Vendor openzeppelin 4.9.3 to use contracts in VRFCoordinatorV2_5

[kidambisrinivas]

Context

• Currently, we are not able to verify VRFCoordinatorV2_5 with forge because of using @openzeppelin/contracts/Ownable as a dependency.
• If you use files that are outside the project through a remapping (like @remapped/=../remapped/ from node_modules for ex), and a file there does a relative import, then verification fails.
• Foundry bug, which is open and not fixed yet
• Import chain: VRFCoordinatorV2_5 --imports--> ChainSpecificUtil --imports--> ./vendor/../OVM_GasPriceOracle --imports--> @openzeppelin/Ownable (Outside project) -->imports--> '../utils/Context.sol' (Relative import)

Goal

• Vendor @openzeppelin/[email protected], so that we can use Ownable in VRFCoordinatorV2_5

[github-actions]

I see that you haven't updated any CHANGELOG files. Would it make sense to do so?

[cl-sonarqube-production]

SonarQube Quality Gate

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

[makramkd]

Two questions (for other reviewers as well):

• Should we vendor the entire repo or just what is needed?
• Should we update the remappings.txt to point to this vendor folder instead of the node_modules folder? Should be backwards compatible and would fix the verification issue you're facing.

[RensR]

Please only vendor what is required

[github-actions]

This PR is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 7 days.