feat(erc20): Single Token Representation V2

.github/workflows/ante-benchmark.yml

@@ -5,6 +5,8 @@ on:
     branches:
       - main
 
+permissions: read-all
+
 jobs:
   ante-benchmark-test:
     runs-on: ubuntu-latest
@@ -19,7 +21,7 @@ jobs:
       - name: Setup Golang
         uses: actions/setup-go@v5
         with:
-          go-version: '1.21'
+          go-version: '1.22'
           check-latest: true
         if: env.GIT_DIFF
       - name: Run benchmark tests

.github/workflows/auto-format.yml

@@ -3,6 +3,8 @@ name: Auto Format
 on:
   pull_request:
 
+permissions: read-all
+
 jobs:
   format-go-code:
     runs-on: ubuntu-latest
@@ -13,7 +15,7 @@ jobs:
     steps:
       - uses: actions/setup-go@v5
         with:
-          go-version: "1.21"
+          go-version: "1.22"
           check-latest: true
       - uses: actions/checkout@v4
         with:

.github/workflows/bsr-push.yml

@@ -6,13 +6,14 @@ on:
   push:
     tags:
       - "v*.*.*"
+permissions: read-all
 
 jobs:
   push:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: bufbuild/buf-setup-action@v1.30.0
+      - uses: bufbuild/buf-setup-action@v1.31.0
       # Push Evmos protos to the Buf Schema Registry
       - uses: bufbuild/buf-push-action@v1.2.0
         with:

.github/workflows/build.yml

@@ -4,6 +4,8 @@ on:
     branches:
       - main
       - release/**
+
+permissions: read-all
 
 jobs:
   cleanup-runs:
@@ -20,7 +22,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-go@v5
         with:
-          go-version: '1.21'
+          go-version: '1.22'
           check-latest: true
       - uses: technote-space/get-diff-action@v6.1.2
         id: git_diff

.github/workflows/changelog.yml

@@ -5,6 +5,7 @@ on:
     branches:
       - main
       - release/**
+permissions: read-all
 
 jobs:
   check_diff:

.github/workflows/check-licenses.yml

@@ -2,6 +2,8 @@ name: Check Licenses
 on:
   pull_request
 
+permissions: read-all
+
 jobs:
   check-licenses:
     runs-on: ubuntu-latest

.github/workflows/codeql-analysis.yml

@@ -13,6 +13,7 @@ name: "CodeQL"
 
 on:
   pull_request:
+permissions: read-all
 
 jobs:
   analyze:

.github/workflows/consensuswarn.yml

@@ -1,5 +1,7 @@
 name: "Consensus Warn"
 
+permissions: read-all
+
 on:
   pull_request_target:
     types:
@@ -10,10 +12,10 @@ on:
 jobs:
   main:
     permissions:
-      pull-requests: write  # For reading the PR and posting comment
+      pull-requests: write # For reading the PR and posting comment
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
       - uses: orijtech/consensuswarn@main
         with:
-          roots: 'github.com/evmos/evmos/v16/app.Evmos.DeliverTx,github.com/evmos/evmos/v16/app.Evmos.BeginBlocker,github.com/evmos/evmos/v16/app.Evmos.EndBlocker'
+          roots: "github.com/evmos/evmos/v18/app.Evmos.DeliverTx,github.com/evmos/evmos/v18/app.Evmos.BeginBlocker,github.com/evmos/evmos/v18/app.Evmos.EndBlocker"

.github/workflows/dependencies.yml

@@ -1,16 +1,15 @@
 name: "Dependency Review"
 on: pull_request
 
-permissions:
-  contents: read
+permissions: read-all
 
 jobs:
   dependency-review:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/setup-go@v5
         with:
-          go-version: '1.21'
+          go-version: '1.22'
           check-latest: true
       - name: "Checkout Repository"
         uses: actions/checkout@v4

.github/workflows/docker-push.yml

@@ -4,6 +4,7 @@ on:
   push:
     tags:
       - "v*.*.*"
+permissions: read-all
 
 jobs:
   docker:

.github/workflows/e2e-test.yml

@@ -7,14 +7,15 @@ on:
   push:
     branches:
       - release/**
+permissions: read-all
 
 jobs:
   test-e2e:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/setup-go@v5
         with:
-          go-version: '1.21'
+          go-version: '1.22'
           check-latest: true
       - uses: actions/checkout@v4
       - uses: technote-space/get-diff-action@v6.1.2
@@ -50,12 +51,12 @@ jobs:
             "test_grpc_only.py"
             "test_ibc.py"
             "test_no_abci_resp.py"
-            "test_osmosis_outpost.py"
+            "test_str_v2.py"
+            "test_str_v2_token_factory.py"
             "test_precompiles.py"
             "test_priority.py"
             "test_pruned_node.py"
             "test_rollback.py"
-            "test_stride_outpost.py"
             "test_storage_proof.py"
             "test_zero_fee.py"
           )
@@ -80,6 +81,8 @@ jobs:
           echo "Test matrix: ${TEST_FILES}"
   test-nix:
     needs: test-files-matrix
+    permissions:
+      contents: write       
     runs-on: ubuntu-latest
     strategy:
       matrix:
@@ -125,7 +128,7 @@ jobs:
         run: make run-nix-tests
         if: env.GIT_DIFF
       # Commit gomod2nix changes files back to the repository if necessary
-      - uses: stefanzweifel/git-auto-commit-action@v5
+      - uses: stefanzweifel/git-auto-commit-action@v5   
         with:
           commit_message: update gomod2nix.toml file
           file_pattern: '*.toml'

.github/workflows/goreleaser.yml → .github/workflows/go-releaser.yml

@@ -4,6 +4,8 @@ on:
   push:
     tags:
       - "v*.*.*"
+permissions: read-all
+
 jobs:
   goreleaser:
     runs-on: ubuntu-latest
@@ -15,7 +17,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
-          go-version: '1.21'
+          go-version: '1.22'
           check-latest: true
       - name: release dry run
         run: make release-dry-run

.github/workflows/labeler.yml

@@ -1,11 +1,14 @@
 name: "Pull Request Labeler"
 on:
   pull_request:
+permissions: read-all
 
 jobs:
   triage:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write # For reading the PR and adding the label    
     steps:
-    - uses: actions/labeler@v5
-      with:
-        repo-token: "${{ secrets.GITHUB_TOKEN }}"
+      - uses: actions/labeler@v5
+        with:
+          repo-token: "${{ secrets.GITHUB_TOKEN }}"

.github/workflows/lint.yml

@@ -4,6 +4,9 @@ name: Lint
 # running if no *.{go, mod, sum} files have been changed.
 on:
   pull_request:
+
+permissions: read-all
+
 jobs:
   golangci:
     name: Run golangci-lint
@@ -13,7 +16,7 @@ jobs:
       # Required: setup-go, for all versions v3.0.0+ of golangci-lint
       - uses: actions/setup-go@v5
         with:
-          go-version: '1.21'
+          go-version: '1.22'
           check-latest: true
       - uses: actions/checkout@v4
       - uses: technote-space/get-diff-action@v6.1.2
@@ -23,7 +26,7 @@ jobs:
             go.mod
             go.sum
             *.toml
-      - uses: golangci/golangci-lint-action@v4.0.0
+      - uses: golangci/golangci-lint-action@v5.0.0
         with:
           # Required: the version of golangci-lint is required and must be specified without patch version: we always use the latest patch version.
           version: latest

.github/workflows/markdown-links.yml

@@ -4,6 +4,7 @@ on:
     branches:
       - main
       - release/**
+permissions: read-all
 
 jobs:
   markdown-link-check:

.github/workflows/proto.yml

@@ -6,9 +6,13 @@ on:
     paths:
       - "proto/**"
 
+permissions: read-all
+
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - uses: actions/checkout@v4
       - uses: technote-space/get-diff-action@v6.1.2
@@ -28,7 +32,7 @@ jobs:
     timeout-minutes: 5
     steps:
       - uses: actions/checkout@v4
-      - uses: bufbuild/buf-setup-action@v1.30.0
+      - uses: bufbuild/buf-setup-action@v1.31.0
       - uses: bufbuild/buf-lint-action@v1
         with:
           input: "proto"
@@ -37,7 +41,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: bufbuild/buf-setup-action@v1.30.0
+      - uses: bufbuild/buf-setup-action@v1.31.0
       - uses: bufbuild/buf-breaking-action@v1
         with:
           input: "proto"

.github/workflows/security.yml

@@ -1,6 +1,7 @@
 name: Run Gosec
 on:
   pull_request:
+permissions: read-all
 
 jobs:
   Gosec:

.github/workflows/semgrep.yml

@@ -3,6 +3,8 @@ on:
   # Scan changed files in PRs, block on new issues only (existing issues ignored)
   pull_request:
 
+permissions: read-all
+
 jobs:
   # Update from: https://semgrep.dev/docs/semgrep-ci/sample-ci-configs/#github-actions [removing GH Security Dashboard]
   semgrep:

.github/workflows/slither.yml

@@ -2,6 +2,7 @@ name: Slither Analysis
 
 on:
   pull_request:
+permissions: read-all
 
 jobs:
   analyze:
@@ -23,7 +24,7 @@ jobs:
           cd contracts && npm i
           cp -r node_modules/@openzeppelin .
       - name: Run Slither Action
-        uses: crytic/slither-action@v0.3.1
+        uses: crytic/slither-action@v0.3.2
         continue-on-error: true
         id: slither
         with:

.github/workflows/solhint.yml

@@ -3,10 +3,12 @@ name: Solhint
 on:
   pull_request:
 
+permissions: read-all
+
 jobs:
   solhint:
     name: runner / solhint
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-latest 
     steps:
       - uses: actions/checkout@v4
       - uses: technote-space/get-diff-action@v6.1.2

.github/workflows/solidity-test.yml

@@ -4,14 +4,15 @@ on:
     branches:
       - main
       - release/**
+permissions: read-all
 
 jobs:
   test-solidity:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/setup-go@v5
         with:
-          go-version: '1.21'
+          go-version: '1.22'
           check-latest: true
       - uses: actions/checkout@v4
       - uses: technote-space/get-diff-action@v6.1.2

.github/workflows/stale.yml

@@ -2,9 +2,12 @@ name: "Close stale issues & pull requests"
 on:
   schedule:
     - cron: "0 0 * * *"
+permissions: read-all
 
 jobs:
   stale:
+    permissions:
+      pull-requests: write # For reading the PR and adding the label    
     runs-on: ubuntu-latest
     steps:
       - uses: actions/stale@v9

.github/workflows/super-linter.yml

@@ -9,6 +9,7 @@ name: Lint Code Base
 
 on:
   pull_request:
+permissions: read-all
 jobs:
   run-lint:
     runs-on: ubuntu-latest
@@ -20,7 +21,7 @@ jobs:
           fetch-depth: 0
 
       - name: Lint Code Base
-        uses: github/super-linter@v5
+        uses: github/super-linter@v6
         env:
           LINTER_RULES_PATH: /
           YAML_CONFIG_FILE: .yamllint