Release v1.3.1 (#179)

* chore: release v1.3.1

* update package.json

Author: sebsadface

CHANGELOG.md

@@ -1,5 +1,25 @@
 # CHANGELOG
 
+## v1.3.1
+
+This release builds on v1.3.0 with **enhanced security, improved code efficiency, and expanded test coverage**, while ensuring **workflow contract backward compatibility** and improving **permission handling**.
+
+- Ensured **workflow contracts maintain backward compatibility** ([#165](https://github.com/storyprotocol/protocol-periphery-v1/pull/165), [#166](https://github.com/storyprotocol/protocol-periphery-v1/pull/166))
+- **Replaced permanent permission with transient permission** ([#176](https://github.com/storyprotocol/protocol-periphery-v1/pull/176))
+- **Other security fixes** ([#175](https://github.com/storyprotocol/protocol-periphery-v1/pull/175)):
+  - Ensured `msg.sender` matches `signer` in workflow contracts
+  - Used `safeERC20` in `SPGNFT`
+  - Added initializers for **future-proofing**
+  - Made `nonReentrant` modifier **precede all other modifiers** in `TokenizerModule`
+  - Allowed setting `TotalLicenseTokenLimit` to `0` (no limit) in licensing hook
+  - Replaced `_mint` with `_safeMint` in `SPGNFT`
+- **Refactored** `OrgStoryNFTFactory` contract to **reduce code redundancy** ([#156](https://github.com/storyprotocol/protocol-periphery-v1/pull/156))
+- **Added new integration tests** and fixed existing ones ([#162](https://github.com/storyprotocol/protocol-periphery-v1/pull/162), [#177](https://github.com/storyprotocol/protocol-periphery-v1/pull/177))
+- **Fixed typos and improved documentation/comments** ([#163](https://github.com/storyprotocol/protocol-periphery-v1/pull/163), [#164](https://github.com/storyprotocol/protocol-periphery-v1/pull/164), [#167](https://github.com/storyprotocol/protocol-periphery-v1/pull/167), [#168](https://github.com/storyprotocol/protocol-periphery-v1/pull/168), [#169](https://github.com/storyprotocol/protocol-periphery-v1/pull/169), [#173](https://github.com/storyprotocol/protocol-periphery-v1/pull/173))
+
+
+**Full Changelog**: [v1.3.0...v1.3.1](https://github.com/storyprotocol/protocol-periphery-v1/compare/v1.3.0...v1.3.1)
+
 ## v1.3.0
 
 - **Story NFT & Badge Enhancements**

README.md

@@ -18,13 +18,14 @@ For access to the core PoC contracts, please visit the [protocol-core-v1](https:
 >📘 **[Learn more about Story](https://docs.storyprotocol.xyz/)**
 
 Story PoC Periphery combines multiple common independent interactions with the Story PoC Protocol into a single transaction.
-For example, this `mintAndRegisterIpAndAttachPILTerms` is one of the functions that allows you to mint an NFT, register it as an IP Asset, and attach License Terms to it all in one call.
+For example, this `mintAndRegisterIpAndAttachPILTerms` is one of the functions that allows you to mint an NFT, register it as an IP Asset, attach License Terms, and setting Licensing Configuration all in one call.
 ```solidity
 function mintAndRegisterIpAndAttachPILTerms(
-  address nftContract,
+  address spgNftContract,
   address recipient,
-  IPMetadata calldata ipMetadata,
-  PILTerms calldata terms
+  WorkflowStructs.IPMetadata calldata ipMetadata,
+  WorkflowStructs.LicenseTermsData[] calldata licenseTermsData,
+  bool allowDuplicates
 ) external onlyCallerWithMinterRole(nftContract) returns (address ipId, uint256 tokenId, uint256 licenseTermsId)
 ```
 
@@ -36,19 +37,8 @@ Batch calling functions is supported both natively and through the `Multicall3`
 
 ### Deployed Contracts
 
-[![Version](https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fraw.githubusercontent.com%2Fstoryprotocol%2Fprotocol-periphery-v1%2Fmain%2Fpackage.json&query=%24.version&label=PoC%20Periphery)](https://github.com/storyprotocol/protocol-periphery-v1/releases) contracts are deployed on Story Testnet at the following addresses:
+[![Version](https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fraw.githubusercontent.com%2Fstoryprotocol%2Fprotocol-periphery-v1%2Fmain%2Fpackage.json&query=%24.version&label=PoC%20Periphery)](https://github.com/storyprotocol/protocol-periphery-v1/releases) contracts are deployed on Story. The contract addresses can be found in [deployment-1315.json](./deploy-out/deployment-1315.json) (Story Aeneid Testnet) and [deployment-1514.json](./deploy-out/deployment-1514.json) (Story Homer Mainnet).
 
-```json
-{
-  "DerivativeWorkflows": "0xE0e1d222E024bF14B1e0A4b48fC6e6B6F8ebaEB3",
-  "GroupingWorkflows": "0xfAa9CCd49DCDfB9a950CBF036cD6082e623a6bcC",
-  "LicenseAttachmentWorkflows": "0xC7A40c41Cbe44C6B326447081877d69F98127C59",
-  "RegistrationWorkflows": "0x8D8E0d24E7B6420d3209EfA185Fa451c95D8316A",
-  "RoyaltyWorkflows": "0x19E435b1C0857375F9423C8ba508203054CE1d9F",
-  "SPGNFTBeacon": "0xD753c698aE69194C851d60BF759d537DE7477696",
-  "SPGNFTImpl": "0xA12e66a4429c9B7f38893c9b00E80646e0e76446"
-}
-```
 
 ## Quick Start
 

deploy-out/deployment-11155111.json

@@ -0,0 +1,17 @@
+{
+    "main": {
+        "DerivativeWorkflows": "0x9e2d496f72C547C2C535B167e06ED8729B374a4f",
+        "GroupingWorkflows": "0xD7c0beb3aa4DCD4723465f1ecAd045676c24CDCd",
+        "LicenseAttachmentWorkflows": "0xcC2E862bCee5B6036Db0de6E06Ae87e524a79fd8",
+        "LockLicenseHook": "0x5D874d4813c4A8A9FB2AB55F30cED9720AEC0222",
+        "OwnableERC20Beacon": "0x9a81C447C0b4C47d41d94177AEea3511965d3Bc9",
+        "OwnableERC20Template": "0x37DbEbcFe991901C4F255E7a3C4F7D3B45EAEDe9",
+        "RegistrationWorkflows": "0xbe39E1C756e921BD25DF86e7AAa31106d1eb0424",
+        "RoyaltyTokenDistributionWorkflows": "0xa38f42B8d33809917f23997B8423054aAB97322C",
+        "RoyaltyWorkflows": "0x9515faE61E0c0447C6AC6dEe5628A2097aFE1890",
+        "SPGNFTBeacon": "0xD2926B9ecaE85fF59B6FB0ff02f568a680c01218",
+        "SPGNFTImpl": "0xc09e3788Fdfbd3dd8CDaa2aa481B52CcFAb74a42",
+        "TokenizerModule": "0x7e14cD9833E8A0c649bCF4AB6768f62D57febbd3",
+        "TotalLicenseTokenLimitHook": "0xba8E30d9EB784Badc2aF610F56d99d212BC2A90c"
+    }
+}

deploy-out/deployment-1315.json

@@ -0,0 +1,17 @@
+{
+    "main": {
+        "DerivativeWorkflows": "0x9e2d496f72C547C2C535B167e06ED8729B374a4f",
+        "GroupingWorkflows": "0xD7c0beb3aa4DCD4723465f1ecAd045676c24CDCd",
+        "LicenseAttachmentWorkflows": "0xcC2E862bCee5B6036Db0de6E06Ae87e524a79fd8",
+        "LockLicenseHook": "0x5D874d4813c4A8A9FB2AB55F30cED9720AEC0222",
+        "OwnableERC20Beacon": "0x9a81C447C0b4C47d41d94177AEea3511965d3Bc9",
+        "OwnableERC20Template": "0xE6505ffc5A7C19B68cEc2311Cc35BC02d8f7e0B1",
+        "RegistrationWorkflows": "0xbe39E1C756e921BD25DF86e7AAa31106d1eb0424",
+        "RoyaltyTokenDistributionWorkflows": "0xa38f42B8d33809917f23997B8423054aAB97322C",
+        "RoyaltyWorkflows": "0x9515faE61E0c0447C6AC6dEe5628A2097aFE1890",
+        "SPGNFTBeacon": "0xD2926B9ecaE85fF59B6FB0ff02f568a680c01218",
+        "SPGNFTImpl": "0x6Cfa03Bc64B1a76206d0Ea10baDed31D520449F5",
+        "TokenizerModule": "0xAC937CeEf893986A026f701580144D9289adAC4C",
+        "TotalLicenseTokenLimitHook": "0xB72C9812114a0Fc74D49e01385bd266A75960Cda"
+    }
+}

deploy-out/deployment-1513.json

@@ -1,6 +1,6 @@
 {
     "name": "@story-protocol/protocol-periphery",
-    "version": "v1.3.0",
+    "version": "v1.3.1",
     "description": "Story Proof-of-Creativity protocol periphery smart contracts",
     "main": "",
     "directories": {
@@ -39,7 +39,7 @@
     "dependencies": {
         "@openzeppelin/contracts": "5.2.0",
         "@openzeppelin/contracts-upgradeable": "5.2.0",
-        "@story-protocol/protocol-core": "github:storyprotocol/protocol-core-v1#main",
+        "@story-protocol/protocol-core": "github:storyprotocol/protocol-core-v1#v1.3.1",
         "erc6551": "^0.3.1",
         "solady": "^0.0.281"
     }

deploy-out/deployment-1514.json

@@ -416,9 +416,9 @@
   resolved "https://registry.yarnpkg.com/@solidity-parser/parser/-/parser-0.19.0.tgz#37a8983b2725af9b14ff8c4a475fa0e98d773c3f"
   integrity sha512-RV16k/qIxW/wWc+mLzV3ARyKUaMUTBy9tOLMzFhtNSKYeTAanQ3a5MudJKf/8arIFnA2L27SNjarQKmFg0w/jA==
 
-"@story-protocol/protocol-core@github:storyprotocol/protocol-core-v1#main":
+"@story-protocol/protocol-core@github:storyprotocol/protocol-core-v1#v1.3.1":
   version "1.1.0"
-  resolved "https://codeload.github.com/storyprotocol/protocol-core-v1/tar.gz/a10c179c93cc7d360bcd9a290cd159c1574928f2"
+  resolved "https://codeload.github.com/storyprotocol/protocol-core-v1/tar.gz/a0cddb1d712566a550fcaca2f8df1f4f67f095ad"
   dependencies:
     "@openzeppelin/contracts" "5.2.0"
     "@openzeppelin/contracts-upgradeable" "5.2.0"
@@ -2138,9 +2138,9 @@ reduce-flatten@^2.0.0:
   integrity sha512-EJ4UNY/U1t2P/2k6oqotuX2Cc3T6nxJwsM0N0asT7dhrtH1ltUxDn4NalSYmPE2rCkVpcf/X6R0wDwcFpzhd4w==
 
 registry-auth-token@^5.0.1:
-  version "5.0.3"
-  resolved "https://registry.yarnpkg.com/registry-auth-token/-/registry-auth-token-5.0.3.tgz#417d758c8164569de8cf5cabff16cc937902dcc6"
-  integrity sha512-1bpc9IyC+e+CNFRaWyn77tk4xGG4PPUyfakSmA6F6cvUDjrm58dfyJ3II+9yb10EDkHoy1LaPSmHaWLOH3m6HA==
+  version "5.1.0"
+  resolved "https://registry.yarnpkg.com/registry-auth-token/-/registry-auth-token-5.1.0.tgz#3c659047ecd4caebd25bc1570a3aa979ae490eca"
+  integrity sha512-GdekYuwLXLxMuFTwAPg5UKGLW/UXzQrZvH/Zj791BQif5T05T0RsaLfHc9q3ZOKi7n+BoprPD9mJ0O0k4xzUlw==
   dependencies:
     "@pnpm/npm-conf" "^2.1.0"