From 2972a6890173b7f3df538943aa8e1b1ca86c93ed Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 16 Oct 2025 06:03:55 +0000 Subject: [PATCH 1/2] chore: Bump @lavamoat/webpack from 1.5.0 to 1.5.1 Bumps [@lavamoat/webpack](https://github.com/LavaMoat/lavamoat/tree/HEAD/packages/webpack) from 1.5.0 to 1.5.1. - [Release notes](https://github.com/LavaMoat/lavamoat/releases) - [Changelog](https://github.com/LavaMoat/LavaMoat/blob/main/packages/webpack/CHANGELOG.md) - [Commits](https://github.com/LavaMoat/lavamoat/commits/webpack-v1.5.1/packages/webpack) --- updated-dependencies: - dependency-name: "@lavamoat/webpack" dependency-version: 1.5.1 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .../snaps-execution-environments/package.json | 2 +- yarn.lock | 30 ++++++++++++++----- 2 files changed, 24 insertions(+), 8 deletions(-) diff --git a/packages/snaps-execution-environments/package.json b/packages/snaps-execution-environments/package.json index 1e42ad0d65..c729a6ba06 100644 --- a/packages/snaps-execution-environments/package.json +++ b/packages/snaps-execution-environments/package.json @@ -82,7 +82,7 @@ "@esbuild-plugins/node-modules-polyfill": "^0.2.2", "@lavamoat/allow-scripts": "^3.4.0", "@lavamoat/lavatube": "^1.0.0", - "@lavamoat/webpack": "^1.5.0", + "@lavamoat/webpack": "^1.5.1", "@metamask/auto-changelog": "^5.0.2", "@swc/core": "1.11.31", "@swc/jest": "^0.2.38", diff --git a/yarn.lock b/yarn.lock index bdf6188dde..914e0274f7 100644 --- a/yarn.lock +++ b/yarn.lock @@ -2770,20 +2770,20 @@ __metadata: languageName: node linkType: hard -"@lavamoat/webpack@npm:^1.5.0": - version: 1.5.0 - resolution: "@lavamoat/webpack@npm:1.5.0" +"@lavamoat/webpack@npm:^1.5.1": + version: 1.5.1 + resolution: "@lavamoat/webpack@npm:1.5.1" dependencies: "@babel/parser": "npm:7.28.3" "@lavamoat/aa": "npm:^4.3.4" "@lavamoat/types": "npm:^0.1.0" browser-resolve: "npm:2.0.0" json-stable-stringify: "npm:1.3.0" - lavamoat-core: "npm:^16.7.1" + lavamoat-core: "npm:^17.0.0" ses: "npm:1.14.0" peerDependencies: webpack: ^5.80.2 - checksum: 10/aaa44ce8aebd13f2d399e4240caf6dfb44bf01630cd66a7f82853f5b881e5421496c3648302e41639b9b0c0cdd1c0e750b318b6ff1fc0a61648a553c866af141 + checksum: 10/e436b4834822dd73fd489860ef42d90b60962593eb2e5f67f0e39cc2d7d95d8324ae4a4cea1697373b77fff11b6a59c8fbd6b582305c637024a02413647fd79a languageName: node linkType: hard @@ -4321,7 +4321,7 @@ __metadata: "@esbuild-plugins/node-modules-polyfill": "npm:^0.2.2" "@lavamoat/allow-scripts": "npm:^3.4.0" "@lavamoat/lavatube": "npm:^1.0.0" - "@lavamoat/webpack": "npm:^1.5.0" + "@lavamoat/webpack": "npm:^1.5.1" "@metamask/auto-changelog": "npm:^5.0.2" "@metamask/json-rpc-engine": "npm:^10.1.0" "@metamask/object-multiplex": "npm:^2.1.0" @@ -13656,7 +13656,7 @@ __metadata: languageName: node linkType: hard -"lavamoat-core@npm:^16.5.0, lavamoat-core@npm:^16.7.1": +"lavamoat-core@npm:^16.5.0": version: 16.7.1 resolution: "lavamoat-core@npm:16.7.1" dependencies: @@ -13672,6 +13672,22 @@ __metadata: languageName: node linkType: hard +"lavamoat-core@npm:^17.0.0": + version: 17.0.0 + resolution: "lavamoat-core@npm:17.0.0" + dependencies: + "@babel/types": "npm:7.27.3" + "@lavamoat/types": "npm:^0.1.0" + json-stable-stringify: "npm:1.3.0" + lavamoat-tofu: "npm:^8.0.11" + merge-deep: "npm:3.0.3" + ses: "npm:1.14.0" + bin: + lavamoat-sort-policy: src/policy-sort-cli.js + checksum: 10/6442eb31ed938e1c25805266f447755359e051716b70a62d46d44f1d3036ebc2ed54f62b0eece1ca2f02d4117ed88b5e60ca100905be2d134cef1bcfee015076 + languageName: node + linkType: hard + "lavamoat-tofu@npm:^8.0.11, lavamoat-tofu@npm:^8.0.8": version: 8.0.11 resolution: "lavamoat-tofu@npm:8.0.11" From 7b3117ba4e9d5514e9da45f7988660a4fa0d54d8 Mon Sep 17 00:00:00 2001 From: MetaMask Bot Date: Thu, 16 Oct 2025 06:11:41 +0000 Subject: [PATCH 2/2] [dependabot skip] Update LavaMoat policies --- .../lavamoat/build-system/policy.json | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/packages/snaps-execution-environments/lavamoat/build-system/policy.json b/packages/snaps-execution-environments/lavamoat/build-system/policy.json index 05ee3e7c27..7a2ab17040 100644 --- a/packages/snaps-execution-environments/lavamoat/build-system/policy.json +++ b/packages/snaps-execution-environments/lavamoat/build-system/policy.json @@ -133,7 +133,7 @@ "depcheck>@babel/parser": true, "lavamoat>@lavamoat/aa": true, "@lavamoat/webpack>browser-resolve": true, - "lavamoat>lavamoat-core": true, + "@lavamoat/webpack>lavamoat-core": true, "webpack": true } }, @@ -738,11 +738,10 @@ "lavamoat>lavamoat-core>merge-deep>kind-of>is-buffer": true } }, - "lavamoat>lavamoat-core": { + "@lavamoat/webpack>lavamoat-core": { "builtin": { "node:events": true, "node:fs.readFileSync": true, - "node:fs/promises.writeFile": true, "node:path.extname": true, "node:path.join": true }, @@ -754,16 +753,16 @@ }, "packages": { "@lavamoat/webpack>json-stable-stringify": true, - "lavamoat>lavamoat-tofu": true, + "@lavamoat/webpack>lavamoat-core>lavamoat-tofu": true, "lavamoat>lavamoat-core>merge-deep": true } }, - "lavamoat>lavamoat-tofu": { + "@lavamoat/webpack>lavamoat-core>lavamoat-tofu": { "globals": { "console.log": true }, "packages": { - "lavamoat>lavamoat-tofu>@babel/parser": true, + "@lavamoat/webpack>lavamoat-core>lavamoat-tofu>@babel/parser": true, "depcheck>@babel/traverse": true } },