Skip to content

fix(deps): bump ethereum-waffle from 3.4.4 to 4.0.10#186

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ethereum-waffle-4.0.10
Open

fix(deps): bump ethereum-waffle from 3.4.4 to 4.0.10#186
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ethereum-waffle-4.0.10

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 27, 2023

Copy link
Copy Markdown
Contributor

Bumps ethereum-waffle from 3.4.4 to 4.0.10.

Release notes

Sourced from ethereum-waffle's releases.

@​ethereum-waffle/chai@​4.0.10

Patch Changes

  • 4d83cde: Emit matcher improvement

ethereum-waffle@4.0.10

Patch Changes

  • Updated dependencies [4d83cde]
    • @​ethereum-waffle/mock-contract@​4.0.4
    • @​ethereum-waffle/chai@​4.0.10
    • @​ethereum-waffle/compiler@​4.0.3

@​ethereum-waffle/chai@​4.0.9

Patch Changes

  • 216f1d8: Switch hardhat error priority

ethereum-waffle@4.0.9

Patch Changes

  • Updated dependencies [216f1d8]
    • @​ethereum-waffle/chai@​4.0.9
    • @​ethereum-waffle/compiler@​4.0.3
    • @​ethereum-waffle/mock-contract@​4.0.3

@​ethereum-waffle/chai@​4.0.8

Patch Changes

  • f93abe9: Move call history injection logic to hardhat plugin
  • 9602243: 👔 revertedWith().withArgs no longer fails for uint values exceeding JavaScript's max int limit
  • b54c6b9: Add delta to balance changing matchers
  • 64707ae: Allow special characters in revertedWith regex
  • 702c6ab: 🗾 Extend matching of Hardhat revert reasons
  • a0f721a: Move ethers to peer deps
  • f6d240e: 🛶 Updates for hardhat v2.11
  • Updated dependencies [ee1d1b8]
  • Updated dependencies [a0f721a]
    • @​ethereum-waffle/provider@​4.0.5

ethereum-waffle@4.0.8

Patch Changes

  • f93abe9: Move call history injection logic to hardhat plugin
  • a0f721a: Move ethers to peer deps
  • Updated dependencies [da92375]
  • Updated dependencies [f93abe9]
  • Updated dependencies [46b954e]
  • Updated dependencies [9602243]
  • Updated dependencies [fb6863d]

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [ethereum-waffle](https://github.com/EthWorks/Waffle) from 3.4.4 to 4.0.10.
- [Release notes](https://github.com/EthWorks/Waffle/releases)
- [Commits](https://github.com/EthWorks/Waffle/compare/ethereum-waffle@3.4.4...ethereum-waffle@4.0.10)

---
updated-dependencies:
- dependency-name: ethereum-waffle
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 27, 2023
@dependabot @github

dependabot Bot commented on behalf of github Apr 27, 2023

Copy link
Copy Markdown
Contributor Author

Dependabot tried to add @generalgalactic/code as a reviewer to this PR, but received the following error from GitHub:

POST https://api.github.com/repos/generalgalactic/ERC721S/pulls/186/requested_reviewers: 422 - Reviews may only be requested from collaborators. One or more of the teams you specified is not a collaborator of the generalgalactic/ERC721S repository. // See: https://docs.github.com/rest/reference/pulls#request-reviewers-for-a-pull-request

@socket-security

Copy link
Copy Markdown

New dependency changes detected. Learn more about Socket for GitHub ↗︎


🚨 Potential security issues found in this pull request. To accept the risk, merge this PR and you will not be notified again.

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore @trufflesuite/bigint-buffer@1.1.9
  • @SocketSecurity ignore ganache@7.4.3
🫣 Native code

Contains native code which could be a vector to obscure malicious code, and generally decrease the likelihood of reproducible or reliable installs.

Ensure that native code bindings are expected. Consumers may consider pure JS and functionally similar alternatives to avoid the challenges and risks associated with native code bindings.

Package Location Source
@trufflesuite/bigint-buffer@1.1.9 (added) binding.gyp package.json via @nomiclabs/hardhat-waffle@2.0.5, ethereum-waffle@4.0.10
ganache@7.4.3 (added) node_modules/@trufflesuite/bigint-buffer/binding.gyp package.json via @nomiclabs/hardhat-waffle@2.0.5, ethereum-waffle@4.0.10
ganache@7.4.3 (added) node_modules/keccak/binding.gyp package.json via @nomiclabs/hardhat-waffle@2.0.5, ethereum-waffle@4.0.10
ganache@7.4.3 (added) node_modules/leveldown/binding.gyp package.json via @nomiclabs/hardhat-waffle@2.0.5, ethereum-waffle@4.0.10
ganache@7.4.3 (added) node_modules/napi-macros/example/binding.gyp package.json via @nomiclabs/hardhat-waffle@2.0.5, ethereum-waffle@4.0.10
ganache@7.4.3 (added) node_modules/secp256k1/binding.gyp package.json via @nomiclabs/hardhat-waffle@2.0.5, ethereum-waffle@4.0.10
Pull request alert summary
Issue Status
Install scripts ✅ 0 issues
Native code ⚠️ 6 issues
Bin script shell injection ✅ 0 issues
Unresolved require ✅ 0 issues
Invalid package.json ✅ 0 issues
HTTP dependency ✅ 0 issues
Git dependency ✅ 0 issues
Potential typo squat ✅ 0 issues
Known Malware ✅ 0 issues
Telemetry ✅ 0 issues
Protestware/Troll package ✅ 0 issues

📊 Modified Dependency Overview:

⬆️ Updated Package Version Diff Added Capability Access +/- Transitive Count Publisher
ethereum-waffle@4.0.10 3.4.4...4.0.10 None +74/-447 ethworks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants