Skip to content

Conversation

@MoMannn
Copy link
Contributor

@MoMannn MoMannn commented Jan 20, 2026

Description

bump some versions and fix resolutions

Related issues

Fixes:

Manual testing steps

  1. Go to this page...

Screenshots/Recordings

Before

After

Pre-merge author checklist

Pre-merge reviewer checklist

  • I've manually tested the PR (e.g. pull and build branch, run the app, test code being changed).
  • I confirm that this PR addresses all acceptance criteria described in the ticket it closes and includes the necessary testing evidence such as recordings and or screenshots.

Note

Updates dependency tooling and pins key resolutions.

  • Bumps @metamask/snaps-cli to 8.3.0 and @metamask/snaps-jest to 9.8.0 in gator-permissions-snap
  • Adds/adjusts resolutions: glob@npm:^10.2.2 -> 10.5.0, tar -> ^7.5.3, body-parser@npm:^2.2.0 -> 2.2.1
  • Regenerates yarn.lock with corresponding transitive updates (e.g., newer @metamask/snaps-* packages, [email protected], [email protected])

Written by Cursor Bugbot for commit ad73922. This will update automatically on new commits. Configure here.

@MoMannn MoMannn requested a review from a team as a code owner January 20, 2026 08:09
@socket-security
Copy link

socket-security bot commented Jan 20, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Added@​metamask/​snaps-cli@​8.3.07710010088100
Added@​metamask/​snaps-jest@​9.8.07710010096100

View full report

@socket-security
Copy link

socket-security bot commented Jan 20, 2026

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring alerts on:

View full report

@MoMannn
Copy link
Contributor Author

MoMannn commented Jan 20, 2026

@SocketSecurity ignore npm/@metamask/[email protected] npm/@metamask/[email protected]

jeffsmale90
jeffsmale90 previously approved these changes Jan 28, 2026
Copy link
Contributor

@jeffsmale90 jeffsmale90 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I wish we could put comments in package.json so that we can explain the resolutions 😢

@jeffsmale90 jeffsmale90 merged commit 617fb3a into main Jan 28, 2026
16 checks passed
@jeffsmale90 jeffsmale90 deleted the fix--dependency-resolutions branch January 28, 2026 20:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants