From b24e0aa12cfcdf175b262501ceeaa0877d878ad7 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 24 Nov 2025 06:04:46 +0000 Subject: [PATCH 1/3] chore: Bump lavamoat from 10.0.1 to 10.0.2 Bumps [lavamoat](https://github.com/LavaMoat/lavamoat/tree/HEAD/packages/lavamoat-node) from 10.0.1 to 10.0.2. - [Release notes](https://github.com/LavaMoat/lavamoat/releases) - [Changelog](https://github.com/LavaMoat/LavaMoat/blob/main/packages/lavamoat-node/CHANGELOG.md) - [Commits](https://github.com/LavaMoat/lavamoat/commits/lavamoat-v10.0.2/packages/lavamoat-node) --- updated-dependencies: - dependency-name: lavamoat dependency-version: 10.0.2 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .../snaps-execution-environments/package.json | 2 +- yarn.lock | 46 ++++++++++++++++--- 2 files changed, 40 insertions(+), 8 deletions(-) diff --git a/packages/snaps-execution-environments/package.json b/packages/snaps-execution-environments/package.json index 1ab182b993..ee924c1ea2 100644 --- a/packages/snaps-execution-environments/package.json +++ b/packages/snaps-execution-environments/package.json @@ -101,7 +101,7 @@ "jest-environment-node": "^29.5.0", "jest-fetch-mock": "^3.0.3", "jest-silent-reporter": "^0.6.0", - "lavamoat": "^10.0.1", + "lavamoat": "^10.0.2", "prettier": "^3.3.3", "rimraf": "^4.1.2", "serve-handler": "^6.1.5", diff --git a/yarn.lock b/yarn.lock index 522bbd4933..c792d8907f 100644 --- a/yarn.lock +++ b/yarn.lock @@ -4359,7 +4359,7 @@ __metadata: jest-environment-node: "npm:^29.5.0" jest-fetch-mock: "npm:^3.0.3" jest-silent-reporter: "npm:^0.6.0" - lavamoat: "npm:^10.0.1" + lavamoat: "npm:^10.0.2" prettier: "npm:^3.3.3" readable-stream: "npm:^3.6.2" rimraf: "npm:^4.1.2" @@ -13692,6 +13692,22 @@ __metadata: languageName: node linkType: hard +"lavamoat-core@npm:^17.1.0": + version: 17.1.0 + resolution: "lavamoat-core@npm:17.1.0" + dependencies: + "@babel/types": "npm:7.27.3" + "@lavamoat/types": "npm:^0.1.0" + json-stable-stringify: "npm:1.3.0" + lavamoat-tofu: "npm:^8.1.0" + merge-deep: "npm:3.0.3" + ses: "npm:1.14.0" + bin: + lavamoat-sort-policy: src/policy-sort-cli.js + checksum: 10/bc45feddf10ecc563a938df315b639100874bcd0e22a388fe2047f1f93579f8f9967653aff6e416d0079f9cd11240e2bc9a45c698ec781070bb525fb3584af27 + languageName: node + linkType: hard + "lavamoat-tofu@npm:^8.0.11": version: 8.0.11 resolution: "lavamoat-tofu@npm:8.0.11" @@ -13708,9 +13724,25 @@ __metadata: languageName: node linkType: hard -"lavamoat@npm:^10.0.1": - version: 10.0.1 - resolution: "lavamoat@npm:10.0.1" +"lavamoat-tofu@npm:^8.1.0": + version: 8.1.0 + resolution: "lavamoat-tofu@npm:8.1.0" + dependencies: + "@babel/parser": "npm:7.27.3" + "@babel/traverse": "npm:7.27.3" + "@babel/types": "npm:7.27.3" + "@lavamoat/types": "npm:^0.1.0" + "@types/babel__traverse": "npm:7.20.7" + type-fest: "npm:4.41.0" + peerDependencies: + lavamoat-core: ">15.4.0" + checksum: 10/ed96ddf284af0051179a4f46bc6432fb32d05f5055ae94fe3f469a7d7f17c62e834854bf2ed26fb55ff012a02789b8b0bee3cb760aab24d04d8714dba3d43b3f + languageName: node + linkType: hard + +"lavamoat@npm:^10.0.2": + version: 10.0.2 + resolution: "lavamoat@npm:10.0.2" dependencies: "@babel/code-frame": "npm:7.27.1" "@babel/highlight": "npm:7.25.9" @@ -13718,15 +13750,15 @@ __metadata: bindings: "npm:1.5.0" corepack: "npm:0.33.0" htmlescape: "npm:1.1.1" - lavamoat-core: "npm:^17.0.1" - lavamoat-tofu: "npm:^8.0.11" + lavamoat-core: "npm:^17.1.0" + lavamoat-tofu: "npm:^8.1.0" node-gyp-build: "npm:4.8.4" resolve: "npm:1.22.10" yargs: "npm:17.7.2" bin: lavamoat: src/cli.js lavamoat-run-command: src/run-command.js - checksum: 10/d9061d06c5a7938a020e8b5aa551093f60641d776b2cd61d5d55a9180c1a8164bf9d2bead11b5692c9c3536b70b953b10523049c8490ac18b1e0e2101fc68183 + checksum: 10/e00fb5e9d9eb9537afc8af631dd5903a4f2e9a96314d627afc6dc6c2a17d956e7aa4a1a07b13cb461beccc50d780708de34cba2becb590ff15c89d2a72a36e9d languageName: node linkType: hard From baf13b50a0de1c911f6fcf6bce50a0b0d2c17a63 Mon Sep 17 00:00:00 2001 From: MetaMask Bot Date: Mon, 24 Nov 2025 06:14:05 +0000 Subject: [PATCH 2/3] [dependabot skip] Deduplicate yarn.lock --- yarn.lock | 34 +--------------------------------- 1 file changed, 1 insertion(+), 33 deletions(-) diff --git a/yarn.lock b/yarn.lock index c792d8907f..c2c5cfa45e 100644 --- a/yarn.lock +++ b/yarn.lock @@ -13676,23 +13676,7 @@ __metadata: languageName: node linkType: hard -"lavamoat-core@npm:^17.0.1": - version: 17.0.1 - resolution: "lavamoat-core@npm:17.0.1" - dependencies: - "@babel/types": "npm:7.27.3" - "@lavamoat/types": "npm:^0.1.0" - json-stable-stringify: "npm:1.3.0" - lavamoat-tofu: "npm:^8.0.11" - merge-deep: "npm:3.0.3" - ses: "npm:1.14.0" - bin: - lavamoat-sort-policy: src/policy-sort-cli.js - checksum: 10/216db62524b416ba5670ae237ccdb94d07a04a84294c9193c3f8cd245dc883f37f993bdecefb22f99f8d742e7297303b9dca430631e4a74547c8b9dc94592e2f - languageName: node - linkType: hard - -"lavamoat-core@npm:^17.1.0": +"lavamoat-core@npm:^17.0.1, lavamoat-core@npm:^17.1.0": version: 17.1.0 resolution: "lavamoat-core@npm:17.1.0" dependencies: @@ -13708,22 +13692,6 @@ __metadata: languageName: node linkType: hard -"lavamoat-tofu@npm:^8.0.11": - version: 8.0.11 - resolution: "lavamoat-tofu@npm:8.0.11" - dependencies: - "@babel/parser": "npm:7.27.3" - "@babel/traverse": "npm:7.27.3" - "@babel/types": "npm:7.27.3" - "@lavamoat/types": "npm:^0.1.0" - "@types/babel__traverse": "npm:7.20.7" - type-fest: "npm:4.41.0" - peerDependencies: - lavamoat-core: ">15.4.0" - checksum: 10/4435814fae3934ca41d8a8ef7962b86a556cb3a2000d50d200d5afdabf43984231ceabf0dc5aa74e8890967f42d5ac01e7c8e78c69804b224ad7ead56a9b4abb - languageName: node - linkType: hard - "lavamoat-tofu@npm:^8.1.0": version: 8.1.0 resolution: "lavamoat-tofu@npm:8.1.0" From 89a056f1b226f18773151324b26d034f2ff00f37 Mon Sep 17 00:00:00 2001 From: MetaMask Bot Date: Mon, 24 Nov 2025 06:14:06 +0000 Subject: [PATCH 3/3] [dependabot skip] Update LavaMoat policies --- .../lavamoat/webpack/node-process/policy.json | 5 +++-- .../lavamoat/webpack/node-thread/policy.json | 5 +++-- 2 files changed, 6 insertions(+), 4 deletions(-) diff --git a/packages/snaps-execution-environments/lavamoat/webpack/node-process/policy.json b/packages/snaps-execution-environments/lavamoat/webpack/node-process/policy.json index d6bec553ac..f54f8cf330 100644 --- a/packages/snaps-execution-environments/lavamoat/webpack/node-process/policy.json +++ b/packages/snaps-execution-environments/lavamoat/webpack/node-process/policy.json @@ -29,7 +29,8 @@ }, "@metamask/post-message-stream": { "builtin": { - "worker_threads": true + "worker_threads.Worker": true, + "worker_threads.parentPort": true }, "globals": { "MessageEvent.prototype": true, @@ -71,7 +72,7 @@ }, "@metamask/providers>@metamask/safe-event-emitter": { "builtin": { - "events": true + "events.EventEmitter": true }, "globals": { "setTimeout": true diff --git a/packages/snaps-execution-environments/lavamoat/webpack/node-thread/policy.json b/packages/snaps-execution-environments/lavamoat/webpack/node-thread/policy.json index d6bec553ac..f54f8cf330 100644 --- a/packages/snaps-execution-environments/lavamoat/webpack/node-thread/policy.json +++ b/packages/snaps-execution-environments/lavamoat/webpack/node-thread/policy.json @@ -29,7 +29,8 @@ }, "@metamask/post-message-stream": { "builtin": { - "worker_threads": true + "worker_threads.Worker": true, + "worker_threads.parentPort": true }, "globals": { "MessageEvent.prototype": true, @@ -71,7 +72,7 @@ }, "@metamask/providers>@metamask/safe-event-emitter": { "builtin": { - "events": true + "events.EventEmitter": true }, "globals": { "setTimeout": true