From 058b00e352c6d7e4c33cf4876ea2f8f6f343bc91 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 17 Sep 2025 06:03:38 +0000
Subject: [PATCH 1/3] chore: Bump @lavamoat/webpack from 1.2.0 to 1.3.0

Bumps [@lavamoat/webpack](https://github.com/LavaMoat/lavamoat/tree/HEAD/packages/webpack) from 1.2.0 to 1.3.0.
- [Release notes](https://github.com/LavaMoat/lavamoat/releases)
- [Changelog](https://github.com/LavaMoat/LavaMoat/blob/main/packages/webpack/CHANGELOG.md)
- [Commits](https://github.com/LavaMoat/lavamoat/commits/webpack-v1.3.0/packages/webpack)

---
updated-dependencies:
- dependency-name: "@lavamoat/webpack"
  dependency-version: 1.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .../snaps-execution-environments/package.json |  2 +-
 yarn.lock                                     | 63 ++++++++++++++++---
 2 files changed, 57 insertions(+), 8 deletions(-)

diff --git a/packages/snaps-execution-environments/package.json b/packages/snaps-execution-environments/package.json
index 8dbd42dc62..adcf0542c6 100644
--- a/packages/snaps-execution-environments/package.json
+++ b/packages/snaps-execution-environments/package.json
@@ -82,7 +82,7 @@
     "@esbuild-plugins/node-modules-polyfill": "^0.2.2",
     "@lavamoat/allow-scripts": "^3.3.5",
     "@lavamoat/lavatube": "^1.0.0",
-    "@lavamoat/webpack": "^1.2.0",
+    "@lavamoat/webpack": "^1.3.0",
     "@metamask/auto-changelog": "^5.0.2",
     "@swc/core": "1.11.31",
     "@swc/jest": "^0.2.38",
diff --git a/yarn.lock b/yarn.lock
index ca331597e5..7e5d11c323 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -418,6 +418,17 @@ __metadata:
   languageName: node
   linkType: hard
 
+"@babel/parser@npm:7.28.3":
+  version: 7.28.3
+  resolution: "@babel/parser@npm:7.28.3"
+  dependencies:
+    "@babel/types": "npm:^7.28.2"
+  bin:
+    parser: ./bin/babel-parser.js
+  checksum: 10/9fa08282e345b9d892a6757b2789a9a53a00f7b7b34d6254a4ee0bf32c5eb275919091ea96d6f136a948d5de9c8219235957d04a36ab7378a9d93a4cf0799155
+  languageName: node
+  linkType: hard
+
 "@babel/parser@npm:^7.1.0, @babel/parser@npm:^7.14.7, @babel/parser@npm:^7.20.15, @babel/parser@npm:^7.20.7, @babel/parser@npm:^7.21.3, @babel/parser@npm:^7.23.0, @babel/parser@npm:^7.23.9, @babel/parser@npm:^7.25.4, @babel/parser@npm:^7.27.1, @babel/parser@npm:^7.27.2, @babel/parser@npm:^7.27.3, @babel/parser@npm:^7.27.5":
   version: 7.27.5
   resolution: "@babel/parser@npm:7.27.5"
@@ -1490,6 +1501,16 @@ __metadata:
   languageName: node
   linkType: hard
 
+"@babel/types@npm:^7.28.2":
+  version: 7.28.4
+  resolution: "@babel/types@npm:7.28.4"
+  dependencies:
+    "@babel/helper-string-parser": "npm:^7.27.1"
+    "@babel/helper-validator-identifier": "npm:^7.27.1"
+  checksum: 10/db50bf257aafa5d845ad16dae0587f57d596e4be4cbb233ea539976a4c461f9fbcc0bf3d37adae3f8ce5dcb4001462aa608f3558161258b585f6ce6ce21a2e45
+  languageName: node
+  linkType: hard
+
 "@bcoe/v8-coverage@npm:^0.2.3":
   version: 0.2.3
   resolution: "@bcoe/v8-coverage@npm:0.2.3"
@@ -2761,18 +2782,30 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@lavamoat/webpack@npm:^1.2.0":
-  version: 1.2.0
-  resolution: "@lavamoat/webpack@npm:1.2.0"
+"@lavamoat/types@npm:^0.0.0":
+  version: 0.0.0
+  resolution: "@lavamoat/types@npm:0.0.0"
+  dependencies:
+    "@babel/types": "npm:7.27.3"
+    type-fest: "npm:4.41.0"
+  checksum: 10/51e5bdb0827bd61063702e203de103ee442e146f1999f5cb7718ecab96f4abcf2a8cd29f538c39d78a03cd2b00c82a5c4c4d568b82ae923aeab24e8ec4680a8e
+  languageName: node
+  linkType: hard
+
+"@lavamoat/webpack@npm:^1.3.0":
+  version: 1.3.0
+  resolution: "@lavamoat/webpack@npm:1.3.0"
   dependencies:
+    "@babel/parser": "npm:7.28.3"
     "@lavamoat/aa": "npm:^4.3.4"
+    "@lavamoat/types": "npm:^0.0.0"
     browser-resolve: "npm:2.0.0"
     json-stable-stringify: "npm:1.3.0"
-    lavamoat-core: "npm:^16.5.1"
+    lavamoat-core: "npm:^16.6.0"
     ses: "npm:1.14.0"
   peerDependencies:
     webpack: ^5.80.2
-  checksum: 10/bef023b5e044f5f458b2cf4324286ffa538cebebdca39bf63ebb4b8011dbd5fee22febf964a28a037758e30ecc1f21fc74ea5fcd3d4aff1869a5211a498f0477
+  checksum: 10/b6aefce735a0acd456bd35e4171888dc7910b49a9b70ee07e5681ea8617e593dad6b70e6b40b790e5887246cd64e750e70cc763ba22e9f7e4ef5464c4c62318e
   languageName: node
   linkType: hard
 
@@ -4297,7 +4330,7 @@ __metadata:
     "@esbuild-plugins/node-modules-polyfill": "npm:^0.2.2"
     "@lavamoat/allow-scripts": "npm:^3.3.5"
     "@lavamoat/lavatube": "npm:^1.0.0"
-    "@lavamoat/webpack": "npm:^1.2.0"
+    "@lavamoat/webpack": "npm:^1.3.0"
     "@metamask/auto-changelog": "npm:^5.0.2"
     "@metamask/json-rpc-engine": "npm:^10.0.2"
     "@metamask/object-multiplex": "npm:^2.1.0"
@@ -13632,7 +13665,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"lavamoat-core@npm:^16.5.0, lavamoat-core@npm:^16.5.1":
+"lavamoat-core@npm:^16.5.0":
   version: 16.5.1
   resolution: "lavamoat-core@npm:16.5.1"
   dependencies:
@@ -13647,6 +13680,22 @@ __metadata:
   languageName: node
   linkType: hard
 
+"lavamoat-core@npm:^16.6.0":
+  version: 16.6.0
+  resolution: "lavamoat-core@npm:16.6.0"
+  dependencies:
+    "@babel/types": "npm:7.27.3"
+    "@lavamoat/types": "npm:^0.0.0"
+    json-stable-stringify: "npm:1.3.0"
+    lavamoat-tofu: "npm:^8.0.8"
+    merge-deep: "npm:3.0.3"
+    ses: "npm:1.14.0"
+  bin:
+    lavamoat-sort-policy: src/policy-sort-cli.js
+  checksum: 10/9fc55528e6615693e96455eed832cb4bb4c84ca05c2d3dd9dd02904b0c74f471af1cfec2587eb45cf0485778f3d08201cde42d3ae728a7aac4de085820aa1fa8
+  languageName: node
+  linkType: hard
+
 "lavamoat-tofu@npm:^8.0.8":
   version: 8.0.8
   resolution: "lavamoat-tofu@npm:8.0.8"

From 3acf5a8d1ccf3d71552fa13ee0a5f8ce73657b11 Mon Sep 17 00:00:00 2001
From: MetaMask Bot <metamaskbot@users.noreply.github.com>
Date: Wed, 17 Sep 2025 06:13:14 +0000
Subject: [PATCH 2/3] [dependabot skip] Deduplicate yarn.lock

---
 yarn.lock | 42 +++---------------------------------------
 1 file changed, 3 insertions(+), 39 deletions(-)

diff --git a/yarn.lock b/yarn.lock
index 7e5d11c323..5b64246d9b 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -418,7 +418,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@babel/parser@npm:7.28.3":
+"@babel/parser@npm:7.28.3, @babel/parser@npm:^7.1.0, @babel/parser@npm:^7.14.7, @babel/parser@npm:^7.20.15, @babel/parser@npm:^7.20.7, @babel/parser@npm:^7.21.3, @babel/parser@npm:^7.23.0, @babel/parser@npm:^7.23.9, @babel/parser@npm:^7.25.4, @babel/parser@npm:^7.27.1, @babel/parser@npm:^7.27.2, @babel/parser@npm:^7.27.3, @babel/parser@npm:^7.27.5":
   version: 7.28.3
   resolution: "@babel/parser@npm:7.28.3"
   dependencies:
@@ -429,17 +429,6 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@babel/parser@npm:^7.1.0, @babel/parser@npm:^7.14.7, @babel/parser@npm:^7.20.15, @babel/parser@npm:^7.20.7, @babel/parser@npm:^7.21.3, @babel/parser@npm:^7.23.0, @babel/parser@npm:^7.23.9, @babel/parser@npm:^7.25.4, @babel/parser@npm:^7.27.1, @babel/parser@npm:^7.27.2, @babel/parser@npm:^7.27.3, @babel/parser@npm:^7.27.5":
-  version: 7.27.5
-  resolution: "@babel/parser@npm:7.27.5"
-  dependencies:
-    "@babel/types": "npm:^7.27.3"
-  bin:
-    parser: ./bin/babel-parser.js
-  checksum: 10/0ad671be7994dba7d31ec771bd70ea5090aa34faf73e93b1b072e3c0a704ab69f4a7a68ebfb9d6a7fa455e0aa03dfa65619c4df6bae1cf327cba925b1d233fc4
-  languageName: node
-  linkType: hard
-
 "@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression@npm:^7.22.15":
   version: 7.22.15
   resolution: "@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression@npm:7.22.15"
@@ -1491,17 +1480,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@babel/types@npm:^7.0.0, @babel/types@npm:^7.20.7, @babel/types@npm:^7.22.15, @babel/types@npm:^7.22.19, @babel/types@npm:^7.22.5, @babel/types@npm:^7.23.0, @babel/types@npm:^7.25.4, @babel/types@npm:^7.27.1, @babel/types@npm:^7.27.3, @babel/types@npm:^7.3.3, @babel/types@npm:^7.4.4":
-  version: 7.27.6
-  resolution: "@babel/types@npm:7.27.6"
-  dependencies:
-    "@babel/helper-string-parser": "npm:^7.27.1"
-    "@babel/helper-validator-identifier": "npm:^7.27.1"
-  checksum: 10/174741c667775680628a09117828bbeffb35ea543f59bf80649d0d60672f7815a0740ddece3cca87516199033a039166a6936434131fce2b6a820227e64f91ae
-  languageName: node
-  linkType: hard
-
-"@babel/types@npm:^7.28.2":
+"@babel/types@npm:^7.0.0, @babel/types@npm:^7.20.7, @babel/types@npm:^7.22.15, @babel/types@npm:^7.22.19, @babel/types@npm:^7.22.5, @babel/types@npm:^7.23.0, @babel/types@npm:^7.25.4, @babel/types@npm:^7.27.1, @babel/types@npm:^7.27.3, @babel/types@npm:^7.28.2, @babel/types@npm:^7.3.3, @babel/types@npm:^7.4.4":
   version: 7.28.4
   resolution: "@babel/types@npm:7.28.4"
   dependencies:
@@ -13665,22 +13644,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"lavamoat-core@npm:^16.5.0":
-  version: 16.5.1
-  resolution: "lavamoat-core@npm:16.5.1"
-  dependencies:
-    "@babel/types": "npm:7.27.3"
-    json-stable-stringify: "npm:1.3.0"
-    lavamoat-tofu: "npm:^8.0.8"
-    merge-deep: "npm:3.0.3"
-    ses: "npm:1.14.0"
-  bin:
-    lavamoat-sort-policy: src/policy-sort-cli.js
-  checksum: 10/91f043b733902b1af02f5efa1862598c21f80fba14d531a276ff6017a6bf51b01dd9cee4cd241eee2279acf59847c220f473d364d1d88290f4e67a029dfb4a5a
-  languageName: node
-  linkType: hard
-
-"lavamoat-core@npm:^16.6.0":
+"lavamoat-core@npm:^16.5.0, lavamoat-core@npm:^16.6.0":
   version: 16.6.0
   resolution: "lavamoat-core@npm:16.6.0"
   dependencies:

From c21c0ef9628ba9adecfee83e2aa7c79fde2a684d Mon Sep 17 00:00:00 2001
From: MetaMask Bot <metamaskbot@users.noreply.github.com>
Date: Wed, 17 Sep 2025 06:13:15 +0000
Subject: [PATCH 3/3] [dependabot skip] Update LavaMoat policies

---
 .../lavamoat/build-system/policy.json                          | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/packages/snaps-execution-environments/lavamoat/build-system/policy.json b/packages/snaps-execution-environments/lavamoat/build-system/policy.json
index 25d8697264..05ee3e7c27 100644
--- a/packages/snaps-execution-environments/lavamoat/build-system/policy.json
+++ b/packages/snaps-execution-environments/lavamoat/build-system/policy.json
@@ -52,7 +52,7 @@
     "@metamask/snaps-utils>@babel/types": {
       "globals": {
         "console.warn": true,
-        "process.env": true
+        "process.env.BABEL_TYPES_8_BREAKING": true
       },
       "packages": {
         "@metamask/snaps-utils>@babel/types>@babel/helper-string-parser": true,
@@ -130,6 +130,7 @@
         "process._rawDebug": true
       },
       "packages": {
+        "depcheck>@babel/parser": true,
         "lavamoat>@lavamoat/aa": true,
         "@lavamoat/webpack>browser-resolve": true,
         "lavamoat>lavamoat-core": true,