From 2e834475edfc16175027e3f8ce583fc2635a2795 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sat, 1 Aug 2026 05:34:43 +0000 Subject: [PATCH] Pin dependencies --- .github/workflows/code-coverage.yaml | 4 ++-- .github/workflows/echidna.yaml | 10 ++++---- .github/workflows/linter.yaml | 4 ++-- .github/workflows/publish.yaml | 4 ++-- .github/workflows/slither.yaml | 6 ++--- .github/workflows/tests-forked.yaml | 4 ++-- .github/workflows/tests.yaml | 10 ++++---- package.json | 36 ++++++++++++++-------------- 8 files changed, 39 insertions(+), 39 deletions(-) diff --git a/.github/workflows/code-coverage.yaml b/.github/workflows/code-coverage.yaml index b2c424533..e9088a965 100644 --- a/.github/workflows/code-coverage.yaml +++ b/.github/workflows/code-coverage.yaml @@ -7,8 +7,8 @@ jobs: runs-on: ubuntu-latest name: Solidity code coverage steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 with: node-version: '22.x' - run: npm ci diff --git a/.github/workflows/echidna.yaml b/.github/workflows/echidna.yaml index 0f82457d0..14badc573 100644 --- a/.github/workflows/echidna.yaml +++ b/.github/workflows/echidna.yaml @@ -16,7 +16,7 @@ jobs: contracts: ${{ steps.discover.outputs.contracts }} steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: submodules: recursive @@ -44,12 +44,12 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: submodules: recursive - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 with: node-version: '22.x' cache: 'npm' @@ -60,7 +60,7 @@ jobs: GH_TOKEN: ${{ secrets.github_token }} - name: Install Foundry - uses: foundry-rs/foundry-toolchain@v1 + uses: foundry-rs/foundry-toolchain@908c540300062bd5a7e473851cdb4282204cee09 # v1 - name: Run Echidna uses: crytic/echidna-action@v2 @@ -72,7 +72,7 @@ jobs: test-mode: property - name: Upload corpus - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 if: always() with: name: echidna-corpus-${{ matrix.contract }} diff --git a/.github/workflows/linter.yaml b/.github/workflows/linter.yaml index 968e43098..d83c1a198 100644 --- a/.github/workflows/linter.yaml +++ b/.github/workflows/linter.yaml @@ -8,8 +8,8 @@ jobs: runs-on: ubuntu-latest name: Solidity linter steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 with: node-version: '22.x' - run: npm ci diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index 765bf835c..a2a6629f3 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -8,9 +8,9 @@ jobs: publish: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 - name: Use Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 with: node-version: '22.x' registry-url: 'https://registry.npmjs.org' diff --git a/.github/workflows/slither.yaml b/.github/workflows/slither.yaml index b98405861..77cede618 100644 --- a/.github/workflows/slither.yaml +++ b/.github/workflows/slither.yaml @@ -5,10 +5,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 with: node-version: '22.x' @@ -21,7 +21,7 @@ jobs: run: npx hardhat compile --force - name: Run Slither - uses: crytic/slither-action@v0.3.2 + uses: crytic/slither-action@8fd2924af9f2d7cb899dd25deefd2d5d6686f721 # v0.3.2 id: slither with: fail-on: high diff --git a/.github/workflows/tests-forked.yaml b/.github/workflows/tests-forked.yaml index 729deacfd..a04d342ac 100644 --- a/.github/workflows/tests-forked.yaml +++ b/.github/workflows/tests-forked.yaml @@ -12,9 +12,9 @@ jobs: HOODI_RPC_URL: ${{ secrets.hoodi_rpc_url }} MAINNET_RPC_URL: ${{ secrets.mainnet_rpc_url }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 with: node-version: '22.x' cache: 'npm' diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml index 8cc13825c..4ce5f80ea 100644 --- a/.github/workflows/tests.yaml +++ b/.github/workflows/tests.yaml @@ -7,9 +7,9 @@ jobs: runs-on: ubuntu-latest name: Hardhat unit test steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 with: node-version: '22.x' cache: 'npm' @@ -39,14 +39,14 @@ jobs: continue-on-error: false - name: Upload gas report - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: gas-report path: gas-report.json retention-days: 30 - name: Upload gas comparison report - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: gas-compare path: gas-compare.txt @@ -54,7 +54,7 @@ jobs: - name: Comment on PR with gas report if: github.event_name == 'pull_request' - uses: actions/github-script@v7 + uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7 with: script: | const fs = require('fs'); diff --git a/package.json b/package.json index c8a8b7a7a..69179f30c 100644 --- a/package.json +++ b/package.json @@ -59,23 +59,23 @@ "size-contracts": "npx hardhat size-contracts" }, "devDependencies": { - "@nomicfoundation/hardhat-ethers": "^4.0.3", - "@nomicfoundation/hardhat-ethers-chai-matchers": "^3.0.2", - "@nomicfoundation/hardhat-ignition": "^3.0.6", - "@nomicfoundation/hardhat-toolbox-mocha-ethers": "^3.0.2", - "@nomicfoundation/hardhat-verify": "^3.0.8", - "@openzeppelin/contracts": "^4.9.6", - "@openzeppelin/contracts-upgradeable": "^4.9.6", - "@types/chai": "^4.3.20", - "@types/chai-as-promised": "^8.0.2", - "@types/mocha": "^10.0.10", - "@types/node": "^22.19.2", - "chai": "^5.3.3", - "dotenv": "^17.2.3", - "ethers": "^6.16.0", - "hardhat": "^3.1.0", - "mocha": "^11.7.5", - "solhint": "^5.0.0", - "tsx": "^4.19.0" + "@nomicfoundation/hardhat-ethers": "4.0.3", + "@nomicfoundation/hardhat-ethers-chai-matchers": "3.0.2", + "@nomicfoundation/hardhat-ignition": "3.0.6", + "@nomicfoundation/hardhat-toolbox-mocha-ethers": "3.0.2", + "@nomicfoundation/hardhat-verify": "3.0.8", + "@openzeppelin/contracts": "4.9.6", + "@openzeppelin/contracts-upgradeable": "4.9.6", + "@types/chai": "4.3.20", + "@types/chai-as-promised": "8.0.2", + "@types/mocha": "10.0.10", + "@types/node": "22.19.2", + "chai": "5.3.3", + "dotenv": "17.2.3", + "ethers": "6.16.0", + "hardhat": "3.1.0", + "mocha": "11.7.5", + "solhint": "5.2.0", + "tsx": "4.21.0" } }