Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯 The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
@nomicfoundation/hardhat-foundry
from 1.1.1 to 1.1.2 | 1 version ahead of your current version | 4 months ago
on 2024-05-14
@openzeppelin/contracts
from 4.9.3 to 4.9.6 | 3 versions ahead of your current version | 7 months ago
on 2024-02-29
hardhat
from 2.22.5 to 2.22.9 | 4 versions ahead of your current version | a month ago
on 2024-08-21
Issues fixed by the recommended upgrade:
SNYK-JS-OPENZEPPELINCONTRACTS-6346765
Release notes
Package name: @nomicfoundation/hardhat-foundry
Package name: @openzeppelin/contracts
Base64
: Fix issue where dirty memory located just after the input buffer is affecting the result. (#4929)Multicall
: Make aware of non-canonical context (i.e.msg.sender
is not_msgSender()
), allowing compatibility withERC2771Context
. Patch duplicatedAddress.functionDelegateCall
in v4.9.4 (removed).ERC2771Context
andContext
: Introduce a_contextPrefixLength()
getter, used to trim extra information appended tomsg.data
.Multicall
: Make aware of non-canonical context (i.e.msg.sender
is not_msgSender()
), allowing compatibility withERC2771Context
.ERC2771Context
: Return the forwarder address whenever themsg.data
of a call originating from a trusted forwarder is not long enough to contain the request signer address (i.e.msg.data.length
is less than 20 bytes), as specified by ERC-2771. (#4481)ERC2771Context
: Prevent revert in_msgData()
when a call originating from a trusted forwarder is not long enough to contain the request signer address (i.e.msg.data.length
is less than 20 bytes). Return the full calldata in that case. (#4484)Package name: hardhat
This is a small bug fix release remove a warning message against the local Hardhat node when deploying with Hardhat Ignition.
Changes
http_setLedgerOutputEnabled
messages beyond the HTTP Provider to prevent unwanted warnings in the logs of the local hardhat nodeThis is a small bug fix release to resolve a bug with large responses from
debug_traceTransaction
.Changes
debug_traceTransaction
when large responses were generatedImportant
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: