Bump @openzeppelin/contracts from 4.9.6 to 5.3.0

[dependabot]

Bumps @openzeppelin/contracts from 4.9.6 to 5.3.0.

Release notes

Sourced from @​openzeppelin/contracts's releases.

v5.3.0

Breaking Changes

• Replace GovernorCountingOverridable.VoteReceipt struct parameter member names hasOverriden and overridenWeight for hasOverridden and overriddenWeight respectively.

Custom error changes

• Replace AccessControlNonRevokable with AccessControlNonRevocable.
• Replace GovernorAlreadyOverridenVote with GovernorAlreadyOverriddenVote.
• Replace GovernorOnlyProposer with GovernorUnableToCancel.

Changes by category

Account

• ERC4337Utils: Update the hash function to call getUserOpHash on the specified entrypoint and add an ENTRYPOINT_V08 constant. (#5614)
• ERC7579Utils: Add ABI decoding checks on calldata bounds within decodeBatch. (#5371)
• ERC7579Utils: Replace address(0) with address(this) during execution for calldata compression efficiency. (#5614)

Governance

• IGovernor: Add the getProposalId function to the governor interface. (#5290)
• GovernorProposalGuardian: Add a governance extension that defines a proposal guardian who can cancel proposals at any stage in their lifecycle. (#5303)
• GovernorSequentialProposalId: Adds a Governor extension that sequentially numbers proposal ids instead of using the hash. (#5290)
• GovernorSuperQuorum: Add a governance extension to support a super quorum. Proposals that meet the super quorum (and have a majority of for votes) advance to the Succeeded state before the proposal deadline. (#5526)
• GovernorVotesSuperQuorumFraction: Add a variant of the GovernorSuperQuorum extensions where the super quorum is expressed as a fraction of the total supply. (#5526)
• TimelockController: Receive function is now virtual. (#5509)

Structures

• EnumerableSet: Add clear function to EnumerableSets which deletes all values in the set. (#5486)
• EnumerableMap: Add clear function to EnumerableMaps which deletes all entries in the map. (#5486)
• MerkleTree: Add an update function that replaces a previously inserted leaf with a new value, updating the tree root along the way. (#5526)

Tokens

• ERC4626: Use the asset getter in totalAssets, _deposit and _withdraw. (#5322)
• IERC6909: Add the interface for ERC-6909. (#5343)
• ERC6909: Add a standard implementation of ERC6909. (#5394)
• ERC6909TokenSupply: Add an extension of ERC6909 which tracks total supply for each token id. (#5394)
• ERC6909Metadata: Add an extension of ERC6909 which adds metadata functionality. (#5394)
• ERC6909ContentURI: Add an extension of ERC6909 which adds content URI functionality. (#5394)
• SafeERC20: Add trySafeTransfer and trySafeTransferFrom that do not revert and return false if the transfer is not successful. (#5483)

Other

• Address: bubble up revert data on sendValue failed call. (#5379)
• Calldata: Library with emptyBytes and emptyString functions to generate empty bytes and string calldata types. (#5422)
• ERC2771Forwarder: Expose the _isTrustedByTarget internal function to check whether a target trusts the forwarder. (#5416)
• Hashes: Expose efficientKeccak256 for hashing non-commutative pairs of bytes32 without allocating extra memory. (#5442)

... (truncated)

Changelog

Sourced from @​openzeppelin/contracts's changelog.

5.3.0 (2025-04-09)

Breaking Changes

• Replace GovernorCountingOverridable.VoteReceipt struct parameter member names hasOverriden and overridenWeight for hasOverridden and overriddenWeight respectively.

Custom error changes

• Replace AccessControlNonRevokable with AccessControlNonRevocable.
• Replace GovernorAlreadyOverridenVote with GovernorAlreadyOverriddenVote.
• Replace GovernorOnlyProposer with GovernorUnableToCancel.

Changes by category

Account

• ERC4337Utils: Update the hash function to call getUserOpHash on the specified entrypoint and add an ENTRYPOINT_V08 constant. (#5614)
• ERC7579Utils: Add ABI decoding checks on calldata bounds within decodeBatch. (#5371)
• ERC7579Utils: Replace address(0) with address(this) during execution for calldata compression efficiency. (#5614)

Governance

• IGovernor: Add the getProposalId function to the governor interface. (#5290)
• GovernorProposalGuardian: Add a governance extension that defines a proposal guardian who can cancel proposals at any stage in their lifecycle. (#5303)
• GovernorSequentialProposalId: Adds a Governor extension that sequentially numbers proposal ids instead of using the hash. (#5290)
• GovernorSuperQuorum: Add a governance extension to support a super quorum. Proposals that meet the super quorum (and have a majority of for votes) advance to the Succeeded state before the proposal deadline. (#5526)
• GovernorVotesSuperQuorumFraction: Add a variant of the GovernorSuperQuorum extensions where the super quorum is expressed as a fraction of the total supply. (#5526)
• TimelockController: Receive function is now virtual. (#5509)

Structures

• EnumerableSet: Add clear function to EnumerableSets which deletes all values in the set. (#5486)
• EnumerableMap: Add clear function to EnumerableMaps which deletes all entries in the map. (#5486)
• MerkleTree: Add an update function that replaces a previously inserted leaf with a new value, updating the tree root along the way. (#5526)

Tokens

• ERC4626: Use the asset getter in totalAssets, _deposit and _withdraw. (#5322)
• IERC6909: Add the interface for ERC-6909. (#5343)
• ERC6909: Add a standard implementation of ERC6909. (#5394)
• ERC6909TokenSupply: Add an extension of ERC6909 which tracks total supply for each token id. (#5394)
• ERC6909Metadata: Add an extension of ERC6909 which adds metadata functionality. (#5394)
• ERC6909ContentURI: Add an extension of ERC6909 which adds content URI functionality. (#5394)
• SafeERC20: Add trySafeTransfer and trySafeTransferFrom that do not revert and return false if the transfer is not successful. (#5483)

Other

• Address: bubble up revert data on sendValue failed call. (#5379)
• Calldata: Library with emptyBytes and emptyString functions to generate empty bytes and string calldata types. (#5422)
• ERC2771Forwarder: Expose the _isTrustedByTarget internal function to check whether a target trusts the forwarder. (#5416)

... (truncated)

Commits

• e4f7021 Release v5.3.0 (#5617)
• 39ea5fc Exit release candidate
• d334aef update package-lock.json
• f3f0a64 Fix issue with detection of RIP7212 precompile (#5620)
• acaa597 Group typo fixes #2 (#5561)
• 738adf0 Add missing 5.3 changesets (#5614)
• 49dcee7 Cherrypick #5602 onto release-v5.3 (#5610)
• bc3b02f Cherrypick 0a77e54c307d9becf0473b73541c4f9d3b2743a3 onto release-v5.3 (#5605)
• 39f5a02 Release v5.3.0 (rc) (#5503)
• 994399d Address audit findings (5.3 diff audit) (#5584)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ernestognw, a new releaser for @​openzeppelin/contracts since your current version.

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[openzeppelin-code]

Bump @openzeppelin/contracts from 4.9.6 to 5.3.0

Generated at commit: d3722fa3ff6d36480de12c22f3d595272b032c1e

🚨 Report Summary

	Severity Level	Results
Contracts	Critical High Medium Low Note Total	2 1 0 9 40 52
Dependencies	Critical High Medium Low Note Total	0 0 0 0 0 0

---

For more details view the full report in OpenZeppelin Code Inspector