@openzeppelin/contracts-upgradeable
Advanced tools
Changelog
4.7.3 (2022-08-10)
ECDSA
: recover(bytes32,bytes)
and tryRecover(bytes32,bytes)
no longer accept compact signatures to prevent malleability. Compact signature support remains available using recover(bytes32,bytes32,bytes32)
and tryRecover(bytes32,bytes32,bytes32)
.Changelog
4.7.2 (2022-07-25)
LibArbitrumL2
, CrossChainEnabledArbitrumL2
: Fixed detection of cross-chain calls for EOAs. Previously, calls from EOAs would be classified as cross-chain calls. (#3578)GovernorVotesQuorumFraction
: Fixed quorum updates so they do not affect past proposals that failed due to lack of quorum. (#3561)ERC165Checker
: Added protection against large returndata. (#3587)Changelog
4.7.0 (2022-06-29)
TimelockController
: Migrate _call
to _execute
and allow inheritance and overriding similar to Governor
. (#3317)CrossChainEnabledPolygonChild
: replace the require
statement with the custom error NotCrossChainCall
. (#3380)ERC20FlashMint
: Add customizable flash fee receiver. (#3327)ERC4626
: add an extension of ERC20
that implements the ERC4626 Tokenized Vault Standard. (#3171)SafeERC20
: add safePermit
as mitigation against phantom permit functions. (#3280)Math
: add a mulDiv
function that can round the result either up or down. (#3171)Math
: Add a sqrt
function to compute square roots of integers, rounding either up or down. (#3242)Strings
: add a new overloaded function toHexString
that converts an address
with fixed length of 20 bytes to its not checksummed ASCII string
hexadecimal representation. (#3403)EnumerableMap
: add new UintToUintMap
map type. (#3338)EnumerableMap
: add new Bytes32ToUintMap
map type. (#3416)SafeCast
: add support for many more types, using procedural code generation. (#3245)MerkleProof
: add multiProofVerify
to prove multiple values are part of a Merkle tree. (#3276)MerkleProof
: add calldata versions of the functions to avoid copying input arrays to memory and save gas. (#3200)ERC721
, ERC1155
: simplified revert reasons. (#3254, (#3438))ERC721
: removed redundant require statement. (#3434)PaymentSplitter
: add releasable
getters. (#3350)Initializable
: refactored implementation of modifiers for easier understanding. (#3450)Proxies
: remove runtime check of ERC1967 storage slots. (#3455)Initializable
: functions decorated with the modifier reinitializer(1)
may no longer invoke each other.Changelog
4.6.0 (2022-04-26)
crosschain
: Add a new set of contracts for cross-chain applications. CrossChainEnabled
is a base contract with instantiations for several chains and bridges, and AccessControlCrossChain
is an extension of access control that allows cross-chain operation. (#3183)AccessControl
: add a virtual _checkRole(bytes32)
function that can be overridden to alter the onlyRole
modifier behavior. (#3137)EnumerableMap
: add new AddressToUintMap
map type. (#3150)EnumerableMap
: add new Bytes32ToBytes32Map
map type. (#3192)ERC20FlashMint
: support infinite allowance when paying back a flash loan. (#3226)ERC20Wrapper
: the decimals()
function now tries to fetch the value from the underlying token instance. If that calls revert, then the default value is used. (#3259)draft-ERC20Permit
: replace immutable
with constant
for _PERMIT_TYPEHASH
since the keccak256
of string literals is treated specially and the hash is evaluated at compile time. (#3196)ERC1155
: Add a _afterTokenTransfer
hook for improved extensibility. (#3166)ERC1155URIStorage
: add a new extension that implements a _setURI
behavior similar to ERC721's _setTokenURI
. (#3210)DoubleEndedQueue
: a new data structure that supports efficient push and pop to both front and back, useful for FIFO and LIFO queues. (#3153)Governor
: improved security of onlyGovernance
modifier when using an external executor contract (e.g. a timelock) that can operate without necessarily going through the governance protocol. (#3147)Governor
: Add a way to parameterize votes. This can be used to implement voting systems such as fractionalized voting, ERC721 based voting, or any number of other systems. The params
argument added to _countVote
method, and included in the newly added _getVotes
method, can be used by counting and voting modules respectively for such purposes. (#3043)Governor
: rewording of revert reason for consistency. (#3275)Governor
: fix an inconsistency in data locations that could lead to invalid bytecode being produced. (#3295)Governor
: Implement IERC721Receiver
and IERC1155Receiver
to improve token custody by governors. (#3230)TimelockController
: Implement IERC721Receiver
and IERC1155Receiver
to improve token custody by timelocks. (#3230)TimelockController
: Add a separate canceller role for the ability to cancel. (#3165)Initializable
: add a reinitializer modifier that enables the initialization of new modules, added to already initialized contracts through upgradeability. (#3232)Initializable
: add an Initialized event that tracks initialized version numbers. (#3294)ERC2981
: make royaltyInfo
public to allow super call in overrides. (#3305)TimelockController
: (Action needed) The upgrade from <4.6 to >=4.6 introduces a new CANCELLER_ROLE
that requires set up to be assignable. After the upgrade, only addresses with this role will have the ability to cancel. Proposers will no longer be able to cancel. Assigning cancellers can be done by an admin (including the timelock itself) once the role admin is set up. To do this, we recommend upgrading to the TimelockControllerWith46MigrationUpgradeable
contract and then calling the migrateTo46
function.Governor
: Adds internal virtual _getVotes
method that must be implemented; this is a breaking change for existing concrete extensions to Governor
. To fix this on an existing voting module extension, rename getVotes
to _getVotes
and add a bytes memory
argument. (#3043)Governor
: Adds params
parameter to internal virtual _countVote
method; this is a breaking change for existing concrete extensions to Governor
. To fix this on an existing counting module extension, add a bytes memory
argument to _countVote
. (#3043)Governor
: Does not emit VoteCast
event when params data is non-empty; instead emits VoteCastWithParams
event. To fix this on an integration that consumes the VoteCast
event, also fetch/monitor VoteCastWithParams
events. (#3043)Votes
: The internal virtual function _getVotingUnits
was made view
(which was accidentally missing). Any overrides should now be updated so they are view
as well.