Update all dependencies patch updates (patch)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@codechecks/client	0.1.10 -> 0.1.12
bignumber.js	9.0.1 -> 9.0.2
chai (source)	4.3.0 -> 4.3.7
eslint-plugin-markdown	2.2.0 -> 2.2.1
eth-gas-reporter	0.2.20 -> 0.2.25
hardlydifficult-eth	1.1.3 -> 1.1.4
openzeppelin-solidity (source)	4.4.0 -> 4.4.2
truffle	5.1.65 -> 5.1.67

---

Release Notes

MikeMcl/bignumber.js

v9.0.2

Compare Source

• 12/12/21
• #​250 [BUGFIX] Allow use of user-defined alphabet for base 10.
• #​295 Remove bignumber.min.js and amend README.md.
• Update .travis.yml and LICENCE.md.

chaijs/chai

v4.3.7

Compare Source

What's Changed

• fix: deep-eql bump package to support symbols comparison by @​snewcomer in https://github.com/chaijs/chai/pull/1483

Full Changelog: chaijs/chai@v4.3.6...v4.3.7

v4.3.6

Compare Source

Update loupe to 2.3.1

v4.3.5

Compare Source

• build chaijs fca5bb1
• build(deps-dev): bump codecov from 3.1.0 to 3.7.1 (#​1446) 747eb4e
• fix package.json exports 022c2fa
• fix: package.json - deprecation warning on exports field (#​1400) 5276af6
• feat: use chaijs/loupe for inspection (#​1401) (#​1407) c8a4e00

v4.3.4

Compare Source

This fixes broken inspect behavior with bigints (#​1321) (#​1383) thanks @​vapier

v4.3.3: / 2021-03-03

Compare Source

This reintroduces Assertion as an export in the mjs file. See https://github.com/chaijs/chai/pull/1378 & https://github.com/chaijs/chai/issues/1375

v4.3.2: / 2021-03-03

Compare Source

This fixes a regression in IE11. See https://github.com/chaijs/chai/pull/1380 & https://github.com/chaijs/chai/issues/1379

v4.3.1: / 2021-03-02

Compare Source

This releases fixed an engine incompatibility with 4.3.0

The 4.x.x series of releases will be compatible with Node 4.0. Please report any errors found in Node 4 as bugs, and they will be fixed.

The 5.x.x series, when released, will drop support for Node 4.0

This fix also ensures pathval is updated to 1.1.1 to fix CVE-2020-7751

eslint/eslint-plugin-markdown

v2.2.1

Compare Source

• 3a40160 Fix: message.line could be undefined (#​191) (JounQin)

cgewecke/eth-gas-reporter

v0.2.25

Compare Source

v0.2.24

Compare Source

v0.2.23

Compare Source

• Add notes to README about missing price data & remote data fetching race condition
• Add support for multiple gas price tokens (BNB, MATIC, AVAX, HR, MOVR) (https://github.com/cgewecke/eth-gas-reporter/pull/251)
• Make @​codechecks/client peer dep optional (https://github.com/cgewecke/eth-gas-reporter/pull/257)
• Update @​solidity-parser/parser to 0.14.0 (https://github.com/cgewecke/eth-gas-reporter/pull/261)

v0.2.22

Compare Source

• Update @​solidity-parser/parser to ^0.12.0 (support Panic keyword in catch blocks) (https://github.com/cgewecke/eth-gas-reporter/issues/243)

v0.2.21

Compare Source

• Fix missing truffle migration deployments data (https://github.com/cgewecke/eth-gas-reporter/issues/240)
• Upgrade solidity-parser/parser to 0.11.1 (https://github.com/cgewecke/eth-gas-reporter/issues/239)

HardlyDifficult/hardlydifficult-eth

v1.1.4: Bump dependencies

Compare Source

OpenZeppelin/openzeppelin-contracts

v4.4.2

Compare Source

Bugfixes

• GovernorCompatibilityBravo: Fix error in the encoding of calldata for proposals submitted through the compatibility interface with explicit signatures. (#​3100)

v4.4.1

Compare Source

• Initializable: change the existing initializer modifier and add a new onlyInitializing modifier to prevent reentrancy risk. (#​3006)

Breaking change

It is no longer possible to call an initializer-protected function from within another initializer function outside the context of a constructor. Projects using OpenZeppelin upgradeable proxies should continue to work as is, since in the common case the initializer is invoked in the constructor directly. If this is not the case for you, the suggested change is to use the new onlyInitializing modifier in the following way:

 contract A {
-    function initialize() public   initializer { ... }
+    function initialize() internal onlyInitializing { ... }
 }
 contract B is A {
     function initialize() public initializer {
         A.initialize();
     }
 }

trufflesuite/truffle

v5.1.67: — Five Minute Caramelized Pecans

Compare Source

Happy Friday all! We're back this week with some bug fixes 🦠 and improvements 🔧.

First, when --stacktrace was used with Truffle test, contract.method() wouldn't return a receipt in the proper format. 🧾 This is fixed now!

Second, Truffle v5.1.66 broke compilation because of an erroneously removed dependency. We re-introduced the missing dependency and your compilations should go swimmingly 🏊 now!

Finally, we made a significant improvement to Truffle's build speed! 🏎️ We upgraded to webpack 5, which along with configuration changes, shaved off 62% of the overhead required to run the bundled truffle command. As a bonus,, the total size of the build directory is reduced significantly. 🎉

That's all for this week. See you next week for a new version of Truffle! 🍫

How to upgrade

We recommend upgrading to the latest version of Truffle by running:

npm uninstall -g truffle
npm install -g truffle

Changelog

Improvements

• Upgrade to webpack 5: significantly speed up runtime and reduce bundle size (#​3794 by @​tcoulter)

Bug Fixes

• Make receipts work properly with --stacktrace (#​3816 by @​haltman-at)
• Re-add missing solc dependency in compile-solidity (#​3802 by @​haltman-at)

Internal improvements

• Prevent txlog from being confused by unmapped code in function startup (#​3814 by @​haltman-at)
• Avoid logging jumps to contract node regardless of context (#​3813 by @​haltman-at)

v5.1.66: — Chocolate Laboratory

Compare Source

Hello all, we're back this week with some bug fixes for Truffle Test! 🦠

First off, the exit code wasn't being set properly when there were failed tests. Now Truffle Test will properly exit with a status equal to the number of failed tests. 🧪

Secondly, events weren't decoding properly for upgradeable contracts (or when other manual delegatecalls were involved); now events should decode properly in this case. 🔬

Finally, truffle test --stacktrace wouldn't work properly when run with Ethereum clients other than Ganache; now this incompatibility has been fixed. 📡

That's all for this week, but we'll be back once again with a new version of Truffle for next week! ⚗

How to upgrade

We recommend upgrading to the latest version of Truffle by running:

npm uninstall -g truffle
npm install -g truffle

Changelog

Bug Fixes

• Allows decoding events from non-library delegatecalls (#​3594 by @​haltman-at)
• Have txlog handle constructor code that should be unmapped but isn't (#​3790 by @​haltman-at)
• Use ethers when sending transactions for stacktracing, instead of full manual (fix stacktracing w/o instamining) (#​3762 by @​haltman-at)
• Propagate exit statuses properly (#​3782 by @​haltman-at)

Internal improvements

• Further work on @​truffle/plugins (#​3628 by @​rkalis)
• Make @​truffle/debugger a webpack external for Truffle (#​3772 by @​haltman-at)

Dependency updates

• Ugprade typescript to 3.9.8 and 4.1.4 (#​3789 by @​haltman-at)
• Run lerna-update-wizard, and various other dependency improvements (#​3771 by @​haltman-at)

---

Configuration

📅 Schedule: Branch creation - "after 2am and before 5am on monday" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.