Merge pull request #263 from ERC725Alliance/develop

sync main to release v8.0.0

.github/workflows/build-and-test.yml

@@ -7,8 +7,7 @@ on:
     branches:
       - "develop"
   pull_request:
-    branches:
-      - "*"
+    branches: ["*"]
 
 jobs:
   build:
@@ -18,11 +17,11 @@ jobs:
         working-directory: implementations
 
     steps:
-      - uses: actions/checkout@v2
-      - name: Setup Node.js 16
-        uses: actions/setup-node@v2
+      - uses: actions/checkout@v4
+      - name: Setup Node.js v20
+        uses: actions/setup-node@v4
         with:
-          node-version: "16" # See supported Node.js release schedule at https://nodejs.org/en/about/releases/
+          node-version: "20.x" # See supported Node.js release schedule at https://nodejs.org/en/about/releases/
           cache: "npm"
           cache-dependency-path: implementations/package-lock.json
 
@@ -42,7 +41,7 @@ jobs:
         run: npm run test:coverage
 
       - name: Upload to Coveralls
-        uses: coverallsapp/github-action@master
+        uses: coverallsapp/github-action@v2
         with:
           path-to-lcov: ./implementations/coverage/lcov.info
           github-token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/npm-release.yml

@@ -25,15 +25,15 @@ jobs:
           exit 1
 
       # step 1: checkout to the correct branch
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         with:
           fetch-depth: 0
 
       # step 2: setup Node.js to version 16
-      - name: Setup Node.js 16
-        uses: actions/setup-node@v2
+      - name: Setup Node.js v20
+        uses: actions/setup-node@v4
         with:
-          node-version: "16.x"
+          node-version: "20.x"
           registry-url: "https://registry.npmjs.org"
           cache: "npm"
           cache-dependency-path: implementations/package-lock.json

.github/workflows/slither.yml

@@ -0,0 +1,59 @@
+# this workflow run Slither static analysis tool on the Solidity code
+# of the Migration Deposit contract and the Migration Universal Profile
+name: Slither Analysis
+
+on:
+  pull_request:
+    branches: ["*"]
+
+    # Run Slither only when editing the Solidity code of the smart contracts
+    paths:
+      - "contracts/**/*.sol"
+
+jobs:
+  slither:
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: implementations
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Use Node.js v20
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20.x"
+          cache: "npm"
+          cache-dependency-path: implementations/package-lock.json
+
+      - name: 📦 Install Node Modules
+        run: npm ci
+
+      - name: 📥 Install Slither
+        run: |
+          pip3 install slither-analyzer solc-select
+          solc-select install 0.8.17
+          solc-select use 0.8.17
+
+      - name: 🐍 Run Slither
+        id: slither_report
+        run: |
+          echo "# 🐍📄 Slither Analysis" > slither_report.md
+
+          slither . \
+            --checklist \
+            --markdown-root ${{ github.server_url }}/${{ github.repository }}/blob/${{ github.sha }}/ \
+            --no-fail-pedantic \
+            --show-ignored-findings \
+            >> slither_report.md
+
+      - name: 📄 Add Slither report in comment
+        uses: peter-evans/create-or-update-comment@v2
+        env:
+          REPORT: ${{ steps.slither_report.outputs.stdout }}
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          issue-number: ${{ github.event.pull_request.number }}
+          body-file: slither_report.md

.github/workflows/solc_version.yml

@@ -4,9 +4,7 @@ name: Solidity Compiler Versions
 
 on:
   pull_request:
-    branches:
-      - "main"
-      - "develop"
+    branches: ["*"]
 
 jobs:
   solc_version:
@@ -33,15 +31,21 @@ jobs:
             "0.8.18",
             "0.8.19",
             "0.8.20",
-            "0.8.21"
+            "0.8.21",
+            "0.8.22",
+            "0.8.23",
+            "0.8.24",
+            "0.8.25",
+            "0.8.26",
+            "0.8.27",
           ]
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
-      - name: Setup Node.js 16
-        uses: actions/setup-node@v2
+      - name: Setup Node.js v20
+        uses: actions/setup-node@v4
         with:
-          node-version: "16"
+          node-version: "20.x"
           cache: "npm"
           cache-dependency-path: implementations/package-lock.json