ENG-472 Bridge controller pointer and MintBurnGuard guardrails

.github/workflows/contracts-docs.yml

@@ -10,6 +10,13 @@ on:
       - "published"
   workflow_dispatch:
 
+env:
+  # Ignore Node.js engine constraints when installing dependencies for
+  # Solidity doc generation. Some transitive tooling may declare a stricter
+  # Node engine (for example >=20) even though this workflow uses Node 18.15.0
+  # in the reusable `reusable-solidity-docs.yml` workflow.
+  YARN_IGNORE_ENGINES: "true"
+
 jobs:
   docs-detect-changes:
     runs-on: ubuntu-latest

.github/workflows/contracts.yml

@@ -69,7 +69,7 @@ jobs:
 
       - uses: actions/setup-node@v3
         with:
-          node-version: "14.x"
+          node-version: "18.x"
           cache: "yarn"
           cache-dependency-path: solidity/yarn.lock
 
@@ -111,7 +111,7 @@ jobs:
 
       - uses: actions/setup-node@v3
         with:
-          node-version: "14.x"
+          node-version: "18.x"
           cache: "yarn"
           cache-dependency-path: solidity/yarn.lock
 
@@ -144,7 +144,7 @@ jobs:
 
       - uses: actions/setup-node@v3
         with:
-          node-version: "14.x"
+          node-version: "18.x"
           cache: "yarn"
           cache-dependency-path: solidity/yarn.lock
           registry-url: "https://registry.npmjs.org"
@@ -160,7 +160,7 @@ jobs:
         run: git config --global url."https://".insteadOf git://
 
       - name: Install dependencies
-        run: yarn install --frozen-lockfile
+        run: yarn install --frozen-lockfile --ignore-engines
 
       - name: Get upstream packages versions
         uses: keep-network/ci/actions/upstream-builds-query@v2
@@ -241,7 +241,7 @@ jobs:
 
       - uses: actions/setup-node@v3
         with:
-          node-version: "14.x"
+          node-version: "18.x"
           cache: "yarn"
           cache-dependency-path: solidity/yarn.lock
 
@@ -290,7 +290,7 @@ jobs:
 
       - uses: actions/setup-node@v3
         with:
-          node-version: "14.x"
+          node-version: "18.x"
           cache: "yarn"
           cache-dependency-path: solidity/yarn.lock
           registry-url: "https://registry.npmjs.org"
@@ -306,7 +306,7 @@ jobs:
         run: git config --global url."https://".insteadOf git://
 
       - name: Install dependencies
-        run: yarn install --frozen-lockfile
+        run: yarn install --frozen-lockfile --ignore-engines
 
       - name: Get upstream packages versions
         uses: keep-network/ci/actions/upstream-builds-query@v2
@@ -358,7 +358,7 @@ jobs:
 
       - uses: actions/setup-node@v3
         with:
-          node-version: "14.x"
+          node-version: "18.x"
           cache: "yarn"
           cache-dependency-path: solidity/yarn.lock
 
@@ -401,7 +401,7 @@ jobs:
 
       - uses: actions/setup-node@v3
         with:
-          node-version: "14.x"
+          node-version: "18.x"
           cache: "yarn"
           cache-dependency-path: solidity/yarn.lock
 
@@ -419,7 +419,7 @@ jobs:
 
       - name: Install Slither
         env:
-          SLITHER_VERSION: 0.9.0
+          SLITHER_VERSION: 0.11.0
         run: pip3 install slither-analyzer==$SLITHER_VERSION
 
       # We need this step because the `@keep-network/tbtc` which we update in
@@ -434,4 +434,4 @@ jobs:
         run: yarn install
 
       - name: Run Slither
-        run: slither --hardhat-artifacts-directory build .
+        run: slither --hardhat-artifacts-directory build . --fail-high

.gitignore

@@ -6,6 +6,13 @@ dist/
 .vscode/
 .envrc
 
+# Local environment files for Solidity
+solidity/.env
+solidity/.env.sepolia
+
 yarn-error.log
 CLAUDE.md
 .claude/
+
+# Generated Solidity API docs
+solidity/generated-docs/