Releases: bosonprotocol/boson-protocol-contracts
Releases · bosonprotocol/boson-protocol-contracts
v2.4.1
v2.4.0
What's Changed
- Release v2.3.0 addresses by @zajck in #807
- Enable back slither in workflow by @zajck in #816
- Sequential commit by @zajck in #569
- Custom errors by @zajck in #821
- Royalties by @zajck in #579
- Limit max fee per offer by @zajck in #825
- Add get getSellersCollectionsPaginated method by @zajck in #824
- Update slither config by @zajck in #828
- Combined dependabot PRs by @zajck in #830
- Update solidity version and remove event definition duplicates by @zajck in #827
- Bump nanoid from 3.1.25 to 3.3.3 by @dependabot in #831
- Bump minimatch from 3.0.4 to 3.1.2 by @dependabot in #832
- Bump prettier-plugin-solidity from 1.1.3 to 1.2.0 by @dependabot in #833
- Dependabot group PRs by @zajck in #834
- V2.4.0. protocol initialization by @zajck in #838
- Tight pack Offer struct by @zajck in #841
- Royalty registry integration test by @zajck in #840
- Bump opensea-js from 6.1.12 to 6.1.15 by @dependabot in #835
- Bump eslint-config-prettier from 8.8.0 to 9.1.0 by @dependabot in #837
- Bump the dev-dependencies group with 5 updates by @dependabot in #843
- Add missing reentrancy guard by @zajck in #844
- Remove unused dev dependencies by @zajck in #847
- PDB-01S] Unutilized Contract Member by @zajck in #875
- [FLB-01M] Potentially Incorrect Dispute Case Handling by @zajck in #877
- [SHF-01M] Inexistent Erasure of Recipient Index by @zajck in #878
- [SCH-01M] Incorrect Specification of Error & [SCH-04M] Duplicate Emission of Event by @zajck in #879
- [FLB-01C] Redundant Self-Assignment by @zajck in #880
- [SHF-01C] Inefficient mapping Lookups by @zajck in #883
- [SCH-01C] Ineffectual Usage of Safe Arithmetics by @zajck in #884
- [PDB-01C] Inexistent Error Message by @zajck in #886
- [FLB-02C] Repetitive Value Literal by @zajck in #881
- [OHF-01C] Redundant Application of Security Modifier by @zajck in #882
- [BBE-01C] Inefficient Creation of Buyer by @zajck in #885
- [SBE-01M] Incorrect Default Royalty Recipient Initialization && [SHF-02C] Non-Uniform Royalty Recipient ID Definition by @zajck in #887
- [PDB-02S] Inexistent Sanitization of Input Address by @zajck in #876
- Minor seller handler optimization by @zajck in #888
- [SCH-03M] Potentially Incorrect Escrowed Amount Calculation by @zajck in #896
- [PDB-01M] Arbitrary External Contract Calls by @zajck in #894
- [FLB-02M] Potential Gas Bombing Attack Vector by @zajck in #897
- Fix release funds by @zajck in #904
- Secondary price should exceed cancellation penalty by @zajck in #908
- Price discovery offers must have 0 initial price by @zajck in #909
- New pausable regions by @zajck in #910
- Price discovery ask flow update by @zajck in #913
- Split Account Hanlder interface and fix problems by @zajck in #917
- 2.4.0 migration script and upgrade tests by @zajck in #923
- v2.4.0 Mumbai and Goerli test addresses by @zajck in #924
- Deploy Diamond contracts using CREATE3 by @zajck in #932
- Sepolia test, Sepolia staging, Mumbai staging addresses by @zajck in #926
- Release 2.4.0 - amoy test, ethereum mainnet prod, polygon mainnet prod by @zajck in #938
Full Changelog: v2.3.0...v2.4.0
v2.4.0-rc.3
What's Changed
- Fix release funds by @zajck in #904
- Secondary price should exceed cancellation penalty by @zajck in #908
- Price discovery offers must have 0 initial price by @zajck in #909
- New pausable regions by @zajck in #910
- Price discovery ask flow update by @zajck in #913
Full Changelog: v2.4.0-rc.2...v2.4.0-rc.3
v2.4.0-rc.2
What's Changed
- PDB-01S] Unutilized Contract Member by @zajck in #875
- [FLB-01M] Potentially Incorrect Dispute Case Handling by @zajck in #877
- [SHF-01M] Inexistent Erasure of Recipient Index by @zajck in #878
- [SCH-01M] Incorrect Specification of Error & [SCH-04M] Duplicate Emission of Event by @zajck in #879
- [FLB-01C] Redundant Self-Assignment by @zajck in #880
- [SHF-01C] Inefficient mapping Lookups by @zajck in #883
- [SCH-01C] Ineffectual Usage of Safe Arithmetics by @zajck in #884
- [PDB-01C] Inexistent Error Message by @zajck in #886
- [FLB-02C] Repetitive Value Literal by @zajck in #881
- [OHF-01C] Redundant Application of Security Modifier by @zajck in #882
- [BBE-01C] Inefficient Creation of Buyer by @zajck in #885
- [SBE-01M] Incorrect Default Royalty Recipient Initialization && [SHF-02C] Non-Uniform Royalty Recipient ID Definition by @zajck in #887
- [PDB-02S] Inexistent Sanitization of Input Address by @zajck in #876
- Minor seller handler optimization by @zajck in #888
- [SCH-03M] Potentially Incorrect Escrowed Amount Calculation by @zajck in #896
- [PDB-01M] Arbitrary External Contract Calls by @zajck in #894
- [FLB-02M] Potential Gas Bombing Attack Vector by @zajck in #897
Full Changelog: v2.4.0-rc.1...v2.4.0-rc.2
v2.4.0-rc.1
What's Changed
- Release v2.3.0 addresses by @zajck in #807
- Enable back slither in workflow by @zajck in #816
- Sequential commit by @zajck in #569
- Custom errors by @zajck in #821
- Royalties by @zajck in #579
- Limit max fee per offer by @zajck in #825
- Add get getSellersCollectionsPaginated method by @zajck in #824
- Update slither config by @zajck in #828
- Combined dependabot PRs by @zajck in #830
- Update solidity version and remove event definition duplicates by @zajck in #827
- Bump nanoid from 3.1.25 to 3.3.3 by @dependabot in #831
- Bump minimatch from 3.0.4 to 3.1.2 by @dependabot in #832
- Bump prettier-plugin-solidity from 1.1.3 to 1.2.0 by @dependabot in #833
- Dependabot group PRs by @zajck in #834
- V2.4.0. protocol initialization by @zajck in #838
- Tight pack Offer struct by @zajck in #841
- Royalty registry integration test by @zajck in #840
- Bump opensea-js from 6.1.12 to 6.1.15 by @dependabot in #835
- Bump eslint-config-prettier from 8.8.0 to 9.1.0 by @dependabot in #837
- Bump the dev-dependencies group with 5 updates by @dependabot in #843
- Add missing reentrancy guard by @zajck in #844
- Remove unused dev dependencies by @zajck in #847
Full Changelog: v2.3.0...v2.4.0-rc.1
v2.3.0
What's Changed
- 2.2.1 Release by @zajck in #633
- Bump @openzeppelin/contracts from 4.8.2 to 4.9.0 by @dependabot in #643
- Bump @openzeppelin/contracts-upgradeable from 4.7.1 to 4.8.3 by @dependabot in #642
- This cleans up some local variable names by @mischat in #607
- Bump @nomiclabs/hardhat-ethers from 2.2.2 to 2.2.3 by @dependabot in #647
- Bump cross-fetch from 2.2.3 to 3.1.6 by @dependabot in #648
- This should quieten a couple of warnings by @mischat in #620
- Bump simple-get from 2.8.1 to 2.8.2 by @dependabot in #649
- Update solidity, hardhat, slither CI by @zajck in #632
- Bump glob from 9.3.5 to 10.2.6 by @dependabot in #655
- Improve coverage CI report with coveralls by @anajuliabit in #641
- Bump @openzeppelin/contracts-upgradeable from 4.8.3 to 4.9.0 by @dependabot in #654
- Bump dotenv from 16.0.3 to 16.1.3 by @dependabot in #661
- Bump hardhat from 2.14.0 to 2.14.1 by @dependabot in #662
- Deprecate twinIdsByTokenAddressAndBySeller by @anajuliabit in #628
- Bump yargs-parser from 2.4.1 to 20.2.9 by @dependabot in #660
- Bump eslint from 8.41.0 to 8.42.0 by @dependabot in #664
- Bump truffle from 5.9.2 to 5.9.3 by @dependabot in #663
- Bump dotenv from 16.1.3 to 16.1.4 by @dependabot in #665
- Deprecate clerk by @zajck in #638
- Bump truffle from 5.9.3 to 5.9.4 by @dependabot in #666
- Bump glob from 10.2.6 to 10.2.7 by @dependabot in #667
- Fix code scanning alert - Reentrancy vulnerabilities by @zajck in #637
- Bump dotenv from 16.1.4 to 16.3.0 by @dependabot in #689
- ether.js v6 migration by @anajuliabit in #688
- Boson voucher bug fixes by @zajck in #634
- Fix unsuccessful twin transfer by @zajck in #652
- Check that the twin address is a contract by @zajck in #653
- Add minimal resolution period by @zajck in #673
- Clean pending auth token during updateSeller call by @anajuliabit in #684
- Limit gas when doing twin transfers by @zajck in #694
- Resolve time conflict in redeemVoucher and expireVoucher by @zajck in #695
- Unpause individual regions by @anajuliabit in #644
- Multiple collections per seller by @zajck in #592
- Fix token gating by @anajuliabit in #635
- Remove protocol gas limits by @anajuliabit in #675
- Fix twin inefficiencies by @anajuliabit in #656
- Clone vouchers using create2 by @zajck in #703
- Offer validity period - include upper value by @zajck in #697
- More flexible getAvailableFunds by @zajck in #698
- v2.3.0 scripts: migrations, dry-run, detect changes by @zajck in #686
- Remediate findings CHF-01M PHF-01M PIH-02M by @anajuliabit in #744
- Remediate [SHF-01M] Incorrect Iterator Usage by @zajck in #748
- This updates the bug bounty to our own one by @mischat in #770
- Remediate [EHF-01C] Inefficient mapping Lookups by @zajck in #752
- Remediate [BVR-01C] Potential Legibility Optimization by @zajck in #749
- Remediate [OBE-01C] Illegible Representation of Limitation by @zajck in #754
- Remediate [BVR-02C, EHF-02C, PHF-02C] Redundant Parenthesis Statement by @zajck in #750
- Replace approve for forceApprove on BosonVoucher by @anajuliabit in #718
- Remediate SBE-01M (salt used in create2) by @zajck in #746
- Remediate [BVR-06M] Insufficient Protection of Contract Assets by @zajck in #753
- Remediate [EHF-03M] Bypass of Token Specific Conditions by @zajck in #779
- fix verifyOnTestEnv() in deploy-suite script by @levalleux-ludo in #782
- Remmediate [PIH-01M] Inexistent Support of Manual Seller Configuration by @zajck in #747
- Bump @openzeppelin/contracts-upgradeable from 4.9.0 to 4.9.3 by @dependabot in #721
- Bump hardhat from 2.16.0 to 2.17.1 by @dependabot in #780
- Optimize iterators by @zajck in #755
- Raise dispute only once even if multiple twin transfers fail by @zajck in #759
- Add the missing reentrancy guard by @zajck in #765
- Remediate malformed return during the twin transfer by @zajck in #771
- Bump solidity and hardhat version by @zajck in #766
- Remediate returnbomb during a twin transfer by @zajck in #772
- Estimate the twin transfer gas limits by @zajck in #764
- register commitToConditionalOffer method for meta-transactions by @levalleux-ludo in #788
- v2.3.0 migration script and upgrade test by @zajck in #680
- Remove proxy deployment by @zajck in #776
- Conditional commit eligibility by @zajck in #790
- Fix tokenRange removal by @zajck in #794
- Release v2.3.0-rc.3 by @zajck in #791
- Remediate [EHF-02C] Redundant Parenthesis Statement by @zajck in #799
- Limit the number of twin transfers by @zajck in #800
- 2.3.0 upgrade tests by @zajck in #801
- Dry run option for suite deployment by @zajck in #781
- Goerli and mumbai v2.3.0-rc.4 test addresess by @zajck in #805
Full Changelog: v2.2.1...v2.3.0
v2.3.0-rc.4
What's Changed
- Fix tokenRange removal by @zajck in #794
- Release v2.3.0-rc.3 by @zajck in #791
- Remediate [EHF-02C] Redundant Parenthesis Statement by @zajck in #799
- Limit the number of twin transfers by @zajck in #800
- 2.3.0 upgrade tests by @zajck in #801
- Dry run option for suite deployment by @zajck in #781
Full Changelog: v2.3.0-rc.3...v2.3.0-rc.4
v2.3.0-rc.3
What's Changed
- register commitToConditionalOffer method for meta-transactions by @levalleux-ludo in #788
- v2.3.0 migration script and upgrade test by @zajck in #680
- Remove proxy deployment by @zajck in #776
- Conditional commit eligibility by @zajck in #790
Full Changelog: v2.3.0-rc.2...v2.3.0-rc.3
v2.3.0-rc.2
What's Changed
- v2.3.0 scripts: migrations, dry-run, detect changes by @zajck in #686
- Remediate findings CHF-01M PHF-01M PIH-02M by @anajuliabit in #744
- Remediate [SHF-01M] Incorrect Iterator Usage by @zajck in #748
- This updates the bug bounty to our own one by @mischat in #770
- Remediate [EHF-01C] Inefficient mapping Lookups by @zajck in #752
- Remediate [BVR-01C] Potential Legibility Optimization by @zajck in #749
- Remediate [OBE-01C] Illegible Representation of Limitation by @zajck in #754
- Remediate [BVR-02C, EHF-02C, PHF-02C] Redundant Parenthesis Statement by @zajck in #750
- Replace approve for forceApprove on BosonVoucher by @anajuliabit in #718
- Remediate SBE-01M (salt used in create2) by @zajck in #746
- Remediate [BVR-06M] Insufficient Protection of Contract Assets by @zajck in #753
- Remediate [EHF-03M] Bypass of Token Specific Conditions by @zajck in #779
- fix verifyOnTestEnv() in deploy-suite script by @levalleux-ludo in #782
- Remmediate [PIH-01M] Inexistent Support of Manual Seller Configuration by @zajck in #747
- Bump @openzeppelin/contracts-upgradeable from 4.9.0 to 4.9.3 by @dependabot in #721
- Bump hardhat from 2.16.0 to 2.17.1 by @dependabot in #780
- Optimize iterators by @zajck in #755
- Raise dispute only once even if multiple twin transfers fail by @zajck in #759
- Add the missing reentrancy guard by @zajck in #765
- Remediate malformed return during the twin transfer by @zajck in #771
- Bump solidity and hardhat version by @zajck in #766
- Remediate returnbomb during a twin transfer by @zajck in #772
- Estimate the twin transfer gas limits by @zajck in #764
Full Changelog: v2.3.0-rc.1...v2.3.0-rc.2
v2.3.0-rc.1
What's Changed
- Fix the bug in update seller by @zajck in #624
- 2.2.1-rc.3 test addresses by @zajck in #625
- 2.2.1 Release by @zajck in #633
- Bump @openzeppelin/contracts from 4.8.2 to 4.9.0 by @dependabot in #643
- Bump @openzeppelin/contracts-upgradeable from 4.7.1 to 4.8.3 by @dependabot in #642
- This cleans up some local variable names by @mischat in #607
- Bump @nomiclabs/hardhat-ethers from 2.2.2 to 2.2.3 by @dependabot in #647
- Bump cross-fetch from 2.2.3 to 3.1.6 by @dependabot in #648
- This should quieten a couple of warnings by @mischat in #620
- Bump simple-get from 2.8.1 to 2.8.2 by @dependabot in #649
- Update solidity, hardhat, slither CI by @zajck in #632
- Bump glob from 9.3.5 to 10.2.6 by @dependabot in #655
- Improve coverage CI report with coveralls by @anajuliabit in #641
- Bump @openzeppelin/contracts-upgradeable from 4.8.3 to 4.9.0 by @dependabot in #654
- Bump dotenv from 16.0.3 to 16.1.3 by @dependabot in #661
- Bump hardhat from 2.14.0 to 2.14.1 by @dependabot in #662
- Deprecate twinIdsByTokenAddressAndBySeller by @anajuliabit in #628
- Bump yargs-parser from 2.4.1 to 20.2.9 by @dependabot in #660
- Bump eslint from 8.41.0 to 8.42.0 by @dependabot in #664
- Bump truffle from 5.9.2 to 5.9.3 by @dependabot in #663
- Bump dotenv from 16.1.3 to 16.1.4 by @dependabot in #665
- Deprecate clerk by @zajck in #638
- Bump truffle from 5.9.3 to 5.9.4 by @dependabot in #666
- Bump glob from 10.2.6 to 10.2.7 by @dependabot in #667
- Fix code scanning alert - Reentrancy vulnerabilities by @zajck in #637
- Bump dotenv from 16.1.4 to 16.3.0 by @dependabot in #689
- ether.js v6 migration by @anajuliabit in #688
- Boson voucher bug fixes by @zajck in #634
- Fix unsuccessful twin transfer by @zajck in #652
- Check that the twin address is a contract by @zajck in #653
- Add minimal resolution period by @zajck in #673
- Clean pending auth token during updateSeller call by @anajuliabit in #684
- Limit gas when doing twin transfers by @zajck in #694
- Resolve time conflict in redeemVoucher and expireVoucher by @zajck in #695
- Unpause individual regions by @anajuliabit in #644
- Multiple collections per seller by @zajck in #592
- Fix token gating by @anajuliabit in #635
- Remove protocol gas limits by @anajuliabit in #675
- Fix twin inefficiencies by @anajuliabit in #656
- Clone vouchers using create2 by @zajck in #703
- Offer validity period - include upper value by @zajck in #697
- More flexible getAvailableFunds by @zajck in #698
Full Changelog: v2.2.1-rc.2...v2.3.0-rc.1