Skip to content

release(runway): cherry-pick chore: Bump @metamask/gator-permissions-snap from ^1.2.0 to ^1.3.0 cp-13.23.0#40942

Merged
chloeYue merged 2 commits intorelease/13.23.0from
runway-cherry-pick-13.23.0-1773714969
Mar 17, 2026
Merged

release(runway): cherry-pick chore: Bump @metamask/gator-permissions-snap from ^1.2.0 to ^1.3.0 cp-13.23.0#40942
chloeYue merged 2 commits intorelease/13.23.0from
runway-cherry-pick-13.23.0-1773714969

Conversation

@runway-github
Copy link
Contributor

@runway-github runway-github bot commented Mar 17, 2026

Description

Bump @metamask/gator-permissions-snap from ^1.2.0 to ^1.3.0

https://github.com/MetaMask/snap-7715-permissions/releases/tag/v18.0.0

Changed

  • justification field may now be longer (up to 300 chars), and will be
    more prominently displayed in the UI
    (#282)

Fixed

  • Improve display of existing permissions before granting a new
    permission
    (#284,
    #283)
  • Show all permissions from all chains granted to the requesting origin
    • Group existing permissions by granting account
  • Improved validation and asyncronous loading with caching, and skeleton
    UI

Open in GitHub Codespaces

Changelog

Changes to unreleased feature, and slight change to justification
field formatting.

CHANGELOG entry: Advanced Permissions justification parameter now
accepts up to 300 chars, shown more clearly in confirmation.

Related issues

Fixes:

Manual testing steps

  1. Go to this page...

Screenshots/Recordings

Before

After

Pre-merge author checklist

Pre-merge reviewer checklist

  • I've manually tested the PR (e.g. pull and build branch, run the
    app, test code being changed).
  • I confirm that this PR addresses all acceptance criteria described
    in the ticket it closes and includes the necessary testing evidence such
    as recordings and or screenshots.

Note

Low Risk
Low risk dependency-only bump; primary risk is behavioral changes
inside the updated snap affecting permission flows at runtime.

Overview
Updates the @metamask/gator-permissions-snap dependency from
^1.2.0 to ^1.3.0, with corresponding yarn.lock resolution/checksum
changes to pull the new package version.

Written by Cursor
Bugbot
for commit
e3a10c9. This will update automatically
on new commits. Configure
here.

[7d516fc](https://github.com/MetaMask/metamask-extension/commit/7d516fc4794199c2a8ca4c6aa5610ec04fbb5ef8)

…snap from ^1.2.0 to ^1.3.0 cp-13.23.0 (#40933)

<!--
Please submit this PR as a draft initially.
Do not mark it as "Ready for review" until the template has been
completely filled out, and PR status checks have passed at least once.
-->

## **Description**

<!--
Write a short description of the changes included in this pull request,
also include relevant motivation and context. Have in mind the following
questions:
1. What is the reason for the change?
2. What is the improvement/solution?
-->

Bump @metamask/gator-permissions-snap from ^1.2.0 to ^1.3.0

https://github.com/MetaMask/snap-7715-permissions/releases/tag/v18.0.0

### Changed
- `justification` field may now be longer (up to 300 chars), and will be
more prominently displayed in the UI
([#282](MetaMask/snap-7715-permissions#282))

### Fixed
- Improve display of existing permissions before granting a new
permission
([#284](MetaMask/snap-7715-permissions#284),
[#283](MetaMask/snap-7715-permissions#283))
- Show all permissions from all chains granted to the requesting origin
  - Group existing permissions by granting account
- Improved validation and asyncronous loading with caching, and skeleton
UI

[![Open in GitHub
Codespaces](https://github.com/codespaces/badge.svg)](https://codespaces.new/MetaMask/metamask-extension/pull/40933?quickstart=1)

## **Changelog**

Changes to unreleased feature, and slight change to `justification`
field formatting.

<!--
If this PR is not End-User-Facing and should not show up in the
CHANGELOG, you can choose to either:
1. Write `CHANGELOG entry: null`
2. Label with `no-changelog`

If this PR is End-User-Facing, please write a short User-Facing
description in the past tense like:
`CHANGELOG entry: Added a new tab for users to see their NFTs`
`CHANGELOG entry: Fixed a bug that was causing some NFTs to flicker`

(This helps the Release Engineer do their job more quickly and
accurately)
-->

CHANGELOG entry: Advanced Permissions `justification` parameter now
accepts up to 300 chars, shown more clearly in confirmation.

## **Related issues**

Fixes:

## **Manual testing steps**

1. Go to this page...
2.
3.

## **Screenshots/Recordings**

<!-- If applicable, add screenshots and/or recordings to visualize the
before and after of your change. -->

### **Before**

<!-- [screenshots/recordings] -->

### **After**

<!-- [screenshots/recordings] -->

## **Pre-merge author checklist**

- [ ] I've followed [MetaMask Contributor
Docs](https://github.com/MetaMask/contributor-docs) and [MetaMask
Extension Coding
Standards](https://github.com/MetaMask/metamask-extension/blob/main/.github/guidelines/CODING_GUIDELINES.md).
- [ ] I've completed the PR template to the best of my ability
- [ ] I’ve included tests if applicable
- [ ] I’ve documented my code using [JSDoc](https://jsdoc.app/) format
if applicable
- [ ] I’ve applied the right labels on the PR (see [labeling
guidelines](https://github.com/MetaMask/metamask-extension/blob/main/.github/guidelines/LABELING_GUIDELINES.md)).
Not required for external contributors.

## **Pre-merge reviewer checklist**

- [ ] I've manually tested the PR (e.g. pull and build branch, run the
app, test code being changed).
- [ ] I confirm that this PR addresses all acceptance criteria described
in the ticket it closes and includes the necessary testing evidence such
as recordings and or screenshots.

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Low Risk**
> Low risk dependency-only bump; primary risk is behavioral changes
inside the updated snap affecting permission flows at runtime.
> 
> **Overview**
> Updates the `@metamask/gator-permissions-snap` dependency from
`^1.2.0` to `^1.3.0`, with corresponding `yarn.lock` resolution/checksum
changes to pull the new package version.
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
e3a10c9. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->
@github-actions
Copy link
Contributor

CLA Signature Action: All authors have signed the CLA. You may need to manually re-run the blocking PR check if it doesn't pass in a few minutes.

@metamaskbot metamaskbot added the team-bots Bot team (for MetaMask Bot, Runway Bot, etc.) label Mar 17, 2026
@socket-security
Copy link

socket-security bot commented Mar 17, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​metamask/​gator-permissions-snap@​1.2.0 ⏵ 1.3.089 -81006297 +1100

View full report

@socket-security
Copy link

socket-security bot commented Mar 17, 2026

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring alerts on:

  • @metamask/gator-permissions-snap@1.3.0

View full report

@sonarqubecloud
Copy link

@metamaskbotv2
Copy link
Contributor

metamaskbotv2 bot commented Mar 17, 2026

Builds ready [a6d8277]
⚡ Performance Benchmarks
👆 Interaction Benchmarks
BenchmarkMetricMean (ms)Min (ms)Max (ms)Std Dev (ms)P75 (ms)P95 (ms)
Load New Accountload_new_account3012983042304304
total3012983042304304
Confirm Txconfirm_tx6036602460551260376055
total6036602460551260376055
Bridge User Actionsbridge_load_page22119423917233239
bridge_load_asset_picker28322132142321321
bridge_search_token7587517645761764
total1268122413053012861305
🔌 Startup Benchmarks
BenchmarkMetricMean (ms)Min (ms)Max (ms)Std Dev (ms)P75 (ms)P95 (ms)
Standard HomeuiStartup14631236192911115061657
load12121018158510012551404
domContentLoaded1205101315789812501388
domInteractive3117104212892
firstPaint1537043479204280
backgroundConnect21719630615221245
firstReactRender21137592134
initialActions209124
loadScripts100582913759610481185
setupStore1373851622
numNetworkReqs403183164080
Power User HomeuiStartup5558237915198219263118403
load13151127355225613301600
domContentLoaded12921122354425212961524
domInteractive37201682934108
firstPaint205901293139264325
backgroundConnect165235311042177723993979
firstReactRender27204962938
initialActions104113
loadScripts1049911142410310741281
setupStore1554461724
numNetworkReqs19312937447215269
🧭 User Journey Benchmarks
BenchmarkMetricMean (ms)Min (ms)Max (ms)Std Dev (ms)P75 (ms)P95 (ms)
Onboarding Import WalletimportWalletToSocialScreen2192162212220221
srpButtonToSrpForm94939519495
confirmSrpToPwForm22222202222
pwFormToMetricsScreen15151601616
metricsToWalletReadyScreen16161601616
doneButtonToHomeScreen64560967327668673
openAccountMenuToAccountListLoaded2907289229211229172921
total3921386539593539433959
Onboarding New WalletcreateWalletToSocialScreen2192182211220221
srpButtonToPwForm1071071080108108
createPwToRecoveryScreen888088
skipBackupToMetricsScreen37373913739
agreeButtonToOnboardingSuccess16161601616
doneButtonToAssetList565355727133687727
total953739111613310721116
Asset DetailsassetClickToPriceChart674886188286
total674886188286
Solana Asset DetailsassetClickToPriceChart80788118181
total80788118181
Import Srp HomeloginToHomeScreen2284224623242822842324
openAccountMenuAfterLogin543373176873
homeAfterImportWithNewWallet1633452241590223882415
total40583044477380147404773
Send TransactionsopenSendPageFromHome432663135363
selectTokenToSendFormLoaded34294463244
reviewTransactionToConfirmationPage1027746132221112181322
total1112827141321413021413
SwapopenSwapPageFromHome1497619141183191
fetchAndDisplaySwapQuotes268826852691226892691
total2858283828822028722882
🌐 Dapp Page Load Benchmarks

Current Commit: a6d8277 | Date: 3/17/2026

📄 Localhost MetaMask Test Dapp

Samples: 100

Summary

  • pageLoadTime-> current mean value: 1.06s (±56ms) 🟡 | historical mean value: 1.03s ⬆️ (historical data)
  • domContentLoaded-> current mean value: 750ms (±72ms) 🟢 | historical mean value: 727ms ⬆️ (historical data)
  • firstContentfulPaint-> current mean value: 95ms (±130ms) 🟢 | historical mean value: 90ms ⬆️ (historical data)

📈 Detailed Results

Metric Mean Std Dev Min Max P95 P99
pageLoadTime 1.06s 56ms 1.03s 1.39s 1.10s 1.39s
domContentLoaded 750ms 72ms 718ms 1.31s 779ms 1.31s
firstPaint 95ms 130ms 72ms 1.39s 92ms 1.39s
firstContentfulPaint 95ms 130ms 72ms 1.39s 92ms 1.39s
largestContentfulPaint 0ms 0ms 0ms 0ms 0ms 0ms
Bundle size diffs [🚨 Warning! Bundle size has increased!]
  • background: 5.16 MiB (100%)
  • ui: 8.3 MiB (100%)
  • common: 11 MiB (100%)

Copy link
Contributor

@chloeYue chloeYue left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@chloeYue
Copy link
Contributor

chloeYue commented Mar 17, 2026

@SocketSecurity ignore npm/@metamask/gator-permissions-snap@1.3.0

@chloeYue chloeYue merged commit 32d4124 into release/13.23.0 Mar 17, 2026
333 of 336 checks passed
@chloeYue chloeYue deleted the runway-cherry-pick-13.23.0-1773714969 branch March 17, 2026 08:56
@github-actions github-actions bot locked and limited conversation to collaborators Mar 17, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

team-bots Bot team (for MetaMask Bot, Runway Bot, etc.)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants