feat: bump spec to v0.8.0-rc.7

[jaypaik]

Bump @erc6900/reference-implementation dependency to v0.8.0-rc.7 which brings in the following changes:

1. chore: rename constant erc6900/reference-implementation#204
2. feat: update ValidationDataView with ValidationFlags erc6900/reference-implementation#207

[octane-security-app]

Summary by Octane

New Contracts

No new contracts were added in this PR.

Updated Contracts

• BenchmarkBase.sol: Added import of console from "forge-std/console.sol" before other imports for improved logging capabilities.
• ModularAccountBenchmarkBase.sol: Validation uses ValidationFlags instead of ValidationConfig; added flag methods to replace direct flag checks.
• AccountStorage.sol: The smart contract now uses a consolidated ValidationFlags structure for validation settings, replacing separate boolean flags.
• ModularAccountBase.sol: Added ValidationFlags and modified validation checks to use these flags for improved modular validation logic.
• ModularAccountView.sol: Replaced individual validation flags with a consolidated validationFlags field.
• ModuleManagerInternals.sol: The contract now consolidates validation parameters into ValidationFlags, replacing individual flag settings.
• ValidationLocatorLib.sol: Updated constant name DIRECT_CALL_VALIDATION_ENTITYID to DIRECT_CALL_VALIDATION_ENTITY_ID for consistency.
• ReturnDataModuleMocks.sol: Corrected constant name for entity ID in function call signature encoding.
• AccountTestBase.sol: Corrected constant name to DIRECT_CALL_VALIDATION_ENTITY_ID for consistency.
• ModuleSignatureUtils.sol: Corrected variable name from DIRECT_CALL_VALIDATION_ENTITYID to DIRECT_CALL_VALIDATION_ENTITY_ID.

---

🔗 Commit Hash: 1778256

[jaypaik]

• feat: bump spec to v0.8.0-rc.7 #312 👈 (View in Graphite)
• develop

This stack of pull requests is managed by Graphite. Learn more about stacking.

[github-actions]

Contract sizes:

 | Contract                      | Runtime Size (B) | Initcode Size (B) | Runtime Margin (B) | Initcode Margin (B) |
 |-------------------------------|------------------|-------------------|--------------------|---------------------|
 | AccountFactory                |            6,121 |             6,595 |             18,455 |              42,557 |
 | AllowlistModule               |            9,602 |             9,629 |             14,974 |              39,523 |
 | ExecutionInstallDelegate      |            5,947 |             5,993 |             18,629 |              43,159 |
-| ModularAccount                |           22,134 |            22,533 |              2,442 |              26,619 |
+| ModularAccount                |           21,923 |            22,322 |              2,653 |              26,830 |
 | NativeTokenLimitModule        |            4,583 |             4,610 |             19,993 |              44,542 |
 | PaymasterGuardModule          |            1,827 |             1,854 |             22,749 |              47,298 |
-| SemiModularAccount7702        |           23,246 |            23,638 |              1,330 |              25,514 |
-| SemiModularAccountBytecode    |           23,728 |            24,127 |                848 |              25,025 |
-| SemiModularAccountStorageOnly |           24,227 |            24,626 |                349 |              24,526 |
+| SemiModularAccount7702        |           23,153 |            23,545 |              1,423 |              25,607 |
+| SemiModularAccountBytecode    |           23,635 |            24,034 |                941 |              25,118 |
+| SemiModularAccountStorageOnly |           24,168 |            24,567 |                408 |              24,585 |
 | SingleSignerValidationModule  |            3,646 |             3,673 |             20,930 |              45,479 |
 | TimeRangeModule               |            2,204 |             2,231 |             22,372 |              46,921 |
 | WebAuthnValidationModule      |            7,854 |             7,881 |             16,722 |              41,271 |

Code coverage:

File	% Lines	% Statements	% Branches	% Funcs
src/account/AccountBase.sol	100.00% (8/8)	100.00% (7/7)	100.00% (2/2)	100.00% (4/4)
src/account/AccountStorageInitializable.sol	100.00% (19/19)	100.00% (26/26)	100.00% (5/5)	100.00% (2/2)
src/account/ModularAccount.sol	100.00% (3/3)	100.00% (6/6)	100.00% (0/0)	100.00% (3/3)
src/account/ModularAccountBase.sol	98.98% (290/293)	96.24% (358/372)	77.59% (45/58)	97.30% (36/37)
src/account/ModularAccountView.sol	100.00% (27/27)	100.00% (31/31)	100.00% (3/3)	100.00% (5/5)
src/account/ModuleManagerInternals.sol	93.65% (59/63)	95.06% (77/81)	63.64% (7/11)	100.00% (4/4)
src/account/SemiModularAccount7702.sol	0.00% (0/6)	0.00% (0/6)	0.00% (0/1)	0.00% (0/3)
src/account/SemiModularAccountBase.sol	88.24% (60/68)	91.84% (90/98)	64.71% (11/17)	100.00% (16/16)
src/account/SemiModularAccountBytecode.sol	100.00% (6/6)	100.00% (7/7)	100.00% (1/1)	100.00% (2/2)
src/account/SemiModularAccountStorageOnly.sol	66.67% (4/6)	50.00% (5/10)	100.00% (0/0)	33.33% (1/3)
src/account/TokenReceiver.sol	33.33% (1/3)	33.33% (1/3)	100.00% (0/0)	33.33% (1/3)
src/factory/AccountFactory.sol	84.78% (39/46)	87.10% (54/62)	50.00% (3/6)	62.50% (10/16)
src/helpers/ExecutionInstallDelegate.sol	88.14% (52/59)	89.47% (68/76)	25.00% (2/8)	100.00% (7/7)
src/libraries/ExecutionLib.sol	99.64% (276/277)	98.89% (268/271)	90.91% (30/33)	100.00% (24/24)
src/libraries/KnownSelectorsLib.sol	100.00% (16/16)	100.00% (34/34)	100.00% (0/0)	100.00% (2/2)
src/libraries/LinkedListSetLib.sol	94.00% (47/50)	96.25% (77/80)	66.67% (4/6)	100.00% (8/8)
src/libraries/MemManagementLib.sol	100.00% (54/54)	100.00% (70/70)	100.00% (0/0)	100.00% (12/12)
src/libraries/ModuleInstallCommonsLib.sol	57.14% (8/14)	42.11% (8/19)	75.00% (3/4)	100.00% (3/3)
src/libraries/ValidationLocatorLib.sol	65.48% (55/84)	70.97% (66/93)	45.83% (11/24)	85.00% (17/20)
src/modules/ModuleBase.sol	100.00% (13/13)	94.12% (16/17)	100.00% (2/2)	100.00% (3/3)
src/modules/permissions/AllowlistModule.sol	86.21% (75/87)	85.84% (97/113)	78.26% (18/23)	50.00% (9/18)
src/modules/permissions/NativeTokenLimitModule.sol	89.13% (41/46)	90.48% (57/63)	100.00% (13/13)	66.67% (8/12)
src/modules/permissions/PaymasterGuardModule.sol	78.57% (11/14)	78.95% (15/19)	33.33% (1/3)	71.43% (5/7)
src/modules/permissions/TimeRangeModule.sol	89.47% (17/19)	85.19% (23/27)	100.00% (5/5)	87.50% (7/8)
src/modules/validation/SingleSignerValidationModule.sol	92.00% (23/25)	81.58% (31/38)	62.50% (5/8)	90.00% (9/10)
src/modules/validation/WebAuthnValidationModule.sol	61.11% (11/18)	66.67% (18/27)	100.00% (3/3)	60.00% (6/10)
Total	91.77% (1215/1324)	91.18% (1510/1656)	73.73% (174/236)	84.30% (204/242)

[octane-security-app]

Overview

Vulnerabilities found:	12

Detailed findings

src/account/ModularAccount.sol

• Review potential Missing Access Control issue that is exposed in the initializeWithValidation function

src/account/ModularAccountBase.sol

• Review potential Denial of Service issue that is exposed in the __fallback__ function
• Review potential Denial of Service issue that is exposed in the isValidSignature function
• Review potential Denial of Service issue that is exposed in the execute function
• Review potential Denial of Service issue that is exposed in the executeWithRuntimeValidation function
• Review potential Reentrancy issue that is exposed in the execute function
• Review potential Reentrancy issue that is exposed in the uninstallValidation function
• Review potential Reentrancy issue that is exposed in the installValidation function

src/account/ModularAccountView.sol

• Review potential Denial of Service issue that is exposed in the getValidationData function

src/account/SemiModularAccountBase.sol

• Review potential Denial of Service issue that is exposed in the installValidation function
• Review potential Denial of Service issue that is exposed in the updateFallbackSignerData function
• Review potential Reentrancy issue that is exposed in the installValidation function

---

🔗 Commit Hash: 1778256
🛡️ Octane Dashboard: All vulnerabilities