From 723d467ce705ce0827bc8a186df79d7320ec9470 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 1 Oct 2025 14:47:42 +0000 Subject: [PATCH 1/3] chore: Bump @lavamoat/webpack from 1.2.0 to 1.5.0 Bumps [@lavamoat/webpack](https://github.com/LavaMoat/lavamoat/tree/HEAD/packages/webpack) from 1.2.0 to 1.5.0. - [Release notes](https://github.com/LavaMoat/lavamoat/releases) - [Changelog](https://github.com/LavaMoat/LavaMoat/blob/main/packages/webpack/CHANGELOG.md) - [Commits](https://github.com/LavaMoat/lavamoat/commits/webpack-v1.5.0/packages/webpack) --- updated-dependencies: - dependency-name: "@lavamoat/webpack" dependency-version: 1.5.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .../snaps-execution-environments/package.json | 2 +- yarn.lock | 78 +++++++++++++++++-- 2 files changed, 72 insertions(+), 8 deletions(-) diff --git a/packages/snaps-execution-environments/package.json b/packages/snaps-execution-environments/package.json index 08cf52d9b2..7ba48c3a21 100644 --- a/packages/snaps-execution-environments/package.json +++ b/packages/snaps-execution-environments/package.json @@ -82,7 +82,7 @@ "@esbuild-plugins/node-modules-polyfill": "^0.2.2", "@lavamoat/allow-scripts": "^3.4.0", "@lavamoat/lavatube": "^1.0.0", - "@lavamoat/webpack": "^1.2.0", + "@lavamoat/webpack": "^1.5.0", "@metamask/auto-changelog": "^5.0.2", "@swc/core": "1.11.31", "@swc/jest": "^0.2.38", diff --git a/yarn.lock b/yarn.lock index 926cbe0b34..04a2ae8002 100644 --- a/yarn.lock +++ b/yarn.lock @@ -418,6 +418,17 @@ __metadata: languageName: node linkType: hard +"@babel/parser@npm:7.28.3": + version: 7.28.3 + resolution: "@babel/parser@npm:7.28.3" + dependencies: + "@babel/types": "npm:^7.28.2" + bin: + parser: ./bin/babel-parser.js + checksum: 10/9fa08282e345b9d892a6757b2789a9a53a00f7b7b34d6254a4ee0bf32c5eb275919091ea96d6f136a948d5de9c8219235957d04a36ab7378a9d93a4cf0799155 + languageName: node + linkType: hard + "@babel/parser@npm:^7.1.0, @babel/parser@npm:^7.14.7, @babel/parser@npm:^7.20.15, @babel/parser@npm:^7.20.7, @babel/parser@npm:^7.21.3, @babel/parser@npm:^7.23.0, @babel/parser@npm:^7.23.9, @babel/parser@npm:^7.25.4, @babel/parser@npm:^7.27.1, @babel/parser@npm:^7.27.2, @babel/parser@npm:^7.27.3, @babel/parser@npm:^7.27.5": version: 7.27.5 resolution: "@babel/parser@npm:7.27.5" @@ -1490,6 +1501,16 @@ __metadata: languageName: node linkType: hard +"@babel/types@npm:^7.28.2": + version: 7.28.4 + resolution: "@babel/types@npm:7.28.4" + dependencies: + "@babel/helper-string-parser": "npm:^7.27.1" + "@babel/helper-validator-identifier": "npm:^7.27.1" + checksum: 10/db50bf257aafa5d845ad16dae0587f57d596e4be4cbb233ea539976a4c461f9fbcc0bf3d37adae3f8ce5dcb4001462aa608f3558161258b585f6ce6ce21a2e45 + languageName: node + linkType: hard + "@bcoe/v8-coverage@npm:^0.2.3": version: 0.2.3 resolution: "@bcoe/v8-coverage@npm:0.2.3" @@ -2761,18 +2782,29 @@ __metadata: languageName: node linkType: hard -"@lavamoat/webpack@npm:^1.2.0": - version: 1.2.0 - resolution: "@lavamoat/webpack@npm:1.2.0" +"@lavamoat/types@npm:^0.1.0": + version: 0.1.0 + resolution: "@lavamoat/types@npm:0.1.0" + dependencies: + "@babel/types": "npm:7.27.3" + checksum: 10/22017b720c206b97715bfdb867e46d58b17a1868dd4bf40d6764e63bc90b58d5c45cd5c801fb55d82a5982e4f7b745161b68c8aab6dbc918cb68cf390c72abbc + languageName: node + linkType: hard + +"@lavamoat/webpack@npm:^1.5.0": + version: 1.5.0 + resolution: "@lavamoat/webpack@npm:1.5.0" dependencies: + "@babel/parser": "npm:7.28.3" "@lavamoat/aa": "npm:^4.3.4" + "@lavamoat/types": "npm:^0.1.0" browser-resolve: "npm:2.0.0" json-stable-stringify: "npm:1.3.0" - lavamoat-core: "npm:^16.5.1" + lavamoat-core: "npm:^16.7.1" ses: "npm:1.14.0" peerDependencies: webpack: ^5.80.2 - checksum: 10/bef023b5e044f5f458b2cf4324286ffa538cebebdca39bf63ebb4b8011dbd5fee22febf964a28a037758e30ecc1f21fc74ea5fcd3d4aff1869a5211a498f0477 + checksum: 10/aaa44ce8aebd13f2d399e4240caf6dfb44bf01630cd66a7f82853f5b881e5421496c3648302e41639b9b0c0cdd1c0e750b318b6ff1fc0a61648a553c866af141 languageName: node linkType: hard @@ -4310,7 +4342,7 @@ __metadata: "@esbuild-plugins/node-modules-polyfill": "npm:^0.2.2" "@lavamoat/allow-scripts": "npm:^3.4.0" "@lavamoat/lavatube": "npm:^1.0.0" - "@lavamoat/webpack": "npm:^1.2.0" + "@lavamoat/webpack": "npm:^1.5.0" "@metamask/auto-changelog": "npm:^5.0.2" "@metamask/json-rpc-engine": "npm:^10.1.0" "@metamask/object-multiplex": "npm:^2.1.0" @@ -13645,7 +13677,7 @@ __metadata: languageName: node linkType: hard -"lavamoat-core@npm:^16.5.0, lavamoat-core@npm:^16.5.1": +"lavamoat-core@npm:^16.5.0": version: 16.5.1 resolution: "lavamoat-core@npm:16.5.1" dependencies: @@ -13660,6 +13692,38 @@ __metadata: languageName: node linkType: hard +"lavamoat-core@npm:^16.7.1": + version: 16.7.1 + resolution: "lavamoat-core@npm:16.7.1" + dependencies: + "@babel/types": "npm:7.27.3" + "@lavamoat/types": "npm:^0.1.0" + json-stable-stringify: "npm:1.3.0" + lavamoat-tofu: "npm:^8.0.11" + merge-deep: "npm:3.0.3" + ses: "npm:1.14.0" + bin: + lavamoat-sort-policy: src/policy-sort-cli.js + checksum: 10/e15b3d83f2b838942f65159460d5f7394ce0f41122ed682db61c6eb2ad0760814e58bce6e3f9037604bf16f4190c9f5328d75cb0f550e10729092534365f21e7 + languageName: node + linkType: hard + +"lavamoat-tofu@npm:^8.0.11": + version: 8.0.11 + resolution: "lavamoat-tofu@npm:8.0.11" + dependencies: + "@babel/parser": "npm:7.27.3" + "@babel/traverse": "npm:7.27.3" + "@babel/types": "npm:7.27.3" + "@lavamoat/types": "npm:^0.1.0" + "@types/babel__traverse": "npm:7.20.7" + type-fest: "npm:4.41.0" + peerDependencies: + lavamoat-core: ">15.4.0" + checksum: 10/4435814fae3934ca41d8a8ef7962b86a556cb3a2000d50d200d5afdabf43984231ceabf0dc5aa74e8890967f42d5ac01e7c8e78c69804b224ad7ead56a9b4abb + languageName: node + linkType: hard + "lavamoat-tofu@npm:^8.0.8": version: 8.0.8 resolution: "lavamoat-tofu@npm:8.0.8" From f5297948f9ac6cfed6a5332a29abf6726e62218d Mon Sep 17 00:00:00 2001 From: MetaMask Bot Date: Wed, 1 Oct 2025 14:57:14 +0000 Subject: [PATCH 2/3] [dependabot skip] Deduplicate yarn.lock --- yarn.lock | 59 ++++--------------------------------------------------- 1 file changed, 4 insertions(+), 55 deletions(-) diff --git a/yarn.lock b/yarn.lock index 04a2ae8002..c8702a2ec1 100644 --- a/yarn.lock +++ b/yarn.lock @@ -418,7 +418,7 @@ __metadata: languageName: node linkType: hard -"@babel/parser@npm:7.28.3": +"@babel/parser@npm:7.28.3, @babel/parser@npm:^7.1.0, @babel/parser@npm:^7.14.7, @babel/parser@npm:^7.20.15, @babel/parser@npm:^7.20.7, @babel/parser@npm:^7.21.3, @babel/parser@npm:^7.23.0, @babel/parser@npm:^7.23.9, @babel/parser@npm:^7.25.4, @babel/parser@npm:^7.27.1, @babel/parser@npm:^7.27.2, @babel/parser@npm:^7.27.3, @babel/parser@npm:^7.27.5": version: 7.28.3 resolution: "@babel/parser@npm:7.28.3" dependencies: @@ -429,17 +429,6 @@ __metadata: languageName: node linkType: hard -"@babel/parser@npm:^7.1.0, @babel/parser@npm:^7.14.7, @babel/parser@npm:^7.20.15, @babel/parser@npm:^7.20.7, @babel/parser@npm:^7.21.3, @babel/parser@npm:^7.23.0, @babel/parser@npm:^7.23.9, @babel/parser@npm:^7.25.4, @babel/parser@npm:^7.27.1, @babel/parser@npm:^7.27.2, @babel/parser@npm:^7.27.3, @babel/parser@npm:^7.27.5": - version: 7.27.5 - resolution: "@babel/parser@npm:7.27.5" - dependencies: - "@babel/types": "npm:^7.27.3" - bin: - parser: ./bin/babel-parser.js - checksum: 10/0ad671be7994dba7d31ec771bd70ea5090aa34faf73e93b1b072e3c0a704ab69f4a7a68ebfb9d6a7fa455e0aa03dfa65619c4df6bae1cf327cba925b1d233fc4 - languageName: node - linkType: hard - "@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression@npm:^7.22.15": version: 7.22.15 resolution: "@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression@npm:7.22.15" @@ -1491,17 +1480,7 @@ __metadata: languageName: node linkType: hard -"@babel/types@npm:^7.0.0, @babel/types@npm:^7.20.7, @babel/types@npm:^7.22.15, @babel/types@npm:^7.22.19, @babel/types@npm:^7.22.5, @babel/types@npm:^7.23.0, @babel/types@npm:^7.25.4, @babel/types@npm:^7.27.1, @babel/types@npm:^7.27.3, @babel/types@npm:^7.3.3, @babel/types@npm:^7.4.4": - version: 7.27.6 - resolution: "@babel/types@npm:7.27.6" - dependencies: - "@babel/helper-string-parser": "npm:^7.27.1" - "@babel/helper-validator-identifier": "npm:^7.27.1" - checksum: 10/174741c667775680628a09117828bbeffb35ea543f59bf80649d0d60672f7815a0740ddece3cca87516199033a039166a6936434131fce2b6a820227e64f91ae - languageName: node - linkType: hard - -"@babel/types@npm:^7.28.2": +"@babel/types@npm:^7.0.0, @babel/types@npm:^7.20.7, @babel/types@npm:^7.22.15, @babel/types@npm:^7.22.19, @babel/types@npm:^7.22.5, @babel/types@npm:^7.23.0, @babel/types@npm:^7.25.4, @babel/types@npm:^7.27.1, @babel/types@npm:^7.27.3, @babel/types@npm:^7.28.2, @babel/types@npm:^7.3.3, @babel/types@npm:^7.4.4": version: 7.28.4 resolution: "@babel/types@npm:7.28.4" dependencies: @@ -13677,22 +13656,7 @@ __metadata: languageName: node linkType: hard -"lavamoat-core@npm:^16.5.0": - version: 16.5.1 - resolution: "lavamoat-core@npm:16.5.1" - dependencies: - "@babel/types": "npm:7.27.3" - json-stable-stringify: "npm:1.3.0" - lavamoat-tofu: "npm:^8.0.8" - merge-deep: "npm:3.0.3" - ses: "npm:1.14.0" - bin: - lavamoat-sort-policy: src/policy-sort-cli.js - checksum: 10/91f043b733902b1af02f5efa1862598c21f80fba14d531a276ff6017a6bf51b01dd9cee4cd241eee2279acf59847c220f473d364d1d88290f4e67a029dfb4a5a - languageName: node - linkType: hard - -"lavamoat-core@npm:^16.7.1": +"lavamoat-core@npm:^16.5.0, lavamoat-core@npm:^16.7.1": version: 16.7.1 resolution: "lavamoat-core@npm:16.7.1" dependencies: @@ -13708,7 +13672,7 @@ __metadata: languageName: node linkType: hard -"lavamoat-tofu@npm:^8.0.11": +"lavamoat-tofu@npm:^8.0.11, lavamoat-tofu@npm:^8.0.8": version: 8.0.11 resolution: "lavamoat-tofu@npm:8.0.11" dependencies: @@ -13724,21 +13688,6 @@ __metadata: languageName: node linkType: hard -"lavamoat-tofu@npm:^8.0.8": - version: 8.0.8 - resolution: "lavamoat-tofu@npm:8.0.8" - dependencies: - "@babel/parser": "npm:7.27.3" - "@babel/traverse": "npm:7.27.3" - "@babel/types": "npm:7.27.3" - "@types/babel__traverse": "npm:7.20.7" - type-fest: "npm:4.41.0" - peerDependencies: - lavamoat-core: ">15.4.0" - checksum: 10/f1d807ab5f11fa666e4c1b975270dcbc7592e4bc782ae6535fa318bd220d8fb7465d617cf9acd52f243e2b753f5dc8791ed3ef86eaed47645f6bb15a01c0a603 - languageName: node - linkType: hard - "lavamoat@npm:^9.0.10": version: 9.0.10 resolution: "lavamoat@npm:9.0.10" From c054b5684329c9e8b2fb2b4084ee8d35fb612997 Mon Sep 17 00:00:00 2001 From: MetaMask Bot Date: Wed, 1 Oct 2025 14:57:15 +0000 Subject: [PATCH 3/3] [dependabot skip] Update LavaMoat policies --- .../lavamoat/build-system/policy.json | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/packages/snaps-execution-environments/lavamoat/build-system/policy.json b/packages/snaps-execution-environments/lavamoat/build-system/policy.json index 25d8697264..05ee3e7c27 100644 --- a/packages/snaps-execution-environments/lavamoat/build-system/policy.json +++ b/packages/snaps-execution-environments/lavamoat/build-system/policy.json @@ -52,7 +52,7 @@ "@metamask/snaps-utils>@babel/types": { "globals": { "console.warn": true, - "process.env": true + "process.env.BABEL_TYPES_8_BREAKING": true }, "packages": { "@metamask/snaps-utils>@babel/types>@babel/helper-string-parser": true, @@ -130,6 +130,7 @@ "process._rawDebug": true }, "packages": { + "depcheck>@babel/parser": true, "lavamoat>@lavamoat/aa": true, "@lavamoat/webpack>browser-resolve": true, "lavamoat>lavamoat-core": true,