Use ERC20Bridgeable from Contracts 5.4.0

[ericglau]

Fixes #592

• For ERC20 cross chain bridging, uses ERC20Bridgeable from Contracts 5.4.0 instead of Community Contracts.
  • Enables upgradeability when cross chain bridging is enabled, since ERC20Bridgeable is included in the upgradeable variants.
  • For custom bridges, uses a state variable instead of immutable, since the bridge address should be set in the initializer for the upgradeable case.
• Updates the minimum required Contracts version to 5.4.0

Note: This PR does not address other contracts that were removed from Community Contracts. Those should be addressed by #618

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​nomicfoundation/​hardhat-toolbox@​6.0.0 ⏵ 6.1.0				+5
	hardhat@​2.22.19 ⏵ 2.26.2	+1		+1
	@​openzeppelin/​hardhat-upgrades@​3.9.1
	@​openzeppelin/​contracts-upgradeable@​5.4.0
	@​openzeppelin/​contracts@​5.3.0 ⏵ 5.4.0		+5

View full report

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

[ernestognw]

I'm not entirely sure how to fix the MCP error. It's failing because the wizard version installed in packages/mcp doesn't have the upgradeable ERC20Bridgeable version. Does that require a release?

[ericglau]

Updated MCP testcase to not expect an error when using ERC20Bridgeable with upgradeable.