hardhat v2.11.0 — The Merge support and fast compilation

We are excited to release this new version of Hardhat, as it makes Hardhat Network compatible with The Merge and makes our compilation much faster. Read on to learn more about these and other improvements.

Support for The Merge

Hardhat Network now has support for The Merge. To try it out, use the new merge hardfork setting. This hardfork is not selected by default, but you can enable it in your config:

module.exports = {
  networks: {
    hardhat: {
      hardfork: "merge"
    }
  }  
};

Selecting this new hardfork will introduce a few changes to how Hardhat Network runs, but your contracts should still work without any modification. The rest of this section explains what these changes are.

The DIFFICULTY opcode (now renamed to PREVRANDAO) will return a pseudo-random value. This value is also exposed in the block header as mixHash.

You can use the new hardhat_setPrevRandao RPC method to modify the value returned by DIFFICULTY/PREVRANDAO in the next block. We recommend using the setPrevRandao network helper for this.

... (truncated)

Commits
  • fda6bd9 Version Packages
  • 6cb5e0b Merge pull request #3305 from NomicFoundation/buildinfo-names-are-not-determi...
  • c6420a3 Add test for consistent build-info names
  • c2bd001 Merge pull request #3308 from tamoroso/main
  • 19c5d30 Update auto-assign list
  • 162d220 Fixing broken links
  • f6c74bc Create mean-mice-tell.md
  • 0429ea9 Sort files when creating the solc input
  • 8575354 Merge pull request #3302 from NomicFoundation/add-flag-to-ignore-unknown-eip-...
  • 53ff90c Update nine-kangaroos-marry.md
  • Additional commits viewable in compare view


Updates truffle from 5.1.49 to 5.6.5

Release notes

Sourced from truffle's releases.

v5.6.5 — Slurping noodles in the woods

If a wild Truffle release runs by unnoticed in the woods 🦌, do its legs make a sound? Er, or I mean if it falls on a tree does it makes sound? 🌳 Or something?

Fall cools things down, turns the leaves brown and red, and makes us a bit quieter and introspective. Just a bit like here in the Truffle camp where we've been directing focus inward, deep into the internals of Truffle to make improvements. It's getting better all the time!

Aside from this mass of improvements, there was a bug fixed with the config command. Some problem with a logger was causing it to crash when fetching a value. "Well", we thought, "crashing is no fun!". And because we love fun so much 👻, we fixed it!

One other thing to mention, is that there are some more sourcify networks that got added to the source-fetcher. I suppose this is now a monthly thing for us to grow this list of networks. It is a well-known fact, of course, that "more networks" = "more fun", and you already know how we feel about fun...👯🏼‍♀️

Welp, as mentioned there are also a bunch of improvements to the internals of Truffle. An unnecessary dependency got removed here and some updates were made to the test suite. Some dead code was removed and a README had some improvements made to it. README improvements are fun, right?

So we hope you add some soy sauce, get a forkful, and slurp it down with some noodles. 🍜 Happy Truffling!

How to upgrade

We recommend upgrading to the latest version of Truffle by running:

npm uninstall -g truffle
npm install -g truffle

Changelog

Enhancement

Bug fix

Internal improvements

Dependency updates

... (truncated)

Commits


Updates recursive-readdir from 2.2.2 to 2.2.3

Changelog

Sourced from recursive-readdir's changelog.

v2.2.3 - Mon, 19 Sep 2016 21:55:22 GMT

v2.1.0 - Mon, 19 Sep 2016 21:55:22 GMT

v2.0.0 - Wed, 06 Apr 2016 04:31:02 GMT

v1.3.0 - Wed, 14 Oct 2015 14:35:55 GMT

v1.2.1 - Wed, 14 Jan 2015 16:49:55 GMT

Commits
Maintainer changes

This version was pushed to npm by bnb, a new releaser for recursive-readdir since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/sirenmarkets/core/network/alerts).