Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update dependency solhint to v5 #1096

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented May 12, 2024

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
solhint (source) 4.5.2 -> 5.0.1 age adoption passing confidence

Release Notes

protofire/solhint (solhint)

v5.0.1

Compare Source

BREAKING CHANGES (refer to v5.0.0)

Fixed an issue on the returining values where only was evaluating the first report instead of all of them.



v5.0.0

Compare Source

BREAKING CHANGES
Solhint EXIT codes

Solhint changed how the exit codes are implemented:

Exit with 0 code When execution was ok and there were no errors when evaluating the code according to the rules

Exit with 1 code When execution was ok and there are errors reported

Exit with 1 code When execution was ok and max warnings is lower than the reported warnings

Exit with 255 code When there's an error in the execution (bad config, writing not allowed, wrong parameter, file not found, etc)

Solhint QUIET mode

QUIET mode (-c quiet) option now works with the warnings and may exit with 1 if there are more than defined by user

Thanks to @​juanpcapurro for providing the code



v4.5.4

Compare Source

Fixed
  • gas-custom-errors improved logic to ranged pragma versions #​573
  • gas-indexed-events #​573

v4.5.3

Compare Source


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

Copy link

vercel bot commented May 12, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
nft-app ✅ Ready (Inspect) Visit Preview 💬 Add feedback May 13, 2024 4:32pm

Copy link

codesandbox bot commented May 12, 2024

Review or Edit in CodeSandbox

Open the branch in Web EditorVS CodeInsiders

Open Preview

Copy link

changeset-bot bot commented May 12, 2024

⚠️ No Changeset found

Latest commit: be19b09

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

Copy link

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@ethersproject/abstract-provider@5.7.0 None 0 61 kB ricmoo
npm/@ethersproject/abstract-signer@5.7.0 None 0 82.2 kB ricmoo
npm/@ethersproject/address@5.7.0 None 0 33.1 kB ricmoo
npm/@ethersproject/base64@5.7.0 None 0 11.3 kB ricmoo
npm/@ethersproject/basex@5.7.0 None 0 30.1 kB ricmoo
npm/@ethersproject/bignumber@5.7.0 None 0 143 kB ricmoo
npm/@ethersproject/bytes@5.7.0 None 0 80.9 kB ricmoo
npm/@ethersproject/constants@5.7.0 None 0 18.7 kB ricmoo
npm/@ethersproject/hash@5.7.0 None 0 257 kB ricmoo
npm/@ethersproject/hdnode@5.7.0 None 0 80.7 kB ricmoo
npm/@ethersproject/json-wallets@5.7.0 None 0 125 kB ricmoo
npm/@ethersproject/keccak256@5.7.0 None 0 6.09 kB ricmoo
npm/@ethersproject/logger@5.7.0 None 0 69.5 kB ricmoo
npm/@ethersproject/networks@5.7.1 None 0 47.5 kB ricmoo
npm/@ethersproject/pbkdf2@5.7.0 None 0 17.4 kB ricmoo
npm/@ethersproject/properties@5.7.0 None 0 31 kB ricmoo
npm/@ethersproject/providers@5.7.2 network +1 1.21 MB ricmoo
npm/@ethersproject/random@5.7.0 None 0 17.3 kB ricmoo
npm/@ethersproject/rlp@5.7.0 None 0 29.6 kB ricmoo
npm/@ethersproject/sha2@5.7.0 None 0 21.7 kB ricmoo
npm/@ethersproject/signing-key@5.7.0 None 0 244 kB ricmoo
npm/@ethersproject/strings@5.7.0 None 0 119 kB ricmoo
npm/@ethersproject/transactions@5.7.0 None 0 89.6 kB ricmoo
npm/@ethersproject/units@5.7.0 None 0 20.2 kB ricmoo
npm/@ethersproject/web@5.7.1 network 0 128 kB ricmoo
npm/@ethersproject/wordlists@5.7.0 None 0 390 kB ricmoo
npm/@hookform/devtools@4.3.1 environment Transitive: filesystem +15 3.51 MB bluebill1049
npm/@ledgerhq/hw-transport@4.78.0 None +3 255 kB gre
npm/@ljharb/through@2.3.13 None 0 31.7 kB ljharb
npm/@noble/curves@1.2.0 None 0 1.35 MB paulmillr
npm/@noble/hashes@1.3.2 None 0 747 kB paulmillr
npm/@noble/secp256k1@1.7.1 None 0 111 kB paulmillr
npm/@nomiclabs/hardhat-ethers@2.2.3 None 0 80.9 kB fvictorio
npm/@nomiclabs/hardhat-etherscan@3.1.8 environment +1 397 kB fvictorio
npm/@nomiclabs/hardhat-waffle@2.0.6 None 0 49.3 kB fvictorio
npm/@openzeppelin/contracts-upgradeable@4.9.6 None 0 2.11 MB amxx
npm/@openzeppelin/contracts@4.9.6 None 0 2.02 MB frangio
npm/@openzeppelin/hardhat-upgrades@1.28.0 filesystem Transitive: environment, network +15 6.6 MB ericglau
npm/@scure/base@1.1.5 None 0 79.4 kB paulmillr
npm/@sindresorhus/is@5.6.0 None 0 61.3 kB sindresorhus
npm/@szmarczak/http-timer@5.0.1 None 0 10.2 kB szmarczak
npm/@tailwindcss/typography@0.5.10 None 0 95.8 kB thecrypticace
npm/@trivago/prettier-plugin-sort-imports@4.3.0 Transitive: environment +6 1.86 MB behraang
npm/@trufflesuite/bigint-buffer@1.1.9 None 0 253 kB micaiahreid
npm/@typechain/ethers-v5@11.1.2 filesystem 0 87.5 kB ethereum-ts-bot
npm/@typechain/hardhat@9.1.0 filesystem Transitive: network +6 17 MB ethereum-ts-bot
npm/@types/bn.js@5.1.5 None 0 13.8 kB types
npm/@types/cacheable-request@6.0.3 None +2 20 kB types
npm/@types/chai@4.3.14 None 0 81.3 kB types
npm/@types/http-cache-semantics@4.0.4 None 0 9.28 kB types
npm/@types/lru-cache@5.1.1 None 0 9.36 kB types
npm/@types/mocha@10.0.6 None 0 95.6 kB types
npm/@types/react-dom@18.2.22 None 0 34 kB types
npm/@types/react@18.2.67 None +3 1.69 MB types
npm/@types/seedrandom@3.0.1 None 0 6.27 kB types
npm/@typescript-eslint/eslint-plugin@7.3.1 None +9 4.61 MB jameshenry
npm/@typescript-eslint/parser@7.3.1 None +4 1.38 MB jameshenry
npm/@vitejs/plugin-react-refresh@1.3.6 filesystem +3 86.1 kB patak
npm/@walletconnect/encoding@1.0.2 None 0 294 kB bkrem
npm/@walletconnect/jsonrpc-types@1.0.3 None 0 74.1 kB gancho_walletconnect
npm/@walletconnect/jsonrpc-utils@1.0.8 None +1 345 kB gancho_walletconnect
npm/@walletconnect/safe-json@1.0.2 None 0 215 kB gancho_walletconnect
npm/@walletconnect/types@1.8.0 None 0 11.1 kB bkrem
npm/@walletconnect/window-getters@1.0.0 None 0 100 kB pedrouid
npm/@web3-react/core@6.1.9 environment +2 313 kB noahwz
npm/@web3-react/injected-connector@6.0.7 environment +2 263 kB noahwz
npm/@web3-react/network-connector@6.2.9 environment, network +2 167 kB noahwz
npm/@web3-react/walletconnect-connector@6.2.13 environment Transitive: network +31 5.27 MB noahwz
npm/@yarnpkg/lockfile@1.1.0 environment, eval, filesystem 0 280 kB arcanis
npm/abbrev@1.0.9 None 0 3.41 kB isaacs
npm/abstract-leveldown@6.3.0 None +1 302 kB vweevers
npm/accepts@1.3.8 None 0 16.8 kB dougwilson
npm/aes-js@4.0.0-beta.5 None 0 738 kB ricmoo
npm/ajv@6.12.6 eval 0 929 kB esp
npm/arr-diff@4.0.0 None 0 7.9 kB jonschlinkert
npm/arr-flatten@1.1.0 None 0 6.88 kB jonschlinkert
npm/arr-union@3.1.0 None 0 6.66 kB jonschlinkert
npm/array-back@3.1.0 None 0 8.95 kB 75lb
npm/array-flatten@1.1.1 None 0 4.42 kB blakeembrey
npm/array-includes@3.1.7 None 0 25.4 kB ljharb
npm/array-unique@0.3.2 None 0 7.16 kB jonschlinkert
npm/array.prototype.findlast@1.2.5 None +11 2.57 MB ljharb
npm/array.prototype.flat@1.3.2 None 0 18.7 kB ljharb
npm/array.prototype.reduce@1.0.6 None +1 33.5 kB ljharb
npm/asn1.js@4.10.1 unsafe 0 46.6 kB indutny
npm/assert-plus@1.0.0 environment 0 11.4 kB pfmooney
npm/assign-symbols@1.0.0 None 0 5.85 kB phated
npm/async-eventemitter@0.2.4 None 0 19.2 kB ahultgren
npm/async@2.6.4 None 0 541 kB hargasinski
npm/atob@2.1.2 None 0 36.2 kB coolaj86
npm/autoprefixer@10.4.19 environment 0 199 kB ai
npm/axios@1.6.8 network 0 1.84 MB jasonsaayman
npm/babel-core@6.26.3 environment, filesystem, unsafe +21 740 kB loganfsmyth
npm/babel-plugin-transform-es2015-modules-amd@6.24.1 None 0 5.16 kB hzoo
npm/babel-plugin-transform-es2015-modules-commonjs@6.26.2 None +1 31.5 kB loganfsmyth
npm/babel-runtime@6.26.0 Transitive: eval +1 73.6 kB hzoo
npm/babel-template@6.26.0 None +1 288 kB hzoo
npm/babel-traverse@6.26.0 environment +11 524 kB hzoo
npm/babel-types@6.26.0 None +1 143 kB hzoo
npm/base-x@3.0.9 None 0 9.35 kB junderw
npm/base@0.11.2 None +5 86.5 kB jonschlinkert
npm/bip39@3.0.4 None +1 945 kB junderw
npm/bluebird@3.7.2 environment, eval, unsafe 0 632 kB esailija
npm/bn.js@5.2.1 None 0 99 kB fanatid
npm/body-parser@1.20.2 network Transitive: environment, eval, filesystem +5 675 kB dougwilson
npm/brorand@1.1.0 None 0 3.52 kB indutny
npm/browserify-aes@1.2.0 None +1 34.6 kB cwmma
npm/browserify-cipher@1.0.1 None +2 52.5 kB cwmma
npm/browserify-rsa@4.1.0 None 0 3.68 kB cwmma
npm/browserify-sign@4.2.3 None +2 140 kB ljharb
npm/browserslist@4.23.0 environment, filesystem 0 62.8 kB ai
npm/bs58@4.0.1 None 0 4.57 kB dcousens
npm/buffer-from@1.1.2 None 0 5.05 kB linusu
npm/buffer-to-arraybuffer@0.0.5 None 0 6.24 kB miguelmota
npm/buffer@4.9.2 None 0 264 kB feross
npm/bufferutil@4.0.5 None 0 407 kB lpinca
npm/bytewise-core@1.2.3 None 0 31.8 kB deanlandolt
npm/bytewise@1.1.0 None 0 14 kB deanlandolt
npm/cacheable-lookup@7.0.0 None 0 25.2 kB sindresorhus
npm/cacheable-request@10.2.14 None +1 81.3 kB jaredwray
npm/cachedown@1.0.0 None +2 181 kB tradle
npm/camelcase@6.3.0 None 0 11.7 kB sindresorhus
npm/caniuse-lite@1.0.30001599 None 0 2 MB caniuse-lite
npm/catering@2.1.1 None 0 5 kB vweevers
npm/chai@5.1.0 None +3 546 kB chaijs
npm/chownr@1.1.4 filesystem 0 5.71 kB isaacs
npm/cids@0.7.5 None +1 2.17 MB vmx
npm/cipher-base@1.0.4 None 0 7.95 kB cwmma
npm/clone-response@1.0.3 None +1 8.11 kB sindresorhus
npm/clone@2.1.2 None 0 15.9 kB pvorb
npm/combined-stream@1.0.8 None +1 19.5 kB alexindigo
npm/commander@3.0.2 filesystem, shell 0 77.9 kB abetomo
npm/console-control-strings@1.1.0 None 0 12.7 kB iarna
npm/content-disposition@0.5.4 None 0 19.1 kB dougwilson
npm/content-hash@2.5.2 None +2 611 kB pldespaigne
npm/content-type@1.0.5 None 0 10.5 kB dougwilson
npm/convert-source-map@1.9.0 filesystem 0 11.4 kB thlorenz
npm/cookie-signature@1.0.6 None 0 3.94 kB natevw
npm/cookie@0.4.2 None 0 19.7 kB dougwilson
npm/cookiejar@2.1.4 None 0 14.5 kB andyburke
npm/core-js-compat@3.36.1 None 0 717 kB zloirock
npm/core-js@2.6.12 environment, eval, filesystem 0 2.26 MB zloirock
npm/core-util-is@1.0.2 None 0 23.2 kB isaacs
npm/cors@2.8.5 None 0 20 kB dougwilson
npm/create-ecdh@4.0.4 None 0 5.4 kB cwmma
npm/create-hash@1.2.0 None 0 5.21 kB cwmma
npm/create-hmac@1.1.7 None 0 5.81 kB cwmma
npm/crypto-browserify@3.12.0 None +1 70.8 kB cwmma
npm/crypto-js@3.3.0 None 0 430 kB evanvosberg
npm/d@1.0.2 None 0 14.2 kB medikoo
npm/daisyui@4.7.3 None +3 4 MB saadeghi
npm/decompress-response@6.0.0 None +1 11.5 kB sindresorhus
npm/deep-extend@0.6.0 None 0 9.19 kB unclechu
npm/deep-is@0.1.4 None 0 8.11 kB thlorenz
npm/defer-to-connect@2.0.1 None 0 5.44 kB szmarczak
npm/deferred-leveldown@5.3.0 None +1 253 kB vweevers
npm/define-properties@1.2.1 None 0 12.9 kB ljharb
npm/define-property@1.0.0 None +1 27.4 kB jonschlinkert
npm/dequal@2.0.3 None 0 14.2 kB lukeed
npm/duplexer3@0.1.5 None 0 5.69 kB sindresorhus
npm/electron-to-chromium@1.4.711 None 0 281 kB kilianvalkhof
npm/elliptic@6.5.4 None 0 118 kB indutny
npm/encodeurl@1.0.2 None 0 7.86 kB dougwilson
npm/encoding-down@6.3.0 None 0 46.4 kB vweevers
npm/es-abstract@1.22.5 None +6 2.1 MB ljharb
npm/es-iterator-helpers@1.0.18 None +10 321 kB ljharb
npm/es-shim-unscopables@1.0.2 None 0 11 kB ljharb
npm/es5-ext@0.10.64 eval +1 404 kB medikoo
npm/es6-symbol@3.1.4 None 0 16.5 kB medikoo
npm/escape-html@1.0.3 None 0 3.66 kB dougwilson
npm/escape-string-regexp@4.0.0 None 0 3.79 kB sindresorhus
npm/eslint-config-productsway@1.3.2 None +12 5.09 MB jellydn
npm/eslint@8.57.0 environment, filesystem Transitive: unsafe +12 4.08 MB eslintbot

🚮 Removed packages: npm/@fastify/autoload@5.8.0, npm/@fastify/cors@9.0.1, npm/@fastify/deepmerge@1.3.0, npm/@fastify/error@3.4.1, npm/@fastify/multipart@8.2.0, npm/@fastify/sensible@5.5.0, npm/@istanbuljs/schema@0.1.3, npm/@sinclair/typebox@0.32.18, npm/@types/busboy@1.5.3, npm/@types/tap@15.0.11, npm/agent-base@7.1.0, npm/ajv@8.12.0, npm/close-with-grace@1.3.0, npm/cross-env@7.0.3, npm/esbuild@0.19.12, npm/fast-deep-equal@3.1.3, npm/fast-json-stringify@5.13.0, npm/fast-uri@2.3.0, npm/fastify-cli@6.1.1, npm/fastify-plugin@4.5.1, npm/fastify-tsconfig@2.0.0, npm/fastify@4.26.2, npm/fastq@1.17.1, npm/foreground-child@3.1.1, npm/forwarded@0.2.0, npm/fsevents@2.3.3, npm/get-intrinsic@1.2.4, npm/has-tostringtag@1.0.2, npm/inherits@2.0.4, npm/interface-blockstore@2.0.3, npm/interface-store@2.0.2, npm/ipfs-core-types@0.8.4, npm/ipfs-unixfs@6.0.9, npm/is-core-module@2.13.1, npm/is-glob@4.0.3, npm/istanbul-lib-coverage@3.2.2, npm/istanbul-lib-report@3.0.1, npm/it-all@1.0.6, npm/it-batch@1.0.9, npm/jackspeak@2.3.6, npm/joycon@3.1.1, npm/js-tokens@4.0.0, npm/merge2@1.4.1, npm/minimist@1.2.8, npm/minipass@7.0.4, npm/minizlib@2.1.2, npm/mkdirp@3.0.1, npm/ms@2.1.2, npm/multiformats@9.9.0, npm/nanoid@3.3.7, npm/nft.storage@7.1.1, npm/node-fetch@2.7.0, npm/normalize-path@3.0.0, npm/once@1.4.0, npm/onetime@5.1.2, npm/p-limit@2.3.0, npm/path-key@3.1.1, npm/path-scurry@1.10.1, npm/picomatch@2.3.1, npm/pino-abstract-transport@1.1.0, npm/pirates@4.0.6, npm/readable-stream@3.6.2, npm/resolve-import@1.4.5, npm/rfdc@1.3.1, npm/rimraf@5.0.5, npm/secure-json-parse@2.7.0, npm/signal-exit@4.1.0, npm/sonic-boom@3.8.0, npm/stream-to-it@0.2.4, npm/string_decoder@1.3.0, npm/sync-content@1.0.2, npm/tap@18.7.1, npm/tar@6.2.0, npm/tshy@1.12.0, npm/tsup@8.0.2, npm/tsx@4.7.1, npm/typescript@5.4.3, npm/validate-npm-package-license@3.0.4, npm/which-typed-array@1.1.15, npm/yaml@2.4.1

View full report↗︎

Copy link

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSource
Install scripts npm/core-js@2.6.12
  • Install script: postinstall
  • Source: node -e "try{require('./postinstall')}catch(e){}"
Install scripts npm/es5-ext@0.10.64
  • Install script: postinstall
  • Source: node -e "try{require('./_postinstall')}catch(e){}" || exit 0
Protestware/Troll package npm/es5-ext@0.10.64
  • Note: This package prints a protestware console message on install regarding Ukraine for users with Russian language locale
Install scripts npm/core-js-pure@3.36.1
  • Install script: postinstall
  • Source: node -e "try{require('./postinstall')}catch(e){}"
  • orphan: npm/core-js-pure@3.36.1

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

What is protestware?

This package is a joke, parody, or includes undocumented or hidden behavior unrelated to its primary function.

Consider that consuming this package my come along with functionality unrelated to its primary purpose.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore npm/core-js@2.6.12
  • @SocketSecurity ignore npm/es5-ext@0.10.64
  • @SocketSecurity ignore npm/core-js-pure@3.36.1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants