Prepare Release

[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and publish to npm yourself or setup this action to publish automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to master, this PR will be updated.

Releases

@openzeppelin/wizard-common@0.1.1

Changelog

0.1.1 (2025-09-16)

• Update Solidity Account prompt (#609)
• Support decimals customization for ERC20 Cairo contracts (#654)

0.1.0 (2025-08-15)

• Bump minor version for semantic versioning stability (#631)

0.0.3 (2025-08-12)

• Breaking change: Use ERC20Bridgeable from OpenZeppelin Contracts 5.4.0 instead of Community Contracts (#619)

0.0.2 (2025-07-03)

• Stellar: Add Stablecoin with Limitations and Access Control (ownable and roles). (#575)

0.0.1 (2025-06-20)

• Add support for Wizard MCP server. (#569)

@openzeppelin/wizard-cairo@2.1.0

Changelog

2.1.0 (2025-09-16)

• Support decimals customization for ERC20 Cairo contracts (#654)

2.0.1 (2025-08-20)

• Fix missing use clause in hooks for ERC20 votes (#637)

2.0.0 (2025-06-20)

• Add AccessControlWithDelay. (#506)

• Add security contact in contract info. (#558)

• Add support for Wizard MCP server. (#569)

• Breaking changes:

  • Use OpenZeppelin Contracts for Cairo v2.0.0. (#574)
  • Use OpenZeppelin Contracts for Cairo v2.0.0-alpha.1. (#533)
  • Use OpenZeppelin Contracts for Cairo v2.0.0-alpha.0. (#491)

1.1.0 (2025-04-01)

• Add Multisig tab. (#433)

1.0.0 (2025-02-25)

• Breaking changes:
  • Use OpenZeppelin Contracts for Cairo v1.0.0. (#458)

0.21.1 (2025-01-23)

• Update to use TypeScript v5. (#231)
• Remove unused dependencies. (#430)

0.21.0 (2025-01-13)

• Add Vesting tab. (#425)

• Breaking changes:

  • Remove isAccessControlRequired from governor and vesting. (#426)
  • Update Contracts Wizard license to AGPLv3. (#424)

0.20.1 (2024-12-17)

• Add OutsideExecution to accounts. (#422)

0.20.0 (2024-12-10)

• Add Governor tab. (#417)

• Breaking changes:

  • Use OpenZeppelin Contracts for Cairo v0.20.0. (#419)

0.19.0 (2024-11-27)

• Add ERC2981 (RoyaltyInfo) for ERC721 and ERC1155. (#413)

0.18.0 (2024-11-15)

• Breaking changes:
  • Use OpenZeppelin Contracts for Cairo v0.19.0. (#405)

0.17.0 (2024-10-22)

• Add ERC721 votes. (#399)

• Breaking changes:

  • Use OpenZeppelin Contracts for Cairo v0.18.0. (#399)
  • Use VotesComponent for ERC20 votes.

0.16.0 (2024-09-26)

• Add ERC721Enumerable. (#391)

• Breaking changes:

  • Use OpenZeppelin Contracts for Cairo v0.17.0. (#396)

0.15.0 (2024-09-19)

• Add Account and EthAccount. (#387)

• Breaking changes:

  • Use OpenZeppelin Contracts for Cairo v0.15.0. (#378)
  • Use OpenZeppelin Contracts for Cairo v0.16.0. (#384)

0.14.0 (2024-06-20)

• Breaking changes:
  • Use OpenZeppelin Contracts for Cairo v0.14.0. (#369)
  • Fix compile error with ERC1155 Burnable.

0.13.0 (2024-05-22)

• Breaking changes:
  • Use OpenZeppelin Contracts for Cairo v0.13.0. (#359)
  • Use Hooks with ERC721 and ERC1155.
  • Use Hooks for Pausable.

0.12.0 (2024-05-01)

• Add votes option to ERC20. (#355)
• Require appName and appVersion when votes is enabled.
• Sort implemented traits.
• Breaking changes:
  • Use OpenZeppelin Contracts for Cairo v0.12.0.
  • Use Hooks with ERC20.

0.11.0 (2024-04-17)

• Breaking changes:
  • Set upgradeable to true by default. (#334)

0.10.2 (2024-04-03)

• Use OpenZeppelin Contracts for Cairo v0.11.0. (#351)
• Add ERC1155.
• Remove redundant not paused assertions for camel case functions.
• Fix use of ERC20 mixin.
• Sort imports alphabetically.

0.10.1 (2024-03-27)

• Use mixins. (#348)

0.10.0 (2024-03-12)

• Breaking changes:
  • Use OpenZeppelin Contracts for Cairo v0.10.0. (#344)
  • ERC721: Remove token URI parameter from safe mint functions.
  • ERC721: Add optional base URI parameter. If not set, this defaults to empty string.
  • Use string literals for ByteArray initialization instead of short strings.

0.9.2 (2024-02-26)

• Remove code comment for Cairo lang version. (#337)

0.9.1 (2024-02-22)

• Add code comments for compatible OpenZeppelin Contracts for Cairo and Cairo lang versions. (#331)

0.9.0 (2024-02-12)

• Breaking changes:
  • Remove non-standard safeAllowance option from ERC20. (#324)
  • Use abi(embed_v0) attribute instead of external for impls derived from interfaces.
  • Use abi(per_item) attribute instead of external for impls with generated traits.

0.8.0 (2023-12-11)

• Breaking changes:
  • Use Cairo 1+ and OpenZeppelin Contracts for Cairo v0.8.0.
  • Remove functions for getInitialSupply and toUint256.
  • Remove ERC1155.
  • Role-Based Access Control adds separate constructor arguments to assign different users for different roles.
  • Throws error if name results in an identifer that is empty or does not have valid characters.
  • Throws error if name or symbol result in strings longer than 31 characters.

0.6.0 (2023-01-11)

• Add ERC1155. (#167)
• Update formatting. (#217)
• Breaking change: Renamed isApprovedForAll return variable name (isApproved -> approved) in ERC721. (#167)

0.5.0 (2022-09-22)

• Add owner view for Ownable. (#165)
• Implement Cairo 0.10 syntax changes. (#173)

0.4.0 (2022-08-04)

• Update directory structure for libraries. (#157)

0.3.1 (2022-07-12)

• Add Role-Based Access Control. (#147)

0.3.0 (2022-07-01)

• Support Contracts for Cairo v0.2.0. (#135)
• Support custom contract type, optional access control. (#140)

0.2.0 (2022-06-15)

• Update API format for Cairo. (#136)
• Add functions for getInitialSupply and toUint256. (#138)

0.1.0 (2022-05-13)

• Initial API for Cairo. (#127)

@openzeppelin/wizard@0.8.0

Changelog

0.8.0 (2025-09-16)

• Add constructors for SignerECDSA, SignerP256, SignerRSA, SignerERC7702, SignerERC7913, MultiSignerERC7913 and MultiSignerERC7913Weighted (#609)
• Enable upgradeability for AccountERC7579, AccountERC7579Hooked, SignerECDSA, SignerP256, SignerRSA, SignerERC7702, SignerERC7913 and MultiSignerERC7913 (#609)
• Breaking change: Use Account, AccountERC7579, AccountERC7579Hooked, ERC7812, ERC7739Utils, ERC7913Utils, AbstractSigner, SignerECDSA, SignerP256, SignerRSA, SignerERC7702, SignerERC7913, MultiSignerERC7913, and MultiSignerERC7913Weighted from OpenZeppelin Contracts 5.4.0 instead of Community Contracts (#609)
• Remove all initializers from non-upgradeable accounts. (#658)

0.7.1 (2025-08-15)

• Add compatible git commit in comments when importing OpenZeppelin Community Contracts (#627)

0.7.0 (2025-08-12)

• Breaking change: Use ERC20Bridgeable from OpenZeppelin Contracts 5.4.0 instead of Community Contracts (#619)

0.6.0 (2025-06-20)

• Add support for Wizard MCP server. (#569)

  • Possibly breaking changes:
    • Governor: Remove usage of access option. This option now has no effect.

• Accounts: Add _disableInitializers() to account implementations (#568)

0.5.6 (2025-05-21)

• MultisigERC7913: Add onlyEntryPointOrSelf modifier to public configuration functions. (#554)
• Use onlyGovernance to restrict upgrades for Governor with UUPS (#544)
  • Potentially breaking changes:
    • Governor with UUPS: _authorizeUpgrade function is restricted by onlyGovernance instead of onlyOwner

0.5.5 (2025-05-13)

• Add account contract types for ERC-4337. (#486, #523, #527)
• Use unicode syntax for strings with non-ASCII characters (#476)
• Remove redundant overrides in Governor. (#522)
• Simplify Community Contracts imports. (#537)
• Potentially breaking changes:
  • Update pragma versions to 0.8.27. (#486)
  • Changes import path format for @openzeppelin/community-contracts. (#537)

0.5.4 (2025-04-01)

• Add validation for ERC20 premint field. (#488)
• Add callback in ERC20 features. (#500)

0.5.3 (2025-03-13)

• Add ERC20 Cross-Chain Bridging, SuperchainERC20. (#436)
  Note: Cross-Chain Bridging is experimental and may be subject to change.

• Potentially breaking changes:

  • Change order of constructor argument recipient when using premint.

0.5.2 (2025-02-21)

• Fix modifiers order to follow Solidity style guides. (#450)
• ERC721: Return tokenId on safeMint with incremental id. (#455)

0.5.1 (2025-02-05)

• Potentially breaking changes:
  • Add constructor argument recipient when using premint in erc20, stablecoin, and realWorldAsset. (#435)

0.5.0 (2025-01-23)

• Update to use TypeScript v5. (#231)

• Remove unused dependencies. (#430)

• Breaking changes:

  • Update Contracts Wizard license to AGPLv3. (#424)

0.4.6 (2024-11-20)

• Use named imports. (#411)

0.4.5 (2024-11-18)

• Add stablecoin and realWorldAsset contract types. (#404)
  Note: stablecoin and realWorldAsset are experimental and may be subject to change.

0.4.4 (2024-10-23)

Potentially breaking changes

• Update pragma versions to 0.8.22. (#401)

0.4.3 (2024-04-08)

• Add timestamp based Governor and Votes clock options. (#347)

0.4.2 (2024-02-22)

• Add code comments for compatible OpenZeppelin Contracts versions. (#331)

0.4.1 (2023-10-18)

• Add managed access control option for use with AccessManager. (#298)

0.4.0 (2023-10-05)

Breaking changes

• Update to OpenZeppelin Contracts 5.0. (#284)
• Require constructor or initializer arguments for initial owner or role assignments if using access control.
• Use token-specific pausable extensions.
• Enable ERC20Permit by default.

0.3.0 (2023-05-25)

• Breaking change: Update to OpenZeppelin Contracts 4.9. (#252)
• Change default voting delay to 1 day in governor. (#258)

0.2.3 (2023-03-23)

• Fix module not found error. (#235)

0.2.2 (2023-03-17)

• Fix missing file. (#234)

0.2.1 (2023-03-17)

• Remove unspecified dependency on @openzeppelin/contracts. (#233)

0.2.0 (2022-11-08)

• Reduce default block time to 12 seconds in governor. (fdcf912)
• Breaking change: Update to OpenZeppelin Contracts 4.8 and Solidity ^0.8.9. (#199)

0.1.1 (2022-06-30)

• Support custom contract type, optional access control. (#112)

0.1.0 (2022-06-15)

• Initial API for Solidity. (#136)

@openzeppelin/contracts-mcp@0.2.0

Changelog

0.2.0 (2025-09-16)

• Add constructors for SignerECDSA, SignerP256, SignerRSA, SignerERC7702, SignerERC7913, MultiSignerERC7913 and MultiSignerERC7913Weighted (#609)
• Enable upgradeability for AccountERC7579, AccountERC7579Hooked, SignerECDSA, SignerP256, SignerRSA, SignerERC7702, SignerERC7913 and MultiSignerERC7913 (#609)
• Breaking change: Use Account, AccountERC7579, AccountERC7579Hooked, ERC7812, ERC7739Utils, ERC7913Utils, AbstractSigner, SignerECDSA, SignerP256, SignerRSA, SignerERC7702, SignerERC7913, MultiSignerERC7913, and MultiSignerERC7913Weighted from OpenZeppelin Contracts 5.4.0 instead of Community Contracts (#609)
• Support decimals customization for ERC20 Cairo contracts (#654)
• Updated dependencies [41d5c74, b9d58dc, 41d5c74, 41d5c74, 41d5c74, 029790c]:
  • @openzeppelin/wizard-common@0.1.1
  • @openzeppelin/wizard@0.8.0
  • @openzeppelin/wizard-cairo@2.1.0

0.1.1 (2025-09-02)

• Cairo: Support decimals value added to ERC-20 scheme (#654)

0.1.0 (2025-08-15)

• Export functions to register MCP tools (#631)
• Updated dependencies [2bb2a16, c65acb7]:
  • @openzeppelin/wizard@0.7.1
  • @openzeppelin/wizard-common@0.1.0

0.0.7 (2025-08-12)

• Updated dependencies [f39adfd]:
  • @openzeppelin/wizard@0.7.0
  • @openzeppelin/wizard-common@0.0.3

0.0.6 (2025-07-29)

• Update Wizard API dependencies (#612)

0.0.5 (2025-07-25)

• Breaking changes: Renamed package from @openzeppelin/wizard-mcp to @openzeppelin/contracts-mcp (#607)

0.0.4 (2025-07-22)

• Updated dependencies [9e61c0f]:
  • @openzeppelin/wizard-stellar@0.4.1

0.0.3 (2025-07-03)

• Stellar: Add Stablecoin with Limitations and Access Control (ownable and roles). (#575)
  • Potentially breaking changes:
    • Use OpenZeppelin Stellar Soroban Contracts v0.3.0
• Updated dependencies [4b86b07, 4b86b07]:
  • @openzeppelin/wizard-stellar@0.3.0
  • @openzeppelin/wizard-common@0.0.2

0.0.2 (2025-06-27)

• Add security contact for stellar (#585)
• Updated dependencies [8997a89]:
  • @openzeppelin/wizard-stellar@0.2.3

0.0.1 (2025-06-20)

• Add support for Wizard MCP server. (#569)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​nomicfoundation/​hardhat-toolbox@​6.1.0
	hardhat@​2.26.3
	@​openzeppelin/​contracts@​5.4.0

View full report

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring alerts on:

• amdefine@1.0.1
• sc-istanbul@0.4.6
• undici@5.29.0
• axios@1.11.0
• viem@2.33.3
• cookie@0.4.2

View full report

[ericglau]

@SocketSecurity ignore npm/axios@1.11.0
Appears to be used by hardhat-gas-reporter with locally provided inputs, so CVE does not apply.

@SocketSecurity ignore npm/cookie@0.4.2
Appears to be a transitive dependency of Hardhat via @sentry/node, which is assumed to be local for the user, so the CVE should not apply.

@SocketSecurity ignore npm/amdefine@1.0.1
@SocketSecurity ignore npm/sc-istanbul@0.4.6
@SocketSecurity ignore npm/undici@5.29.0
@SocketSecurity ignore npm/viem@2.33.3
These appear to be false positives.