Description
Stale soldeer pins vs registry (as of audit date). Confirm intentional freezes; not a mandate to bump unless a newer revision’s changelog has a relevant security/correctness fix.
Notable gaps observed: forge-std, rainlang, rain-math-float, rain-deploy, rain-sol-codegen, rain-interpreter-interface, rain-extrospection.
Location
foundry.toml [dependencies]; soldeer.lock
Proposed fix
For each pin, document an intentional freeze or bump after validating tests. Prioritize reviewing rainlang / rain-math-float / rain-sol-codegen if adopting V3 parser integration tests.
Audit
Whole-repo audit of 2026-05-16-update-dia-oracle @ 2cdd111 via rainlanguage/claude-audit-skills v0.12.0.
Description
Stale soldeer pins vs registry (as of audit date). Confirm intentional freezes; not a mandate to bump unless a newer revision’s changelog has a relevant security/correctness fix.
Notable gaps observed: forge-std, rainlang, rain-math-float, rain-deploy, rain-sol-codegen, rain-interpreter-interface, rain-extrospection.
Location
foundry.toml[dependencies];soldeer.lockProposed fix
For each pin, document an intentional freeze or bump after validating tests. Prioritize reviewing rainlang / rain-math-float / rain-sol-codegen if adopting V3 parser integration tests.
Audit
Whole-repo audit of
2026-05-16-update-dia-oracle@2cdd111via rainlanguage/claude-audit-skills v0.12.0.