Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Audit #557

Open
wants to merge 15 commits into
base: develop
Choose a base branch
from
Open

Audit #557

wants to merge 15 commits into from

Conversation

augustbleeds
Copy link
Collaborator

@augustbleeds augustbleeds commented Nov 26, 2024

Taken from #533 (but PR was closed prematurely)

Note: this will NOT be merged to develop until the audit is completed in order to avoid the situation where Ops deploys updated contracts.

Bumping scarb/cairo to version 2.8.2. Because this changes the compile contracts (and the dependencies), this will stay as a PR and will not be merged. After the audit is completed, then it'll be merged to develop

  • bump cairo/starknet version
  • open zeppelin bump -- make sure OZ is updated, but also bc there is a breaking erc-20 change for event indexing
  • update build process (no longer use cairo directly, but via scarb)
  • update foundry
  • add recently added contracts (MCM + Timelock)
  • update proxy contract

@augustbleeds augustbleeds requested review from a team as code owners November 26, 2024 14:45
Comment on lines +41 to +42
wget https://github.com/software-mansion/scarb/releases/download/${{ inputs.scarb_version }}/scarb-${{ inputs.scarb_version }}-x86_64-unknown-linux-${libc_version}.tar.gz
tar -xvzf scarb-${{ inputs.scarb_version }}-x86_64-unknown-linux-${libc_version}.tar.gz
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See this example where we check the shasum of the file.

* disable proxy access check by default

* remove
@cl-sonarqube-production
Copy link

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants