[Snyk] Upgrade truffle-plugin-verify from 0.3.11 to 0.5.23 #2

snyk-bot · 2022-04-04T07:32:25Z

Snyk has created this PR to upgrade truffle-plugin-verify from 0.3.11 to 0.5.23.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 32 versions ahead of your current version.
The recommended version was released 22 days ago, on 2022-03-13.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-1579269	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Proof of Concept
Information Exposure SNYK-JS-FOLLOWREDIRECTS-2332181	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Proof of Concept
Server-Side Request Forgery (SSRF) SNYK-JS-AXIOS-1038255	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Proof of Concept
Information Exposure SNYK-JS-FOLLOWREDIRECTS-2396346	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: truffle-plugin-verify

0.5.23 - 2022-03-13
- ✨ Enable using truffle-plugin-verify with the truffle dashboard
0.5.22 - 2022-03-09
- 🎉 Support verification on BTTScan and Aurorascan (authored by @ niccolopetti in #154)
0.5.21 - 2022-01-20
- 🎉 Add support for proxy configuration (authored by @ fuchengshun in #140)
- 🎉 Add support for more moonscan networks (authored by @ albertov19 in #144)
- 🐛 Fix bug when using network_id: "*" in truffle-config.js (authored by @ denizsurmeli in #145)
- 🐛 Fix bug with Mumbai verification (see #139)
- 🐛 Add API key config for Optimism and Arbitrum to fix bug with proxy verification (see #80)
0.5.20 - 2021-12-10
- 🎉 Add automatic EIP1967 proxy verification
  - Automatically verify the implementation rather than the proxy
  - Call Etherscan's "proxy verification" method to mark the proxy as a proxy
0.5.19 - 2021-12-06
- 🎉 Support verification on Moonscan for Moonriver mainnet (authored by @ albertov19 in #134)
- 🎉 Support verification on Optimistic Etherscan for Optimistic Kovan Testnet (authored by @ ChaO-0 in #138)
0.5.18 - 2021-11-10
- 🐛 Fix verification for Snowtrace / Avalanche (see #124)
0.5.17 - 2021-11-04
- 🎉 Support verification on Snowtrace for Avalanche mainnet and testnet
- 🐛 Fix bug when importing contracts from ../node_modules (see #101)
0.5.16 - 2021-10-30
- 🎉 Support verification on Arbiscan for Arbitrum testnet (authored by @ nhancv in #122)
0.5.15 - 2021-09-10
- ✨ Put the "main" contract on the top of the list so it is the first you see on Etherscan
- 🐛 Fix link to verified contracts
0.5.14 - 2021-09-02
- 🎉 Support verification on Optimistic Etherscan for Optimistic Ethereum
0.5.13 - 2021-09-01
0.5.12 - 2021-08-24
0.5.11 - 2021-07-07
0.5.10 - 2021-06-30
0.5.9 - 2021-06-14
0.5.9-beta.0 - 2021-06-09
0.5.8 - 2021-05-07
0.5.7 - 2021-03-16
0.5.6 - 2021-03-01
0.5.5 - 2021-02-25
0.5.4 - 2020-12-21
0.5.3 - 2020-12-20
0.5.2 - 2020-11-24
0.5.1 - 2020-11-19
0.5.0 - 2020-10-26
0.4.6 - 2021-07-07
0.4.5 - 2021-07-07
0.4.4 - 2021-06-30
0.4.3 - 2021-06-14
0.4.2 - 2021-05-10
0.4.1 - 2020-10-26
0.4.0 - 2020-08-30
0.3.11 - 2020-05-24

from truffle-plugin-verify GitHub release notes

Commit messages

Package name: truffle-plugin-verify

299a0ff Update axios dependency & bump version to 0.5.23
255a1b0 Make truffle-plugin-verify work with the dashboard
2abd0bc Bump version to 0.5.22
7c6a431 Add support for BitTorrent-Chain and Aurora (MAT-613: Use maticjs - start exit for [metadata] mintable burnt token maticnetwork/contracts#154)
163e06d Bump version to 0.5.21
1ddff12 Use proxy to access etherscan.io (Fix typo maticnetwork/contracts#140)
e53d4f7 Add API key config for optimistic etherscan and arbiscan
dc25489 Check that network_id is not "*" (add configs for istanbul fork maticnetwork/contracts#145)
07967e3 Move check for deployed address to before proxy code
62e388f Fix bug with eth_getStorageAt on Mumbai
71504ad Adds Moonbeam (Add moonwalk-migrations / instructions + Add test case maticnetwork/contracts#144)
f5fdad5 Add issue templates
aa6bb7b Bump versions to 0.5.20
e31097b Add automatic EIP1967 proxy verification
a7ac29e Bump versions to 0.5.19
79b447c Update README.md
bfb0500 Linting fixes
a134b57 add support for optimistic kovan test network (Readme is wrong maticnetwork/contracts#138)
5123dfd Added support for Moonriver Network (Refactor test suite maticnetwork/contracts#134)
bc25b07 Bump version to 0.5.18
1dd1c1f Fix Avalanche / Snowtrace not working
003bdd1 Bump version to 0.5.17
5dc800b Add support for Avalanche / Snowtrace
b57a527 Simplify project path replacement