Skip to content

chore: add Dependency Review GitHub Action #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Sep 18, 2025
Merged

chore: add Dependency Review GitHub Action #2

merged 1 commit into from
Sep 18, 2025

Conversation

@absis
Copy link

@absis absis commented Sep 17, 2025

The dependency review action scans your pull requests for dependency changes and raises an error if any new dependencies have known vulnerabilities. Once installed, if the workflow run is marked as required, pull requests introducing known vulnerable packages will be blocked from merging.

@absis absis self-assigned this Sep 17, 2025
@linear
Copy link

linear bot commented Sep 17, 2025

DEVOPS-980 Implement dependency review action on aave repos

@github-actions
Copy link

github-actions bot commented Sep 17, 2025

Forge Build Sizes

🔕 Unchanged
Contract Runtime Size (B) Initcode Size (B) Runtime Margin (B) Initcode Margin (B)
AaveArbEthERC20Bridge 4,965 5,532 19,611 43,620
AaveGovernanceV2 85 160 24,491 48,992
AaveOpEthERC20Bridge 4,215 4,782 20,361 44,370
AavePolEthERC20Bridge 5,540 6,107 19,036 43,045
AavePolEthPlasmaBridge 4,801 5,368 19,775 43,784
AaveSwapper 7,867 8,571 16,709 40,581
AaveV2Avalanche 85 160 24,491 48,992
AaveV2AvalancheAssets 85 160 24,491 48,992
AaveV2ConfigEngine 4,830 5,719 19,746 43,433
AaveV2Ethereum 85 160 24,491 48,992
AaveV2EthereumAMM 85 160 24,491 48,992
AaveV2EthereumAMMAssets 85 160 24,491 48,992
AaveV2EthereumAssets 85 160 24,491 48,992
AaveV2EthereumRatesUpdate 2,431 2,730 22,145 46,422
AaveV2Polygon 85 160 24,491 48,992
AaveV2PolygonAssets 85 160 24,491 48,992
AaveV3Arbitrum 85 160 24,491 48,992
AaveV3ArbitrumAssets 85 160 24,491 48,992
AaveV3ArbitrumEModes 85 160 24,491 48,992
AaveV3ArbitrumExternalLibraries 85 160 24,491 48,992
AaveV3Avalanche 85 160 24,491 48,992
AaveV3AvalancheAssets 85 160 24,491 48,992
AaveV3AvalancheCollateralUpdate 8,472 8,899 16,104 40,253
AaveV3AvalancheCollateralUpdateCorrectBonus 8,472 8,899 16,104 40,253
AaveV3AvalancheCollateralUpdateNoChange 8,598 9,025 15,978 40,127
AaveV3AvalancheCollateralUpdateWrongBonus 8,472 8,899 16,104 40,253
AaveV3AvalancheEModeCategoryUpdateEdgeBonus 8,272 8,699 16,304 40,453
AaveV3AvalancheEModeCategoryUpdateNoChange 8,495 8,922 16,081 40,230
AaveV3AvalancheEModes 85 160 24,491 48,992
AaveV3AvalancheExternalLibraries 85 160 24,491 48,992
AaveV3BNB 85 160 24,491 48,992
AaveV3BNBAssets 85 160 24,491 48,992
AaveV3BNBEModes 85 160 24,491 48,992
AaveV3BNBExternalLibraries 85 160 24,491 48,992
AaveV3Base 85 160 24,491 48,992
AaveV3BaseAssets 85 160 24,491 48,992
AaveV3BaseEModes 85 160 24,491 48,992
AaveV3BaseExternalLibraries 85 160 24,491 48,992
AaveV3Celo 85 160 24,491 48,992
AaveV3CeloAssets 85 160 24,491 48,992
AaveV3CeloEModes 85 160 24,491 48,992
AaveV3CeloExternalLibraries 85 160 24,491 48,992
AaveV3Ethereum 85 160 24,491 48,992
AaveV3EthereumAssetEModeUpdate 8,267 8,694 16,309 40,458
AaveV3EthereumAssets 85 160 24,491 48,992
AaveV3EthereumEModes 85 160 24,491 48,992
AaveV3EthereumEtherFi 85 160 24,491 48,992
AaveV3EthereumEtherFiAssets 85 160 24,491 48,992
AaveV3EthereumEtherFiEModes 85 160 24,491 48,992
AaveV3EthereumEtherFiExternalLibraries 85 160 24,491 48,992
AaveV3EthereumExternalLibraries 85 160 24,491 48,992
AaveV3EthereumLido 85 160 24,491 48,992
AaveV3EthereumLidoAssets 85 160 24,491 48,992
AaveV3EthereumLidoEModes 85 160 24,491 48,992
AaveV3EthereumLidoExternalLibraries 85 160 24,491 48,992
AaveV3EthereumMockCapUpdate 8,389 8,816 16,187 40,336
AaveV3Fantom 85 160 24,491 48,992
AaveV3FantomAssets 85 160 24,491 48,992
AaveV3Gnosis 85 160 24,491 48,992
AaveV3GnosisAssets 85 160 24,491 48,992
AaveV3GnosisEModes 85 160 24,491 48,992
AaveV3GnosisExternalLibraries 85 160 24,491 48,992
AaveV3InkWhitelabel 85 160 24,491 48,992
AaveV3InkWhitelabelAssets 85 160 24,491 48,992
AaveV3InkWhitelabelEModes 85 160 24,491 48,992
AaveV3InkWhitelabelExternalLibraries 85 160 24,491 48,992
AaveV3Linea 85 160 24,491 48,992
AaveV3LineaAssets 85 160 24,491 48,992
AaveV3LineaEModes 85 160 24,491 48,992
AaveV3LineaExternalLibraries 85 160 24,491 48,992
AaveV3Mantle 85 160 24,491 48,992
AaveV3MantleAssets 85 160 24,491 48,992
AaveV3MantleEModes 85 160 24,491 48,992
AaveV3MantleExternalLibraries 85 160 24,491 48,992
AaveV3Metis 85 160 24,491 48,992
AaveV3MetisAssets 85 160 24,491 48,992
AaveV3MetisEModes 85 160 24,491 48,992
AaveV3MetisExternalLibraries 85 160 24,491 48,992
AaveV3Optimism 85 160 24,491 48,992
AaveV3OptimismAssets 85 160 24,491 48,992
AaveV3OptimismEModes 85 160 24,491 48,992
AaveV3OptimismExternalLibraries 85 160 24,491 48,992
AaveV3OptimismMockRatesUpdate 8,716 9,143 15,860 40,009
AaveV3Polygon 85 160 24,491 48,992
AaveV3PolygonAssets 85 160 24,491 48,992
AaveV3PolygonBorrowUpdate 8,469 8,896 16,107 40,256
AaveV3PolygonBorrowUpdateNoChange 8,598 9,025 15,978 40,127
AaveV3PolygonEModeCategoryUpdate 8,272 8,699 16,304 40,453
AaveV3PolygonEModes 85 160 24,491 48,992
AaveV3PolygonExternalLibraries 85 160 24,491 48,992
AaveV3PolygonPriceFeedUpdate 8,298 8,725 16,278 40,427
AaveV3Scroll 85 160 24,491 48,992
AaveV3ScrollAssets 85 160 24,491 48,992
AaveV3ScrollEModes 85 160 24,491 48,992
AaveV3ScrollExternalLibraries 85 160 24,491 48,992
AaveV3Soneium 85 160 24,491 48,992
AaveV3SoneiumAssets 85 160 24,491 48,992
AaveV3SoneiumEModes 85 160 24,491 48,992
AaveV3SoneiumExternalLibraries 85 160 24,491 48,992
AaveV3Sonic 85 160 24,491 48,992
AaveV3SonicAssets 85 160 24,491 48,992
AaveV3SonicEModes 85 160 24,491 48,992
AaveV3SonicExternalLibraries 85 160 24,491 48,992
AaveV3ZkSync 85 160 24,491 48,992
AaveV3ZkSyncAssets 85 160 24,491 48,992
AaveV3ZkSyncEModes 85 160 24,491 48,992
AaveV3ZkSyncExternalLibraries 85 160 24,491 48,992
Address 85 160 24,491 48,992
ArbSysMock 1,234 1,262 23,342 47,890
CapsPlusRiskSteward 4,384 5,056 20,192 44,096
CapsPlusRiskStewardErrors 831 908 23,745 48,244
ChainHelpers 85 160 24,491 48,992
ChainIds 85 160 24,491 48,992
ChainlinkEthereum 85 160 24,491 48,992
CollectorUtils 85 160 24,491 48,992
ConfiguratorInputTypes (lib/aave-address-book/lib/aave-v3-origin/src/contracts/protocol/libraries/types/ConfiguratorInputTypes.sol) 85 160 24,491 48,992
ConfiguratorInputTypes (lib/aave-address-book/src/AaveV2.sol) 85 160 24,491 48,992
Create2Utils 240 316 24,336 48,836
Create2UtilsZkSync 223 299 24,353 48,853
DataTypes (lib/aave-address-book/lib/aave-v3-origin/src/contracts/protocol/libraries/types/DataTypes.sol) 85 160 24,491 48,992
DataTypes (lib/aave-address-book/src/AaveV2.sol) 85 160 24,491 48,992
DefaultReserveInterestRateStrategy 5,508 6,678 19,068 42,474
DeployV2EngineAvaLib 85 160 24,491 48,992
DeployV2EngineEthAMMLib 85 160 24,491 48,992
DeployV2EngineEthLib 85 160 24,491 48,992
DeployV2EnginePolLib 85 160 24,491 48,992
DeployV2RatesFactoryAvaLib 85 160 24,491 48,992
DeployV2RatesFactoryEthAMMLib 85 160 24,491 48,992
DeployV2RatesFactoryEthLib 85 160 24,491 48,992
DeployV2RatesFactoryLib 85 160 24,491 48,992
DeployV2RatesFactoryPolLib 85 160 24,491 48,992
EngineFlags 85 160 24,491 48,992
Errors (lib/aave-address-book/lib/aave-v3-origin/lib/solidity-utils/lib/openzeppelin-contracts-upgradeable/lib/openzeppelin-contracts/contracts/utils/Errors.sol) 85 160 24,491 48,992
Errors (lib/aave-address-book/lib/aave-v3-origin/src/contracts/protocol/libraries/helpers/Errors.sol) 85 160 24,491 48,992
Errors (lib/aave-address-book/src/AaveV2.sol) 8,323 8,400 16,253 40,752
Errors (lib/aave-address-book/src/governance-v3/Errors.sol) 10,003 10,080 14,573 39,072
FreezingSteward 1,295 1,731 23,281 47,421
GovV3Helpers 3,851 3,928 20,725 45,224
GovV3StorageHelpers 85 160 24,491 48,992
GovernanceV3Arbitrum 85 160 24,491 48,992
GovernanceV3Avalanche 85 160 24,491 48,992
GovernanceV3BNB 85 160 24,491 48,992
GovernanceV3Base 85 160 24,491 48,992
GovernanceV3Celo 85 160 24,491 48,992
GovernanceV3Ethereum 85 160 24,491 48,992
GovernanceV3Gnosis 85 160 24,491 48,992
GovernanceV3Ink 85 160 24,491 48,992
GovernanceV3InkWhitelabel 85 160 24,491 48,992
GovernanceV3Linea 85 160 24,491 48,992
GovernanceV3Mantle 85 160 24,491 48,992
GovernanceV3Metis 85 160 24,491 48,992
GovernanceV3Optimism 85 160 24,491 48,992
GovernanceV3Polygon 85 160 24,491 48,992
GovernanceV3PolygonZkEvm 85 160 24,491 48,992
GovernanceV3Scroll 85 160 24,491 48,992
GovernanceV3Soneium 85 160 24,491 48,992
GovernanceV3Sonic 85 160 24,491 48,992
GovernanceV3ZkSync 85 160 24,491 48,992
IpfsUtils 85 160 24,491 48,992
Math 85 160 24,491 48,992
MiscAvalanche 85 160 24,491 48,992
MiscEthereum 85 160 24,491 48,992
MiscPolygon 85 160 24,491 48,992
MockAggregator 431 709 24,145 48,443
MyPayload (tests/swaps/DepositV2SwapPayloadTest.t.sol) 1,529 1,617 23,047 47,535
MyPayload (tests/swaps/DepositV3SwapPayloadTest.t.sol) 1,529 1,617 23,047 47,535
Panic 85 160 24,491 48,992
PayloadWithEmit 150 176 24,426 48,976
PayloadsControllerUtils 85 160 24,491 48,992
PercentageMath (lib/aave-address-book/lib/aave-v3-origin/src/contracts/protocol/libraries/math/PercentageMath.sol) 85 160 24,491 48,992
PercentageMath (src/dependencies/PercentageMath.sol) 85 160 24,491 48,992
ProxyHelpers (lib/aave-address-book/lib/aave-v3-origin/src/../tests/utils/ProxyHelpers.sol) 85 160 24,491 48,992
ProxyHelpers (lib/aave-address-book/lib/aave-v3-origin/tests/utils/ProxyHelpers.sol) 85 160 24,491 48,992
ReserveConfiguration 274 351 24,302 48,801
SafeCast 85 160 24,491 48,992
SafeERC20 85 160 24,491 48,992
SafeMath 85 160 24,491 48,992
SignedMath 85 160 24,491 48,992
StorageHelpers 85 160 24,491 48,992
Strings 85 160 24,491 48,992
TestNetChainIds 85 160 24,491 48,992
V2RateStrategyFactory 13,226 13,525 11,350 35,627
WadRayMath (lib/aave-address-book/lib/aave-v3-origin/src/contracts/protocol/libraries/math/WadRayMath.sol) 85 160 24,491 48,992
WadRayMath (src/dependencies/WadRayMath.sol) 85 160 24,491 48,992

@github-actions
Copy link

github-actions bot commented Sep 17, 2025

♻️ Forge Gas Snapshots

Seems like you are not measuring gas of any operations yet. 🤔
Consider adding some snapshot tests to measure regressions & improvements.

@absis absis requested review from yan-man and removed request for JoaquinBattilana, foodaka and grothem September 17, 2025 12:00
alexmance
alexmance approved these changes Sep 17, 2025
View reviewed changes
Copy link

@alexmance alexmance left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@absis absis merged commit 910e88f into main Sep 18, 2025
2 of 4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@yan-man yan-man yan-man approved these changes

@alexmance alexmance alexmance approved these changes

Assignees

@absis absis

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@absis @yan-man @alexmance