Skip to content

Conversation

@pahor167
Copy link

No description provided.

palango and others added 30 commits October 14, 2024 10:36
- Remove unnecessary jobs
Setting `open-pull-requests-limit: 0` prevent version updates but should
keep the security scans and updates according to
https://docs.github.com/en/code-security/dependabot/dependabot-security-updates/configuring-dependabot-security-updates#overriding-the-default-behavior-with-a-configuration-file

> If you only require security updates and want to exclude version
> updates, you can set open-pull-requests-limit to 0 in order to prevent
> version updates for a given package-ecosystem.
* adding trivy scanning to the Docker files

* adding docker build scan

* fixing typo

* adding context for bedrock images

* adding context to ops dockerfile packages

* fixing context for ops packges:

* removing push/pull triggers and adding just a manual workflow run with workflow_dispatch
As far as I understand, all gas values are for the L1 transaction that
submits the tx batches. Therefore, the fee currency can be set to `nil`.
* Add pages workflow and forkdiff config

* Remove TODOs

* Update trigger to reflect future celo default branch pattern

* Update latest rebased commit
Remove common/interfaces/IExchange.sol (duplicate)

We keep the one in the `mento` directory.

Remove common/libraries/ReentrancyGuard.sol (duplicate)

Directly use the original from OpenZeppelin.
This allows testing of newly deployed fee currencies even when
MockSortedOracles is used. This is the some implementation used in
celo-monorepo (except for updating it to a more recent solidity
version).
so that BridgedETH and other bridged ERC20 tokens can be used as fee
currencies. I won't included testing until the FeeCurrencyDirectory is
ready.
to avoid using old 0.5 solidity versions.
Until we fix the errors caused by enabling it.
We need to include Celo's contracts in the count to make it succeed.
karlb and others added 23 commits October 15, 2024 10:35
…254)

* OptimismPortal2 set initial `_balance` through StorageSetter pattern

Fixes #239

The custom gas-token feature adaptation for the fault-proof system using
the `OptimismPortal2` contract has been merged recently upstream.

We are using the custom-gas-token feature and additionally require a
modification of the OptimismPortal's `_balance` value to be set
to the entire allocation of Celo on the L2 - meaning that all L1 token is
initially locked in the bridge and only usable on the L2.

Those changes are now adapted also to the `OptimismPortal2`, which
was a requirement to make our custom-gas-token pre-locked balance
feature work in conjunction with fault-proofs.

* Adapt withdraw e2e-tests to work with fault-proofs

* Use prettier for formatting e2e tests

* Fix typo

Co-authored-by: Valentin Rodygin <[email protected]>

* Set L1-fee scalars to zero in devnet

---------

Co-authored-by: Valentin Rodygin <[email protected]>
This allows us to reenable TestFees.
The test works now without further changes.
The tests now work without further changes.
This change deletes bad blocks at migration time, since we don't need
to keep historical bad blocks and if not transformed like the other migrated
blocks can lead to panics when trying to load them (which happens when
a new bad block is discovered).

I've tested this locally, by taking a datdir where bad blocks could be
retrieved via `geth db get 0x496e76616c6964426c6f636b` and migrated
it and verified that then the bad blocks cannot be retrieved which looks like this:

INFO [10-28|13:00:32.736] Get operation failed   error="leveldb: not found"

Since the key is not present.
Build op-challenger and op-dispute-mon on CI
Using the branch name form our repo is easier to read and ensures that
the corresponding commit hash is available, not matter what upstream
does.
This is nice for testing the action without having to merge a PR.
…alidation

Add CLI config validation of op-batcher to prevent submitting Blobs into Alt DA
Forge started to require the `--broadcast` flag for actually deploying a
contract. Otherwise it will only do a dry-run.

We should really pin our foundry version. But let's wait until we rebase
to the latest upstream, since there have been changes to the overall
setup.

Closes #278
…277)

* Ignore AddressSortedLinkedList and AddressSortedLinkedListWithMedian as targets in fuzzing test of SafeCall_Test

* Format test/libraries/SafeCall.t.sol
Update the go package dependency and the devnet
docker container reference of the `l2` service
to the latest commit (`e6499495c176f568f72659293e29381a5c350a6b`)
in the `celo10` ref.

Co-authored-by: ezdac <[email protected]>
* Add script to update `celo-org/op-geth` dependencies

Signed-off-by: Maximilian Langenfeld <[email protected]>

* Add github action for update-geth script

Signed-off-by: Maximilian Langenfeld <[email protected]>

* Use inline geth base-ref

Signed-off-by: Maximilian Langenfeld <[email protected]>

* Discard automatic fields

Signed-off-by: Maximilian Langenfeld <[email protected]>

* token perms

Signed-off-by: Maximilian Langenfeld <[email protected]>

* Use read-only GCP SA

Signed-off-by: Maximilian Langenfeld <[email protected]>

* Better parameter  handling in update-geth action

Signed-off-by: Maximilian Langenfeld <[email protected]>

* Remove `update-celo-geth` cmd from justfile

---------

Signed-off-by: Maximilian Langenfeld <[email protected]>
Co-authored-by: alvarof2 <[email protected]>
* addresses audit comments

* fix errors

* addresses feedback

* missed defer statements
@socket-security
Copy link

socket-security bot commented Dec 18, 2024

Copy link

@github-advanced-security github-advanced-security bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Slither found more than 20 potential problems in the proposed changes. Check the Files changed tab for more details.

This uses the default fee-currency-directory address from op-geth.
It will fix the issue that the EVM calls into the directoy will fail
when executed on the local devnet.
@github-actions
Copy link

github-actions bot commented Jan 4, 2025

This PR is stale because it has been open 14 days with no activity. Remove stale label or comment or this will be closed in 5 days.

@github-actions github-actions bot added the Stale label Jan 4, 2025
@github-actions github-actions bot closed this Jan 9, 2025
piersy pushed a commit that referenced this pull request Apr 8, 2025
* feat: interop fixes (#287)

* feat: interop fixes

* fix: natspec format

* chore: add field on struct natspec

---------

Co-authored-by: 0xDiscotech <[email protected]>

* fix: campaign fixes (#313)

* feat: interop fixes

* fix: permit2 not inifinite approval check

* chore: enhance superchain erc20 natspec

* chore: tests natspec

* fix: incorrect merge

---------

Co-authored-by: agusduha <[email protected]>

* chore: remove interop contracts (#318)

* chore: remove unnecessary interop contracts

* fix: golang tests

* chore: remove system config interop and run pre pr

* fix: exlude correct contracts on test to succeed

* chore: update initializer array length

* fix: semver lock

* fix: L2 audit findings (#323)

* fix: audit findings

* chore: pre-pr

* refactor: avoid stack too deep removing params on test (#324)

---------

Co-authored-by: AgusDuha <[email protected]>
Co-authored-by: agusduha <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.