CLI: Support --exclude option

[ericglau]

Adds an --exclude "<GLOB_PATTERN>" [--exclude "<GLOB_PATTERN>"...] option to the CLI, which allows glob patterns of source file paths that should be excluded from the validation report. If passing in multiple patterns, call the option multiple times, once for each pattern.

This supports any of the user's source files or their dependencies. Note this only supports file paths (e.g. the paths of .sol files), not the names of specific contracts in those files.

Additional notes:

• If the --contract <CONTRACT_NAME> option was specified and the file is excluded via the --exclude option, an error will be thrown.
• The pattern **/contracts/proxy/beacon/UpgradeableBeacon.sol is always added to the exclude list automatically, since UpgradeableBeacon contains an upgradeTo(address) function and is incorrectly detected as an implementation contract.
• This PR also updates the --referenceBuildInfoDirs and --unsafeAllow options to support those options being called either with a comma (as before) or multiple times (introduced in this PR).
  • However, --exclude does not treat comma as a delimiter, because globs can have commas within them e.g. --exclude "**/{A,B}.sol"

Fixes #1035
Fixes #849

[Amxx]

Left a very small suggestion. Looks good to me.

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher

🚮 Removed packages: npm/@nomicfoundation/hardhat-verify@2.0.9), npm/@openzeppelin/contracts-upgradeable@5.0.2), npm/@openzeppelin/defender-sdk-base-client@1.14.3), npm/@openzeppelin/defender-sdk-deploy-client@1.14.3), npm/@openzeppelin/defender-sdk-network-client@1.14.3), npm/@openzeppelin/upgrades-core@1.36.0)

View full report↗︎