build(deps): bump crytic/slither-action from 0.1.1 to 0.3.1

[dependabot]

Bumps crytic/slither-action from 0.1.1 to 0.3.1.

Release notes

Sourced from crytic/slither-action's releases.

v0.3.1

0.3.1 - 2024-01-31

This is a patch release for the Slither Action - the Github Action for Slither.

What's Changed

• Create CODEOWNERS by @​ggrieco-tob in crytic/slither-action#54
• Upgrade foundryup version by @​elopez in crytic/slither-action#67
• Improve markdown checklist example in README by @​elopez in crytic/slither-action#62
• Update references to actions in README by @​elopez in crytic/slither-action#68

New Contributors

• @​ggrieco-tob made their first contribution in crytic/slither-action#54

Full Changelog: crytic/slither-action@v0.3.0...v0.3.1

v0.3.0

0.3.0 - 2023-02-21

This is a minor release for the Slither Action - the Github Action for Slither.

This release introduces one new feature. It also fixes an issue with Foundry projects, caused by recent mitigations implemented in git.

New stdout output.

This new output value lets you capture and use the output from Slither. This can be useful, for instance, to produce a Markdown report in combination with the Slither --checklist flag. Refer to the new example in the README for a sample workflow using this new feature.

What's Changed

• Update deprecated set-output clause by @​jporzucek in crytic/slither-action#45
• Add stdout output by @​tlvince in crytic/slither-action#13
• Mark git repositories as safe inside the slither-action container by @​elopez in crytic/slither-action#50
• Enable pipefail by @​elopez in crytic/slither-action#51

New Contributors

Thanks to the new contributors in this release!

• @​jporzucek made their first contribution in crytic/slither-action#45
• @​tlvince made their first contribution in crytic/slither-action#13

Full Changelog: crytic/slither-action@v0.2.0...v0.3.0

v0.2.0

0.2.0 - 2022-09-09

This is a minor release for the Slither Action - the Github Action for Slither.

This release introduces two main features:

New fail-on option.

This option lets you configure the action step to only fail if findings of a certain severity are found. For example, fail-on: medium would only cause the action to fail if medium or high severity findings are detected. Refer to the corresponding section in the README for more details. This feature requires using Slither 0.9.0 or later for the best effect.

If you are using the action with the SARIF integration, note that you may now use fail-on: none instead of having to continue-on-error: true. This will result in an overall more robust setup, which will not mask build or other such failures. Refer to the updated examples in the README for the recommended way to use fail-on in this case.

... (truncated)

Commits

• f786340 Merge pull request #68 from crytic/dev-readme-update
• 0d4ab22 Update references to actions in README
• ededeed Merge pull request #62 from crytic/dev-update-md-example
• 65f78c8 Merge pull request #67 from crytic/dev-upgrade-foundryup
• e60eb06 Upgrade foundryup version
• d6455d3 Improve markdown checklist example in README
• 5c7580c Merge pull request #54 from crytic/dev-codeowners
• 012363c Create CODEOWNERS
• 6ef3a33 Update references to other actions in README
• bdeb26c Fix README heading level
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Dependabot tried to add @fedekunze, @khoslaventures and @danburck as reviewers to this PR, but received the following error from GitHub:

POST https://api.github.com/repos/zama-ai/evmos/pulls/238/requested_reviewers: 422 - Reviews may only be requested from collaborators. One or more of the users or teams you specified is not a collaborator of the zama-ai/evmos repository. // See: https://docs.github.com/rest/pulls/review-requests#request-reviewers-for-a-pull-request

[github-actions]

This pull request has been automatically marked as stale because it has not had recent activity. It will be closed in 7 days-before-close if no further activity occurs.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.