Bump ERC-4337 entrypoint to version 0.9 #6135

Amxx · 2025-11-22T04:06:42Z

PR Checklist

Tests
Documentation
Changeset entry (run npx changeset add)

changeset-bot · 2025-11-22T04:06:46Z

🦋 Changeset detected

Latest commit: ff23994

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
openzeppelin-solidity	Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

socket-security · 2025-11-22T04:07:06Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/hardhat-predeploy@0.3.0 ⏵ 0.4.1	⁺³		⁺⁴	⁺¹

View full report

coderabbitai · 2025-11-22T04:10:41Z

Walkthrough

This pull request introduces support for ERC4337 entrypoint version 0.9 across the OpenZeppelin Solidity library. A new constant ENTRYPOINT_V09 is added to the ERC4337Utils library. The default entrypoint in the Account contract is updated from v0.8 to v0.9. Test files are updated to reference predeploy.entrypoint.v09 instead of v08, and the hardhat-predeploy dependency is bumped from ^0.3.0 to ^0.4.1. A changeset file documents the minor version bump.

Suggested labels

release-cycle

Pre-merge checks and finishing touches

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 20.00% which is insufficient. The required threshold is 80.00%.	You can run `@coderabbitai generate docstrings` to improve docstring coverage.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and specifically summarizes the main change: updating the ERC-4337 entrypoint from version 0.8 to 0.9, which is the primary focus of the changeset across all modified files.
Description check	✅ Passed	The description is minimally related to the changeset as it references a PR checklist indicating tests and changeset completion, which are relevant to the pull request process for this entrypoint version bump.

✨ Finishing touches

📝 Generate docstrings

🧪 Generate unit tests (beta)

Create PR with unit tests
Post copyable unit tests in a comment

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 0de8004 and ff23994.

⛔ Files ignored due to path filters (1)

package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (22)

.changeset/full-emus-hear.md (1 hunks)
contracts/account/Account.sol (1 hunks)
contracts/account/utils/draft-ERC4337Utils.sol (1 hunks)
package.json (1 hunks)
test/account/Account.behavior.js (3 hunks)
test/account/Account.test.js (1 hunks)
test/account/AccountECDSA.test.js (1 hunks)
test/account/AccountERC7702.t.sol (2 hunks)
test/account/AccountERC7702.test.js (1 hunks)
test/account/AccountERC7913.test.js (1 hunks)
test/account/AccountMultiSigner.test.js (1 hunks)
test/account/AccountMultiSignerWeighted.test.js (1 hunks)
test/account/AccountP256.test.js (1 hunks)
test/account/AccountRSA.test.js (1 hunks)
test/account/AccountWebAuthn.test.js (1 hunks)
test/account/examples/AccountERC7702WithModulesMock.test.js (1 hunks)
test/account/extensions/AccountERC7579.behavior.js (4 hunks)
test/account/extensions/AccountERC7579.test.js (1 hunks)
test/account/extensions/AccountERC7579Hooked.test.js (1 hunks)
test/account/extensions/ERC7821.behavior.js (5 hunks)
test/account/utils/draft-ERC4337Utils.test.js (1 hunks)
test/helpers/erc4337.js (1 hunks)

🧰 Additional context used

🧠 Learnings (4)

📚 Learning: 2025-10-15T02:52:05.027Z

Learnt from: ernestognw
Repo: OpenZeppelin/openzeppelin-contracts PR: 5891
File: test/account/modules/ERC7579Module.behavior.js:56-61
Timestamp: 2025-10-15T02:52:05.027Z
Learning: In ERC7579 validator tests for `isValidSignatureWithSender`, using `this.mock` (not bound to a specific account) is valid when testing signature validation with any arbitrary sender, while `this.mockFromAccount` is used when testing account-specific validation scenarios.

Applied to files:

test/account/AccountMultiSignerWeighted.test.js
test/account/Account.test.js
test/account/AccountMultiSigner.test.js
test/account/extensions/ERC7821.behavior.js
test/account/extensions/AccountERC7579Hooked.test.js
test/account/Account.behavior.js
test/account/AccountERC7913.test.js
test/account/AccountERC7702.test.js
test/account/examples/AccountERC7702WithModulesMock.test.js
test/account/AccountECDSA.test.js
test/account/AccountERC7702.t.sol

📚 Learning: 2025-08-29T13:16:08.640Z

Learnt from: Amxx
Repo: OpenZeppelin/openzeppelin-contracts PR: 5904
File: contracts/mocks/crosschain/ERC7786RecipientMock.sol:12-14
Timestamp: 2025-08-29T13:16:08.640Z
Learning: In OpenZeppelin contracts, mock contracts (like ERC7786RecipientMock) don't require input validation such as zero-address checks in constructors, as they are only used for testing purposes in controlled environments.

Applied to files:

test/account/AccountMultiSignerWeighted.test.js
test/account/AccountMultiSigner.test.js
test/account/AccountERC7913.test.js
test/account/AccountERC7702.t.sol

📚 Learning: 2025-09-04T09:13:21.278Z

Learnt from: Amxx
Repo: OpenZeppelin/openzeppelin-contracts PR: 5904
File: contracts/crosschain/ERC7786Recipient.sol:3-3
Timestamp: 2025-09-04T09:13:21.278Z
Learning: In OpenZeppelin contracts, hardhat.config.js uses yargs to configure the Solidity compiler version dynamically via command line arguments, with a default of '0.8.27' set on line 21 and the solidity configuration using argv.compile around lines 76-87, rather than hardcoded version strings.

Applied to files:

package.json

📚 Learning: 2025-09-04T09:13:21.278Z

Learnt from: Amxx
Repo: OpenZeppelin/openzeppelin-contracts PR: 5904
File: contracts/crosschain/ERC7786Recipient.sol:3-3
Timestamp: 2025-09-04T09:13:21.278Z
Learning: In OpenZeppelin contracts, hardhat.config.js uses a sophisticated yargs-based configuration where the Solidity compiler version is set via argv.compiler (line 77) with a default of '0.8.27' defined in the yargs options (line 21), allowing flexible command-line overrides while maintaining a consistent default.

Applied to files:

package.json

🧬 Code graph analysis (14)

test/account/AccountMultiSignerWeighted.test.js (11)

test/account/extensions/AccountERC7579.test.js (11)

test/account/Account.test.js (11)

test/account/AccountMultiSigner.test.js (11)

test/account/extensions/AccountERC7579.behavior.js (2)

test/account/AccountWebAuthn.test.js (11)

test/account/extensions/AccountERC7579Hooked.test.js (11)

test/account/Account.behavior.js (1)

test/account/AccountERC7913.test.js (11)

test/account/AccountRSA.test.js (11)

test/account/AccountERC7702.test.js (11)

test/account/examples/AccountERC7702WithModulesMock.test.js (11)

test/account/AccountECDSA.test.js (11)

test/account/AccountP256.test.js (11)

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (9)

GitHub Check: Redirect rules - solidity-contracts
GitHub Check: Header rules - solidity-contracts
GitHub Check: Pages changed - solidity-contracts
GitHub Check: slither
GitHub Check: halmos
GitHub Check: tests-upgradeable
GitHub Check: coverage
GitHub Check: tests-foundry
GitHub Check: tests

🔇 Additional comments (24)

Tip

📝 Customizable high-level summaries are now available in beta!

You can now customize how CodeRabbit generates the high-level summary in your pull requests — including its content, structure, tone, and formatting.

Provide your own instructions using the high_level_summary_instructions setting.
Format the summary however you like (bullet lists, tables, multi-section layouts, contributor stats, etc.).
Use high_level_summary_in_walkthrough to move the summary from the description to the walkthrough section.

Example instruction:

Note: This feature is currently in beta for Pro-tier users, and pricing will be announced later.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

Bump ERC-4337 entrypoint to version 0.9

ff23994

Amxx added this to the 5.6 milestone Nov 22, 2025

Amxx requested a review from ernestognw November 22, 2025 04:06

Amxx requested a review from a team as a code owner November 22, 2025 04:06

Amxx added the Account Abstraction label Nov 22, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump ERC-4337 entrypoint to version 0.9 #6135

Bump ERC-4337 entrypoint to version 0.9 #6135

Amxx commented Nov 22, 2025

Uh oh!

changeset-bot bot commented Nov 22, 2025

Uh oh!

socket-security bot commented Nov 22, 2025

Uh oh!

coderabbitai bot commented Nov 22, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump ERC-4337 entrypoint to version 0.9 #6135

Are you sure you want to change the base?

Bump ERC-4337 entrypoint to version 0.9 #6135

Conversation

Amxx commented Nov 22, 2025

PR Checklist

Uh oh!

changeset-bot bot commented Nov 22, 2025

🦋 Changeset detected

Uh oh!

socket-security bot commented Nov 22, 2025

Uh oh!

coderabbitai bot commented Nov 22, 2025

Walkthrough

Suggested labels

Pre-merge checks and finishing touches

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant