|
3 | 3 | [](https://docs.openzeppelin.com/upgrades-plugins)
|
4 | 4 | [](https://codecov.io/gh/OpenZeppelin/openzeppelin-upgrades)
|
5 | 5 |
|
6 |
| -**Integrate upgrades into your existing workflow.** Plugins for [Hardhat](https://hardhat.org/) and [Truffle](https://www.trufflesuite.com/truffle) to deploy and manage upgradeable contracts on Ethereum. |
| 6 | +**Integrate upgrades into your existing workflow.** Plugins for [Hardhat](https://hardhat.org/) and [Foundry](https://book.getfoundry.sh/) to deploy and manage upgradeable contracts on Ethereum. |
7 | 7 |
|
8 | 8 | - Deploy upgradeable contracts.
|
9 | 9 | - Upgrade deployed contracts.
|
10 | 10 | - Manage proxy admin rights.
|
11 | 11 | - Easily use in tests.
|
12 | 12 |
|
13 |
| -## Installation |
| 13 | +## Installation and Usage |
14 | 14 |
|
15 |
| -### Hardhat |
| 15 | +See the documentation for each plugin: |
16 | 16 |
|
17 |
| -``` |
18 |
| -npm install --save-dev @openzeppelin/hardhat-upgrades |
19 |
| -npm install --save-dev @nomicfoundation/hardhat-ethers ethers # peer dependencies |
20 |
| -``` |
21 |
| - |
22 |
| -```js |
23 |
| -// hardhat.config.js |
24 |
| -require('@openzeppelin/hardhat-upgrades'); |
25 |
| -``` |
26 |
| - |
27 |
| -### Truffle |
28 |
| - |
29 |
| -``` |
30 |
| -npm install --save-dev @openzeppelin/truffle-upgrades |
31 |
| -``` |
32 |
| - |
33 |
| -## Usage |
34 |
| - |
35 |
| -See the documentation for each plugin, or take a look at the sample code snippets below. |
36 |
| - |
37 |
| -| [<img src="assets/hardhat.svg" height="20px" width="30px" alt="">Hardhat](./packages/plugin-hardhat/README.md)| [<img src="assets/truffle.svg" height="20px" width="30px" alt="">Truffle](./packages/plugin-truffle/README.md) | |
| 17 | +| [<img src="assets/hardhat.svg" height="20px" width="30px" alt="">Hardhat](./packages/plugin-hardhat/README.md)| [<img src="https://avatars.githubusercontent.com/u/99892494?s=20&v=4" height="20px" width="20px" alt=""> Foundry](https://github.com/OpenZeppelin/openzeppelin-foundry-upgrades) | |
38 | 18 | |-|-|
|
39 | 19 |
|
40 |
| -Hardhat users will be able to write [scripts](https://hardhat.org/guides/scripts.html) that use the plugin to deploy or upgrade a contract, and manage proxy admin rights. |
41 |
| - |
42 |
| -```js |
43 |
| -const { ethers, upgrades } = require("hardhat"); |
44 |
| - |
45 |
| -async function main() { |
46 |
| - // Deploying |
47 |
| - const Box = await ethers.getContractFactory("Box"); |
48 |
| - const instance = await upgrades.deployProxy(Box, [42]); |
49 |
| - await instance.waitForDeployment(); |
50 |
| - |
51 |
| - // Upgrading |
52 |
| - const BoxV2 = await ethers.getContractFactory("BoxV2"); |
53 |
| - const upgraded = await upgrades.upgradeProxy(await instance.getAddress(), BoxV2); |
54 |
| -} |
55 |
| - |
56 |
| -main(); |
57 |
| -``` |
58 |
| - |
59 |
| -Truffle users will be able to write [migrations](https://www.trufflesuite.com/docs/truffle/getting-started/running-migrations) that use the plugin to deploy or upgrade a contract, or manage proxy admin rights. |
60 |
| - |
61 |
| -```js |
62 |
| -const { deployProxy, upgradeProxy } = require('@openzeppelin/truffle-upgrades'); |
63 |
| - |
64 |
| -const Box = artifacts.require('Box'); |
65 |
| -const BoxV2 = artifacts.require('BoxV2'); |
66 |
| - |
67 |
| -module.exports = async function (deployer) { |
68 |
| - const instance = await deployProxy(Box, [42], { deployer }); |
69 |
| - const upgraded = await upgradeProxy(instance.address, BoxV2, { deployer }); |
70 |
| -} |
71 |
| -``` |
72 |
| - |
73 |
| -Whether you're using Hardhat or Truffle, you can use the plugin in your tests to ensure everything works as expected. |
74 |
| - |
75 |
| -```js |
76 |
| -it('works before and after upgrading', async function () { |
77 |
| - const instance = await upgrades.deployProxy(Box, [42]); |
78 |
| - assert.strictEqual(await instance.retrieve(), 42); |
79 |
| - |
80 |
| - await upgrades.upgradeProxy(instance, BoxV2); |
81 |
| - assert.strictEqual(await instance.retrieve(), 42); |
82 |
| -}); |
83 |
| -``` |
84 |
| - |
85 | 20 | ## How do the plugins work?
|
86 | 21 |
|
87 | 22 | The plugins provide functions which take care of managing upgradeable deployments of your contracts.
|
88 | 23 |
|
89 | 24 | For example, `deployProxy` does the following:
|
90 | 25 |
|
91 |
| -1. Validate that the implementation is [upgrade safe](https://docs.openzeppelin.com/upgrades-plugins/faq#what-does-it-mean-for-a-contract-to-be-upgrade-safe) |
| 26 | +1. Validates that the implementation is [upgrade safe](https://docs.openzeppelin.com/upgrades-plugins/faq#what-does-it-mean-for-a-contract-to-be-upgrade-safe). |
92 | 27 |
|
93 |
| -2. Check if there is an [implementation contract](https://docs.openzeppelin.com/upgrades-plugins/faq#what-is-an-implementation-contract) deployed with the same bytecode, and deploy one if not |
| 28 | +2. Deploys the [implementation contract](https://docs.openzeppelin.com/upgrades-plugins/faq#what-is-an-implementation-contract). Note that the Hardhat plugin first checks if there is an implementation contract deployed with the same bytecode, and skips this step if one is already deployed. |
94 | 29 |
|
95 |
| -3. Create and initialize the proxy contract, along with a [proxy admin](https://docs.openzeppelin.com/upgrades-plugins/faq#what-is-a-proxy-admin) (if needed) |
| 30 | +3. Creates and initializes the proxy contract, along with a [proxy admin](https://docs.openzeppelin.com/upgrades-plugins/faq#what-is-a-proxy-admin) (if needed). |
96 | 31 |
|
97 | 32 | And when you call `upgradeProxy`:
|
98 | 33 |
|
99 |
| -1. Validate that the new implementation is [upgrade safe](https://docs.openzeppelin.com/upgrades-plugins/faq#what-does-it-mean-for-a-contract-to-be-upgrade-safe) and is [compatible](https://docs.openzeppelin.com/upgrades-plugins/faq#what-does-it-mean-for-an-implementation-to-be-compatible) with the previous one |
| 34 | +1. Validates that the new implementation is [upgrade safe](https://docs.openzeppelin.com/upgrades-plugins/faq#what-does-it-mean-for-a-contract-to-be-upgrade-safe) and is [compatible](https://docs.openzeppelin.com/upgrades-plugins/faq#what-does-it-mean-for-an-implementation-to-be-compatible) with the previous one. |
100 | 35 |
|
101 |
| -2. Check if there is an [implementation contract](https://docs.openzeppelin.com/upgrades-plugins/faq#what-is-an-implementation-contract) deployed with the same bytecode, and deploy one if not |
| 36 | +2. Deploys the new [implementation contract](https://docs.openzeppelin.com/upgrades-plugins/faq#what-is-an-implementation-contract). Note that the Hardhat plugin first checks if there is an implementation contract deployed with the same bytecode, and skips this step if one is already deployed. |
102 | 37 |
|
103 |
| -3. Upgrade the proxy to use the new implementation contract |
| 38 | +3. Upgrades the proxy to use the new implementation contract. |
104 | 39 |
|
105 |
| -The plugins will keep track of all the implementation contracts you have deployed in an `.openzeppelin` folder in the project root. You will find one file per network there. It is advised that you commit to source control the files for all networks except the development ones (you may see them as `.openzeppelin/unknown-*.json`). |
| 40 | +The Hardhat plugin keeps track of all the implementation contracts you have deployed in an `.openzeppelin` folder in the project root. You will find one file per network there. It is advised that you commit to source control the files for all networks except the development ones (you may see them as `.openzeppelin/unknown-*.json`). |
106 | 41 |
|
107 |
| -> Note: the format of the files within the `.openzeppelin` folder is not compatible with those of the [OpenZeppelin CLI](https://docs.openzeppelin.com/cli). If you want to use these plugins for an existing OpenZeppelin CLI project, we will be sharing soon a guide on how to migrate. |
| 42 | +The Foundry plugin does not keep track of implementation contracts, but requires you to [define reference contracts](https://github.com/OpenZeppelin/openzeppelin-foundry-upgrades?tab=readme-ov-file#before-running) in order to validate new versions of implementations for upgrade safety. |
108 | 43 |
|
109 | 44 | ## Proxy patterns
|
110 | 45 |
|
111 |
| -The plugins support the UUPS, transparent, and beacon proxy patterns. UUPS and transparent proxies are upgraded individually, whereas any number of beacon proxies can be upgraded atomically at the same time by upgrading the beacon that they point to. For more details on the different proxy patterns available, see the documentation for [Proxies](https://docs.openzeppelin.com/contracts/4.x/api/proxy). |
| 46 | +The plugins support the UUPS, transparent, and beacon proxy patterns. UUPS and transparent proxies are upgraded individually, whereas any number of beacon proxies can be upgraded atomically at the same time by upgrading the beacon that they point to. For more details on the different proxy patterns available, see the documentation for [Proxies](https://docs.openzeppelin.com/contracts/api/proxy). |
112 | 47 |
|
113 |
| -For UUPS and transparent proxies, use `deployProxy` and `upgradeProxy` as shown above. For beacon proxies, use `deployBeacon`, `deployBeaconProxy`, and `upgradeBeacon`. See the documentation for [Hardhat Upgrades](./packages/plugin-hardhat/README.md) and [Truffle Upgrades](./packages/plugin-truffle/README.md) for examples. |
| 48 | +For UUPS and transparent proxies, use `deployProxy` and `upgradeProxy`. For beacon proxies, use `deployBeacon`, `deployBeaconProxy`, and `upgradeBeacon`. See the documentation for [Hardhat Upgrades](./packages/plugin-hardhat/README.md) and [Foundry Upgrades](https://github.com/OpenZeppelin/openzeppelin-foundry-upgrades) for examples. |
114 | 49 |
|
115 | 50 | ## Managing ownership
|
116 | 51 |
|
117 | 52 | Transparent proxies have an _admin_ address which has the rights to upgrade them. By default, the admin is a [proxy admin contract](https://docs.openzeppelin.com/upgrades-plugins/faq#what-is-a-proxy-admin) deployed behind the scenes. Keep in mind that the _admin_ of a proxy can only upgrade it, but not interact with the implementation contract. Read [here](https://docs.openzeppelin.com/upgrades-plugins/proxies#transparent-proxies-and-function-clashes) for more info on this restriction.
|
118 | 53 |
|
119 |
| -The proxy admin contract also defines an _owner_ address which has the rights to operate it. By default, this address is the `initialOwner` address used during deployment of the transparent proxy if provided, otherwise it is the externally owned account used during deployment. You can change the proxy admin owner by calling the `admin.transferProxyAdminOwnership` function in the plugin. Refer to each plugin documentation for more details on the `admin` functions. |
| 54 | +The proxy admin contract also defines an _owner_ address which has the rights to operate it. By default, the proxy admin's owner is the `initialOwner` address used during deployment of the transparent proxy if provided, otherwise it is the externally owned account used during deployment. You can change the proxy admin owner by calling the `admin.transferProxyAdminOwnership` function in the Hardhat plugin, or the `transferOwnership` function of the proxy admin contract if using Foundry. |
| 55 | + |
| 56 | +> [!WARNING] |
| 57 | +> Do not reuse an already deployed `ProxyAdmin`. Before `@openzeppelin/contracts` version 5.x, the address provided to transparent proxies was an `initialAdmin` as opposed to an `initialOwner` of a newly deployed `ProxyAdmin`. Reusing a `ProxyAdmin` will disable upgradeability in your contract. |
120 | 58 |
|
121 |
| -UUPS and beacon proxies do not use admin addresses. UUPS proxies rely on an [`_authorizeUpgrade`](https://docs.openzeppelin.com/contracts/4.x/api/proxy#UUPSUpgradeable-_authorizeUpgrade-address-) function to be overridden to include access restriction to the upgrade mechanism, whereas beacon proxies are upgradable only by the owner of their corresponding beacon. |
| 59 | +UUPS and beacon proxies do not use admin addresses. UUPS proxies rely on an [`_authorizeUpgrade`](https://docs.openzeppelin.com/contracts/api/proxy#UUPSUpgradeable-_authorizeUpgrade-address-) function to be overridden to include access restriction to the upgrade mechanism, whereas beacon proxies are upgradable only by the owner of their corresponding beacon. |
122 | 60 |
|
123 |
| -Once you have transferred the rights to upgrade a proxy or beacon to another address, you can still use your local setup to validate and deploy the implementation contract. The plugins include a `prepareUpgrade` function that will validate that the new implementation is upgrade-safe and compatible with the previous one, and deploy it using your local Ethereum account. You can then execute the upgrade itself from the admin or owner address. You can also use the `proposeUpgrade` function to automatically set up the upgrade in [Defender Admin](https://docs.openzeppelin.com/defender/admin). |
| 61 | +Once you have transferred the rights to upgrade a proxy or beacon to another address, you can still use your local setup to validate and deploy the implementation contract. The plugins include a `prepareUpgrade` function that will validate that the new implementation is upgrade-safe and compatible with the previous one, and deploy it using your local Ethereum account. You can then execute the upgrade itself from the admin or owner address. You can also use the `defender.proposeUpgrade` or `defender.proposeUpgradeWithApproval` functions to automatically set up the upgrade in [OpenZeppelin Defender](https://docs.openzeppelin.com/defender/). |
124 | 62 |
|
125 | 63 | ## Community
|
126 | 64 |
|
|
0 commit comments