QYX20 #35571

LimitedVERSE · 2025-09-02T02:27:45Z

Description

This PR introduces QYX20 / QuantumYield branding and configuration into the MetaMask extension codebase.
The goal is to adapt the upstream MetaMask extension into a whitelabel variant, enabling specialized support for the QYX20 token standard and QuantumYield exchange integration.

Reason for change: Extend MetaMask core to include custom branding and advanced functionality for QuantumYield users.
Improvement/solution: Provide a dedicated build path with preconfigured assets, token/chain metadata, and UX adjustments aligned with QYX20.

Changelog

CHANGELOG entry:
Added QYX20 (QuantumYield) branding and configuration support as a whitelabel MetaMask variant.

Related issues

Fixes: [link issue or tracking ticket here if applicable]

Manual testing steps

Pull this branch and build the extension with yarn start or pnpm build.
Load the unpacked extension into Chrome/Edge/Brave.
Confirm QuantumYield branding (icons, splash, UI assets).
Validate QYX20 token/chain metadata loads correctly.
Ensure base MetaMask functionality (accounts, RPC, transactions) is not broken.
Test QYX20-specific flows (deposit/withdraw/UTXO integration if available).

Screenshots/Recordings

Before

Default MetaMask branding and configuration.

After

QuantumYield (QYX20) branding, UI updates, and chain configuration visible in extension.

(add screenshots when available)

Pre-merge author checklist

I've followed MetaMask Contributor Docs and Coding Standards.
I've completed the PR template to the best of my ability.
I’ve included tests if applicable.
I’ve documented my code using JSDoc where relevant.
I’ve applied the correct labels (see labeling guidelines).

Pre-merge reviewer checklist

I’ve manually tested this branch (pull, build, run extension).
I confirm the PR addresses all acceptance criteria in its related ticket.
I’ve added/checked screenshots or recordings showing changes in action.

Note

Rebrands MetaMask UI strings to QuantumYield and updates multiple GitHub Actions (self-hosted runners, new Pages deploys, improved scripting), plus minor code robustness and styling tweaks.

Branding/UI:
- Replace MetaMask with QuantumYield across app/_locales/en/messages.json, app/loading.html, and app/popup-init.html (titles, messages, support text).
- Tweak popup dark background color and loading copy.
Code robustness:
- Wrap completeQrCodeScan in try/catch to log background call errors.
- Minor comment note in multichain-avatar-group.tsx.
CI/CD (GitHub Actions):
- Switch many jobs to runs-on: self-hosted; adjust envs and tokens; capture NEXT_SEMVER_VERSION via step output.
- Add GitHub Pages deploy workflows for Jekyll and Next.js (branch QYX20).
- Modify Crowdin workflow branch target and various E2E/reporting jobs; introduce custom flaky test report generation.
- Nightly build tweaks (risk/allow-scripts), broader workflow refinements (benchmarks, bundle size, policies, releases).

^{Written by Cursor Bugbot for commit 48c0bc6. This will update automatically on new commits. Configure here.}

QuantumYield integration for popup initiation

QuantumYield integration

github-actions · 2025-09-02T02:27:53Z

CLA Signature Action:

Thank you for your submission, we really appreciate it. We ask that you all read and sign our Contributor License Agreement before we can accept your contribution. You can sign the CLA by just by adding a comment to this pull request with this exact sentence:

I have read the CLA Document and I hereby sign the CLA

By commenting with the above message you are agreeing to the terms of the CLA. Your account will be recorded as agreeing to our CLA so you don't need to sign it again for future contributions to this repository.

1 out of 2 committers have signed the CLA.
✅ @LimitedVERSE
❌ @Copilot

…osted QuantumYield-workflows-self-hosted

Signed-off-by: LimitedVERSE <limitedverse@gmail.com>

…orrect runs-on Co-authored-by: LimitedVERSE <218420696+LimitedVERSE@users.noreply.github.com>

Co-authored-by: LimitedVERSE <218420696+LimitedVERSE@users.noreply.github.com>

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Copilot

Pull Request Overview

Copilot reviewed 47 out of 49 changed files in this pull request and generated 5 comments.

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

.github/workflows/jekyll-gh-pages.yml

.github/workflows/create-bug-report.yml

.github/workflows/check-pr-max-lines.yml

.github/workflows/automated-rca.yml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Signed-off-by: LimitedVERSE <limitedverse@gmail.com>

Copilot

Pull Request Overview

Copilot reviewed 48 out of 50 changed files in this pull request and generated 2 comments.

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

.github/workflows/cla.yml

.github/workflows/nextjs.yml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Copilot

Pull Request Overview

Copilot reviewed 48 out of 50 changed files in this pull request and generated no new comments.

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

Signed-off-by: LimitedVERSE <limitedverse@gmail.com>

Change concurrency setting to cancel in-progress deployments. Signed-off-by: LimitedVERSE <limitedverse@gmail.com>

Signed-off-by: LimitedVERSE <limitedverse@gmail.com>

cursor · 2025-10-01T11:54:32Z

.github/workflows/flaky-test-report.yml

+          yarn-custom-url: ${{ vars.YARN_URL }}
+
+      - name: Create flaky test report
+        run: yarn tsx .github/scripts/create-flaky-test-report.ts


Bug: Flaky Test Report Workflow Fails

The flaky test report workflow changed to an inline implementation that calls .github/scripts/create-flaky-test-report.ts, but this script is missing from the repository. Additionally, the Slack webhook secret name changed from SLACK_WEBHOOK_FLAKY_TESTS to SLACK_WEBHOOK_URL. This will cause the workflow to fail and prevent flaky test reports.

cursor · 2025-10-01T11:54:32Z

.github/workflows/check-template-and-add-labels.yml

 jobs:
  check-template-and-add-labels:
-    runs-on: ubuntu-latest
+    runs-on: self-hosted


Bug: Self-Hosted Runners Risk Repository Security

Switching GitHub Actions workflows to self-hosted runners introduces a critical security vulnerability. In public repositories, this allows malicious pull requests from forks to execute arbitrary code on the runner infrastructure, potentially compromising repository secrets and sensitive permissions like security-events: write.

Additional Locations (1)

.github/workflows/security-code-scanner.yml#L18-L19

Copilot

Pull Request Overview

Copilot reviewed 50 out of 51 changed files in this pull request and generated 3 comments.

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

Copilot · 2025-10-05T06:21:24Z

.github/workflows/add-release-label.yml

+          RELEASE_LABEL_TOKEN: ${{ secrets.RELEASE_LABEL_TOKEN || '' }}
+          NEXT_SEMVER_VERSION: ${{ steps.get-next-semver-version.outputs.NEXT_SEMVER_VERSION }}
        run: yarn run add-release-label-to-pr-and-linked-issues


Using an empty string as fallback for a missing secret token could lead to silent failures in authentication. Consider using a conditional check or failing explicitly when the token is missing.

Suggested change

RELEASE_LABEL_TOKEN: ${{ secrets.RELEASE_LABEL_TOKEN || '' }}

NEXT_SEMVER_VERSION: ${{ steps.get-next-semver-version.outputs.NEXT_SEMVER_VERSION }}

run: yarn run add-release-label-to-pr-and-linked-issues

RELEASE_LABEL_TOKEN: ${{ secrets.RELEASE_LABEL_TOKEN }}

NEXT_SEMVER_VERSION: ${{ steps.get-next-semver-version.outputs.NEXT_SEMVER_VERSION }}

run: |

if [ -z "$RELEASE_LABEL_TOKEN" ]; then

echo "ERROR: RELEASE_LABEL_TOKEN secret is not set. Failing workflow."

exit 1

fi

yarn run add-release-label-to-pr-and-linked-issues

Copilot · 2025-10-05T06:21:25Z

.github/workflows/flaky-test-report.yml

+      - name: Create flaky test report
+        run: yarn tsx .github/scripts/create-flaky-test-report.ts


The workflow references a script file .github/scripts/create-flaky-test-report.ts that doesn't exist in the current diff. Ensure this script file is created or already exists in the repository.

Copilot · 2025-10-05T06:21:25Z

.github/workflows/crowdin-action.yml


 on:
  push:
    branches:


The Crowdin workflow now only triggers on the QYX20 branch instead of main. This could break localization updates for the main branch. Consider whether this change is intentional or if both branches should be included.

Suggested change

branches:

branches:

- main

LimitedVERSE added 21 commits September 1, 2025 02:54

Update QYX popup-init.html

c455f31

QuantumYield integration for popup initiation

Update QuantumYield loading.html

e194a5e

QuantumYield integration

Update QYX20 messages.json

f25dc1e

Update run-benchmarks.yml

1a21e89

Update crowdin-action.yml

fc7f224

Update QYX crowdin-action.yml

055bd49

Update QYX sonarcloud.yml

5454f7a

Update QYX add-release-label.yml

0605f49

Update QYX add-team-label.yml

4fef1a1

Update auto-update-pr-targeting-release.yml

97d8786

Update QYX automated-rca.yml

1039a9e

Update QYX benchmark-pr.yml

b01eae3

Update QYX build-storybook.yml

d5029ec

Update QYX build-ts-migration-dashboard.yml

565d0d8

Update QYX check-pr-labels.yml

d5788bc

Update QYX changelog-check.yml

4c639e3

Update QYX check-template-and-add-labels.yml

f19d403

Update WYX e2e-chrome.yml

474dc17

Update QYX e2e-chrome.yml

be4c643

Update QYX security-code-scanner.yml

272997a

Merge branch 'MetaMask:main' into QYX20

7d948ef

metamaskbot added the external-contributor label Sep 2, 2025

LimitedVERSE marked this pull request as ready for review September 2, 2025 02:30

LimitedVERSE added 6 commits September 2, 2025 09:48

Create nextjs.yml

97234f7

Update run-tests.yml

5917fcc

Update QYX check-pr-max-lines.yml

21e862e

QuantumYield-workflows-self-hosted

bdd5c3c

Merge pull request #3 from LimitedVERSE/QuantumYield-workflows-self-h…

5186c95

…osted QuantumYield-workflows-self-hosted

Update changelog-check.yml

03afea0

LimitedVERSE and others added 3 commits September 14, 2025 03:48

Change runner from self-hosted to ubuntu-latest

33caaa1

Signed-off-by: LimitedVERSE <limitedverse@gmail.com>

Fix GitHub Actions workflow syntax in add-team-label.yml - remove inc…

6ae7649

…orrect runs-on Co-authored-by: LimitedVERSE <218420696+LimitedVERSE@users.noreply.github.com>

Fix malformed GitHub Actions workflow syntax in create-bug-report.yml

2c7eeee

Co-authored-by: LimitedVERSE <218420696+LimitedVERSE@users.noreply.github.com>

LimitedVERSE requested a review from Copilot September 14, 2025 08:52

Update .github/workflows/run-benchmarks.yml

86ea173

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Copilot AI reviewed Sep 14, 2025

View reviewed changes

LimitedVERSE and others added 4 commits September 14, 2025 04:53

Update .github/workflows/nextjs.yml

9e0962d

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Update .github/workflows/create-bug-report.yml

c6a12fa

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Change CLA Signature Bot to LimitedVERSE version

9765dbc

Signed-off-by: LimitedVERSE <limitedverse@gmail.com>

Add GitHub Actions workflow for Next.js deployment

8a614d4

Signed-off-by: LimitedVERSE <limitedverse@gmail.com>

This comment was marked as outdated.

Sign in to view

Modify deployment workflow for Next.js site

1fe4422

Signed-off-by: LimitedVERSE <limitedverse@gmail.com>

LimitedVERSE requested a review from Copilot September 26, 2025 04:54

Copilot AI reviewed Sep 26, 2025

View reviewed changes

.github/workflows/cla.yml Outdated Show resolved Hide resolved

.github/workflows/nextjs.yml Show resolved Hide resolved

Update .github/workflows/cla.yml

3ef9c79

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

LimitedVERSE requested a review from Copilot September 26, 2025 05:02

Copilot AI reviewed Sep 26, 2025

View reviewed changes

LimitedVERSE added 3 commits October 1, 2025 06:31

Change runner from self-hosted to ubuntu-latest

7b50ead

Signed-off-by: LimitedVERSE <limitedverse@gmail.com>

Change build environment to ubuntu-latest

0a6839a

Signed-off-by: LimitedVERSE <limitedverse@gmail.com>

Update Crowdin action to use ubuntu-latest runner

15506a8

Signed-off-by: LimitedVERSE <limitedverse@gmail.com>

This comment was marked as outdated.

Sign in to view

LimitedVERSE added 2 commits October 1, 2025 06:37

Update concurrency to cancel in-progress runs

54fb020

Change concurrency setting to cancel in-progress deployments. Signed-off-by: LimitedVERSE <limitedverse@gmail.com>

Update nightly build workflow for high-risk environment

d731de6

Signed-off-by: LimitedVERSE <limitedverse@gmail.com>

This comment was marked as outdated.

Sign in to view

Add Copilot AI Agent instructions for MetaMask Extension

0589bb9

This comment was marked as outdated.

Sign in to view

Merge branch 'main' into QYX20

48c0bc6

cursor bot reviewed Oct 1, 2025

View reviewed changes

LimitedVERSE requested a review from Copilot October 5, 2025 06:20

Copilot AI reviewed Oct 5, 2025

View reviewed changes

		- name: Create flaky test report
		run: yarn tsx .github/scripts/create-flaky-test-report.ts

QYX20 #35571

Are you sure you want to change the base?

QYX20 #35571

Conversation

LimitedVERSE commented Sep 2, 2025 • edited by cursor bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Changelog

Related issues

Manual testing steps

Screenshots/Recordings

Before

After

Pre-merge author checklist

Pre-merge reviewer checklist

Uh oh!

github-actions bot commented Sep 2, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull Request Overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

This comment was marked as outdated.

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull Request Overview

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull Request Overview

Uh oh!

This comment was marked as outdated.

Uh oh!

This comment was marked as outdated.

Uh oh!

This comment was marked as outdated.

Uh oh!

cursor bot Oct 1, 2025

Choose a reason for hiding this comment

Bug: Flaky Test Report Workflow Fails

Uh oh!

cursor bot Oct 1, 2025

Choose a reason for hiding this comment

Bug: Self-Hosted Runners Risk Repository Security

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull Request Overview

Uh oh!

Copilot AI Oct 5, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Oct 5, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Oct 5, 2025

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

LimitedVERSE commented Sep 2, 2025 •

edited by cursor bot

Loading

github-actions bot commented Sep 2, 2025 •

edited

Loading