Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump got, web3, @nomicfoundation/hardhat-toolbox and solidity-coverage in /contractsproj #2

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Feb 7, 2023

Bumps got to 12.1.0 and updates ancestor dependencies got, web3, @nomicfoundation/hardhat-toolbox and solidity-coverage. These dependencies need to be updated together.

Updates got from 9.6.0 to 12.1.0

Release notes

Sourced from got's releases.

v12.1.0

Improvements

Fixes

sindresorhus/got@v12.0.4...v12.1.0

v12.0.4

  • Remove stream lock - unreliable since Node 17.3.0 bb8eca924c338ca12d5b90d6a26aa28dbddb42ee

v12.0.3

  • Allow more types in the json option (#2015) eb045bf

sindresorhus/got@v12.0.2...v12.0.3

v12.0.2

  • Fix encoding option with {responseType: 'json'} (#1996) 0703318

sindresorhus/got@v12.0.1...v12.0.2

v12.0.1

  • Fix nock compatibility (#1959) bf39d2c
  • Fix missing export of Request TypeScript type (#1940) 0f9f2b8

sindresorhus/got@v12.0.0...v12.0.1

v12.0.0

Introducing Got v12.0.0 🎉

Long time no see! The latest Got version (v11.8.2) was released just in February ❄️ We have been working hard on squashing bugs and improving overall experience.

If you find Got useful, you might want to sponsor the Got maintainers.

This package is now pure ESM

Please read this. Also see sindresorhus/got#1789.

  • Please don't open issues about [ERR_REQUIRE_ESM] and Must use import to load ES Module errors. This is a problem with your setup, not Got.
  • Please don't open issues about using Got with Jest. Jest does not fully support ESM.
  • Pretty much any problem with loading this package is a problem with your bundler, test framework, etc, not Got.
  • If you use TypeScript, you will want to stay on Got v11 until TypeScript 4.6 is out. Why.
  • If you use a bundler, make sure it supports ESM and that you have correctly configured it for ESM.

... (truncated)

Commits

Updates web3 from 1.7.4 to 1.8.2

Release notes

Sourced from web3's releases.

[email protected]

Initial alpha release

Install with yarn add [email protected]

[email protected]

Initial alpha release

Install with yarn add [email protected]

[email protected]

Initial alpha release

Install with yarn add [email protected]

[email protected]

Changed

  • Update version to 1.0.0-alpha.1 for web3-providers-base
  • Update version to 4.0.0-alpha.0 for web3-utils in web3-providers-base

[email protected]

Initial alpha release

Install with yarn add [email protected]

[email protected]

Initial alpha release

Install with yarn add [email protected]

Changelog

Sourced from web3's changelog.

[1.7.4]

Fixed

  • Fix dead link in web3-eth.rst (#4916)
  • Fix web3-core-method throws on f.call = this.call when intrinsic is frozen (#4918) (#4938)
  • Fix static tuple encoding (#4673) (#4884)
  • Fix bug in handleRevert logic for eth_sendRawTransaction (#4902)
  • Fix resolve type of getBlock function (#4911)
  • Web3-utils BN fix (#5132)

Changed

  • Replace deprecated String.prototype.substr() (#4855)
  • Exporting AbiCoder as coder (#4937)
  • Github build workflow updated min build for node.js 12 and tests for 12, 14 and 16 (#5014)
  • Updated libraries using BN and the BN library (#5072)

Added

  • Exposing web3.eth.Contract.setProvider() as per public documentation (#4822) (#5001)
  • Improve npm script commands for development purposes (#4848)

Security

  • npm audit fix to address vulnerabilities and update libraries (#5014)

[1.7.5]

Changed

  • Replace xhr2-cookies deps to cross-fetch for web3-providers-http (#5085)

Added

  • Documentation details about maxFeePerGas and maxPriorityFeePerGas (#5121)
  • Added createAccessList types in web3.eth (#5146)

Fixed

  • Improving AbstractProvider interface (#5150)
  • Fix typos in web3-eth-accounts.rst & TESTING.md (#5047)
  • Fix remove wallet using an index when an account address and address lowercase are equal (#5049)
  • Improve README.md & Fix typos (#4848)
  • Add optional hex formatting parameter for getTransactionrReceipt (#5153)
  • Fix transactionRoot -> transactionsRoot in BlockHeader (#5083)
  • Fix Promise in Accounts.signTransaction() throwing errors that cannot be caught (#4724)
  • Fixed unit tests & removed dead code for web3-providers-http (#5228)

Security

  • Updated got lib version and fixed other libs using npm audit fix (#5178) (#5254)

[1.8.0]

Changed

  • Updated sha3 and sha3Raw type definition to accept Buffer
  • Removing legacy field in lerna.json (#5403)

... (truncated)

Commits

Updates @nomicfoundation/hardhat-toolbox from 1.0.2 to 2.0.1

Release notes

Sourced from @​nomicfoundation/hardhat-toolbox's releases.

@​nomicfoundation/hardhat-toolbox@​2.0.1

This release upgrades the versions of mocha and @types/mocha used by the Hardhat Toolbox.

@​nomicfoundation/hardhat-toolbox@​2.0.0

This version of the Toolbox upgrades solidity-coverage to its latest version. Since this new version includes some breaking changes, we are bumping the Toolbox to a new major version.

If you want to upgrade to this version and you are using npm 7 or later, you only need to upgrade the Toolbox:

npm i --save-dev hardhat@latest @nomicfoundation/hardhat-toolbox@latest

If you are using yarn or an old version of npm, you'll also need to upgrade Hardhat and solidity-coverage:

yarn add --dev hardhat@latest @nomicfoundation/hardhat-toolbox@latest solidity-coverage@latest
Commits
  • 1c78aa9 Version Packages
  • e92b6b7 Merge pull request #3560 from freiremanuel91/patch-1
  • 485c287 Inclusion of coc extension into Privacy Policy
  • 0b79475 Merge pull request #3558 from NomicFoundation/remove-solidity-survey-msg
  • 72f54a0 Revert banner content
  • a200a66 Create twelve-seals-dream.md
  • d9b600b Remove solidity survey message
  • 2fb8044 Fix auto-label workflow for external PRs
  • 87150ca Merge pull request #3554 from Hopsken/feat/project-creation-support-pnpm
  • 2e1d0db Merge pull request #3073 from NomicFoundation/add-changeset-check
  • Additional commits viewable in compare view

Updates solidity-coverage from 0.7.22 to 0.8.2

Release notes

Sourced from solidity-coverage's releases.

0.8.2

What's Changed

New Contributors

Full Changelog: sc-forks/solidity-coverage@v0.8.1...v0.8.2

0.8.1

What's Changed

Full Changelog: sc-forks/solidity-coverage@v0.8.0...v0.8.1

0.8.0

Hi!

⚠️ This version requires Hardhat >= 2.11.0 (Ethereum Merge)

New Features

A central focus of the 0.8.0 release is improving the coverage tool's branch detection.

Beginning with this version the following syntax is measured as a branch:

OR conditions

When a logical expression is composed with the || operator, both sides can be considered branches. To test the entire expression

if (a == 1 || a == 2)

... a must equal 1, 2 and neither of those values. (Thanks to Gnosis engineer @​rmeissner for proposing this in #175)

Screen Shot 2021-01-12 at 9 41 09 PM

Ternary Conditionals

Long ago, when Solidity was 0.4, solidity-coverage treated ternary conditionals like regular if/else statements. Some language improvements v0.5 subsequently made this impossible. Now it's back...

Screen Shot 2021-01-12 at 9 47 43 PM

Modifier Invocations

Solidity-coverage already covers the code within modifier definitions. However, each modifier invocation at the function level should really be considered its own branch. Some of the most critical logic in Solidity contracts is handled this way (ex: onlyOwner). Testing the pass/fail cases for each occurrence of these gates protects you from accidentally removing them during a refactor.

Because it's possible to write a modifier which performs a preparatory task and never reverts, there's a new option (modifierWhitelist) which allows you to exclude specific modifiers from branch measurement.

... (truncated)

Changelog

Sourced from solidity-coverage's changelog.

Changelog

0.8.1 / 2022-09-06

0.8.0 / 2022-09-05

0.7.21 / 2022-04-24

0.7.20 / 2022-02-15

0.7.19 / 2022-02-09

0.7.18 2022-01-17

0.7.16 / 2021-03-04

0.7.15 / 2021-02-16

0.7.14 / 2021-01-14

  • Support file scoped function definitions for solc >= 0.7.4
  • Upgrade @​solidity-parser/parser to v0.11.0

0.7.13 / 2020-12-03

  • Use default artifact paths for hardhat >= 2.0.4 (Fixes hardhat-deploy bug)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [got](https://github.com/sindresorhus/got) to 12.1.0 and updates ancestor dependencies [got](https://github.com/sindresorhus/got), [web3](https://github.com/ethereum/web3.js), [@nomicfoundation/hardhat-toolbox](https://github.com/nomicfoundation/hardhat) and [solidity-coverage](https://github.com/sc-forks/solidity-coverage). These dependencies need to be updated together.


Updates `got` from 9.6.0 to 12.1.0
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](sindresorhus/got@v9.6.0...v12.1.0)

Updates `web3` from 1.7.4 to 1.8.2
- [Release notes](https://github.com/ethereum/web3.js/releases)
- [Changelog](https://github.com/web3/web3.js/blob/1.x/CHANGELOG.md)
- [Commits](web3/web3.js@v1.7.4...v1.8.2)

Updates `@nomicfoundation/hardhat-toolbox` from 1.0.2 to 2.0.1
- [Release notes](https://github.com/nomicfoundation/hardhat/releases)
- [Commits](https://github.com/nomicfoundation/hardhat/compare/@nomicfoundation/[email protected]...@nomicfoundation/[email protected])

Updates `solidity-coverage` from 0.7.22 to 0.8.2
- [Release notes](https://github.com/sc-forks/solidity-coverage/releases)
- [Changelog](https://github.com/sc-forks/solidity-coverage/blob/master/CHANGELOG.md)
- [Commits](https://github.com/sc-forks/solidity-coverage/commits/v0.8.2)

---
updated-dependencies:
- dependency-name: got
  dependency-type: indirect
- dependency-name: web3
  dependency-type: indirect
- dependency-name: "@nomicfoundation/hardhat-toolbox"
  dependency-type: direct:development
- dependency-name: solidity-coverage
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 7, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants