crytic/slither
1
0
Fork 0
mirror of https://github.com/crytic/slither.git synced 2026-10-12 02:12:39 +00:00
Code Issues Packages Projects Releases Wiki Activity
5,202 Commits 61 Branches 48 Tags
master
Commit Graph
5202 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Simone eef5df948b Merge pull request #3072 from crytic/dependabot/github_actions/master/all-a84dda5603 
chore(deps): bump the all group with 3 updates
 2026-08-06 14:20:32 +02:00
dependabot[bot] 075af1e0e8 chore(deps): bump the all group with 3 updates 
Bumps the all group with 3 updates: [docker/login-action](https://github.com/docker/login-action), [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) and [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python).


Updates `docker/login-action` from 4.4.0 to 4.6.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/af1e73f918a031802d376d3c8bbc3fe56130a9b0...dbcb813823bdd20940b903addbd779551569679f)

Updates `pypa/gh-action-pypi-publish` from 1.14.1 to 1.14.2
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/ba38be9e461d3875417946c167d0b5f3d385a247...dc37677b2e1c63e2034f94d8a5b11f265b73ba33)

Updates `sigstore/gh-action-sigstore-python` from 3.4.0 to 3.5.0
- [Release notes](https://github.com/sigstore/gh-action-sigstore-python/releases)
- [Changelog](https://github.com/sigstore/gh-action-sigstore-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sigstore/gh-action-sigstore-python/compare/5b79a39c381910c090341a2c9b0bf022c8b387e1...790bc6befb9d733738f18d8f895854b453640ec9)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: pypa/gh-action-pypi-publish
  dependency-version: 1.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: sigstore/gh-action-sigstore-python
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-08-05 22:54:55 +00:00
Simone 050cc0a094 Merge pull request #3062 from crytic/update-slither-0-11-6 
Update version
0.11.6 		2026-07-28 23:19:16 +02:00
Simone f90255bcad Update version 2026-07-28 23:13:56 +02:00
Simone 1eb38198f9 Merge pull request #3060 from crytic/crytic-compile-0-4-2 
Update crytic-compile
 2026-07-28 23:08:31 +02:00
Simone b587154547 Update crytic-compile 2026-07-28 23:03:02 +02:00
Simone 61715da702 Merge pull request #2978 from rajatbeladiya/docs/fix-detector-doc-typo-1206 
docs: fix typo in detector documentation
 2026-07-28 18:18:33 +02:00
Simone dbe57aca55 Merge branch 'master' into docs/fix-detector-doc-typo-1206 2026-07-28 18:12:01 +02:00
Simone 0edb5e314f Merge pull request #3011 from cats2101/feat/slither-conf-json-alias 
feat: accept slither.conf.json as alternative default config
 2026-07-28 17:53:11 +02:00
Simone f395ca8533 Merge branch 'master' into feat/slither-conf-json-alias 2026-07-28 17:46:50 +02:00
Simone f0c8ca9a84 Merge pull request #3014 from cats2101/fix/upgradeable-only-delegatecall 
fix: accept onlyDelegateCall as protected modifier in unprotected-upgrade
 2026-07-28 17:45:00 +02:00
Simone a4ab43a1bc Merge branch 'master' into fix/upgradeable-only-delegatecall 2026-07-28 17:34:40 +02:00
dependabot[bot]andEmilio López 47b243315c chore(deps): bump the all group across 1 directory with 6 updates (#3059) 
* chore(deps): bump the all group across 1 directory with 6 updates

Bumps the all group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `7.0.0` | `7.0.1` |
| [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `8.3.2` | `9.0.0` |
| [cachix/install-nix-action](https://github.com/cachix/install-nix-action) | `31.10.7` | `31.11.0` |
| [actions/setup-python](https://github.com/actions/setup-python) | `6.3.0` | `7.0.0` |
| [DavidAnson/markdownlint-cli2-action](https://github.com/davidanson/markdownlint-cli2-action) | `24.0.0` | `24.1.0` |
| [actions/setup-node](https://github.com/actions/setup-node) | `6.4.0` | `7.0.0` |



Updates `actions/checkout` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v7...3d3c42e5aac5ba805825da76410c181273ba90b1)

Updates `astral-sh/setup-uv` from 8.3.2 to 9.0.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](https://github.com/astral-sh/setup-uv/compare/v8.3.2...c771a70e6277c0a99b617c7a806ffedaca235ff9)

Updates `cachix/install-nix-action` from 31.10.7 to 31.11.0
- [Release notes](https://github.com/cachix/install-nix-action/releases)
- [Changelog](https://github.com/cachix/install-nix-action/blob/master/RELEASE.md)
- [Commits](https://github.com/cachix/install-nix-action/compare/a49548c11d9846ad46ecc0115273879b045f001c...630ae543ea3a38a9a4166f03376c02c50f408342)

Updates `actions/setup-python` from 6.3.0 to 7.0.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/ece7cb06caefa5fff74198d8649806c4678c61a1...5fda3b95a4ea91299a34e894583c3862153e4b97)

Updates `DavidAnson/markdownlint-cli2-action` from 24.0.0 to 24.1.0
- [Release notes](https://github.com/davidanson/markdownlint-cli2-action/releases)
- [Commits](https://github.com/davidanson/markdownlint-cli2-action/compare/8de2aa07cae85fd17c0b35642db70cf5495f1d25...6bf21b07787794f89a243495939cd651942aeabe)

Updates `actions/setup-node` from 6.4.0 to 7.0.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e...820762786026740c76f36085b0efc47a31fe5020)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: astral-sh/setup-uv
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: cachix/install-nix-action
  dependency-version: 31.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: actions/setup-python
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: DavidAnson/markdownlint-cli2-action
  dependency-version: 24.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: actions/setup-node
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
...

Signed-off-by: dependabot[bot] <[email protected]>

* Fix version comments

Co-authored-by: Emilio López <[email protected]>

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Emilio López <[email protected]>
 2026-07-28 12:28:23 -03:00
Simone bf677b58a3 Merge pull request #3017 from cats2101/fix/detector-doc-typos 
Fix typos in detector documentation
 2026-07-28 17:25:43 +02:00
Simone 5e42705912 Merge pull request #3025 from sulphur-swarm/fix/issue-1780-register-printer-multi-cu 
fix: update register_printer to handle multiple compilation units
 2026-07-28 17:25:30 +02:00
SimoneandClaude Opus 5 2517aa2706 style: reformat AbstractPrinter.__init__ signature 
Run ruff format to wrap the constructor signature within the
100-char line limit.

Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>
 2026-07-28 17:19:12 +02:00
Simone 916e97dc3d Merge pull request #3026 from cuoguojida/master 
chore: fix some minor issues in comments
 2026-07-28 17:16:38 +02:00
Simone 7ab7179f8c Merge branch 'master' into fix/detector-doc-typos 2026-07-28 17:14:40 +02:00
Simone 98be796a84 Merge branch 'master' into fix/issue-1780-register-printer-multi-cu 2026-07-28 17:12:51 +02:00
Simone 095a8a856d Merge branch 'master' into master 2026-07-28 17:11:41 +02:00
Simone 0958237894 Merge pull request #3058 from crytic/release-workflow 
Fix release workflow for immutable releases
 2026-07-28 17:08:40 +02:00
Simone 49a4122ed8 Merge pull request #3035 from MarkLee131/fix/incorrect-modifier-revert-string 
Fix incorrect-modifier false positive on revert("msg") and custom-error reverts
 2026-07-28 17:07:54 +02:00
Simone aea8002418 Merge branch 'master' into fix/incorrect-modifier-revert-string 2026-07-28 16:58:07 +02:00
Simone 900a0a9fc4 Merge pull request #3038 from MarkLee131/fix/naming-convention-yul-mangled-params 
Fix naming-convention false positive on Yul-local function parameters
 2026-07-28 16:55:09 +02:00
Simone 6e00d3d2ee Merge branch 'master' into fix/naming-convention-yul-mangled-params 2026-07-28 15:58:43 +02:00
Simone 46cdc24a8b Merge pull request #3040 from MarkLee131/fix/divide-before-multiply-reassignment-kill 
Fix divide-before-multiply false positive when the divided variable is reassigned
 2026-07-28 15:45:44 +02:00
Simone 5cc0603e46 Merge branch 'master' into fix/divide-before-multiply-reassignment-kill 2026-07-28 15:37:11 +02:00
Emilio López 456480564a Bump publish workflow actions to latest and use detailed version pins 
Update outdated pins: checkout v7.0.1, setup-uv v9.0.0, pypi-publish
v1.14.1, gh-release v3.0.2. Rewrite the checkout/setup-uv comments, which
claimed v6/v7 but whose SHAs were actually v7.0.0/v8.3.2, so every pin
comment now reflects the exact tag the SHA resolves to.

The only setup-uv v9 breaking change (prune-cache default -> false) does
not affect this workflow.
 2026-07-27 17:06:37 -03:00
Emilio López 4323645401 Fix PyPI publish workflow for immutable releases 
Trigger on version tag push instead of release:published, and create the
GitHub release as a draft so the dists and their sigstore bundles can be
attached while the release is still mutable. Publishing to PyPI (with PEP
740 attestations) is unchanged.
 2026-07-27 16:56:36 -03:00
Simone ff1bf3ff4a Fix comments 2026-07-17 13:34:25 +02:00
Simone 53238ec300 Merge pull request #3053 from crytic/dependabot/github_actions/master/all-b16d8ce9c1 
chore(deps): bump the all group across 1 directory with 20 updates
 2026-07-17 13:29:54 +02:00
dependabot[bot] 6ae5f43415 chore(deps): bump the all group across 1 directory with 20 updates 
Bumps the all group with 20 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `6.0.2` | `7.0.0` |
| [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `7.2.0` | `8.3.2` |
| [cachix/install-nix-action](https://github.com/cachix/install-nix-action) | `31.9.0` | `31.10.7` |
| [cachix/cachix-action](https://github.com/cachix/cachix-action) | `16` | `17` |
| [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `3.7.0` | `4.2.0` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.12.0` | `4.2.0` |
| [docker/metadata-action](https://github.com/docker/metadata-action) | `5.10.0` | `6.2.0` |
| [docker/login-action](https://github.com/docker/login-action) | `3.7.0` | `4.4.0` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `6.18.0` | `7.3.0` |
| [actions/configure-pages](https://github.com/actions/configure-pages) | `5.0.0` | `6.0.0` |
| [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) | `4.0.0` | `5.0.0` |
| [actions/deploy-pages](https://github.com/actions/deploy-pages) | `4.0.5` | `5.0.0` |
| [actions/setup-python](https://github.com/actions/setup-python) | `6.2.0` | `6.3.0` |
| [astral-sh/ruff-action](https://github.com/astral-sh/ruff-action) | `3.6.1` | `4.1.0` |
| [DavidAnson/markdownlint-cli2-action](https://github.com/davidanson/markdownlint-cli2-action) | `22.0.0` | `24.0.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `6.0.0` | `7.0.1` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `7.0.0` | `8.0.1` |
| [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) | `1.13.0` | `1.14.0` |
| [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python) | `3.2.0` | `3.4.0` |
| [actions/setup-node](https://github.com/actions/setup-node) | `6.2.0` | `6.4.0` |



Updates `actions/checkout` from 6.0.2 to 7.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0)

Updates `astral-sh/setup-uv` from 7.2.0 to 8.3.2
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](https://github.com/astral-sh/setup-uv/compare/61cb8a9741eeb8a550a1b8544337180c0fc8476b...11f9893b081a58869d3b5fccaea48c9e9e46f990)

Updates `cachix/install-nix-action` from 31.9.0 to 31.10.7
- [Release notes](https://github.com/cachix/install-nix-action/releases)
- [Changelog](https://github.com/cachix/install-nix-action/blob/master/RELEASE.md)
- [Commits](https://github.com/cachix/install-nix-action/compare/4e002c8ec80594ecd40e759629461e26c8abed15...a49548c11d9846ad46ecc0115273879b045f001c)

Updates `cachix/cachix-action` from 16 to 17
- [Release notes](https://github.com/cachix/cachix-action/releases)
- [Changelog](https://github.com/cachix/cachix-action/blob/master/RELEASE.md)
- [Commits](https://github.com/cachix/cachix-action/compare/3ba601ff5bbb07c7220846facfa2cd81eeee15a1...5f2d7c5294214f71b873db4b969586b980625e71)

Updates `docker/setup-qemu-action` from 3.7.0 to 4.2.0
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](https://github.com/docker/setup-qemu-action/compare/c7c53464625b32c7a7e944ae62b3e17d2b600130...96fe6ef7f33517b61c61be40b68a1882f3264fb8)

Updates `docker/setup-buildx-action` from 3.12.0 to 4.2.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/8d2750c68a42422c14e847fe6c8ac0403b4cbd6f...bb05f3f5519dd87d3ba754cc423b652a5edd6d2c)

Updates `docker/metadata-action` from 5.10.0 to 6.2.0
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](https://github.com/docker/metadata-action/compare/c299e40c65443455700f0fdfc63efafe5b349051...dc802804100637a589fabce1cb79ff13a1411302)

Updates `docker/login-action` from 3.7.0 to 4.4.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/c94ce9fb468520275223c153574b00df6fe4bcc9...af1e73f918a031802d376d3c8bbc3fe56130a9b0)

Updates `docker/build-push-action` from 6.18.0 to 7.3.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/263435318d21b8e681c14492fe198d362a7d2c83...53b7df96c91f9c12dcc8a07bcb9ccacbed38856a)

Updates `actions/configure-pages` from 5.0.0 to 6.0.0
- [Release notes](https://github.com/actions/configure-pages/releases)
- [Commits](https://github.com/actions/configure-pages/compare/983d7736d9b0ae728b81ab479565c72886d7745b...45bfe0192ca1faeb007ade9deae92b16b8254a0d)

Updates `actions/upload-pages-artifact` from 4.0.0 to 5.0.0
- [Release notes](https://github.com/actions/upload-pages-artifact/releases)
- [Commits](https://github.com/actions/upload-pages-artifact/compare/7b1f4a764d45c48632c6b24a0339c27f5614fb0b...fc324d3547104276b827a68afc52ff2a11cc49c9)

Updates `actions/deploy-pages` from 4.0.5 to 5.0.0
- [Release notes](https://github.com/actions/deploy-pages/releases)
- [Commits](https://github.com/actions/deploy-pages/compare/d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e...cd2ce8fcbc39b97be8ca5fce6e763baed58fa128)

Updates `actions/setup-python` from 6.2.0 to 6.3.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/a309ff8b426b58ec0e2a45f0f869d46889d02405...ece7cb06caefa5fff74198d8649806c4678c61a1)

Updates `astral-sh/ruff-action` from 3.6.1 to 4.1.0
- [Release notes](https://github.com/astral-sh/ruff-action/releases)
- [Commits](https://github.com/astral-sh/ruff-action/compare/4919ec5cf1f49eff0871dbcea0da843445b837e6...278981a28ce3188b1e39527901f38254bf3aac89)

Updates `DavidAnson/markdownlint-cli2-action` from 22.0.0 to 24.0.0
- [Release notes](https://github.com/davidanson/markdownlint-cli2-action/releases)
- [Commits](https://github.com/davidanson/markdownlint-cli2-action/compare/07035fd053f7be764496c0f8d8f9f41f98305101...8de2aa07cae85fd17c0b35642db70cf5495f1d25)

Updates `actions/upload-artifact` from 6.0.0 to 7.0.1
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/b7c566a772e6b6bfb58ed0dc250532a479d7789f...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a)

Updates `actions/download-artifact` from 7.0.0 to 8.0.1
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/37930b1c2abaa49bbe596cd826c3c89aef350131...3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c)

Updates `pypa/gh-action-pypi-publish` from 1.13.0 to 1.14.0
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e...cef221092ed1bacb1cc03d23a2d87d1d172e277b)

Updates `sigstore/gh-action-sigstore-python` from 3.2.0 to 3.4.0
- [Release notes](https://github.com/sigstore/gh-action-sigstore-python/releases)
- [Changelog](https://github.com/sigstore/gh-action-sigstore-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sigstore/gh-action-sigstore-python/compare/a5caf349bc536fbef3668a10ed7f5cd309a4b53d...5b79a39c381910c090341a2c9b0bf022c8b387e1)

Updates `actions/setup-node` from 6.2.0 to 6.4.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/6044e13b5dc448c55e2357c09f80417699197238...48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: astral-sh/setup-uv
  dependency-version: 8.3.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: cachix/install-nix-action
  dependency-version: 31.10.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: cachix/cachix-action
  dependency-version: '17'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: docker/metadata-action
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: docker/login-action
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: docker/build-push-action
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: actions/configure-pages
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: actions/upload-pages-artifact
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: actions/deploy-pages
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: actions/setup-python
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: astral-sh/ruff-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: DavidAnson/markdownlint-cli2-action
  dependency-version: 24.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: actions/download-artifact
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: pypa/gh-action-pypi-publish
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: sigstore/gh-action-sigstore-python
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: actions/setup-node
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-07-17 11:21:58 +00:00
Simone 4e86d21221 Merge pull request #3051 from crytic/update-deps 
Update lockfile
 2026-07-17 13:07:42 +02:00
Simone 7de9328b05 Update lockfile 2026-07-17 13:01:37 +02:00
Simone b49a79717c Merge pull request #3015 from crytic/support-erc7201 
feat(parsing): support 0.8.35 erc7201 comptime builtin
 2026-07-17 12:58:44 +02:00
Simone 867a6bed90 Merge pull request #3001 from crytic/dependabot/uv/web3-7.15.0 
chore(deps): bump web3 from 7.14.0 to 7.15.0
 2026-07-17 12:58:02 +02:00
Simone 6b775fbcdf Merge branch 'master' into dependabot/uv/web3-7.15.0 2026-07-17 12:54:22 +02:00
Simone 5e78b88c02 Merge pull request #2966 from crytic/docker 
Dockerfile: always use uv, do cleaner layers, upgrade to noble
 2026-06-05 19:53:33 +02:00
Emilio López a5bc82d262 Dockerfile: drop ARM v7 support 2026-06-05 13:53:17 -03:00
Emilio López 0bf907f1eb Dockerfile: always use uv, do cleaner layers, upgrade to noble 2026-06-05 13:28:59 -03:00
Simone d8bb3398a1 Fix Dockerfile for cbor2 2026-06-05 16:34:46 +02:00
Simone 781ba32911 Update expected test output 2026-06-05 15:35:29 +02:00
Simone 6a340ee132 Merge pull request #3043 from crytic/update-crytic-compile 
Update crytic-compile version
 2026-06-05 15:27:21 +02:00
Simone 074b9f0460 Update lockfile 2026-06-05 15:10:04 +02:00
Simone 2df67fca40 Update expected test output 2026-06-05 14:26:04 +02:00
Simone ba04b82b90 Update crytic-compile version 2026-06-05 13:57:04 +02:00
MarkLee131 b9484807ff Add test snapshot and compile archive for divide_before_multiply_reassignment 
Generated via:
  python tests/e2e/detectors/test_detectors.py --compile
  pytest -k DivideBeforeMultiply-0.8.20-divide_before_multiply_reassignment --insta update

All 5 DivideBeforeMultiply test cases pass with the fix applied.
 2026-05-29 21:53:30 +08:00
MarkLee131 24d50cc958 Fix divide-before-multiply false positive when divided variable is reassigned 
The `_explore` worklist in `slither/detectors/statements/divide_before_multiply.py`
tracks the set of currently-division-tainted IR variables in a `divisions` dict.
The Assignment handler only propagates taint from rvalue to lvalue when the
rvalue is already in `divisions`. There is no else branch, so when the rvalue
is a clean (non-divided) value, the lvalue's previous taint is never cleared.

A variable that was previously assigned a division result and is then fully
overwritten with an unrelated value keeps its stale taint, and the next
multiplication using it fires:

  uint256 a = x / y;   // divisions[a] = [node15]
  a = z;               // rvalue clean; divisions[a] never cleared
  return a * 100;      // FP: `a` here is `z`, not x/y

Clear the stale taint in an `else` branch on Assignment so the dataflow kill
matches the join semantics of full overwrite.

Adds tests/e2e/detectors/test_data/divide-before-multiply/0.8.20/divide_before_multiply_reassignment.sol
covering two FP shapes (direct reassign, reassign through a temporary) plus a
tripwire `genuineDivThenMul` that must still fire. After this change the
snapshot contains only the tripwire; the two FPs are gone.

All four existing DivideBeforeMultiply fixtures still pass with identical
output.

The change does not touch the multiplication-check itself, so the
intentional-precision-loss firings (`a / b * c` in fixed-point math) are
unchanged.
 2026-05-29 21:53:30 +08:00
MarkLee131 bfde03ec1e Add test snapshot and compile archive for naming_convention_yul_local 
Generated via:
  python tests/e2e/detectors/test_detectors.py --compile
  pytest -k NamingConvention-0.8.20-naming_convention_yul_local --insta update

All 9 NamingConvention test cases pass with the fix applied.
 2026-05-29 20:27:12 +08:00
MarkLee131 0f9b70bc0f Fix naming-convention false positive on Yul-local function parameters 
The Yul parser mangles every local identifier to <source_name>__<scope_chain>
(solc_parsing/yul/parse_yul.py:130), so a Yul parameter `base_` declared
inside `unsafeExtend`'s 0th assembly block ends up named
`base__unsafeExtend_asm_0_extendInline`. The naming-convention detector
iterates `contract.functions_declared`, which includes these synthetic Yul-
local functions, and runs `is_mixed_case_with_underscore` on the mangled
name. The mangled name is a parser artifact, not an identifier the developer
wrote.

Synthetic Yul-local functions carry `Function.internal_scope` non-empty. Skip
them in the naming-convention loop so neither the synthetic function name nor
its parser-mangled parameters are checked.

Adds tests/e2e/detectors/test_data/naming-convention/0.8.20/naming_convention_yul_local.sol
covering two Yul-local function declarations (extendInline, memcpy) plus a
tripwire `tripwire(uint256 Bad_Param)` that uses a deliberately non-mixedCase
Solidity-level parameter. The snapshot after this change contains exactly the
tripwire finding; the Yul-local FPs are gone.

All 8 existing NamingConvention fixtures still pass with identical output.

Closes #1815.
 2026-05-29 20:27:12 +08:00