Skip to content

chore: Bump @lavamoat/webpack from 1.5.0 to 1.5.2 #3706

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
FrederikBolding merged 2 commits into from
Oct 28, 2025
Merged

chore: Bump @lavamoat/webpack from 1.5.0 to 1.5.2 #3706

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
653252d
chore: Bump @lavamoat/webpack from 1.5.0 to 1.5.2
dependabot[bot] Oct 28, 2025
6882738
[dependabot skip] Update LavaMoat policies
metamaskbot Oct 28, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 5 additions & 6 deletions packages/snaps-execution-environments/lavamoat/build-system/policy.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -133,7 +133,7 @@
"depcheck>@babel/parser": true,
"lavamoat>@lavamoat/aa": true,
"@lavamoat/webpack>browser-resolve": true,
"lavamoat>lavamoat-core": true,
"@lavamoat/webpack>lavamoat-core": true,
"webpack": true
}
},
Expand Down Expand Up @@ -738,11 +738,10 @@
"lavamoat>lavamoat-core>merge-deep>kind-of>is-buffer": true
}
},
"lavamoat>lavamoat-core": {
"@lavamoat/webpack>lavamoat-core": {
"builtin": {
"node:events": true,
"node:fs.readFileSync": true,
"node:fs/promises.writeFile": true,
"node:path.extname": true,
"node:path.join": true
},
Expand All @@ -754,16 +753,16 @@
},
"packages": {
"@lavamoat/webpack>json-stable-stringify": true,
"lavamoat>lavamoat-tofu": true,
"@lavamoat/webpack>lavamoat-core>lavamoat-tofu": true,
"lavamoat>lavamoat-core>merge-deep": true
}
},
"lavamoat>lavamoat-tofu": {
"@lavamoat/webpack>lavamoat-core>lavamoat-tofu": {
"globals": {
"console.log": true
},
"packages": {
"lavamoat>lavamoat-tofu>@babel/parser": true,
"@lavamoat/webpack>lavamoat-core>lavamoat-tofu>@babel/parser": true,
"depcheck>@babel/traverse": true
}
},
Expand Down
2 changes: 1 addition & 1 deletion packages/snaps-execution-environments/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -82,7 +82,7 @@
"@esbuild-plugins/node-modules-polyfill": "^0.2.2",
"@lavamoat/allow-scripts": "^3.4.0",
"@lavamoat/lavatube": "^1.0.0",
"@lavamoat/webpack": "^1.5.0",
"@lavamoat/webpack": "^1.5.2",
Copy link

@cursor cursor bot Oct 28, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bug: Lavamoat Dependency Conflict

Updating @lavamoat/webpack from ^1.5.0 to ^1.5.2 introduces a dependency conflict. The @lavamoat/[email protected] package requires lavamoat-core@^17.0.0, while the lavamoat@^9.0.10 dependency (also required by this package) requires lavamoat-core@^16.5.0. These version ranges are incompatible (major version mismatch), which will cause npm/yarn to either fail dependency resolution or install multiple versions of lavamoat-core, neither of which is acceptable for production use.

Fix in Cursor Fix in Web

"@metamask/auto-changelog": "^5.0.2",
"@swc/core": "1.11.31",
"@swc/jest": "^0.2.38",
Expand Down
30 changes: 23 additions & 7 deletions yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2770,20 +2770,20 @@ __metadata:
languageName: node
linkType: hard

"@lavamoat/webpack@npm:^1.5.0":
version: 1.5.0
resolution: "@lavamoat/webpack@npm:1.5.0"
"@lavamoat/webpack@npm:^1.5.2":
version: 1.5.2
resolution: "@lavamoat/webpack@npm:1.5.2"
dependencies:
"@babel/parser": "npm:7.28.3"
"@lavamoat/aa": "npm:^4.3.4"
"@lavamoat/types": "npm:^0.1.0"
browser-resolve: "npm:2.0.0"
json-stable-stringify: "npm:1.3.0"
lavamoat-core: "npm:^16.7.1"
lavamoat-core: "npm:^17.0.0"
ses: "npm:1.14.0"
peerDependencies:
webpack: ^5.80.2
checksum: 10/aaa44ce8aebd13f2d399e4240caf6dfb44bf01630cd66a7f82853f5b881e5421496c3648302e41639b9b0c0cdd1c0e750b318b6ff1fc0a61648a553c866af141
checksum: 10/65cff12c32b99dbe79840818c0b8695704b481d8ed71e13ae71bf7596ab08a26c065583e29b6c6e5a8c49f3de853836013497e2d2ce819a4392100e47c28dbb6
languageName: node
linkType: hard

Expand Down Expand Up @@ -4335,7 +4335,7 @@ __metadata:
"@esbuild-plugins/node-modules-polyfill": "npm:^0.2.2"
"@lavamoat/allow-scripts": "npm:^3.4.0"
"@lavamoat/lavatube": "npm:^1.0.0"
"@lavamoat/webpack": "npm:^1.5.0"
"@lavamoat/webpack": "npm:^1.5.2"
"@metamask/auto-changelog": "npm:^5.0.2"
"@metamask/json-rpc-engine": "npm:^10.1.0"
"@metamask/object-multiplex": "npm:^2.1.0"
Expand Down Expand Up @@ -13672,7 +13672,7 @@ __metadata:
languageName: node
linkType: hard

"lavamoat-core@npm:^16.5.0, lavamoat-core@npm:^16.7.1":
"lavamoat-core@npm:^16.5.0":
version: 16.7.1
resolution: "lavamoat-core@npm:16.7.1"
dependencies:
Expand All @@ -13688,6 +13688,22 @@ __metadata:
languageName: node
linkType: hard

"lavamoat-core@npm:^17.0.0":
version: 17.0.0
resolution: "lavamoat-core@npm:17.0.0"
dependencies:
"@babel/types": "npm:7.27.3"
"@lavamoat/types": "npm:^0.1.0"
json-stable-stringify: "npm:1.3.0"
lavamoat-tofu: "npm:^8.0.11"
merge-deep: "npm:3.0.3"
ses: "npm:1.14.0"
bin:
lavamoat-sort-policy: src/policy-sort-cli.js
checksum: 10/6442eb31ed938e1c25805266f447755359e051716b70a62d46d44f1d3036ebc2ed54f62b0eece1ca2f02d4117ed88b5e60ca100905be2d134cef1bcfee015076
languageName: node
linkType: hard

"lavamoat-tofu@npm:^8.0.11, lavamoat-tofu@npm:^8.0.8":
version: 8.0.11
resolution: "lavamoat-tofu@npm:8.0.11"
Expand Down
Loading