diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml index 74fe172..d9f32d7 100644 --- a/.github/workflows/checks.yml +++ b/.github/workflows/checks.yml @@ -17,12 +17,12 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: audit - name: Check out code - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 2 # Recommended by turbo team diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 223a8a7..df53b7d 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -25,12 +25,12 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: audit - name: Check out code - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 1 @@ -40,13 +40,13 @@ jobs: skip-compact: "true" - name: Initialize CodeQL - uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4 + uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4 with: languages: ${{ matrix.language }} # We can add custom queries later when needed # queries: security-extended - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4 + uses: github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/release-publish.yml b/.github/workflows/release-publish.yml index 9bf4ba0..d3893d1 100644 --- a/.github/workflows/release-publish.yml +++ b/.github/workflows/release-publish.yml @@ -45,7 +45,7 @@ jobs: # The compact-npm-prod environment approval is the security gate, not the # branch ref. - name: Check out target ref - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.merge_commit_sha || github.ref }} @@ -130,7 +130,7 @@ jobs: } >> $GITHUB_STEP_SUMMARY - name: Setup Node.js - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version-file: ".nvmrc" package-manager-cache: false # Prevent cache poisoning issues diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 7f43b1f..fda49cb 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -70,7 +70,7 @@ jobs: private-key: ${{ secrets.GH_APP_PRIVATE_KEY }} - name: Check out code - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 token: ${{ steps.gh-app-token.outputs.token }} diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index fcf6fea..64cf7b0 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -30,15 +30,15 @@ jobs: # actions: read steps: - name: Harden Runner - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: audit - name: Checkout code - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Run analysis - uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3 + uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4 with: results_file: results.sarif results_format: sarif @@ -52,6 +52,6 @@ jobs: path: results.sarif retention-days: 5 - name: Upload SARIF to GitHub Code Scanning - uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4 + uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4 with: sarif_file: results.sarif diff --git a/biome.json b/biome.json index 8b8dffd..79dd4db 100644 --- a/biome.json +++ b/biome.json @@ -1,5 +1,5 @@ { - "$schema": "https://biomejs.dev/schemas/2.5.5/schema.json", + "$schema": "https://biomejs.dev/schemas/2.5.6/schema.json", "vcs": { "enabled": true, "clientKind": "git", @@ -34,7 +34,7 @@ "linter": { "enabled": true, "rules": { - "recommended": true, + "preset": "recommended", "a11y": {}, "correctness": { "noUnusedVariables": "error", diff --git a/package.json b/package.json index 77fe325..f75764c 100644 --- a/package.json +++ b/package.json @@ -16,10 +16,10 @@ "clean": "turbo run clean" }, "devDependencies": { - "@biomejs/biome": "2.5.5", + "@biomejs/biome": "2.5.6", "@types/node": "26.1.2", "ts-node": "^10.9.2", - "turbo": "^2.9.18", + "turbo": "^2.10.8", "typescript": "^6.0.3", "vitest": "^4.1.9" } diff --git a/packages/builder/package.json b/packages/builder/package.json index e78c9b1..afe3ec3 100644 --- a/packages/builder/package.json +++ b/packages/builder/package.json @@ -31,7 +31,7 @@ "LICENSE" ], "engines": { - "node": ">=20" + "node": ">=22" }, "scripts": { "build": "tsc -p .", @@ -47,9 +47,9 @@ "vitest": "^4.1.9" }, "dependencies": { - "chalk": "^5.6.2", + "chalk": "^6.0.0", "log-symbols": "^7.0.0", - "ora": "^9.0.0", + "ora": "^9.4.1", "shell-quote": "^1.10.0" } } diff --git a/packages/cli/package.json b/packages/cli/package.json index 635205b..4ab7023 100644 --- a/packages/cli/package.json +++ b/packages/cli/package.json @@ -27,7 +27,7 @@ "LICENSE" ], "engines": { - "node": ">=20" + "node": ">=22" }, "bin": { "compact-builder": "dist/runBuilder.js", @@ -47,7 +47,7 @@ }, "dependencies": { "@openzeppelin/compact-builder": "workspace:^", - "chalk": "^5.6.2", - "ora": "^9.0.0" + "chalk": "^6.0.0", + "ora": "^9.4.1" } } diff --git a/packages/simulator/package.json b/packages/simulator/package.json index 6f15a34..e5e4f59 100644 --- a/packages/simulator/package.json +++ b/packages/simulator/package.json @@ -49,7 +49,7 @@ "@noble/hashes": "^2.2.0", "@tsconfig/node24": "^24.0.3", "@types/node": "26.1.2", - "fast-check": "^4.5.2", + "fast-check": "^4.9.0", "typescript": "^6.0.3", "vitest": "^4.1.9" }, diff --git a/yarn.lock b/yarn.lock index aa65c8d..17d17d1 100644 --- a/yarn.lock +++ b/yarn.lock @@ -5,18 +5,18 @@ __metadata: version: 8 cacheKey: 10 -"@biomejs/biome@npm:2.5.5": - version: 2.5.5 - resolution: "@biomejs/biome@npm:2.5.5" - dependencies: - "@biomejs/cli-darwin-arm64": "npm:2.5.5" - "@biomejs/cli-darwin-x64": "npm:2.5.5" - "@biomejs/cli-linux-arm64": "npm:2.5.5" - "@biomejs/cli-linux-arm64-musl": "npm:2.5.5" - "@biomejs/cli-linux-x64": "npm:2.5.5" - "@biomejs/cli-linux-x64-musl": "npm:2.5.5" - "@biomejs/cli-win32-arm64": "npm:2.5.5" - "@biomejs/cli-win32-x64": "npm:2.5.5" +"@biomejs/biome@npm:2.5.6": + version: 2.5.6 + resolution: "@biomejs/biome@npm:2.5.6" + dependencies: + "@biomejs/cli-darwin-arm64": "npm:2.5.6" + "@biomejs/cli-darwin-x64": "npm:2.5.6" + "@biomejs/cli-linux-arm64": "npm:2.5.6" + "@biomejs/cli-linux-arm64-musl": "npm:2.5.6" + "@biomejs/cli-linux-x64": "npm:2.5.6" + "@biomejs/cli-linux-x64-musl": "npm:2.5.6" + "@biomejs/cli-win32-arm64": "npm:2.5.6" + "@biomejs/cli-win32-x64": "npm:2.5.6" dependenciesMeta: "@biomejs/cli-darwin-arm64": optional: true @@ -36,62 +36,62 @@ __metadata: optional: true bin: biome: bin/biome - checksum: 10/5c3768893b2b77b0d6fed5a3e92394d2fb9520fc4b1c51143b4ed2789230f3fc648aba8cc152debe58a04c4103bf58515a19de2be721bb433879d3a1e9114049 + checksum: 10/3b6a5669581b44c814d3780e118e52783b189d779cf873654483b979ab7dd41a716765f6c070e7a01e98839e1b273fe8564f7e166f74be1721288663bcff403e languageName: node linkType: hard -"@biomejs/cli-darwin-arm64@npm:2.5.5": - version: 2.5.5 - resolution: "@biomejs/cli-darwin-arm64@npm:2.5.5" +"@biomejs/cli-darwin-arm64@npm:2.5.6": + version: 2.5.6 + resolution: "@biomejs/cli-darwin-arm64@npm:2.5.6" conditions: os=darwin & cpu=arm64 languageName: node linkType: hard -"@biomejs/cli-darwin-x64@npm:2.5.5": - version: 2.5.5 - resolution: "@biomejs/cli-darwin-x64@npm:2.5.5" +"@biomejs/cli-darwin-x64@npm:2.5.6": + version: 2.5.6 + resolution: "@biomejs/cli-darwin-x64@npm:2.5.6" conditions: os=darwin & cpu=x64 languageName: node linkType: hard -"@biomejs/cli-linux-arm64-musl@npm:2.5.5": - version: 2.5.5 - resolution: "@biomejs/cli-linux-arm64-musl@npm:2.5.5" +"@biomejs/cli-linux-arm64-musl@npm:2.5.6": + version: 2.5.6 + resolution: "@biomejs/cli-linux-arm64-musl@npm:2.5.6" conditions: os=linux & cpu=arm64 & libc=musl languageName: node linkType: hard -"@biomejs/cli-linux-arm64@npm:2.5.5": - version: 2.5.5 - resolution: "@biomejs/cli-linux-arm64@npm:2.5.5" +"@biomejs/cli-linux-arm64@npm:2.5.6": + version: 2.5.6 + resolution: "@biomejs/cli-linux-arm64@npm:2.5.6" conditions: os=linux & cpu=arm64 & libc=glibc languageName: node linkType: hard -"@biomejs/cli-linux-x64-musl@npm:2.5.5": - version: 2.5.5 - resolution: "@biomejs/cli-linux-x64-musl@npm:2.5.5" +"@biomejs/cli-linux-x64-musl@npm:2.5.6": + version: 2.5.6 + resolution: "@biomejs/cli-linux-x64-musl@npm:2.5.6" conditions: os=linux & cpu=x64 & libc=musl languageName: node linkType: hard -"@biomejs/cli-linux-x64@npm:2.5.5": - version: 2.5.5 - resolution: "@biomejs/cli-linux-x64@npm:2.5.5" +"@biomejs/cli-linux-x64@npm:2.5.6": + version: 2.5.6 + resolution: "@biomejs/cli-linux-x64@npm:2.5.6" conditions: os=linux & cpu=x64 & libc=glibc languageName: node linkType: hard -"@biomejs/cli-win32-arm64@npm:2.5.5": - version: 2.5.5 - resolution: "@biomejs/cli-win32-arm64@npm:2.5.5" +"@biomejs/cli-win32-arm64@npm:2.5.6": + version: 2.5.6 + resolution: "@biomejs/cli-win32-arm64@npm:2.5.6" conditions: os=win32 & cpu=arm64 languageName: node linkType: hard -"@biomejs/cli-win32-x64@npm:2.5.5": - version: 2.5.5 - resolution: "@biomejs/cli-win32-x64@npm:2.5.5" +"@biomejs/cli-win32-x64@npm:2.5.6": + version: 2.5.6 + resolution: "@biomejs/cli-win32-x64@npm:2.5.6" conditions: os=win32 & cpu=x64 languageName: node linkType: hard @@ -424,9 +424,9 @@ __metadata: "@tsconfig/node24": "npm:^24.0.3" "@types/node": "npm:26.1.2" "@types/shell-quote": "npm:^1.7.5" - chalk: "npm:^5.6.2" + chalk: "npm:^6.0.0" log-symbols: "npm:^7.0.0" - ora: "npm:^9.0.0" + ora: "npm:^9.4.1" shell-quote: "npm:^1.10.0" typescript: "npm:^6.0.3" vitest: "npm:^4.1.9" @@ -440,8 +440,8 @@ __metadata: "@openzeppelin/compact-builder": "workspace:^" "@tsconfig/node24": "npm:^24.0.3" "@types/node": "npm:26.1.2" - chalk: "npm:^5.6.2" - ora: "npm:^9.0.0" + chalk: "npm:^6.0.0" + ora: "npm:^9.4.1" typescript: "npm:^6.0.3" vitest: "npm:^4.1.9" bin: @@ -461,7 +461,7 @@ __metadata: "@noble/hashes": "npm:^2.2.0" "@tsconfig/node24": "npm:^24.0.3" "@types/node": "npm:26.1.2" - fast-check: "npm:^4.5.2" + fast-check: "npm:^4.9.0" typescript: "npm:^6.0.3" vitest: "npm:^4.1.9" peerDependencies: @@ -680,44 +680,44 @@ __metadata: languageName: node linkType: hard -"@turbo/darwin-64@npm:2.10.7": - version: 2.10.7 - resolution: "@turbo/darwin-64@npm:2.10.7" +"@turbo/darwin-64@npm:2.10.12": + version: 2.10.12 + resolution: "@turbo/darwin-64@npm:2.10.12" conditions: os=darwin & cpu=x64 languageName: node linkType: hard -"@turbo/darwin-arm64@npm:2.10.7": - version: 2.10.7 - resolution: "@turbo/darwin-arm64@npm:2.10.7" +"@turbo/darwin-arm64@npm:2.10.12": + version: 2.10.12 + resolution: "@turbo/darwin-arm64@npm:2.10.12" conditions: os=darwin & cpu=arm64 languageName: node linkType: hard -"@turbo/linux-64@npm:2.10.7": - version: 2.10.7 - resolution: "@turbo/linux-64@npm:2.10.7" - conditions: os=linux & cpu=x64 +"@turbo/linux-64@npm:2.10.12": + version: 2.10.12 + resolution: "@turbo/linux-64@npm:2.10.12" + conditions: (os=android | os=linux) & cpu=x64 languageName: node linkType: hard -"@turbo/linux-arm64@npm:2.10.7": - version: 2.10.7 - resolution: "@turbo/linux-arm64@npm:2.10.7" - conditions: os=linux & cpu=arm64 +"@turbo/linux-arm64@npm:2.10.12": + version: 2.10.12 + resolution: "@turbo/linux-arm64@npm:2.10.12" + conditions: (os=android | os=linux) & cpu=arm64 languageName: node linkType: hard -"@turbo/windows-64@npm:2.10.7": - version: 2.10.7 - resolution: "@turbo/windows-64@npm:2.10.7" +"@turbo/windows-64@npm:2.10.12": + version: 2.10.12 + resolution: "@turbo/windows-64@npm:2.10.12" conditions: os=win32 & cpu=x64 languageName: node linkType: hard -"@turbo/windows-arm64@npm:2.10.7": - version: 2.10.7 - resolution: "@turbo/windows-arm64@npm:2.10.7" +"@turbo/windows-arm64@npm:2.10.12": + version: 2.10.12 + resolution: "@turbo/windows-arm64@npm:2.10.12" conditions: os=win32 & cpu=arm64 languageName: node linkType: hard @@ -927,6 +927,13 @@ __metadata: languageName: node linkType: hard +"chalk@npm:^6.0.0": + version: 6.0.0 + resolution: "chalk@npm:6.0.0" + checksum: 10/bdcb895b9c848ddbce38f38df5a10a3e272d6c04d759161789c4a2fa5a1fa78bf9eecf4eef73433a2a3be7324d6da96c3c9baf5c80862f37683cc0b890597831 + languageName: node + linkType: hard + "chownr@npm:^3.0.0": version: 3.0.0 resolution: "chownr@npm:3.0.0" @@ -954,10 +961,10 @@ __metadata: version: 0.0.0-use.local resolution: "compact-tools-monorepo@workspace:." dependencies: - "@biomejs/biome": "npm:2.5.5" + "@biomejs/biome": "npm:2.5.6" "@types/node": "npm:26.1.2" ts-node: "npm:^10.9.2" - turbo: "npm:^2.9.18" + turbo: "npm:^2.10.8" typescript: "npm:^6.0.3" vitest: "npm:^4.1.9" languageName: unknown @@ -1047,12 +1054,12 @@ __metadata: languageName: node linkType: hard -"fast-check@npm:^4.5.2": - version: 4.8.0 - resolution: "fast-check@npm:4.8.0" +"fast-check@npm:^4.9.0": + version: 4.9.0 + resolution: "fast-check@npm:4.9.0" dependencies: pure-rand: "npm:^8.0.0" - checksum: 10/32101d27e69f7f0a3ea486f1a6feee6b34c824ba14bf3efce2ad1741fcd412817ac3ed14f53ef57a55d6fe2e00038e399c4a9c62444446a6e7a1a4b04bc6b88d + checksum: 10/b549435b29f7b60bc93cb2b19c194c35804bff15aaeb723bc94c65fef5b06fb2c3652bcd98379e3257d461cb61c40d2f4b0001fcb6b515f1085ebbcc6163d1e5 languageName: node linkType: hard @@ -1438,9 +1445,9 @@ __metadata: languageName: node linkType: hard -"ora@npm:^9.0.0": - version: 9.4.0 - resolution: "ora@npm:9.4.0" +"ora@npm:^9.4.1": + version: 9.4.1 + resolution: "ora@npm:9.4.1" dependencies: chalk: "npm:^5.6.2" cli-cursor: "npm:^5.0.0" @@ -1450,7 +1457,7 @@ __metadata: log-symbols: "npm:^7.0.1" stdin-discarder: "npm:^0.3.2" string-width: "npm:^8.1.0" - checksum: 10/48fe48f98764d1132a77d845862fab1b1f8d7aacd4c38c39ad42a874a55686c5949194eeb836a7ee4c43027a471ffb93937eff69f4db7353d6800b678073de55 + checksum: 10/58b0b6c6ee20b30806e2e0bbf84f81b7517e21c9b721d0b7f186e12b9ef2e0be190174bf53085123efae6c8d120dcd9788708602e78e91188b9e12ff71abc275 languageName: node linkType: hard @@ -1864,16 +1871,16 @@ __metadata: languageName: node linkType: hard -"turbo@npm:^2.9.18": - version: 2.10.7 - resolution: "turbo@npm:2.10.7" +"turbo@npm:^2.10.8": + version: 2.10.12 + resolution: "turbo@npm:2.10.12" dependencies: - "@turbo/darwin-64": "npm:2.10.7" - "@turbo/darwin-arm64": "npm:2.10.7" - "@turbo/linux-64": "npm:2.10.7" - "@turbo/linux-arm64": "npm:2.10.7" - "@turbo/windows-64": "npm:2.10.7" - "@turbo/windows-arm64": "npm:2.10.7" + "@turbo/darwin-64": "npm:2.10.12" + "@turbo/darwin-arm64": "npm:2.10.12" + "@turbo/linux-64": "npm:2.10.12" + "@turbo/linux-arm64": "npm:2.10.12" + "@turbo/windows-64": "npm:2.10.12" + "@turbo/windows-arm64": "npm:2.10.12" dependenciesMeta: "@turbo/darwin-64": optional: true @@ -1889,7 +1896,7 @@ __metadata: optional: true bin: turbo: bin/turbo - checksum: 10/4bf030663f92e2d9a36f91e9d498ecd55f8b475476ef8a95ab8323bf05a4c68f44233680f03dc09cc01c260f3aa1ad0f0f1011a63f367b3e94898382f068aff2 + checksum: 10/d92ff6c947dacd9a25ceed9267ad45ec3ee89ca7776e8b4851098c234d811e090656958f52c72a1ee6e1d825a29907d649775f1feb4c628a38194d522c659e27 languageName: node linkType: hard