Skip to content

Bump solc and pin CI actions to specific SHAs - #28

Merged
YoshihitoAso merged 2 commits into
mainfrom
enforce-sha-pinnning
Apr 21, 2026
Merged

Bump solc and pin CI actions to specific SHAs#28
YoshihitoAso merged 2 commits into
mainfrom
enforce-sha-pinnning

Conversation

@YoshihitoAso

@YoshihitoAso YoshihitoAso commented Apr 21, 2026

Copy link
Copy Markdown
Member

📌 Description

This pull request updates the Solidity compiler version from 0.8.23/0.8.0 to 0.8.34 across all smart contracts, interfaces, and configuration files.
It also updates the GitHub Actions workflow configuration to use specific commit SHAs and associated version comments for all third-party action dependencies.

✅ Related Issues

None

🔄 Changes

Solidity Version Upgrade:

  • Updated the pragma statement to ^0.8.34 in all Solidity source files, including contracts and interfaces, to ensure the project uses the latest supported compiler version.
  • Updated brownie-config.yaml to set the Solidity compiler version to 0.8.34.

Continuous Integration and Build Process:

  • Updated the GitHub Actions workflow (.github/workflows/pr.yml) to pin all used actions to specific commit hashes for improved security and reproducibility, and added a step to install the Solidity 0.8.34 compiler with checksum verification.

📌 Checklist

  • I have added tests where necessary.
  • I have updated the documentation where necessary.

Replace floating action refs with exact commit SHAs and annotate them with their corresponding semver tags for reproducible workflows.
Bump Solidity toolchain to v0.8.34 across the project.
@YoshihitoAso YoshihitoAso changed the title Pin CI actions to specific SHAs Bump solc and pin CI actions to specific SHAs Apr 21, 2026
@YoshihitoAso
YoshihitoAso merged commit dda422c into main Apr 21, 2026
2 checks passed
@YoshihitoAso
YoshihitoAso deleted the enforce-sha-pinnning branch April 21, 2026 23:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant