Merge pull request #943 from keep-network/use-fixed-sortition-pools-dependency

Using fixed version of sortition-pools package

The keep-ecdsa contracts depend on some sortition-pools contracts
which are no longer present in the latest npm packages (this is due to
transision to v2). Until we stop supporting keep-ecdsa repo
& contracts, we need to configure there the dependncy to the latest
sortition-pools package which contains the required contracts. This
is package @keep-network/sortition-pools@1.2.0-dev.1.

Author: nkuba

.github/workflows/contracts.yml

@@ -134,7 +134,6 @@ jobs:
 
       - name: Resolve latest contracts
         run: |
-          npm update @keep-network/sortition-pools
           npm install --save-exact \
             @keep-network/keep-core@${{ steps.upstream-builds-query.outputs.keep-core-contracts-version }}
 

.github/workflows/npm.yml

@@ -32,9 +32,7 @@ jobs:
       - name: Resolve latest contracts
         working-directory: ./solidity
         run: |
-          npm update --save-exact \
-            @keep-network/keep-core \
-            @keep-network/sortition-pools
+          npm update --save-exact @keep-network/keep-core
 
       - name: Compile contracts
         run: npx truffle compile

solidity/package-lock.json

@@ -29,7 +29,7 @@
   "homepage": "https://github.com/keep-network/keep-ecdsa",
   "dependencies": {
     "@keep-network/keep-core": ">1.8.0-dev <1.8.0-pre",
-    "@keep-network/sortition-pools": ">1.2.0-dev <1.2.0-pre",
+    "@keep-network/sortition-pools": "1.2.0-dev.1",
     "@openzeppelin/upgrades": "^2.7.2",
     "openzeppelin-solidity": "2.3.0"
   },